Kihyo Privacy Policy
Kihyo is a Shopify app published by HASHIRA CAPITAL. It reads the purchase orders a merchant receives and turns them into draft orders in that merchant's Shopify store.
Information the app handles
- Purchase order contents that the merchant gives to the app: company name, contact person's name, delivery address, line items, and requested delivery date.
- Product information from the merchant's store: product titles, SKUs, and prices. These are used only to match order lines to products.
- We do not collect anything directly from the individuals concerned. The merchant receives the purchase order and passes it to the app. We do not obtain information by deception or other improper means.
How the information is used
- To create a draft order in the merchant's own store from the purchase order. The information is not used for anything else.
- To prevent the same purchase order from creating two draft orders, the app adds a tag to the draft order. The tag is a value calculated from the order contents and does not contain anyone's name.
Sharing with third parties
- We do not share this information with third parties. We do, however, use the processor described below.
Processing by our processor, and where processing happens
- Purchase order contents are processed on servers operated by our processor, Vercel Inc. (United States). Neither we nor the processor store them.
- We have a data processing agreement with the processor, concluded under Japan's Act on the Protection of Personal Information.
- Processing takes place mainly in Singapore. Under the contract it may also take place in the United States or in other countries.
- On request through our contact form, we will provide a summary of the measures the processor has in place and the names of the countries where processing takes place.
- Our contact form is provided by Google LLC (United States); what you enter there is stored on Google's servers. We ask you not to enter purchase order contents into it.
- Our web pages load display fonts from Google LLC's servers. When they do, the visitor's IP address and browser environment are sent to Google. The purchase order contents pasted into a page are not sent.
What we store, and where
- We do not store purchase order contents. What the app reads is written only into the draft order in the merchant's Shopify store.
- We store only what the app needs to connect to the store: the store's domain and an access token. This does not include any staff member's name or email address.
- This connection information is stored in Singapore.
- Because we do not store order contents, no outdated copy remains with us. The merchant can edit or delete the draft order in their own store.
Deletion
- A merchant can end the connection at any time by uninstalling the app. When the app is uninstalled, we delete that store's connection information.
- When Shopify sends a request to delete a store's data, we delete the same information. When Shopify sends a request to disclose or delete a customer's data, we respond that we hold no customer data.
- If we cannot act on a request, we will answer and give our reason.
Published information about the personal data we hold
- Business name: HASHIRA CAPITAL
- Purpose of use: as described under "How the information is used" above
- Security measures taken: provided on request, including a summary of our processor's measures and the countries where processing takes place
- How to make a request, and where to raise a complaint: see "Requests for disclosure and related rights" and "Contact" below
Requests for disclosure and related rights
- All requests come through our contact form. If a request reaches our processor instead, the processor will direct the individual to send it to us.
- We verify identity to the extent it can be matched against the content of the request.
- We do not charge a fee.
Contact
- HASHIRA CAPITAL — contact form