KireiOps, Inc. ("KireiOps", "we", "us") operates kireiops.com and the KireiOps mobile application. This Privacy Policy explains what data we collect, how we use it, and your rights.
1. Information we collect
Account and company data
When you create an account, we collect your name, email address, and password (hashed). When you set up a hotel company, we collect the company name, address, and billing details.
Staff data
Staff profiles include name, email, phone number, role, hotel assignment, and optionally visa/passport document metadata (expiry dates). We do not store passport or visa document images — you manage those files outside KireiOps.
Operational data
This includes cleaning logs, inspection results, task records, attendance clock-in/out timestamps, key check-in/out logs, and payroll calculations. This is the core data that makes KireiOps work.
Usage data
We collect server logs including IP addresses, user agents, and page views. We use this data for security monitoring and to improve the product. We do not sell this data or use it for advertising.
2. How we use your information
We use collected data to: provide and operate the KireiOps service; calculate and display payroll; send email notifications (visa expiry alerts, payroll approvals, task assignments); respond to support requests; and improve the product based on usage patterns.
We do not use your data to train third-party AI models. We do not sell personal data to advertisers or data brokers.
3. How we share your information
We share data only in these cases: with service providers who help us operate KireiOps (hosting, email delivery, payment processing — each bound by data processing agreements); when legally required; in connection with a business transfer where data processing rights transfer; and with your explicit consent.
Within a hotel company account, managers can see staff profiles, logs, and payroll. Staff members can see only their own data. Cross-tenant data access is architecturally prevented.
4. Data storage and retention
KireiOps is hosted on servers in Japan. Data is retained while your account is active. If you close your account, your data is soft-deleted for 30 days (allowing recovery), then permanently purged.
Staff records are soft-deleted when a staff member is removed. You can request permanent deletion of any individual's data at any time via the GDPR export and deletion tool in Account Settings.
5. Your rights
You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; request a machine-readable export of your data; withdraw consent where processing is based on consent.
To exercise these rights, use the data export and deletion tools in Account Settings, or email privacy@kireiops.com. We will respond within 30 days.
6. Cookies
We use only functional cookies required for the service to work (session authentication). We do not use advertising cookies or third-party tracking pixels. See our Cookie Policy for details.
7. Contact
Questions about this policy? Email privacy@kireiops.com or write to: KireiOps, Inc., Osaka, Japan.