Privacy Policy

1. Information We Collect

Information You Provide

• Account registration information (name, email address, password)
• Tenant (organization) information (company name, etc.)
• Payment information (processed via Stripe; we do not store card details on our servers)

Automatically Collected Information

• Access logs (IP address, browser information, access timestamps)
• Activity logs (for auditing and service improvement)

CRM Data

Business data stored by users in the Service (contacts, deals, emails, tasks, organizations, etc.). Ownership of this data belongs to the user.

2. Purpose of Use

• Providing, maintaining, and improving the Service
• User authentication and account management
• Billing and payment processing
• Detection and prevention of unauthorized use
• Responding to inquiries
• Sending service-related notifications
• Usage analytics (in non-personally identifiable form)

3. Disclosure to Third Parties

We will not disclose personal information to third parties except in the following cases:

• With user consent
• When required by law
• To service providers necessary for operating the Service (e.g., Stripe for payment processing)

4. Data Storage & Security

• Data is stored on servers located in Japan
• Passwords are hashed using the scrypt algorithm
• All communications are encrypted via TLS/HTTPS
• Daily backups are performed
• Access control: Role-Based Access Control (RBAC) + Row-Level Security (RLS)

5. Data Retention

• Account information: Until account deletion
• CRM data: Until tenant deletion (72-hour grace period after deletion request)
• Audit logs: 1 year
• Access logs: 90 days

6. Your Rights

You have the following rights (GDPR-compliant):

• Right of Access: Request disclosure of your stored personal information
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your personal information
• Right to Data Portability: Request export of your data
• Right to Object: Object to the processing of your data
• Right to Account Deletion: Request complete deletion of your account and associated data

To exercise these rights, please contact us at customer@voltanetworks.jp.

7. Cookies & Local Storage

• We use httpOnly cookies and local storage for authentication tokens
• Session information may be stored for service functionality
• When analytics (e.g., GA4) are introduced, a consent banner will be displayed

8. CRM Data Handling

Regarding customer data stored by users in the Service (contacts, deals, emails, etc.), we adhere to the following principles:

• Data ownership belongs to the user
• We will not access data except for service provision and maintenance purposes
• Data between tenants is strictly separated by Row-Level Security (RLS)
• Users may export their data at any time using the data export feature

9. Cross-Border Data Transfers

Data processed by the Service is stored and processed on servers located in Japan. However, personal data may be transferred outside Japan to the extent necessary for the following services (in compliance with Japan's Amended APPI 2022):

All other infrastructure (VPS, database, etc.) is hosted in Japan. No personal data is transferred outside Japan except as noted above.

10. Changes to This Policy

If we make changes to this Policy, we will notify users in advance via email or in-app notification.

11. Contact

For privacy-related inquiries, please contact us at:

Volta Networks K.K.
Shin-Osaka Hankyu Building 3F, 1-1-1 Miyahara, Yodogawa-ku, Osaka, Japan
Email: customer@voltanetworks.jp