Privacy Policy

1. Information We Collect

We may collect the following information in connection with providing the Service.

1.1 Information You Provide Directly

• Account information (email address, password, etc.)
• Corporate information (company name, address, qualified invoice issuer registration number, etc.)
• The content of your inquiries

1.2 SwitchBot API Credentials

• The API token and secret key of your SwitchBot account

These credentials are stored in encrypted form on our servers for the purpose of collecting data from your devices.

1.3 Payment Information

• Credit card information (card number, expiry date, security code, etc.)
• Billing information (company name, address, etc.)

Credit card information is managed by our payment processor, Stripe, Inc. Confidential information such as card numbers is never stored on our servers. We retain only the last four digits and the card brand for billing management purposes.

1.4 Information Collected When You Use the Service

• Environmental data collected from IoT devices (temperature, humidity, CO2 concentration, power consumption, etc.)
• Device configuration and metadata (device name, battery level, online status, etc.)
• Group / Room structure information
• Rule settings (alert thresholds, notification conditions, etc.)
• Service usage history

1.5 Notification Destination Information

• Email address (when configured as a notification destination)
• Slack Webhook URL (when Slack notifications are configured)
• LINE integration information (when LINE notifications are configured)

1.6 Automatically Collected Information

• IP address
• Browser type and version
• Access date and time
• Referring URL
• Cookie information
• Access analytics data via Google Analytics (marketing site (www.sustira.io) only; not used in the admin console after login)

2. How We Use Your Information

We use the information we collect for the following purposes.

• Providing and operating the Service (including collecting, displaying, and storing device data)
• Responding to inquiries
• Performing and managing the service agreement (including payment processing and invoice issuance)
• Improving the Service and developing new features
• Analyzing usage and creating statistical data
• Notifying you of important announcements and maintenance information
• Sending alert notifications (notifications based on the rules you configure)
• Preventing fraudulent use and ensuring security

3. Disclosure to Third Parties

We do not disclose your personal information to third parties except in the following cases.

• With your consent
• When required by law
• When necessary to protect life, body, or property
• When disclosing to the service providers below to the extent necessary to perform their work (in which case we exercise appropriate supervision over them)

3.1 Service Providers (Third-party Services)

We share information with the following third-party services in order to provide the Service.

• Stripe, Inc. (USA): Credit card payment processing. Your card information is securely managed on Stripe's servers. See Stripe's privacy policy at https://stripe.com/privacy.
• SwitchBot / Wonder Technologies Co., Ltd.: We use the credentials you register to collect device data through the SwitchBot API.
• Google LLC (USA): We use Google Analytics for access analytics on the marketing site (www.sustira.io). It is not used in the admin console after login. See Google's privacy policy at https://policies.google.com/privacy.

3.2 Notification Services

If you configure an external service as an alert notification destination, the notification content is sent to that service.

• Slack (Slack Technologies, LLC)
• LINE (LY Corporation)

Notifications to these services are sent based on your own settings. Notification content may include device names, measured values, and alert conditions.

4. Security Measures

We implement the following security measures to prevent leakage, loss, or damage of personal information.

• Encryption of communications via SSL/TLS
• Encrypted storage of SwitchBot API credentials
• Access controls to prevent unauthorized access
• Regular security audits
• Employee training on personal information protection

5. International Data Transfers

In providing the Service, your information may be transferred outside Japan through the following third-party services.

• Stripe, Inc. (USA): information necessary for payment processing
• Google LLC (USA): access analytics data for the marketing site

We have confirmed that appropriate personal information protection measures are in place at these transfer destinations.

6. Cookies

The Service uses cookies and similar technologies for the following purposes.

• Session management
• Maintaining login status
• Usage analysis (Google Analytics: marketing site only; not used in the admin console after login)
• Displaying payment forms (Stripe Elements)

You can disable cookies through your browser settings, but some features (login, payment, etc.) may become unavailable.

7. Data Retention

We retain data according to the following criteria.

• Account information: For the duration of the service agreement and for 90 days after it ends.
• Environmental data (data collected from devices): For the duration of the service agreement and for 90 days after it ends.
• After Pilot ends (when no paid plan is taken): Data is retained after Pilot ends, but viewing and exporting require migration to a paid plan. Data is deleted 90 days after Pilot ends.
• Payment and billing information: Retained for 7 years after the transaction is completed, as required by law.
• SwitchBot API credentials: Deleted promptly when you delete them or when the service agreement ends.

After the retention periods above, data is securely deleted.

8. Your Rights

You have the following rights regarding your personal information.

• Disclosure: the right to request disclosure of the personal information we hold
• Correction: the right to request correction of inaccurate information
• Deletion: the right to request deletion of your personal information
• Suspension of use: the right to request that we stop using your personal information
• Data portability: the right to export accumulated environmental data in CSV format during the term of a paid plan

To make such a request, please contact us using the details below.

9. Changes to This Policy

We may change this Privacy Policy in line with changes in law or in the Service. If there are significant changes, we will announce them on the Service.

10. Contact Us

For questions about this Privacy Policy, please contact us: