Privacy Policy

Effective date: May 24, 2026. Last updated: September 17, 2026. The Japanese version prevails if there is any conflict.

1. Application

This Privacy Policy explains how the GoSul operator handles personal information, customer data, and usage information in GoSul.

2. Information We Process

Account information such as display name, email address, authentication data, and subscription status.
Customer data such as company names, contact names, addresses, phone numbers, email addresses, industries, employee counts, map coordinates, statuses, activity logs, and notes.
Usage information such as device information, browser information, IP address, cookies, access logs, error logs, and operation logs.
Payment-related information received from payment services, such as customer IDs, subscription status, and billing status. Card numbers are processed by the payment service.
AI usage metadata, including the feature used, model, token counts, processing time, result status, quota usage, and fields accepted by the user. GoSul does not retain activity-note content, AI response content, or original audio in its AI usage ledger.
Support inquiry information and response history.

3. Purposes of Use

We use information to provide the Service, authenticate users, display customer maps, support CSV imports and activity records, manage contracts and billing, ensure security, prevent misuse, respond to inquiries, improve quality, comply with laws or protect rights, and—only when expressly initiated by a user—transcribe, organize, classify, and suggest follow-up actions from activity notes using AI.

4. Customer Data

Users are responsible for lawfully obtaining and using customer data uploaded to GoSul. GoSul processes customer data only as necessary to provide the Service and does not use customer data for GoSul's own sales activities.

5. AI Processing

When a user expressly runs an AI feature, we send the entered activity note and the minimum necessary parts of recent activity history to the OpenAI API for transcription, organization, classification, and suggestion generation. We do not automatically attach company names, addresses, map coordinates, phone numbers, email addresses, or payment information from customer profile fields. Phone numbers and email addresses within note text are masked before transmission. Users must not enter sensitive personal information, credentials, payment data, or other confidential information.

AI output is a suggestion and does not change customer data until the user reviews and applies or saves it. Original audio is transmitted temporarily for transcription and is not stored in GoSul storage. The AI provider's handling and retention of data are governed by its applicable terms, data-control settings, and law.

6. Third Parties and Subprocessors

We do not provide personal information to third parties except where permitted by law, with user consent, or where processing is entrusted to service providers. We may use providers such as Supabase, Mapbox, Geoapify, Stripe, OpenAI, hosting providers, email providers, analytics tools, and error monitoring tools.

When GoSul obtains coordinates for a US address, it sends only the address entered by the user to Geoapify. GoSul does not send customer names, phone numbers, email addresses, activity history, or notes to Geoapify for this lookup. Geoapify may process request content, headers, IP addresses, timestamps, and related information for usage management, security, and performance. See the Geoapify Privacy Policy for details.

7. Processing Outside Japan

Data may be processed outside Japan depending on the regions, storage locations, and support operations of third-party providers. We take reasonable steps to manage subprocessors and review their safeguards, terms, and functions.

8. Security

We implement reasonable technical and organizational safeguards, including access control, authentication, encrypted communications, permission management, logging, backups, and subprocessor management. However, no internet or cloud service can guarantee absolute security.

9. Retention

We retain information for as long as necessary for service provision, contract management, legal compliance, dispute handling, backup operations, and rights protection.

10. Requests and Contact

Requests for disclosure, correction, deletion, suspension of use, or other privacy-related inquiries will be handled in accordance with applicable law. Contact: support@sulsul.jp