This privacy policy (hereinafter referred to as "the Privacy Policy") details how personal data are collected and used in order for DeployGate Inc. (hereinafter referred to as "the Company") to provide a service (hereinafter referred to as "the Company Service"). You are asked to please completely read this privacy policy carefully before becoming a user of the Company Service.

1. Scope of the Privacy Policy

(1) The Privacy Policy applies to individual use of the Company Service by a user around the world (hereinafter referred to as "the User") and the processing of personal data via the Company Service and to cases to which privacy laws and ordinances are applicable.

(2) The Company Service may contain third party information (e.g., an application distributed by a user using the Company Service (hereinafter referred to as "Distributed Application"), hyperlink, banner). The Company shall not control said third party information and the Company shall not be liable for compliance with applicable third party privacy laws. The User is asked to please carefully read the privacy policy of the third party website being viewed.

2. Personal Data to be Collected

(1) Email address

(2) IP address

(3) Name

(4) User Name and Password

(5) Tokens necessary for coordination with other services

(6) The Company shall collect information on how the Company Service is used by the User (hereinafter referred to as "Usage Information"). This shall include information on the functions of the Distributed Applications, information on the page and activities of the system, and information on crashing.

3. When collecting personal data

(1) Email address

• When using the Company Service

(2) IP address

• When using the Company Service

(3) Name

• When using the Company Service
• When paying the usage fee for the Company Service (acquired by IPN from PayPal Holdings Inc.)

(4) User Name and Password

• When using the Company Service

(5) Tokens necessary for coordination with other services

• When using said other service for signing up or logging in to the Company Service, acquisition from said other service

(6) Usage Information

• When using the Company Service

4. Purpose of Data Processing and Legal Basis

The Company shall collect and processed personal data only for the following purposes.
If the User is in the European Economic Area (EEA), the User's personal data shall be transferred outside the EEA and stored or processed in a foreign country, including Japan, as part of the business operations of the Company. When transferring personal data from the EEA to a country that the European Commission has not made an adequacy decision, the Company shall rely on appropriate safeguards of information transfer such as the Standard Contractual Clauses approved by the European Commission.

(1) Response to fulfillment of the contract: The Company may process the personal data of the User in order to fulfill the agreement concerning the use of the Company Service (for settling the usage fee of the Company Service , or for the provision and guidance of the Company Service). The Company shall not process personal data beyond the limits required to fulfill the agreement.

(2) Communication: In order to contact the User concerning the Company Service, the Company may use the personal data of the User to notify the User of important information concerning the account or use of the Company Service, and to respond to complaints. The processing of such personal data shall necessary for the fulfillment of the agreement or for the purpose for the Company to obtain legitimate interests, that is, to carrying out ordinary work.

(3) Marketing: When contacting the User via email for marketing purposes, the Company shall always obtain the prior consent of the User. The User shall possess the right to have email distribution by the Company ceased at any time. The processing of such personal data shall be intended to provide the company with legitimate interests, that is, to contact the User, to provide necessary information concerning seminars and events, and to provide services optimized for the User or shall be based on the prior consent of the User.

(4) Customer service: When customer service is used by a User, the Company may use the personal data of said User to provide customer service. The processing of said personal data shall be necessary to fulfill the agreement or for the purpose of realizing the legitimate interests of the Company, that is, to carry out ordinary work.

(5) When the Company desires to further process personal data for a purpose other than the processing of collected personal data, for purposes such as hiring, the Company shall, in advance, provide information on said other purpose and all relevant additional information.

5. Consignment of Personal Data

The Company may entrust the whole or part of the handling of the collected personal data to the extent necessary for achieving the purpose of use. In such a case, the necessary agreements such as a basic agreement relating to the entrustment of personal data shall be concluded and the necessary and appropriate supervision of the contractor shall be performed.

6. Provision of Personal Data to a Third Party

In the case of providing personal data to a third party, the Company shall specify the destination and contents of provision and obtain the prior consent of the User. Provided, however, this shall not apply in the following cases.

(1) When based on laws and ordinances

(2) When it is necessary for the protection of human life, body, or property, and it is difficult to obtain the consent of the User

(3) When it is particularly necessary for improving public health or promoting healthy fostering of children and it is difficult to obtain the consent of the User

(4) When it is necessary to cooperate with a national agency, local public entity, or an entrusted person to carrying out the affairs prescribed by laws and ordinances, and there is a risk of interfering with the performance of said affairs by obtaining the consent of the User.

