Privacy Policy

Previous Version

Privacy Policy

Last Updated: 16 January, 2025

Cybozu, Inc. and Kintone Australia Pty Ltd. (“Cybozu”) appropriately handle personal information collected in the course of providing our services, holding events, and conducting other business activities, in accordance with the policy described below. Unless otherwise provided for, in this policy, "personal information," "personal data," and "retained personal data" are used in accordance with the terminology used in the Act on the Protection of Personal Information (Act No. 57 of 2003. Hereinafter, the "Personal Information Protection Act").

1. Information That We Collect

In the course of conducting our business activities, Cybozu collects personal information, including the following:

Your name, address, job title, company name, phone number, e-mail address, bank account details, credit card numbers, facial photographs, videos, and subscription data, including "Customer Information" set forth in our Terms of Use.

2. How We Use Your Information

Cybozu will use the personal information we collect for the purposes described below. If Cybozu uses personal information beyond the extent necessary to achieve the purposes described below, we will do so only after obtaining the consent of the individual concerned.

(1) Personal information of people who have purchased or used our services, or who have an interest in our services ("Customers"):

  • 1

    to provide information on our services (new products and services, new features, feature improvements, case studies, etc.)

  • 2

    to provide information on seminars and events

  • 3

    to manage customer transaction information, such as subscription applications for our services, changes to Customer Information, subscription renewals and cancellations

  • 4

    to estimate and/or bill for products, services, and subscription fees

  • 5

    to send thank you letters for purchasing our services

  • 6

    to conduct surveys on our services, as well as to notify winners, and to send out prizes

  • 7

    to provide information on product and service maintenance, failures, etc.

  • 8

    to reply to inquiries received and to provide customer support

  • 9

    to manage certification programs, user communities, and developer communities

  • 10

    to utilize as basic data to enhance and improve our products and services; and

  • 11

    to measure the effectiveness of marketing and customer support initiatives.

We may analyze your inquiry history, product and service purchase history, seminar and event participation history and other information, together with your personal information, to infer your interests, preferences, and trends, in order to achieve the purposes described above.

(2) Personal information of people in charge at Cybozu business partners:

  • 1

    to manage business partner information

  • 2

    to engage in the necessary communications to enter into contracts and carry out transactions; and

  • 3

    to carry out billing and payment operations.

(3) Personal information of people who have reported vulnerabilities in our products and services, or information security incidents at our company ("Reporter"):

  • 1

    to contact the Reporter

  • 2

    to pay a bounty if the Reporter is participating in a Bug Bounty Program, and to administer said program; and

  • 3

    if the Reporter is participating in a Bug Bounty Testing Environment Program, to provide the vulnerability verification environment and to administer said program.

(4) Personal information of media representatives and other individuals not included in (1) through (4) above:

  • 1

    to contact the person; and

  • 2

    to provide information on, and to run, seminars and events.

(5) Common purposes of using personal information in (1) through (4):

  • 1

    to comply with applicable laws and regulations

  • 2

    to exercise or defend Cybozu’s legal rights; and

  • 3

    in the event of a merger, acquisition, sale, or other transaction involving the business or its assets, to support or give effect to the transaction.

3. How We Share Your Information with Third-parties

Cybozu will not provide personal data to third parties without the prior consent of the individual, except in the following cases:

  • When providing your Customer Information to a partner, to the extent necessary for the partner to provide customer support or conduct other partner activities, when you purchase a product or service through a partner
  • When providing the Customer Information to the provider of a billing and/or payment collection service for the payment of products and services or subscription fees
  • When co-hosting a seminar or event with another company, and providing the co-host with the participants’ personal data
  • When you go against the terms of use and/or guidelines, and disclosing your information is considered necessary to protect the rights, property, and/or the services of other customers and/or Cybozu
  • When required by law
  • When it is necessary for the protection of the life, body, or property of a person and it is difficult to obtain the consent of the individual
  • When it is particularly necessary to improve public health or promote the sound development of children, and it is difficult to obtain the consent of the individual; and
  • When it is necessary to cooperate with a national government agency or a local government, or a person entrusted by either of the aforementioned in performing duties prescribed by laws and regulations, and obtaining the consent of the individual concerned is likely to impede the performance of such duties.

4. Outsourcing

Cybozu may outsource some of the handling of personal data. When Cybozu outsources, we will select a contractor on the condition that the company has secured a sufficient level of personal data protection, and will do so only after having entered into a contract pertaining to personal data. In addition, Cybozu will conduct the necessary and appropriate supervision in relation to the management of said contractors.

5. Joint Use

Cybozu will jointly use personal data between Cybozu and our subsidiaries (the "Cybozu Group") only when necessary within the scope described below.

