Last Updated: 27 July 2026
This Privacy Policy describes how SoftCloud API ("we," "our," or "the Company"), located at 9 Chome-7-3 Akasaka, Minato City, Tokyo 107-0052, Japan, handles personal information collected through the website softcloudapi.digital and in connection with our consulting services.
This policy is issued in compliance with the Act on the Protection of Personal Information (APPI) of Japan (Act No. 57 of 2003, as amended), including the revised provisions that became effective in April 2022. It applies to all personal information we collect from individuals located in Japan and from individuals in other jurisdictions who interact with our website or services.
By using this website, you acknowledge that you have read and understood the practices described in this policy. If you do not agree with any aspect of this policy, please discontinue use of this website.
We collect personal information in the following circumstances:
Information you provide directly: When you submit our contact form, you provide your name, email address, and the content of your message. When you subscribe to our mailing list, you provide your email address. In the course of an engagement, additional professional information such as job title and company name may be exchanged.
Information collected automatically: When you visit our website, certain technical information is collected automatically, including your IP address, browser type and version, operating system, referring URL, pages visited, time and date of your visit, and session duration. This information is collected through standard server logging and through cookies and similar technologies, as described in our Cookie Policy.
Information from communications: When you contact us by email or telephone, we retain records of those communications to the extent necessary to respond to your enquiry and maintain our business records.
We do not collect sensitive personal information as defined under Article 2(3) of the APPI, such as health information, criminal history, or political and religious beliefs, through this website.
Personal information is used for the following purposes, in accordance with the APPI's requirement that use be limited to the specified purpose of collection:
Responding to enquiries: Name, email address, and message content submitted through our contact form are used solely to respond to the enquiry submitted. We do not use this information for marketing without your separate consent.
Providing consulting services: Where an engagement is agreed, professional contact information is used to conduct the work, communicate findings, and maintain a business relationship.
Mailing list communications: Email addresses provided for newsletter subscription are used to send periodic communications about software supply chain security topics. Each communication includes an unsubscribe option.
Website improvement: Automatically collected technical data is used in aggregate to understand how the website is used and to identify technical issues. This data is not used to identify individuals.
Legal compliance: We may use or retain personal information where required by applicable Japanese law, including record-keeping obligations under the Companies Act (Act No. 86 of 2005) and related regulations.
We do not use personal information for automated decision-making that produces legal or similarly significant effects on individuals.
Under the APPI, personal information may not be provided to third parties without the individual's prior consent, except in the circumstances described below.
Service providers: We engage third-party service providers who process personal information on our behalf, including website hosting providers and email service providers. These providers are selected with attention to their data handling practices and are contractually restricted from using personal information for any purpose other than providing the services we have engaged them for.
Legal requirements: We may disclose personal information when required to do so by Japanese law, court order, or lawful request by a public authority. We will, where legally permissible, notify the affected individual of such a request.
Business transfers: In the event of a merger, acquisition, or transfer of substantially all of our business assets, personal information held by the Company may be transferred to the acquiring entity, subject to the same protections described in this policy.
We do not sell, rent, or otherwise transfer personal information to third parties for their own marketing or commercial purposes.
Cross-border transfers: Some of our service providers are located outside Japan. Where personal information is transferred to a country other than Japan, we implement appropriate measures to ensure that the receiving party provides a level of protection equivalent to that required under the APPI, including contractual protections or reliance on the recipient country's equivalent adequacy determination, where applicable.
We retain personal information only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law.
Contact form submissions are retained for a period of two years from the date of submission, or for the duration of any resulting engagement plus one year, whichever is longer. Mailing list subscription data is retained until the individual unsubscribes, plus a reasonable period thereafter to honor the unsubscribe request and maintain our suppression list. Automatically collected technical data is retained for a period of thirteen months from the date of collection.
When personal information is no longer required for its specified purpose and retention is not legally mandated, we delete or anonymize it in a manner that prevents reconstruction.
Under the APPI, individuals have the following rights with respect to their personal information held by a business operator:
Right to request disclosure: You may request that we disclose the personal information we hold about you. We will respond to verified disclosure requests within a reasonable period, and in any case within the timeframe required by law.
Right to request correction: If personal information we hold about you is inaccurate or incomplete, you may request that we correct it. We will take appropriate steps to verify and correct the information.
Right to request deletion: You may request deletion of personal information we hold about you where that information is no longer necessary for the purpose for which it was collected, or where it was collected without proper legal basis. Deletion requests will be honored where no legal obligation requires continued retention.
Right to request suspension of use or provision: You may request that we suspend use of or provision of your personal information in circumstances where it is being handled in violation of the APPI.
Right to opt out of mailing list: Subscribers to our mailing list may unsubscribe at any time using the unsubscribe link included in each communication, or by contacting us directly.
To exercise any of the above rights, please contact us at info@softcloudapi.digital with sufficient information to identify the personal information in question and verify your identity. We may request additional verification information before processing a request.
We implement appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted transmission of data via HTTPS, access controls limiting who within the organization can access personal information, and regular review of our data handling practices.
Despite these measures, no system of data transmission or storage can be guaranteed to be completely secure. We cannot warrant the absolute security of personal information transmitted to us. In the event of a personal information breach that is likely to result in harm to individuals, we will take appropriate steps in accordance with Article 26 of the APPI, including notification to the Personal Information Protection Commission and to affected individuals where required.
Our website uses cookies and similar technologies. Detailed information about the types of cookies used, their purpose, and how to control them is provided in our Cookie Policy. The Cookie Policy forms part of this Privacy Policy.
Cookies that are not strictly necessary for the technical operation of the website are only placed with your consent, which you may provide or withdraw through the cookie preference panel accessible on this website.
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. Where changes are material, we will indicate the revision date at the top of the policy. We encourage you to review this policy periodically.
Continued use of our website following the publication of an updated Privacy Policy constitutes acknowledgment of the changes.
In accordance with Article 32 of the APPI, we have established the following point of contact for enquiries and complaints relating to our handling of personal information:
SoftCloud API — Personal Information Consultation Desk
9 Chome-7-3 Akasaka, Minato City, Tokyo 107-0052, Japan
Email: info@softcloudapi.digital
Telephone: +81 3-6271-3111
Hours: Monday to Friday, 9:00 AM to 6:00 PM JST
If you are not satisfied with our response to a complaint or enquiry, you have the right to contact the Personal Information Protection Commission of Japan (PPC) at www.ppc.go.jp.