PRIVACY POLICY

Privacy Policy

Established: 27 May 2026  /  Version 1.0

Gravia (hereinafter "we", "us" or "our") sets out this Privacy Policy (hereinafter "this Policy") regarding the handling of personal information of users in the services provided on this website (hereinafter "the Service").

Article 1 — Scope of Application

  1. This Policy applies to each page of this website (enquiry forms, service pages, etc.) and to communications and transactions conducted via this website.
  2. Where requests or transactions are made through external services such as Jimoty or Kurashino Market, the privacy policies of those respective services shall also apply.

Article 2 — Definition of Personal Information

"Personal information" refers to information about a living individual that can identify a specific person by name, date of birth, address, telephone number, email address, or other description contained in that information (including information that can be easily cross-referenced with other information to identify a specific person), as well as personal identification codes, as defined under the Act on the Protection of Personal Information.

Article 3 — Information Collected and How It Is Collected

We may collect the following information through lawful means in the course of the Service:

  • Information provided via enquiry forms: Name, company name, email address, telephone number, enquiry details, and other information entered in the form
  • Information required for transactions, estimates and invoicing: Address, contact person name, bank account details, and other information necessary for business operations
  • Information automatically transmitted upon access: IP address, browser information (device information), date and time of access, referring URL, cookie data
  • Information collected when using the SaaS service (Shokunin Cloud): Account information (email address, etc.), business information, invoice and estimate data, receipt/voucher images (for AI-OCR processing), and other information entered during use of the service
  • Information obtained via external services: Information disclosed or shared with user consent under the terms and policies of matching sites and other external services

Article 4 — Purpose of Use

We collect and use personal information for the following purposes:

  • To respond to enquiries and carry out business operations such as estimates, invoicing and correspondence
  • To provide requested services, ship products, and handle after-sales support
  • To verify identity, prevent fraud and misconduct, and maintain security
  • To analyse data for service improvement and quality enhancement (including statistical and anonymised analysis)
  • To comply with laws, regulations and requests from government agencies
  • For purposes incidental to the above

Article 5 — Provision to Third Parties

We will not provide personal information to third parties without the prior consent of the user, except in the following cases (and except where permitted by the Act on the Protection of Personal Information or other applicable laws):

  • Where the user has given consent
  • Where necessary to provide information to outsourced service providers within the required scope (e.g., delivery companies, payment processors)
  • Where required by law, or where necessary to protect the life, body or property of a person and it is difficult to obtain consent from the individual
  • Where particularly necessary for the improvement of public health or the sound upbringing of children and it is difficult to obtain consent from the individual
  • Where it is necessary to cooperate with a national or local government body or a person entrusted by such a body in performing statutory duties, and obtaining consent from the individual may impede the performance of those duties

Article 6 — Outsourcing

In providing the Service, we may outsource certain operations such as delivery, packaging, system maintenance and payment processing to external parties. In such cases, we will exercise the necessary and appropriate supervision to ensure that the subcontractors implement proper security management measures.

Article 7 — Handling of Payment Information

Payment processing for our SaaS service (Shokunin Cloud) uses the payment service provided by Stripe, Inc. Credit card information is collected and managed directly by Stripe, Inc. and does not pass through our servers. We do not store credit card numbers or other card details.

For details on how Stripe, Inc. handles your data, please refer to Stripe's Privacy Policy.

Article 8 — Use of AI Features and Data Processing

Our SaaS service (Shokunin Cloud) provides the following AI features, through which user data is sent to external AI services:

  • Receipt & Voucher OCR: Uploaded receipt and voucher image data is sent to the Claude Vision API (claude-sonnet-4 series, etc.) provided by Anthropic, Inc. for text recognition. The transmitted image data is processed in accordance with Anthropic's privacy policy and terms of service. We do not provide data to Anthropic for the purpose of model training.
  • AI Expense Categorisation (paid option): Text data for determining expense account codes and journal entries is also processed using the Claude API.

For details on how Anthropic, Inc. handles your data, please refer to Anthropic's Privacy Policy.

Article 9 — Cookies and Analytics

  • This website may use cookies and similar technologies to improve usability, prevent fraud, and analyse access. Users may disable cookie acceptance via browser settings, though this may affect certain features or display.
  • This website uses Google Analytics, an access analysis tool provided by Google, to analyse and improve the site. Google Analytics uses cookies to collect data anonymously and does not identify individuals. You may opt out by disabling cookies. Please refer to the Google Analytics Terms of Service and Google Privacy Policy for details.
  • The enquiry form on this website uses Formspree (Formspree, Inc.). Submitted data is forwarded to us via Formspree's servers. For details on how Formspree handles data, please refer to Formspree's Privacy Policy.

Article 10 — Security Measures

We implement the following measures to prevent unauthorised access, loss, destruction, falsification or leakage of personal information:

  • Technical & physical measures: SSL/TLS encryption, multi-factor authentication for external services, and strict access control.
  • Organisational measures: Appointment of a personal information protection officer, and timely and appropriate deletion or disposal of unnecessary data.

Article 11 — Requests for Disclosure

Users may request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, erasure or cessation of third-party provision of their personal information held by us (hereinafter "requests for disclosure"). To submit such a request, please contact us via the enquiry channel in Article 16. We will respond promptly after verifying your identity (which may include checking official identification documents as necessary).

Article 12 — Personal Information of Minors

Users under 15 years of age must obtain the consent of a parent or legal guardian before providing personal information.

Article 13 — International Transfers

In connection with overseas sales, shipping and transactions (including through platforms such as eBay Inc.), user personal information (such as shipping address details) may be transferred outside Japan to the extent necessary for payment and delivery. In such cases, we will comply with applicable laws and only provide information to subcontractors (such as delivery companies) with appropriate security measures in place. Personal information may also be processed on servers in the United States or other countries in connection with AI processing services (Anthropic, Inc.) and payment services (Stripe, Inc.) as described in Article 8. Where a user requests disclosure of information regarding the systems in the destination country, we will respond promptly via the contact in Article 16.

Article 14 — Retention Period and Disposal

We retain personal information for the period necessary to fulfil the purpose of use, or for the mandatory retention period prescribed by applicable laws and regulations (such as tax and company law). After the retention period has passed, or when the data is no longer required, we will promptly dispose of it in an irreversible manner by appropriate methods such as encryption, shredding or erasure.

Article 15 — Changes to This Policy

  1. The content of this Policy may be revised without notice to users in response to changes in laws and regulations or the content of the Service.
  2. Unless otherwise specified by us, the revised Privacy Policy shall take effect from the time it is posted on this website. Where there are significant changes, we will provide clear notice on this website.

Article 16 — Contact

For enquiries regarding this Policy or requests for disclosure under Article 11, please contact us at the following:

Address Nishiajima 4-403-903, Kita-ku, Nagoya, Aichi, Japan
Trade name Gravia
Privacy Officer Manami Satomura
Phone +81-52-880-4074
FAX +81-52-888-9625
Email gravia.japan.shop@gmail.com

Established 27 May 2026