7. Security

The Company shall take appropriate organizational and technical security measures to protect the personal data of the User and prevent unauthorized use, loss, or alteration of said personal data. In addition, access rights to personal data shall be granted only to employees, agents, contractors, and other third parties who need to access said data. Said persons are obliged to maintain confidentiality based on employment agreement or data processing agreement.

8. Storage Period

(1) The Company shall not store the personal data of the User beyond the limitations required for data collection purposes.

(2) The User may request the company to erase the personal data of the User at any time. Moreover, when personal data ceases to be necessary in the light of the data collection or processing purposes, the Company shall erase said personal data.

9. User Rights

(1) When the processing of personal data is based on consent, the User shall possess the right to withdraw consent related to the personal data of the User at any time.

(2) The User shall possess the right to seek access to the personal data of the User. As a result, the User may receive copies of the personal data of the User possessed by the Company.

(3) The User shall possess the right to rectification the personal data possessed by the Company. This allows the User to correct any incomplete or inaccurate data of the user possessed by the Company.

(4) The User shall possess the right to request that the data concerning said User is erased. This allows the User to delete the personal data that the Company continues to process without legal basis.

(5) The User shall possess the right to objecti concerning the processing of the personal data of the User for the legitimate interests of the Company. When the Company processes personal data for direct marketing purposes, objection from the User shall be accepted at any time. When processing personal data for any other purpose, the Company shall cease processing personal data unless there is legitimate grounds for an unavoidable and valid reason related to the User's interests, profit, or rights, or related to the commencement, execution, or proof with regard to legal action.

(6) The User shall possess the right to request restriction of processing of personal data of the User.

(7) The User shall possess the right to request transfer of the personal data of the User to the User or a third party. The Company shall provide the User's personal data to the User or a third party designated by the User in a structured, commonly used, machine-readable format. Please note that this right applies only to the automated information of the process used by the Company based on the initial consent from the User or to fulfill the agreement with the User.

(8) There shall be no cost to exercise the above rights. The Company shall provide information on the response to the User's request immediately and in any case within one month after receipt of a request from the User. Provided, however, depending on the complexity and number of requests, said period may be extended for another two months. When the period is extended, the Company shall notify the User within one month after receipt of the request.

(9) When the User's claim is clearly lacking basis or is excessive, especially when a claim is repeatedly made, the Company shall request the User to pay a reasonable cost or refuse to respond to the request of the User.

(10) In addition to the above rights, the User shall possess the right to complain to supervisory authorities at any time (in particular, the supervisory authority of the EU member state in which the User resides or works or the EU member nation in which a General Data Protection Regulation (GDPR) violation has occurred). However, you are asked to please contact the Company before contacting the supervisory authorities so that the Company will have the opportunity to respond to the User complaint.

10. Use of statistical data

Based on the personal data, the Company may prepare and use anonymous and statistical data so as not to identify individuals.

11. Use of cookies, etc.

(1) The Company shall use cookies so that the website of the Company functions properly.

(2) In order to make the Company Service and advertisement contents more suitable for the User, the Company may collect and use the following information that cannot be used identify individuals. It may also be provided to advertisers, information providers, service providers, etc. for said purpose.

• User behavior history such as cookies, accessed URLs, contents, reference order

(3) For most browsers, cookie-enabled settings are the default. It is possible to disable cookies or display a cookie when sending depending on the browser settings, but if cookies are disabled, functions and services on the Company website and other sites will not work properly . If the User does not desire to have user behavior action history collected by the Company, it is recommended to use the browser's "Do Not Track" function.

12. Amendment

The Company may revise this Privacy Policy in whole or in part. When there are significant amendment , the Company shall inform the User on the website.

13. Contact Information

Contact point concerning personal data and complaints/consultation
(Online) https://deploygate.com/contact
(By post) 1-26-4 Shoto, Shibuya, Tokyo Japan 150-0046
Data Protection Officer, DeployGate Inc.

---

• The Company uses Google Analytics to understand service usage status. The data collected by Google Analytics shall be managed based on the privacy policy of Google, Inc. https://www.google.com/intl/ja/policies/privacy/