KOCKOCKickoff Calendar
Legal

Privacy Policy

Last updated · 2026-04-27

Popaz Co. ("we", "us", "our") operates Kickoff Calendar (https://kickoff.guide, the "Service"). We treat the protection of personal data as a serious responsibility and aim to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), Japan's Act on the Protection of Personal Information (APPI), and other applicable laws. This Privacy Policy explains what we collect and how we handle it.

1. Information we collect

We collect only what we need to operate the Service, in line with applicable law:

  • Email address (used for magic-link authentication)
  • Your favorite teams and selected leagues
  • Preferences such as reminder times, theme, language, timezone, and (where applicable) streaming preferences
  • Payment-related metadata (processed by an external payment processor — we do not store card numbers ourselves)
  • The unique token used to issue your calendar subscription URL
  • Text you enter into the AI chat feature (kept only for the lifetime of the session — not persisted)
  • Access logs, IP address, and browser metadata (used for abuse prevention and aggregate analytics)

2. How we use it

We use the information above only for the purposes below, except where you have consented to additional uses or where the law permits another basis:

  • Operating the Service (calendar feed generation, AI chat replies)
  • Magic-link authentication and account management
  • Subscription billing and contract performance
  • Replying to inquiries and support requests
  • Sending operational emails (service announcements, feature updates, renewal / cancellation notices)
  • Aggregate usage analytics and service-quality improvements
  • Detecting and responding to abuse, unauthorized access, or terms violations
  • Compliance with legal obligations

3. Disclosure to third parties

We do not disclose your personal data to third parties without your prior consent, except in the following situations:

  • Where required by law
  • To protect a person's life, body, or property, where consent cannot reasonably be obtained
  • For public health or child welfare reasons of particular importance, where consent cannot reasonably be obtained
  • To cooperate with a government or municipal authority carrying out a statutory duty

We may also engage trusted third-party vendors to operate parts of the Service on our behalf. Each such vendor is bound by a confidentiality and data-protection agreement, and we supervise them to ensure appropriate security measures. Specific vendor names will be disclosed promptly on request.

4. International transfers

Some of the third-party vendors mentioned above are based outside Japan, which means your personal data may be transferred internationally — primarily to the United States and the EU. We rely on Standard Contractual Clauses (SCCs) or equivalent safeguards under GDPR for these transfers.

5. Security measures

We take reasonable technical and organizational measures to prevent the leakage, loss, or damage of personal data, in line with applicable law and the guidelines of Japan's Personal Information Protection Commission. Details of specific measures will be shared on request, to the extent that doing so does not undermine those measures.

6. Cookies and analytics

We use a minimal set of cookies plus cookieless analytics. See the Cookie Policy for details. You can manage cookies via the on-site banner or through your browser settings.

7. Your rights

You can edit or delete your personal data yourself at any time from the Settings screen (/app/settings). Deleting your account immediately invalidates your subscription URL — your subscribed calendars empty themselves on the next fetch.

For other rights (access, restriction, data portability, etc.) under GDPR / CCPA / APPI, please reach us via the contact page. After verifying your identity, we'll respond within a reasonable timeframe (typically within 14 days).

8. Retention

  • Account data and preferences: kept until you delete your account, then erased promptly
  • Payment history: retained up to 7 years to comply with tax law (consumption tax / electronic books-of-account preservation)
  • Support email history: retained up to 3 years
  • AI chat input: not persisted; discarded at end of session

9. Minors

The Service is open to anyone, but if you are under 18, you should use it only with the consent of a parent or legal guardian. If we receive a consent withdrawal from a parent or guardian, we will delete the affected user's personal data promptly.

10. Changes to this policy

We may update this policy as the Service evolves or as the law requires. For material changes we'll notify you in-product or by email. Updated policies take effect when posted on the Service.

11. Contact

Questions about this policy, our handling of personal data, or rights requests can be sent through the contact page. For business / company details, see the Specified Commercial Transactions Act notice (Japanese only — required for Japan).

Operator
Popaz Co. (株式会社 Popaz)
Privacy lead
Hiroaki Ishii, Representative Director

Effective: 27 April 2026
Last updated: 27 April 2026