This policy explains how information is handled by the Keinage official SaaS and related support inquiries. Data in self-hosted deployments is generally managed by each operator.
Information provided by users
We may collect information entered by users, including names or display names, email addresses, authentication information, business or store names, organization names, inquiry details, board names, display messages, QR-code URLs, and uploaded images or videos.
Information from authentication providers
When Google OAuth/OIDC or another external authentication provider is used, we may receive a provider user ID, email address, email verification status, display name, and profile image URL.
Payment-related information
Paid plans use Stripe or another external payment service. The operator generally does not store raw credit card numbers. We may store Stripe customer IDs, subscription IDs, invoice IDs, selected plans, billing periods, and payment status information for subscription management.
Automatically collected information
We may collect IP addresses, User-Agent strings, access timestamps, cookies or similar identifiers, login history, operation logs, last access timestamps for display devices, error information, selected plan, usage, and uploaded storage volume.
Purposes of use
We use information to provide, maintain, protect, and improve the service; register accounts; authenticate users; provide board, media, template, and scheduling features; manage paid plans, billing, and subscriptions; enforce plan limits; prevent abuse; respond to inquiries; send important notices; handle incidents; maintain security; and comply with laws or requests from courts or public authorities.
Uploaded content
Images, videos, board information, display messages, and other content uploaded by users are stored and processed only as necessary to provide, maintain, troubleshoot, protect, and support the service.
Third-party disclosure
We do not disclose personal data to third parties except with user consent, as required by law, when necessary to protect life, body, or property, or when cooperation with public authorities or courts is required.
Processors and external services
The service may use Stripe, Google, Amazon Web Services, email delivery or SMTP services, error monitoring, analytics, and log management services. We supervise processors as necessary and appropriate.
Cookies
Cookies and similar technologies may be used to maintain login sessions, security, display settings, usage understanding, and service improvement. Disabling cookies may prevent some features from working.
Security measures
We take necessary and appropriate security measures, including access control, authentication credential management, encrypted communications, log monitoring, backups, external service permission management, and deletion or anonymization of unnecessary information.
Retention
After account closure, account information, board information, uploaded media, and related data are deleted or anonymized. Minimum information may be retained as necessary for billing, accounting, abuse prevention, inquiries, and legal compliance.
Requests for disclosure, correction, deletion, and suspension
Users may request disclosure, correction, addition, deletion, suspension of use, or suspension of third-party provision of their personal information in accordance with applicable Japanese law. We will verify identity and respond as required by law.
Minors
Minors must obtain consent from a parent or legal representative before using the service.
Use from outside Japan
The service is primarily intended for users in Japan. User information may be stored or processed on servers or by service providers outside Japan due to the use of external services.
Contact
For privacy requests, contact contact@keinage.com.