Protecting your personal data is our primary commitment. This policy explains how we collect, use, and safeguard your information globally, governed by the laws of the United States.
Soseki (developed by Soseki) explains how we collect, use, store, and protect your personal data globally, adhering to industry-standard privacy principles governed under the laws of the United States.
This Privacy Policy applies to all users of the Soseki platform, including website visitors, registered workspace owners, and clients interacting with our tools. Consent is obtained through explicit affirmative action while using our website (soseki.app) or services. We encourage you to read this policy carefully to understand how your information is handled throughout your lifecycle with us.
Legal Entity
Soseki
Remote-first Project operating globally.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our dedicated support channel. We take all privacy inquiries seriously and will work diligently to resolve your concerns.
3.1 Information You Provide Directly
Account Registration
Name, email address, and securely hashed passwords required to authenticate you into the system.
Workspace Details
Business names, workspace branding, team member emails, and custom operational settings.
Billing & Financial
Transaction IDs, invoice metadata, and billing addresses. We do NOT directly store raw credit card numbers.
Files & Documents
Any client assets, logos, PDF attachments, or project files you voluntarily upload to your workspace.
3.2 Information Collected Automatically
When you interact with Soseki, our servers automatically collect specific telemetry and usage data. This includes device identifiers, IP addresses, browser types, operating systems, and timestamped usage patterns. This data is strictly utilized to optimize platform performance, detect security anomalies, and prevent fraudulent activities.
Cryptographic E-Signatures: When clients accept an estimate or document via our portal, we automatically collect their IP address, device metadata, and precise timestamp to generate a legally binding, tamper-proof cryptographic signature hash. This ensures non-repudiation and document integrity for our workspace owners.
3.3 Children's Data
WE DO NOT KNOWINGLY COLLECT DATA FROM MINORS
Our platform is intended for businesses and professionals. We do not knowingly collect personal information from individuals under 18. If we become aware that data of a minor has been collected without verifiable parental consent, we will take immediate steps to secure and purge such information.
4.1 Core Service Delivery
To operate your workspace, manage client and project architectures, send automated system confirmations, and deliver generated invoices and files seamlessly.
4.2 Security and Diagnostics
To monitor platform health, analyze crash diagnostics to fix bugs, optimize database queries, and actively defend against malicious attacks or unauthorized access attempts.
4.3 Communication and Updates
To send essential security alerts, infrastructure updates, and support responses. With your explicit consent, we may also send newsletters or feature announcements.
5.1 Sub-processors & Service Providers
We rely on trusted third-party infrastructure to power Soseki. Data shared is strictly limited to what is necessary for them to perform their functions:
5.2 Legal and Compliance Disclosures
We may disclose your data if required by law, subpoena, or other legal processes, or if we possess a good faith belief that such disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a valid government request.
5.3 Our Stance on Privacy
We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy.
Active Account InformationRetained until account deletion
Workspace Assets & ProjectsRetained until manually deleted by you
Financial Transaction RecordsRetained as required for tax/compliance
System Analytics LogsAnonymized or purged after 30 days
We take the security of your data extremely seriously and implement comprehensive technical and organizational measures to protect it:
End-to-End Encryption
All data is encrypted in transit using strict SSL/TLS protocols, and at rest using AES-256 bit encryption.
Infrastructure Protection
Our AWS databases reside in private subnets, protected by firewalls, VPCs, and regular security patching.
Strict Access Control
Internal access is heavily restricted. Workspace data is isolated via strict multi-tenant Row Level Security (RLS).
Self-Service Data Portability
You don't need to file a support ticket to exercise your rights. Login to your dashboard to Access, Export, Correct, or Delete your data instantly.
Depending on your jurisdiction, you are legally entitled to:
NO GUARANTEE OF ABSOLUTE SECURITY
While Soseki implements robust, enterprise-grade security measures to protect your data, the internet and cloud infrastructure are never 100% secure.
By using our platform, you explicitly acknowledge and agree that we (the creators) assume no strict liability for data loss, third-party infrastructure compromises, zero-day exploits, or unauthorized breaches beyond our direct control. You use this service understanding these inherent technological risks.
By registering an account or continuing to use Soseki, you explicitly consent to the collection, usage, and sharing methodologies described in this document.
We reserve the right to update or modify this Privacy Policy at any time. When we do, we will revise the "Updated" date at the top of this page. For significant changes that materially affect your rights, we will provide a prominent notice on the platform or send an email notification directly to workspace owners.
SOSEKI
EST. 2026
© 2026 All Rights Reserved