This Privacy Policy outlines the types of information collected from users of the service provided by Online Room.

• Your name (including nicknames or pen names)
• Email address
• ID used on external services (such as Google accounts), and any information you have agreed to disclose to us based on your privacy settings with those external services
• Event details and schedules registered on your Google Calendar
  
• * We only access this information if you explicitly authorize integration with your Google Calendar. We do not collect, edit, or delete any information without your permission.
• Information about your operating system and device, such as OS-generated IDs, device types, and identifiers
• Behavioral history on our website, including time spent, input history, and purchase records

We use the collected information for the following purposes:

• To register users, perform identity verification, and authentication for our services
• To manage user activity and service usage history
• To analyze user behavior and improve and maintain our services
• To allow users to view, share, record, and manage event information obtained from Google Calendar within our service
  
• * We only retrieve schedule information in read-only mode and do not make any changes or deletions to the content on Google Calendar. You may create, edit, or delete events within the app, but those changes are not reflected back to Google Calendar.
• To send notifications or information regarding our services
• To respond to user inquiries
• To respond to violations of our terms or applicable laws
• To notify users of service changes, discontinuation, termination, or account cancellation
• To inform users about updates to our terms or policies
• To provide, maintain, protect, and improve our services generally

Our service may use Google Login (OAuth 2.0) and read-only access to Google Calendar. These integrations are performed through APIs provided by Google LLC and are subject to the following policies:

• When using Google Login, we may obtain basic profile information such as your name and email address registered with your Google account.
• We only retrieve calendar events after you grant explicit permission, and use this data solely for displaying, recording, and sharing within our app.
• We do not create, update, or delete any information on your Google Calendar. Our access is strictly read-only.
• To allow you to view, share, record, and manage your event information obtained from Google Calendar within our service
  
• * Retrieved event data is read-only. We do not modify or delete information on Google Calendar. Within the app, you can create, edit, or delete events, but these changes are not reflected on Google Calendar.
• By default, retrieved events are displayed as 'private' and are not visible to roommates unless you explicitly change the sharing settings.
• You can disconnect your Google account at any time from your Google account settings page. Once disconnected, you will no longer be able to fetch calendar data or log in using Google.

We do not share, sell, transfer, or disclose any Google user data obtained through OAuth (including Google Calendar event information and Google account profile data) to any third parties, except as required by law or with your explicit consent.

All Google user data obtained via OAuth is transmitted over secure HTTPS connections. When stored, it is protected using industry-standard encryption methods. Access to this data is strictly limited to authorized personnel necessary for the operation and maintenance of the service.

We retain Google user data obtained via OAuth for up to 30 days to ensure continuous service and provide access to recent schedule information.

• Events that are set to “Private” and imported from Google Calendar (input type: Google) will be automatically deleted 30 days after they were retrieved.
• This automatic deletion applies only to events imported from Google. Events entered manually, or events whose visibility has been changed to settings other than “Private,” are not subject to deletion.
• If you disconnect your Google account or request deletion, all associated Google user data will be permanently removed from our servers within 24 hours.
• You may request deletion at any time by contacting us through the Contact information provided in this policy.

If you would like to know more about the security measures we take to protect your personal information, please contact us at the address listed at the end of this policy. We will respond in accordance with applicable laws and regulations.

We do not provide any personal data (as defined under Article 16, Paragraph 3 of the Act on the Protection of Personal Information) to third parties, including those located outside of Japan, without your prior consent, except in the following cases:

• When outsourcing the handling of personal data
• In the event our business or services are acquired
• When shared use with business partners (details will be disclosed separately when applicable)
• When otherwise permitted by law

We use Google Analytics to analyze user access to our website. Google Analytics uses cookies to collect traffic data. This data is collected anonymously and does not personally identify users. You can disable cookies in your browser settings to opt out of data collection. For more information, please see here.

We may update this privacy policy as needed. Any changes will be announced or notified in an appropriate manner along with the effective date and updated content.

If you wish to request disclosure, correction, suspension of use, or deletion of your information, please contact us at Contact. We will confirm that the request is from the individual concerned, such as by requiring a copy of a driver’s license or other specified verification method. Please note that a handling fee of 1,000 JPY will be charged per request, regardless of whether information is disclosed.