1. Who we are
One-Pochi is operated by One-Pochi ("One-Pochi", "we", "us", or "our"). You can contact us at support@onepochi.com. This Privacy Policy explains how One-Pochi accesses, uses, stores, shares, and deletes data in connection with the One-Pochi CRM service.
2. Google user data
One-Pochi is built on Google Apps Script and Google Sheets. After you grant permissions through Google's OAuth consent screen, the app runs in connection with your Google account. We request the permissions needed to provide the product.
- Google Sheets access to create, read, and update the One-Pochi workspace spreadsheet and the CRM records entered by your team.
- Email address access to identify your account, workspace, role, team membership, and license status.
- External request access so the Apps Script app can contact required services such as Stripe for billing status and Google Gemini for optional AI features.
How Google user data is used
Google user data is used to provide user-facing One-Pochi features such as workspace setup, contacts, pipelines, interaction records, analytics, imports, team roles, license checks, and support. We do not use Google user data for advertising, retargeting, data brokerage, credit decisions, or sale to third parties.
How Google user data is stored
- CRM records are stored in a Google Sheet owned by you or your workspace owner.
- Workspace configuration, such as workspace IDs and team membership, may be stored in Google Apps Script properties so the app can connect users to the right workspace.
- License status, such as a valid or invalid status associated with an email address, may be cached briefly to improve performance.
- Technical logs may be retained in Google logging systems to diagnose errors, abuse, or security issues.
How Google user data is shared
We share Google user data only as needed to provide, secure, support, or comply with legal obligations related to the service. Required service providers include Google, which hosts Apps Script, Sheets, and Gemini API services, and Stripe, which handles payment processing and billing status. We do not sell Google user data or share it with advertising networks or data brokers.
3. AI features
One-Pochi includes optional AI-assisted workflows, such as business card scanning and inbox parsing. When you choose to use these features, the specific content you submit, such as a business card image or pasted email text, may be sent to the Google Gemini API so contact details can be extracted. Extracted results are shown for review and then saved to your workspace if you choose to save them.
We do not use submitted AI content or extracted CRM data to train One-Pochi models. Google's handling of Gemini API requests is governed by Google's applicable Gemini API terms and policies, including the Gemini API Additional Terms of Service.
4. Other data we process
- Billing data. Payments are processed by Stripe. We may use your email address and subscription status to manage license access. Card details are handled by Stripe, not One-Pochi. See the Stripe Privacy Policy.
- Support data. If you contact us, we process the information you send so we can respond, troubleshoot, and improve the service.
- Technical data. Error messages, timestamps, account identifiers, and diagnostic details may be processed to maintain security and reliability.
- Browser storage. The app may store preferences such as language, theme, and setup status in local browser storage. One-Pochi does not use advertising cookies inside the app.
5. Retention and deletion
- CRM records. Your CRM records remain in the Google Sheet controlled by you or your workspace owner. You can delete rows, copy the sheet, export it, or delete the spreadsheet directly in Google Drive.
- Google access. You can revoke One-Pochi access from your Google Account at myaccount.google.com/permissions.
- Workspace configuration and license cache. We retain these only as long as needed to provide the service, support accounts, or meet legal obligations.
- Logs. Technical logs are retained for a limited period for reliability, security, and troubleshooting, then deleted or overwritten according to the logging system's retention settings.
- Deletion requests. You may request deletion of account configuration, support records, and other data One-Pochi controls by emailing support@onepochi.com. Some billing or legal records may need to be retained where required by law.
6. Security
One-Pochi uses Google OAuth for authorization and does not receive your Google password. Connections are made over HTTPS. Secrets such as API keys are stored in protected Google Apps Script properties or other restricted systems, not in the customer spreadsheet. Access inside a workspace is managed through One-Pochi roles and the underlying Google Sheet sharing settings controlled by the workspace owner.
7. International processing
One-Pochi is operated from Japan by a U.S. operator. Google and Stripe may process data on global infrastructure. Where data crosses borders, it is handled under the applicable safeguards and terms of those service providers.
8. Children
One-Pochi is a business tool and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to One-Pochi, contact us so we can delete it.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal data. Because CRM records live in your Google Sheet, access and export are available directly through Google Sheets and Google Drive. For data controlled by One-Pochi, email support@onepochi.com.
10. Changes to this policy
We may update this Privacy Policy as One-Pochi changes. If changes are material, we will update the effective date and provide notice through email, in-app notice, or the website.
11. Contact
One-Pochi
support@onepochi.com
Kansas, USA