Privacy policy
How DEISO collects, uses, shares and protects personal information when you visit dei.so, contact us, subscribe to our communications, purchase a service, or install and use DEISO software.
This policy covers the dei.so website, DEISO desktop software (such as DEISO GHG Kata) and DEISO’s commercial relationship with enquirers, subscribers, software users and clients. Confidentiality and handling of client project data are set out in the engagement agreement for each project.
Who we are
DEISO LLC is a company registered in Japan, operating the website dei.so. DEISO is the controller of the personal information described in this policy.
For any question about this policy or about the personal information we hold, contact
Information we collect
Information collected automatically
When you visit the site, we automatically collect technical information about your device and how you use the site. This includes browser type, IP address, time zone, operating system, screen resolution, approximate location by country and city, the pages you view, the referring website or search term, and the date and time of your visit.
This information is collected through cookies, log files and similar technologies. We refer to it as device information.
Information you provide
When you submit a contact or quotation form, subscribe to our communications, or purchase a service, we collect the information you give us. This normally includes:
- Name and organisation — so we can address and route your enquiry
- Email address and telephone number — to respond to you
- Billing details — where an invoice or payment is involved
- The content of your message — the scope, question or requirement you describe
DEISO does not store payment card numbers. Card payments are processed by the payment provider, and DEISO receives only confirmation of payment.
DEISO software
DEISO desktop software runs on your computer. This section explains what it sends to DEISO and what stays with you. By activating the software you confirm that you have read this section.
Activation and licence checks
When you activate the software, and when it checks its licence afterwards, it sends:
- First name, last name and email address — to match the licence to its holder
- Licence key — to confirm the plan and its validity
- A code identifying your computer, and the computer’s name — so a key is used only on the computers it covers
- Technical connection details — IP address, date and time, and software version, recorded in server logs
The software checks its licence when it starts and at regular intervals, and works offline for a limited period.
What stays on your computer
Your cases, inputs, results, reports and settings are stored on your computer. They are not sent to DEISO.
Updates
To check for updates, the software reads a small file from DEISO’s download site. This request contains technical connection details only.
Sync and backup
If you turn on sync or backup, copies of your data are saved to a cloud folder that you choose, for example Dropbox, OneDrive or Google Drive. DEISO has no access to that folder; its provider’s terms apply.
Support and bug reports
Support and bug report links open dei.so in your browser. Anything you submit there is handled as described in this policy.
The software does not include advertising or usage tracking, and does not send your project data to DEISO.
How we use it
We use the information you provide to respond to enquiries, prepare and issue quotations, run and administer engagements, issue invoices and confirmations, and maintain the business records we are required to keep.
We use technical information to keep the site working, understand which pages are useful, monitor performance and capacity, and identify misuse or fraudulent activity.
We use the information sent by DEISO software to activate and check licences, manage the computers a licence covers, prevent misuse of licence keys, provide updates, and contact you about your licence.
Where you have subscribed, we use your email address to send DEISO communications. You can unsubscribe at any time using the link in any message, or by following the instructions on our unsubscribe page.
Legal basis
Where data protection law requires a legal basis for processing, DEISO relies on:
- Performance of a contract — to prepare a quotation, run an engagement, issue invoices, and provide and license DEISO software
- Consent — for newsletter subscriptions and non-essential cookies, withdrawable at any time
- Legitimate interests — to respond to enquiries, secure the site, and understand how it is used
- Legal obligation — to retain accounting and tax records as Japanese law requires
Cookies and analytics
The site uses cookies to function correctly and to measure usage. Essential cookies keep the site working. Analytics cookies help us understand which pages are read and how the site performs.
We use Google Analytics for site statistics. Google processes this data on our behalf and its handling is governed by the Google privacy policy. You can prevent Google Analytics from collecting your data using the Google Analytics opt-out add-on.
You can also block or delete cookies through your browser settings. Doing so may affect how parts of the site work.
DEISO does not run behavioural advertising and does not sell personal information.
Who we share it with
We share personal information only where it is needed to run the business, and only with providers who process it on our behalf:
- Website and hosting providers — to operate dei.so
- Software licensing and download hosting — to activate and check licences and to deliver updates
- Analytics providers — to measure site usage
- Email and communication providers — to send and receive correspondence and subscriptions
- Payment providers — to process payment where applicable
We may also disclose information where required by applicable law, to respond to a lawful request from an authority, or to establish or defend a legal claim.
International transfers
DEISO is based in Japan, and personal information is processed in Japan. Some of the providers listed above process data in other countries.
For visitors and clients in the European Economic Area and the United Kingdom, personal information transferred to Japan is protected under the European Commission’s adequacy decision for Japan, which recognises Japanese data protection law as offering an equivalent level of protection.
How long we keep it
We keep personal information only for as long as it serves the purpose it was collected for.
- Enquiries that do not lead to an engagement — kept while the enquiry is active and for a reasonable period afterwards
- Client and order records — kept for the duration of the relationship and then for the period Japanese tax and accounting law requires
- Software licence records — kept for the duration of the licence and then for the period required by applicable tax and accounting law; computer codes are removed when a licence is moved to another computer
- Subscriber records — kept until you unsubscribe
- Analytics data — kept according to the retention period set in the analytics platform
Your rights
Depending on where you are located, you may have the right to request access to the personal information we hold about you, ask for it to be corrected, ask for it to be deleted, object to or restrict how we use it, ask for a copy in a portable format, and withdraw consent you have previously given.
To make a request, email . We will respond within the period the applicable law requires. We may need to verify your identity before acting on a request.
Some records cannot be deleted on request where we are required to retain them, for example accounting records and correspondence forming part of a contractual relationship.
Security
DEISO takes reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
How DEISO handles client project data, confidentiality and access is set out separately in our data governance and security page.
Children
The site and DEISO services are intended for business use and are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.
Changes to this policy
We may update this policy to reflect changes in our practices or for operational, legal or regulatory reasons. The current version is always published on this page.
