Privacy Policy

1. Information We Collect

Depending on how you interact with us, we may collect:

• Website enquiry data submitted through our contact form (name, email address, message content).
• Customer, order, and invoice data (name, email address, company/organization, project message, selected services, payment method, order status).
• Payment-related metadata processed by our payment providers, Stripe and PayPal (see Section 3). We do not collect or store full card numbers.
• Project-related materials a client provides for a specific engagement, which may include traffic videos, and vehicle, sensor, GPS, or other mobility-related data.
• Personal data that may be contained within client-provided materials, including video content that may incidentally include faces or vehicle number plates.

2. How We Use Information

We use information only for the purposes for which it was provided, including:

• Responding to enquiries and preparing project proposals.
• Providing the consulting, analysis, research, concept design, documentation, pilot support, or prototype-development services requested.
• Processing orders and payments, and maintaining order and invoice records.
• Meeting legal, tax, and accounting obligations.
• Investigating and resolving disputes or service issues.

We do not sell personal information, and we do not use client project data for any purpose outside the agreed engagement.

3. Payment Processing

Card payments (including Google Pay, where available through your browser or device) are processed by Stripe. PayPal payments, once enabled, are processed by PayPal. When you pay by card, Google Pay, or PayPal, your payment details are submitted directly to that provider under its own privacy policy and terms — we do not receive or store your full card number. We retain limited payment metadata, such as payment status, transaction reference, and order total, to maintain accurate order records.

Bank transfer and invoice payments are handled directly between us and the client, using the banking or invoicing details provided separately.

4. Hosting and Service Providers

Our website is hosted on Vercel, and order and enquiry data is stored in a Supabase (PostgreSQL) database. These providers process data on our behalf, solely to provide their hosting/infrastructure service to us.

5. Client-Provided Project Data

Some engagements involve a client providing traffic videos, or vehicle, sensor, GPS, or other mobility-related data for analysis. This data may incidentally include personal data, such as faces or vehicle number plates captured in video footage.

The client is solely responsible for having the appropriate legal authority, notices, consents, and permissions in place before providing such data to us — including any required under laws protecting individuals who may be identifiable in the material. We use client-provided project data only for the agreed service or project, and retain it only as reasonably necessary for delivery of that engagement, legal obligations, security, and dispute resolution.

6. Sharing and Disclosure

Access to personal information and client project data is limited to authorised personnel and the service providers who process it on our behalf (Stripe, PayPal, Supabase, and Vercel). We otherwise disclose information only where required by law, regulation, or valid legal process.

7. International Data Transfers

Because we use international service providers — including Stripe and PayPal for payments, and cloud hosting providers — information may be processed in countries other than Japan as part of those providers delivering their services to us.

8. Data Retention

We retain personal information and client project data only as reasonably necessary for the purposes described in this policy — service delivery, legal obligations, security, and dispute resolution — and delete or stop using it once it is no longer needed for those purposes.

9. Security

We take reasonable steps to protect information, including restricting access to systems and data to authorised personnel and service providers, and relying on Stripe and PayPal — rather than our own systems — to handle full card and payment-account details. We do not claim a specific encryption standard, anonymisation process, or security certification. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights and Privacy Requests

You may request access to, correction of, or deletion of your personal information, subject to applicable law and any legal or contractual retention requirements. To make a request, contact us at info@autonomax.site.

11. Children's Data

Our website and services are directed at businesses and professionals and are not intended for children. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.