Privacy Policy

Shimdi LLC (hereinafter "the Company") establishes the following policy regarding the handling of information related to users of the PaaS "KamuiDash" (hereinafter "the Service").

---

1. Scope of Application

This policy applies to information related to users that the Company handles in connection with the provision of the Service.

※ Information related to end users of applications provided by users on the Service (e.g., personal information collected by user applications) is, in principle, collected and used by users at their own responsibility, and users shall provide appropriate privacy notices to end users.

---

2. Information We Collect

The Company collects the following information.

(1) Account Information

• Account identifiers obtained through GitHub OAuth (information necessary for user identification and login)
• Email address (entered by the user at registration; used for notifications and communications)

(2) Payment and Billing Information

• Information necessary for billing and invoicing (payment status, billing history, etc.)
• Payments are processed via Stripe. Payment information such as card numbers may be handled by Stripe and not retained by the Company.

(3) Log Information

The Company collects the following logs for service operation:

• Application logs (retained for 14 days or 1,000 lines, whichever comes first)
• Deployment logs (retained for 14 days)

The Company may also collect logs related to access to the admin panel and APIs (IP address, user agent, request time, etc.) for stable operation and security purposes.

(4) Inquiry Information

• Inquiry content, contact information, response history, etc.

---

3. Purpose of Use

The Company uses collected information for the following purposes:

1. Providing the Service, identity verification, and account management
2. Billing, payment processing, and handling of unpaid amounts
3. Service operation, maintenance, incident response, security, and fraud prevention
4. Support and inquiry response
5. Legal compliance, dispute resolution, and rights protection
6. Sending important notices and notifications related to the Service by email

---

4. Third-Party Disclosure and Outsourcing

1. The Company will not provide personal information to third parties without the individual's consent, except as required by law.
2. The Company may outsource payment processing (Stripe), infrastructure operation, monitoring, and other tasks to third parties to the extent necessary to provide the Service. In such cases, the Company will appropriately supervise those parties.

---

5. Company Access to User Content

The Company does not routinely access user applications or user content during normal operations. However, the Company may access such content to the minimum necessary extent in the following cases:

• When necessary to respond to a support request from a user
• When required by law, such as responding to a disclosure request
• When necessary to address a critical security issue

---

6. Retention Period and Deletion

1. The Company retains information related to users for the period necessary to achieve the purpose of use.
2. User content after account cancellation will be deleted one month after cancellation (except as required for legal compliance, etc.).
3. Log retention periods are as described in "2.(3) Log Information."

---

7. Data Storage Location

Data related to the Service is currently stored and processed in cloud regions within Japan. If this changes in the future, the Company will notify users through appropriate means.

---

8. Cookies and Access Analytics

The Company may use access analytics tools using identifiers such as cookies to improve the Service.

---

9. Security Measures

The Company implements reasonable organizational, technical, and physical security measures to prevent leakage, loss, or damage of the information it handles.

---

10. Requests for Disclosure

Users may request disclosure, correction, or suspension of use of information held by the Company about themselves through the Company's designated procedures. Please contact the inquiry desk below for details.

---

11. Changes to This Policy

The Company may revise this policy in response to changes in laws, operations, or features. Updated policies will be communicated through means designated by the Company.

---

12. Contact

For inquiries regarding this policy, please contact: [email protected]