Privacy Policy

This is an English translation of Exceed One's Privacy Policy (document PMS01). The authoritative Japanese version prevails in case of any discrepancy. PDF version (Japanese).

Privacy Policy

Enacted: May 23, 2018
Last revised: May 23, 2018

Exceed One Co., Ltd. (hereinafter "the Company") is primarily engaged in the development and provision of Windows applications and cloud services.

The Company fully recognizes its social responsibility regarding the protection of personal information it handles, protects the rights and interests of individuals, and complies with laws and regulations concerning personal information.

Furthermore, to implement the policies set forth below, the Company has established a personal information protection management system and hereby declares that it will continuously improve the system, with the participation of all employees, while staying aware of trends in IT technology, changes in social expectations, and shifts in the business environment.

1. a) Regarding personal information handled in the Company's business operations, as well as in the employment and personnel management of employees, the Company will properly acquire, use and provide personal information within the scope of purposes of use identified in advance. The Company will not handle personal information beyond the scope necessary to achieve those purposes (i.e., no use outside the stated purposes), and will take appropriate measures to that end.
2. b) The Company will comply with laws, guidelines established by the national government, and other norms relating to the handling of personal information.
3. c) Against risks such as unauthorized access to, leakage, loss, or damage of personal information, the Company will implement reasonable security measures, allocate appropriate management resources suited to the realities of its business, and continuously enhance its personal information security framework. The Company will also establish internal rules including corrective actions for inappropriate matters, and protect personal information in the best possible state.
4. d) The Company will establish internal rules for handling complaints and consultations regarding the handling of personal information, and will respond to such complaints and consultations promptly and sincerely.
5. e) The Company will review and continuously improve its personal information protection management system in a timely and appropriate manner, in light of changes in the environment surrounding the Company.

This policy shall be distributed to all officers and employees and thoroughly communicated, and measures shall be taken to make it available to anyone at any time.

Exceed One Co., Ltd.
Representative Director: Seiji Noro

The Company may revise this Privacy Policy to better protect customers' personal information and to comply with changes in laws and regulations.

Handling of Personal Information

Enacted: May 23, 2018
Last revised: October 1, 2022

1. Name, address and representative of the business operator

Exceed One Co., Ltd.
3-15-1 Morishita, Koto-ku, Tokyo, Japan
Representative Director: Seiji Noro

2. Personal information protection manager

Personal Information Protection Manager: Seiji Noro
TEL: 03-5625-0900

3. Purposes of use of personal information handled by the Company

1) Personal information obtained through Windows application and cloud service development and provision

• Customer management
• License issuance
• System development work
• User management and service provision
• Sales activities and contracted work (building entry procedures, etc.)
• Billing

2) Personal information of business partners

• Communication, cooperation, negotiation and contract performance relating to the Company's business

3) Personal information of those who contact us

• Responding to inquiries about the Company's business

4) Personal information of employees

• Personnel management

5) Personal information of job applicants

• Recruitment screening
• Communication regarding the screening process and results
• Pre-employment procedures and related communications

4. Contact for complaints, consultations and inquiries regarding personal information

For inquiries, complaints and consultations regarding the handling of personal information, please contact the "Personal Information Inquiry Contact" in Section 7 below.

5. Procedures for disclosure and other requests

1) Requests regarding retained personal data or third-party provision records

If you wish to request notification of the purpose of use, disclosure, correction, addition, deletion, cessation of use, erasure, or cessation of provision to third parties (hereinafter "disclosure, etc.") regarding retained personal data or third-party provision records handled by the Company, please contact the "Personal Information Inquiry Contact" in Section 7. However, please note that the Company cannot respond to such requests for the following personal information. Such information is used solely for performing contracted work and not for any other purpose.

• Information about applicants obtained from recruitment agencies is used for recruitment screening.
• Personal information obtained in connection with contracted cloud service provision is used for user management and service provision.
• Information about partner company employees obtained from partner companies is used for sales activities and contracted work (building entry procedures, etc.).

2) Where to submit requests

Please contact the "Personal Information Inquiry Contact" in Section 7 to submit disclosure requests. To request disclosure of retained personal data or third-party provision records, please complete and submit the Company's prescribed form.

3) Identity verification

Identity verification will be performed for disclosure requests. In some cases, you may be asked to mail a copy of an official identification document.

4) Fees

A fee of up to JPY 1,000 will be charged for requests for "notification of purpose of use" and "disclosure." If the fee is clearly expected to exceed this amount, you will be contacted separately.

6. Security measures for retained personal data

The Company implements the following security measures to protect retained personal data. For detailed questions about security measures, please contact the inquiry contact below.

1) Formulation of basic policy

• A basic policy has been formulated to ensure appropriate handling of personal data.

2) Establishment of rules for handling personal data

• Rules and regulations have been established for the safe management of personal data, including prevention of leakage and other incidents.

3) Organizational security measures

• A responsible person for handling personal data has been appointed, and a reporting system has been established for cases where violations of laws or regulations are identified or suspected.
• The employees who handle personal data and the scope of personal data they handle have been clearly defined.
• Regular self-inspections and external audits are conducted to verify the handling status of personal data.
• The handling status of personal data is monitored and reviewed, and improvements to the personal information protection framework are pursued.

4) Personnel security measures

• The importance of personal information protection is communicated and regular training is provided to those handling personal data.
• Confidentiality agreements are obtained from employees who handle personal data.

5) Physical security measures

• Entry and exit management is conducted in areas where personal data is handled.
• Measures have been established for the use, storage and disposal of devices, documents and electronic media containing personal data, and steps are taken to prevent theft and loss.

6) Technical security measures

• Access controls are implemented to limit the personnel and the scope of personal information databases they can access.
• Employees using information systems that handle personal information databases are identified and authenticated.
• Information systems that handle personal data are protected from unauthorized external access and malicious software.

7) Understanding of the external environment

Regarding the handling of personal information in foreign countries, the above security measures are appropriately implemented after understanding the personal information protection systems of the relevant countries.

7. Contact for inquiries, complaints and consultations regarding the handling of personal information

For inquiries, complaints and consultations regarding the handling of personal information, please contact the following:

End of document

The Company may revise this "Handling of Personal Information" document to better protect customers' personal information and to comply with changes in laws and regulations.