Data rights

1. Rights under Japanese law

For your Clavis account (data we handle as the platform operator), you may request the following under Japan's Act on the Protection of Personal Information (APPI): disclosure of retained personal data, including the records we keep of provision to third parties; correction, addition, or deletion; and cessation of use, erasure, or cessation of third-party provision.

When signed in, you can delete the account from the account screen. A copy of your data and a file export are not on that screen. Request them at [email protected]. That is not an undertaking that the GDPR right to data portability applies by default.

If EU or UK data protection law applies to you, you may also request restriction, objection, and data portability to the extent that law requires. Customer personal data of people in the EU or the UK is handled under the Data Processing Agreement, including its international transfer module.

Data that a connected application has already received is handled by that application's operator. This page covers your Clavis account.

2. In-product requests

Sign in with a passkey at id.clavis.nexus. From the account screen, open “Delete account” to delete the account. You cannot do that while signed in on the developers screen.

On the account screen you can correct “Contact email” and the “Device note” on a passkey. The passkey display name is set when you register and cannot be changed there. You cannot change the account ID shown on the account screen, or rewrite login history. For any other correction, write to [email protected].

Deletion removes the account, the passkey public information we hold (registration data that leaves your device), the contact email, sessions, consent records for connected applications, and your organisation membership. An entry on an organisation ledger does not name this account. Deleting the account leaves that entry in place. The application that submitted it holds what would connect the entry to a person. Audit events are deleted after 90 days. Procedural records of opening the account, accepting updated terms, and purchase remain for 730 days after deletion. Consent records given before you purchase a paid feature remain as the record of provision to a third party (see the Privacy Notice, retention). The organisation that runs a connected application keeps its own record of what you agreed to there; that record follows the organisation's instructions. Where the law requires us to keep something, we keep it for that period.

If you are the only Owner of an organisation, give that role to someone else before you delete the account. This page does not cover erasure of other members' data or of the organisation as a whole.

Deletion from the account screen completes while you are signed in, unless a short-term rate limit applies.

3. Requests by email

If you cannot sign in, or if you need a copy of your data, a file export, or a correction the account screen does not offer, write to [email protected] with enough information to identify the account, such as the account ID shown on the account screen or the passkey display name you set at registration.

A matching contact email is not, on its own, proof of identity. We may ask you to finish the request while signed in with your passkey.

A request may also be made by an agent: a legal representative, or a person you have authorised. We will ask for a document showing that authority (such as a letter of authorisation), and we confirm the link to your account by your signing in with your passkey or by another method we specify.

4. Fees and timing

There is no fee for these requests.

Deletion from the account screen completes when you are signed in, unless a short-term rate limit applies. A copy of your data and a file export are handled by email, as in section 3.

Email requests are handled without undue delay after we have received them and verified identity. Our working aim is five Japanese business days. That is an aim, not a service credit.

5. Complaints

If you are dissatisfied with our handling, you may complain to the Personal Information Protection Commission (PPC) at ppc.go.jp or another competent supervisory authority.