This Privacy Policy explains how 三水株式会社 ("we", "us") collects, uses and protects information when operating the application "三水株式会社運営管理システム" at https://ser.sansuigroup.com (the "Service") and its Gmail automatic order intake feature.
Information We Collect
Account information: usernames, contact details and operation logs of internal staff and partner administrator accounts.
Google user data: only for company Gmail work mailboxes explicitly authorized by our administrators, the Service uses the Gmail API to read message metadata, message bodies and attachments (to identify order PDFs sent by partner travel agencies), and to apply labels to processed messages.
Business data: itinerary and customer information contained in order emails (such as names, contact details and transfer arrangements), used solely to create and manage transport orders.
How We Use Information
The sole purpose of accessing Gmail data is to automatically identify order emails from partner travel agencies, parse the order PDFs and create the corresponding orders inside the Service. We never use Google user data for advertising and never sell it to any third party.
Google API Limited Use Disclosure
The Service's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data Storage and Security
OAuth access and refresh tokens are stored encrypted with AES-256 and are never kept in plain text. All data in transit is protected with HTTPS. Access is controlled by role-based permissions, and only authorized administrators can manage mailbox connections.
Data Sharing
We do not disclose, transfer or sell Google user data or order data to any third party, except where required by law or with your explicit consent.
Data Retention and Deletion
Company administrators can disconnect a mailbox at any time inside the Service (the stored tokens are deleted immediately), and access can also be revoked via Google security settings (https://myaccount.google.com/permissions). To request deletion of data related to you, please contact us using the details below; we will respond within a reasonable period.
Cookies
The Service only uses cookies strictly necessary to maintain login sessions. No third-party advertising or tracking cookies are used.
Changes to This Policy
If we make material changes to this policy, we will update this page and revise the effective date.