  • (1)

    Items of personal information to be jointly used
    Items stated in “1 Information That We Collect”

  • (2)

    Scope of joint users
    The Cybozu Group

  • (3)

    Purpose of use
    Items stated in “2 How We Use Your Information”

  • (4)

    Chief Administrator
    Cybozu, Inc.

6. Security Control Measures

Cybozu takes necessary and appropriate measures, including those described below, to prevent the leakage, loss of, or damage to personal data handled by the company (in this paragraph, including personal information scheduled to be handled as retained personal data) and to otherwise securely manage personal data.

(1) Formulation of basic policy/Establishment of rules on handling of personal data

  • Cybozu has established internal regulations for each stage of collection, use, and provision of personal data, including handling methods, responsible persons and persons in charge, and their duties, in order to ensure the proper handling of personal data.

(2) Systematic security control measures

  • Cybozu has a system in place for reporting and communicating with the person in charge for when signs of, or actual violations of laws, or internal regulations are identified.
  • Cybozu conducts regular self-inspections on the status of personal data handling.

(3) Human security control measures

  • Cybozu conducts regular training for employees on the important points regarding the handling of personal data.
  • Matters relating to maintaining the confidentiality of personal data are stated in the Work Rules.

(4) Physical security control measures

  • In areas where personal data is handled, employee access is controlled and restrictions imposed on devices brought into the area, and measures are implemented to prevent unauthorized persons from viewing personal data.
  • In addition to taking measures to prevent the theft or loss of equipment, electronic media, documents, etc., that handle personal data, Cybozu takes measures to ensure that personal data is not easily revealed when such equipment, electronic media, etc., are transported, including within the business premises.

(5) Technical security control measures

  • Cybozu implements access controls limiting the range of people in charge and extent of the personal information database, etc., they can handle.
  • Cybozu has implemented systems to protect information systems that handle personal data from unauthorized access from outside and from unauthorized software.

(6) Understanding the external environmentIn the case of storing personal data in a cloud service, if either, the country where the cloud service provider of the cloud service is located, or the country where the server where the personal data is stored is located, is a foreign country, Cybozu takes the necessary and appropriate measures for the safe management of personal data based on an understanding of said foreign country's legal systems, etc., for the protection of personal information.

7. How to Request Disclosure, Correction, Suspension of Use of Your Data

Cybozu will respond to requests for disclosure of your retained personal data, correction, addition or deletion of the content of your retained personal data, cessation of use, or deletion of your retained personal data, or cessation of provision of your retained personal data to third parties to the extent permitted by the Personal Information Protection Act. If you wish to submit such a request, or to make a complaint regarding our handling of personal information, please contact us at the inquiries desk listed in "10 Contact Us."

8. Use of Cookies and Similar Technologies

Cybozu may link your personal information to your browsing history on our website which we collect using cookies and web beacons (collectively, "Cookies") to analyze visitors to our website, deliver advertisements tailored to your interests, and to measure the effectiveness of advertisements.
Please refer to our Cookies Policy for information on how we use Cookies.

Cybozu may also encrypt or hash your personal information and provide it to Google LLC to analyze how visitors interact with our marketing channels on and off our website, deliver advertisements tailored to your interests, or to measure the effectiveness of advertisements based on the results of matching your personal information with information held by Google LLC.

Details of the services we use are described below.

Service NameGoogle Enhanced Conversions
Data ProvidedEncrypted or hashed names, addresses, email addresses, and telephone numbers
Privacy Policyhttps://policies.google.com/privacy?hl=en
How to Opt-outhttps://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en

9. Revision of This Policy

This policy is subject to revision without notice in response to changes in applicable laws and regulations or for legitimate business purposes. Your understanding is appreciated.

10. Contact Us

For all inquiries regarding this policy, please contact us at:
Personal Information Inquiries Desk, Cybozu, Inc.
contactus@cybozu.co.jp

Cookies Policy

Last Update 1 May, 2024

This Cookies Policy explains what cookies are and how we use them.

A cookie is a small amount of data consisting of character strings that is sent to your browser from a web server. This information acts like a user’s ID card that enables you to record your password and/or configuration information on it, thereby identifying you when you revisit the website and enabling to have setting status reappear.

We use analytics tools to help us understand how you get to and use our site. To do this, 3rd party services we deploy may use cookies and other similar technologies such as tags, web beacons to track your activity when you use visit our sites.

If you do not wish to accept cookies, you can block or restrict cookies through your browser settings. Please note though, in that case you may not be able to use all or a part of our website.

Cybozu may at our sole and absolute discretion, update its Cookies Policy from time to time. The update shall be effective as of the date it is posted on our website.

If you have any questions about this Cookies Policy, You can contact us:
contactus@cybozu.co.jp