Privacy Policy

SBGG LLC (合同会社SBGG, "we") handles information in Kimeboard (the "Service") as follows.

1. Information we collect: (1) For Customers (development companies): name, email address, company name and login records. (2) For respondents (clients and stakeholders): name, email address, company and job title, entered into a project by the Customer. (3) Requirement documents, meeting transcripts and records of questions, answers and decisions uploaded or created by the Customer. (4) Access logs (date and time, IP address, browser type, etc.). (5) Cookies.

2. Purposes: providing the Service (sending questions, receiving answers, creating and exporting records, sending 6-digit codes and notifications), identity verification and fraud prevention, responding to inquiries, billing, and improving the Service.

3. Our role as processor: Project documents and records are handled by us on behalf of the Customer. We use them only within the Customer's instructions and only to provide the Service. Respondents may also direct questions about their information to the project's contact person (the Customer).

4. Disclosure to third parties: We do not provide personal information to third parties without consent, except as required by law.

5. Service providers: Supabase (data storage, Tokyo region, Japan), Vercel (hosting, Tokyo region), Anthropic (reading documents and transcripts; used under terms where inputs are not used for training; retention by the provider follows its terms and is typically deletion within 30 days), Resend (email delivery), Stripe (payments) and Google Analytics (analytics on public pages).

6. Transfers outside Japan: Anthropic, Stripe, Resend and Google are US companies, and information may be sent to the United States for processing. The United States has its own privacy framework, which differs from Japan's. We use these providers after confirming that they maintain appropriate systems for handling personal information.

7. Analytics: On public pages (product pages, legal pages, etc.), we use Google Analytics, which sends browsing information (not including names) to Google via cookies. It is not used on logged-in screens or on respondents' answer screens. You can opt out through your browser settings or Google's opt-out add-on.

8. Security: Data is kept separate for each project and encrypted in transit and at rest. Our staff do not view project contents except for incident response with the consent of the organization's administrator, and any such access is logged.

9. Retention: Projects are kept for 5 years after closing (configurable per project from 1 to 10 years). On cancellation, a full export is made available and the data is deleted 90 days later.

10. Requests for disclosure, correction or deletion: We respond to requests from individuals in accordance with applicable law. For information within a project, we respond in consultation with the Customer. Please contact us at the address below.

11. Contact: SBGG LLC (合同会社SBGG), info@sbgg.jp