Privacy Policy

1. Purposes of processing

We process personal information to review and respond to project or service inquiries, provide company email services, and manage customer relationships.

2. Information processed

• Inquiries: name, company, email, inquiry type and content, consent status (required), and phone number (optional)
• Company email: sender and recipient addresses, display name, subject, body, attachments, and delivery records
• CRM: company name, customer status, industry, company contact details, contact name, organization, title, business contact details, and consultation history
• Internal users: login and company email, name, organization, title, contact details, and access role

3. Retention

• Inquiry content, conversations, and attachments: one year after the inquiry is closed
• CRM customer information: while a transaction or consultation relationship continues; necessity is reviewed annually and data is deleted when no longer needed

Where a law requires a different retention period, the legally required period applies.

4. Third-party disclosure

DARX does not disclose personal information to third parties unless required by law or separately consented to.

5. Processors

• Supabase, Inc.: inquiry and email data hosting and user authentication
• Cloudflare, Inc.: website delivery protection and company email receipt and processing
• Plus Five Five, Inc. (Resend): delivery of company email, verification codes, and notifications

6. Overseas processing

• Plus Five Five, Inc. (Resend) · privacy@resend.com
  Japan (email delivery) and the United States (related data storage) · email address, display name, subject, body, attachments, and delivery records · encrypted transfer when email is sent · retained for one year after inquiry closure or until the processing agreement ends
• Cloudflare, Inc. · privacyquestions@cloudflare.com
  United States · email address, raw email, attachments, and access/security records · encrypted transfer when the website is accessed or email is received · retained for one year after inquiry closure or until the processing agreement ends

You may object through the contact below; doing so may limit email replies, verification, or notifications.

7. Deletion

Personal information is securely and irreversibly deleted without undue delay when its purpose or retention period ends.

8. Your rights

You may request access, correction, deletion, or suspension of processing through the contact below.

9. Security

DARX applies appropriate safeguards including access controls, authorization management, and encryption.

10. Privacy contact

• Team: Privacy Contact
• Email: darxrep@darxconsulting.com
• Online: Contact DARX

11. Effective date

September 8, 2026