This Privacy Policy (“Policy”) describes how Sweets Village Co., Ltd. (“Company”, “we”, “us”) collects, uses, shares, retains, and protects user data and personal information in connection with the services (the “Services”) we offer. By using our Services, you (“User”, “you”) consent to the practices described herein.

Effective Date: Oct 13, 2025

1. Definitions / Scope

User Data / User Information
In this Policy, “User Data” or “User Information” includes:

Personal information as defined under Japan’s Act on the Protection of Personal Information (APPI) (i.e. information about a natural person which can identify them)

Information generated or stored by a user’s device or terminal (e.g. device information, usage logs)

Information about user behavior on the Services

Information obtained from partner or third-party integration services, to the extent that such information is collected under or utilized in connection with the Services

Services
The term “Services” refers to the SaaS product(s), platform(s), integrations, APIs, and any related functionality, features, or modules offered by the Company.

2. Information We Collect

We collect the following categories of information from Users:

(A) Information You Provide

Full name

Employer / Company

Department, title / position

Telephone number

Email address

Any other information you are required or choose to provide through forms, account registration, profile settings, or support requests

(B) Automatically Collected Information

Device information (e.g. operating system, device type, browser type, device identifiers)

Access log data (e.g. IP address, timestamps, pages visited, referral URLs)

Cookies, anonymous identifiers, and similar tracking technologies

(C) Information from Partners / Third Parties

When you opt to integrate with external services (e.g. via APIs, connectors), we may receive information about you from those services

Information collected through embedded analytics modules or data collection modules by third parties

3. Purposes of Use

We will only use your User Data for the purposes disclosed at or prior to the time of collection, or as permitted by applicable law. The primary purposes include:

Account registration, identity verification, and user management

Billing, invoicing, payment processing, and default interest calculation

Verifying validity of payment methods (e.g. credit cards)

Personalizing your experience, content, and advertisements within the Services

Notifying you of Service suspension, termination, or contract changes

Detecting, preventing, or responding to violations of our Terms of Service

Notifying you of changes to Terms, this Policy, or other announcements

Responding to disputes, litigation, or investigation requests

Handling customer inquiries, support, and communications

Generating anonymized or aggregated statistics and analytics

Supporting and improving Service functionality, reliability, and performance

We may, with your consent (or as otherwise permitted by law), share your User Data (including personal information) with partners or third parties to the extent necessary to achieve the foregoing purposes.

4. Change of Purpose

If we intend to use your User Data for a purpose materially different from the original, we will provide notice (or otherwise make publicly available) the new purpose and, if required by applicable law, obtain your consent.

5. Method of Collection

We collect much of your User Data directly when you provide it via forms, account registration, or service use.

We may collect other information passively, via technologies such as cookies or logs.

When obtaining information from third parties, we will ensure lawful basis and transparency regarding how that data is used.

6. Security and Safeguards

We implement administrative, technical, and physical safeguards to protect User Data against unauthorized access, loss, disclosure, or alteration.

Where we outsource data handling or processing to subcontractors or service providers, we bind them via confidentiality agreements consistent with this Policy and monitor their compliance.

Access to sensitive data (e.g. email addresses) is restricted to authorized personnel only.

7. Use of Email Addresses

We protect email addresses from loss, theft, alteration, leakage, or unauthorized access in compliance with applicable privacy laws and internal security protocols.
Access to your email address is limited to a small number of authorized employees under strict controls.

8. Cookies and Tracking Technologies

We use cookies, pixel tags, local storage, and similar technologies to recognize your browser or device, remember preferences, measure use of features, and analyze trends.

Cookies do not directly identify you, although they may later be associated with your account data.

You may disable or restrict cookies via your browser settings; however, disabling cookies may affect the functionality of the Services.

9. Data Collection Modules / Embedded Analytics

Some parts of the Services include modules for analytics or user behavior measurement (provided by third parties). We may provide aggregate or de-identified data to those module providers. These third parties are subject to their respective privacy policies.

10. External Services / Integrations

When you choose to connect the Services with external services (e.g. kintone, Google Drive, or others), we may exchange or receive User Data from those services. You should review and agree to their privacy policies and terms before enabling such integrations.

11. Disclosure, Sharing, and Delegation

We generally will not disclose or share your personal information with third parties without your consent, except in the following cases:

To subcontractors or service providers who support operation or maintenance of the Services

To payment processors, banks, or credit card companies for billing and payment purposes

To integration or analytics service providers under the terms of Section 9 or 10 above

To enforce Terms of Service, detect misuse or fraud, or prevent harm

In emergent cases to protect life, health, property, or public safety

In connection with a corporate merger, acquisition, or business transfer

As required by law, court order, or governmental authorities

When disclosing to third parties, we will do so only in accordance with this Policy and applicable law.

12. Targeted Advertising and Profiling (If Applicable)

If we conduct or permit advertising based on profiling or targeting:

We may use your User Data (including usage patterns, traffic data, or saved data) to deliver personalized content or ads

We may share aggregate or derived audience segments or statistics with advertising partners

Such partners must comply with their privacy policies and applicable data protection laws

If you wish to opt out of targeted advertising, we will provide mechanisms (e.g. settings, cookie choices) to allow this.

13. User Rights — Access, Correction, Deletion, and Others

Depending on applicable law (e.g. Japan’s APPI, Canada’s PIPEDA, U.S. state privacy laws), you may have rights such as:

Access: request disclosure of the personal information we hold about you

Correction: request amendment, update, or deletion of inaccurate or incomplete data

Deletion / Erasure: request removal of your data, subject to legal retention obligations

Objection / Restriction: restrict certain uses or processing

Portability: request transfer of your data in a usable format

Opt-out: decline profiling or targeted advertising

To make a request, please use our designated procedure (see Section 14). We may require identity verification and may charge a reasonable fee for requests (where permitted by law).

We will respond within applicable statutory periods (e.g. within 30 days under PIPEDA, or other periods under local law).

14. Inquiries, Requests, and Contact Information

For complaints, requests, or inquiries about our handling of User Data or to exercise your rights, please contact:

Sweets Village Co., Ltd.
Pleas Contact form

(Operating hours: Weekdays 10:00–17:00 local time)

We will respond in a timely manner in accordance with applicable law.

15. Organizational Measures and Governance

We have designated a privacy officer responsible for overseeing data protection, compliance, internal governance, auditing, and continuous improvement.

16. Limitations and Disclaimer

We will not be liable for:

Any disclosure of your User Data caused by your own actions or settings (e.g. making data public)

Any harm resulting from use of the Services that you voluntarily authorize

Situations beyond our control (e.g. third-party breaches, force majeure)

17. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, legal requirements, or service adjustments. When making material changes, we will provide notice (e.g. via email, on the site, or through the Services) and, if required by law, obtain your consent. Unless otherwise specified, the updated Policy takes effect immediately upon posting.

18. Third-Party Services and External Links

The Services may include links to third-party websites or services that have their own privacy practices. This Policy does not apply to those external sites. Please review their privacy policies before using them.

19. International Data Transfers

Because we operate from Japan and serve users globally, your User Data may be transferred, stored, or processed in Japan or other countries. In doing so, we will ensure appropriate safeguards (e.g. contractual clauses, encryption) and compliance with applicable international data transfer laws (including Canadian PIPEDA, U.S. state privacy laws, and others if applicable).

20. Severability and Enforceability

If any provision of this Policy is held invalid under applicable law, the remainder will continue in full force. We will replace the invalid provision with a legally valid provision that approximates its intent.