GS GenbaShare

Privacy Policy

GenbaShare

GenbaShare (the "Service") respects user privacy and complies with the Act on the Protection of Personal Information of Japan and other applicable laws. This Privacy Policy describes how we collect, use, and protect information.

1. Operator

  • Provider: Sanki Co., Ltd. (MADOA, a window glass specialist)
  • Developer and Operator: Ken Furuta (37design)
  • Contact: kenfuruta0824@gmail.com

2. Information We Collect

2-1. Account Information

  • Display name
  • Email address
  • Tenant (organization) information
  • Password (stored as a hash)

2-2. Site Record Information

  • Photographs of work sites and accompanying notes
  • GPS coordinates (latitude, longitude), captured only when the user explicitly requests location tagging
  • Site name, customer name, address, person in charge, and similar text fields

2-3. Device Permissions

  • Camera — to capture site photographs
  • Photo library — to select and attach existing images
  • Location — to record the geographic position of a site

Each permission is requested only when needed and operates only after explicit user consent. Users can revoke any permission from their device settings at any time.

2-4. Automatically Collected Information

  • Access timestamps, IP address, user agent, and other technical logs

3. Purpose of Use

  • To provide the Service as a B2B SaaS for sharing work-site information
  • To generate and export PDF reports
  • To authenticate users and manage accounts
  • To prevent fraudulent use and ensure security
  • To improve and develop new features
  • To manage billing in the future when paid plans are introduced
  • To send important notices about the Service

4. Third Parties and Subprocessors

We do not sell or share user information with third parties for their own purposes. Information is processed and stored using the following infrastructure providers as necessary to operate the Service.

  • Cloudflare, Inc. — CDN and Cloudflare Tunnel for network transport
  • Self-hosted servers located in Tokyo, Japan, running PostgreSQL

We may disclose information to the minimum extent necessary when required by law or to protect life, body, or property in an emergency.

5. Data Retention

  • We retain personal information for the duration the account is active.
  • When a user deletes their account, related personal information and site records are physically deleted within 30 days, in principle.
  • We retain information longer only when required by applicable law.

6. User Rights

Users have the following rights regarding their personal information.

  • Right to access — Request disclosure of personal information we hold.
  • Right to rectify — Request correction or addition of inaccurate information.
  • Right to erasure — Request suspension of use or deletion of personal information.
  • Account deletion — Delete the account at any time from the in-app settings or by contacting us.

8. Changes

We may revise this Privacy Policy from time to time in response to changes in law or the Service. Material changes will be announced in advance on the Service website or in the application.

9. Contact

For questions about this Privacy Policy, please contact us at:

  • Email: kenfuruta0824@gmail.com
  • Operator: Ken Furuta (37design) / Sanki Co., Ltd.