Privacy Policy

Introduction

Sokuto is operated in Japan by Delgado G.K. (デルガド合同会社) through the TechBridge Solutions team. This Privacy Policy explains how we handle personal information under the Act on the Protection of Personal Information of Japan (APPI), its Enforcement Rules, and relevant PPC guidelines.

This English translation is provided for convenience. In the event of any inconsistency or conflict between this version and the Japanese Privacy Policy, the Japanese version will prevail.

Operator and contact details

• Business operator: Delgado G.K. (デルガド合同会社)
• Operating division: TechBridge Solutions
• Service name: Sokuto
• Registered office: Eagle Hamamatsucho Tensho Office Hamamatsucho Daimon 5F Suite 510, 2-7-17 Hamamatsucho, Minato-ku, Tokyo 105-0031, Japan
• Contact email: [email protected]
• Contact phone: Support is provided via email only at [email protected].

Please reach out in Japanese, English, or Italian. We respond to privacy inquiries within ten business days whenever feasible.

Scope of this policy

This policy covers personal data that we process when you visit sokuto.app, interact with our marketing materials, or use the Sokuto application and supporting APIs. It also applies to personally referable information when we associate it with identifiable users.

Purposes of use

We limit the use of personal data to the following purposes and maintain internal records to demonstrate compliance with Article 17 APPI:

• Account registration, authentication, and organization management
• Delivering Sokuto features, including AI-assisted drafting, scheduling, localization, analytics dashboards, and (where enabled) parsing forwarded messages, matching customer identities, generating AI drafts, and preparing messages for user-initiated sending over LINE/WhatsApp
• Customer support, success outreach, and operational communications
• Product analytics, diagnostics, and performance measurement
• Security monitoring, abuse prevention, and incident response
• Compliance with legal obligations, governmental requests, and enforcement of our Terms of Service

Categories of data we handle

Depending on your relationship with Sokuto, we may process:

• Profile details such as name, email address, authentication factors, language preferences, and organization membership
• Business contact information submitted through forms, chat, or support tickets
• Usage metadata and message events generated within the service (for example timestamps, booking statuses, automation triggers)
• Customer aliases, messaging account identifiers (LINE user IDs, WhatsApp IDs, etc.), forwarded message contents, sender metadata, and delivery timestamps when you enable messaging relay features
• Device, browser, and network identifiers (IP address, user agent, time zone, locale)
• Cookies and similar identifiers for session management and optional analytics
• Support communications and attachments that you voluntarily provide
• Billing metadata required to process payments, when you subscribe to paid plans

We do not intentionally collect special care-required personal information. If such information is provided through support interactions, we handle it securely and delete it when the request is resolved.

Cookies and analytics

We use strictly necessary cookies to maintain secure sessions. Optional analytics cookies (Google Analytics 4) are loaded only when you provide consent through the cookie banner or account settings. Declining analytics cookies does not reduce core functionality. You can update your preference at any time from the in-app settings or by contacting us. We do not use cookies for behaviorally targeted advertising or third-party ad tracking. If we introduce such cookies in the future, we will clearly explain them and obtain any required consent in advance.

Third-party processors and overseas transfers

We rely on carefully selected service providers. Each disclosure is tracked for at least three years in accordance with Article 31-3 APPI.

• Supabase Inc. (managed database and authentication, primary region Tokyo/Singapore with resilient backups in the United States and EU) — stores account records, application content, audit logs, and file uploads. Privacy policy: https://supabase.com/privacy
• Stripe, Inc. and Stripe Payments Japan, K.K. (billing and payment processing, infrastructure in Japan, the United States, and EU) — processes subscriber details, billing contacts, and payment method tokens. Privacy policy: https://stripe.com/privacy
• Google LLC (Google Analytics 4, infrastructure in the United States and globally) — receives pseudonymous identifiers, event metadata, IP address (anonymized), and device characteristics for usage analytics. Privacy policy: https://policies.google.com/privacy
• Resend, Inc. (transactional email delivery, infrastructure in the United States and EU) — sends onboarding, authentication, and support emails. Privacy policy: https://resend.com/privacy
• Vercel Inc. (application hosting, infrastructure in the United States, EU, and global edge network) — hosts the Sokuto web experience and static assets. Privacy policy: https://vercel.com/legal/privacy-policy
• OpenAI, L.L.C. (AI text generation for optional drafting features, infrastructure in the United States and globally) — receives prompt text, relevant customer context (such as service details or preferred times), and translated output when you invoke AI assistance. Privacy policy: https://openai.com/policies/privacy-policy
• LINE Corporation (LINE Messaging API, infrastructure in Japan) — if you connect a LINE Official Account, LINE delivers inbound messages (including sender identifiers, display names, and message bodies) to us. Messages are only sent from Sokuto to end users when the customer explicitly initiates/approves sending in the product. Privacy policy: https://linecorp.com/en/privacy
• Meta Platforms, Inc. (WhatsApp Business Platform, infrastructure in the United States and EU) — if you connect WhatsApp relay, Meta delivers inbound WhatsApp messages (including sender phone numbers/IDs and message bodies) to us. Messages are only sent from Sokuto to end users when the customer explicitly initiates/approves sending in the product. Privacy policy: https://www.whatsapp.com/legal/business-privacy-policy

When we transfer personal data to countries outside Japan, we evaluate the recipient’s data protection framework, apply contractual safeguards, restrict access, and require equivalent security measures. By using Sokuto and opting into analytics, AI drafting, or messaging relay features, you consent to the overseas transfers listed above. You may withdraw consent by disabling the relevant feature (e.g., revoke LINE/WhatsApp integrations or AI drafting) in settings or by contacting us; we will cease the transfer unless continued processing is required by law or necessary to fulfill a contract you have requested.

Security measures

We maintain administrative, technical, and physical safeguards aligned with PPC guidance, including:

• Role-based access control, least-privilege reviews, and secure credential management
• TLS 1.2+ encryption in transit and provider-managed encryption at rest
• Multi-factor authentication for administrator accounts and mandatory hardware keys for production access
• Regular vulnerability assessments, dependency patching, and change management reviews
• Logging and monitoring with automated alerting and documented incident response procedures
• Vendor due diligence, confidentiality agreements, and periodic subprocessors audits

Retention and deletion

We retain personal data only for as long as necessary to meet the purposes above or legal obligations. Customer workspaces are scheduled for deletion or anonymization within ninety days after contract termination unless we are legally required to retain information longer. Aggregated analytics data may be stored in de-identified form for trend analysis.

Your rights under APPI

Individuals may exercise the rights provided by the APPI, including requests to:

• Receive notification of the purposes of use
• Obtain disclosure of retained personal data or third-party provision records
• Correct, add to, or delete retained personal data when inaccurate
• Suspend use, erase data, or halt third-party provision when statutory criteria are met
• Submit complaints or consultations regarding our handling of personal data

Submitting a request

Email [email protected] with "APPI request" in the subject line and describe the right you wish to exercise. We verify the identity or authority of the requester, acknowledge receipt within five business days, and respond without undue delay, typically within thirty days where possible. If we must refuse or delay a request, we will explain the applicable statutory grounds.

Management of records and breach notification

We maintain logs of personal data disclosures and acquisitions for at least three years. In the event of a notifiable incident under Article 26 of the APPI Enforcement Rules, we promptly notify affected customers, report to the Personal Information Protection Commission, and implement remedial measures.

Handling of personally referable information

When we receive analytics identifiers or similar personally referable information from partners, we evaluate whether it qualifies as personal data. If we associate the information with identifiable users, we treat it as personal data and apply this policy.

Children’s privacy

Sokuto is intended for business use and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child provided personal data, please contact us so we can delete it.

Updates to this policy

We may revise this policy to reflect changes in our services or legal obligations. Material updates are announced at least fourteen days before the new version takes effect. Continued use of Sokuto after the effective date constitutes consent to the revised policy.

Contact

Questions, feedback, or withdrawal of consent requests can be directed to [email protected] or mailed to Eagle Hamamatsucho Tensho Office Hamamatsucho Daimon 5F Suite 510, 2-7-17 Hamamatsucho, Minato-ku, Tokyo 105-0031, Japan.