Privacy Policy
How we collect, use, and protect your personal information
Last Updated: December 3, 2024
Introduction
SURUZOH ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our nasal breathing education service.
By using our service, you agree to the collection and use of information in accordance with this policy.
Key Points
- We collect minimal personal information necessary to provide our service
- We use third-party services (Stripe, Supabase, Resend) to process payments and send emails
- We do not sell your personal information to anyone
- You have rights to access, correct, or delete your data
Information We Collect
1. Personal Information You Provide
Email Address
We collect your email address when you purchase access to our service. This is used for account creation, sending Magic Links for authentication, and service-related communications.
Payment Information
Payment information (credit card details) is collected and processed by Stripe, our payment processor. We do not store your full credit card information on our servers. We only store a Stripe customer ID to manage your subscription.
2. Automatically Collected Information
Usage Data
We may collect information about how you access and use our service, including:
- Your progress through educational content
- Pages visited and time spent on pages
- Access dates and times
Device and Browser Information
We may collect information about your device and browser, including:
- Browser type and version
- Operating system
- IP address (for security purposes)
- Device type (desktop, mobile, tablet)
3. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Maintain your login session
- Remember your preferences
- Track your progress through content
- Analyze usage patterns to improve our service
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.
How We Use Your Information
We use the collected information for the following purposes:
Service Provision
- To create and manage your account
- To send Magic Links for authentication
- To provide access to educational content
- To track your progress through the course
- To process payments and manage subscriptions
Communication
- To send you service-related emails (Magic Links, access notifications)
- To respond to your inquiries and support requests
- To send important updates about the service (with your consent)
Service Improvement
- To understand how users interact with our service
- To improve user experience and content
- To identify and fix technical issues
Legal Compliance
- To comply with legal obligations
- To enforce our Terms of Service
- To protect against fraud and abuse
Third-Party Service Providers
We use the following third-party services to operate our business:
Stripe (Payment Processing)
Stripe processes all payment transactions. They receive your payment information and are responsible for securely handling it.
Stripe Privacy Policy: https://stripe.com/privacy
Supabase (Database and Authentication)
Supabase stores your email address, progress data, and manages authentication. Data is hosted in the United States (Oregon region).
Supabase Privacy Policy: https://supabase.com/privacy
Resend (Email Delivery)
Resend delivers Magic Link emails for authentication. They process your email address for this purpose.
Resend Privacy Policy: https://resend.com/legal/privacy-policy
Render (Web Hosting)
Render hosts our web application. They may collect standard server logs and technical information.
Render Privacy Policy: https://render.com/privacy
Note: These third-party services have their own privacy policies. We encourage you to review them to understand how they handle your information.
Data Security
We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it:
- SSL/TLS encryption for all data transmission
- Secure authentication via Magic Links (passwordless login)
- Database-level security with Row Level Security (RLS)
- Regular security updates and monitoring
- Limited access to personal data (only as necessary for service operation)
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
Data Retention
We retain your personal information only for as long as necessary to provide our service and fulfill the purposes described in this Privacy Policy:
Active Accounts
While you have an active subscription, we retain your email address, progress data, and subscription information.
Expired Accounts
After your subscription expires and you do not renew, we may retain your data for a limited period (typically up to 1 year) to allow you to easily renew your subscription.
Deleted Accounts
If you request account deletion, we will delete your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.
Your Rights
You have the following rights regarding your personal information:
Right to Access
You can request a copy of the personal information we hold about you.
Right to Correction
You can request that we correct any inaccurate or incomplete personal information.
Right to Deletion
You can request that we delete your personal information, subject to certain legal exceptions.
Right to Data Portability
You can request a copy of your data in a commonly used, machine-readable format.
Right to Withdraw Consent
Where we rely on your consent to process your information, you can withdraw that consent at any time.
To exercise any of these rights, please contact us at: suruzoh+support@gmail.com
We will respond to your request within 30 days in accordance with applicable data protection laws.
Children's Privacy
Our service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to remove such information from our systems.
International Data Transfers
Your information may be transferred to and processed in countries other than Japan, including the United States, where our servers and service providers are located.
By using our service, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date at the top of this policy
- Sending an email notification for significant changes (if you have an active subscription)
You are advised to review this Privacy Policy periodically for any changes. Continued use of our service after changes constitutes acceptance of the updated Privacy Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
SURUZOH
Kazuo Okiyama
385-2-1 Yoshida, Oizumi-machi, Ora-gun, Gunma Prefecture, Japan
Email: suruzoh+support@gmail.com
We will respond to all inquiries within 1-2 business days.