Privacy Policy

Power Office LLC

Issued：2025-04-01 | Updated：2026-03-22

Overview

Power Office LLC (“we,” “our,” or “us”) operates Power Viewer and MemberPortal (collectively, the “Services”). This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

By using our Services or signing in with Google or Microsoft, you agree to the practices described in this policy.

Data Controller

Power Office LLC

Email: info@poweroffice-kato.com

Website: https://poweroffice-kato.com

What Personal Data We Collect

Data Collected via Google Sign-In (OAuth 2.0)

When you sign in using your Google account, Google provides us with the following data based on the OAuth scopes we request:

• Name (given name and family name)
• Email address
• Google Account unique identifier (sub)

We request only the minimum scopes necessary: openid, email, and profile. We do not request access to Gmail, Google Drive, Google Contacts, or any other Google services.

Data Collected via Microsoft Sign-In (Entra ID / MSAL)

When you sign in using a Microsoft account, Microsoft provides us with:

• Name
• Email address
• Microsoft Account unique identifier (oid / sub)

Data You Provide Directly

• Contract and membership information entered into MemberPortal
• Company name, contact details, and license information
• Support inquiries and communications

Data Collected Automatically

• Application logs and error telemetry (via Azure Application Insights)
• IP address and browser/client type for security and debugging purposes
• Session identifiers

How We Use Your Data

We use the personal data described above solely for the following purposes:

• Authentication and identity verification (to allow you to sign in to MemberPortal)
• Member and contract management within MemberPortal
• Sending service-related notifications (e.g., license expiry reminders)
• Providing technical support and responding to inquiries
• Ensuring security, preventing fraud, and debugging application errors
• Complying with applicable legal obligations

We do not use your data for:

• Advertising or marketing to third parties
• Selling or renting your personal information
• Profiling or automated decision-making that produces legal effects
• Any purpose beyond what is disclosed in this policy

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data on the following legal bases:

• Contract performance: to provide the Services you have requested
• Legitimate interests: for security monitoring, error logging, and service improvement
• Legal obligation: where required by applicable law
• Consent: where you have explicitly provided consent (e.g., optional communications)

Data Storage and Security

Personal data is stored in Microsoft Azure Storage (East Asia region). We implement the following security measures:

• Data in transit is encrypted using TLS 1.2 or higher
• Access is restricted to authorized personnel via Azure Role-Based Access Control (RBAC) and Managed Identity
• Authentication tokens are short-lived and not stored in persistent logs
• We conduct regular security reviews of our Azure infrastructure

We retain personal data for as long as your account is active or as needed to provide the Services. You may request deletion at any time.

Third-Party Sharing and Disclosure

We do not sell, rent, or share your personal data with third parties for their own purposes. Data may be shared only in the following limited circumstances:

• Service providers: Microsoft Azure (cloud infrastructure and authentication) and Google (OAuth sign-in). These providers process data only as instructed by us and are bound by data processing agreements.
• Legal requirements: If required by law, court order, or governmental authority.
• Business transfers: In the event of a merger or acquisition, you will be notified before your data is transferred to a new entity.

Google user data obtained via OAuth is not transferred to any third party except as necessary to provide the core sign-in functionality.

Cookies and Tracking Technologies

MemberPortal uses session cookies strictly necessary for authentication and maintaining your signed-in session. We do not use advertising cookies, tracking pixels, or cross-site tracking technologies. Azure Application Insights may collect anonymized telemetry to help us monitor application performance.

Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (“right to be forgotten”)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdrawal of Consent: Where processing is based on consent, withdraw it at any time

Revoking Google Account Access

You can revoke our application’s access to your Google account at any time by visiting:

https://myaccount.google.com/permissions

Revoking access will sign you out of MemberPortal and prevent future sign-ins via Google until you re-authorize.

Children’s Privacy

Our Services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

International Data Transfers

Our Services are operated from Japan, and data is stored in Microsoft Azure’s East Asia region. If you access our Services from the European Economic Area, your data may be transferred outside the EEA. We take appropriate safeguards to ensure your data is protected in accordance with applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Updated” date at the top of this page and, where required, by sending you a notification via email or within the application.

Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:

Power Office LLC

Email: info@poweroffice-kato.com

Website: https://poweroffice-kato.com