Prosefly

Privacy Policy

Effective:

Prosefly is operated by Hsiaoming Ltd. (暁明株式会社), a company based in Japan. This policy explains how we handle personal information when you visit prosefly.com, use the Prosefly application, contact us, or access media delivered through Prosefly.

Information we collect

  • Account and security information: your name, email address, profile image, language preference, password authentication records, connected sign-in accounts, sessions, and security settings. If you enable two-factor authentication or passkeys, we process the records needed to provide those features.
  • Organization information: organization names, memberships, roles, invitations, settings, and activity records. Other authorized members can see information needed for collaboration and administration.
  • Content and repository information: connected GitHub accounts and installations, authorized repository metadata and files, Markdown and MDX content, frontmatter, navigation, drafts, revisions, publication history, and uploaded media. We process authorization tokens to access repositories you connect.
  • Billing information: the selected plan, billing region, customer and transaction identifiers, subscription status, invoices, and payment or refund records. Payments are handled through Stripe; payment details submitted to its checkout are processed by Stripe.
  • Technical information: IP addresses, browser and device information, request timestamps, authentication events, errors, and information needed to prevent abuse and operate the service.
  • Communications: information you send when requesting support, reporting a problem, or exercising a privacy right.

Please do not upload sensitive personal information unless you have a lawful reason and the service is appropriate for that use. You are responsible for information about other people that you put in your workspace or publish.

Why we use information

We use this information to create and secure accounts; manage organizations and permissions; scan, edit, synchronize, and publish content; store and deliver media; process billing; provide support; send verification, security, billing, and service messages; investigate abuse; maintain reliability; and comply with legal obligations.

We process information as necessary to provide the service you request, protect the service and its users, and meet legal requirements. Where applicable law requires consent for a particular use, we will obtain it. Optional communications can be declined through the available controls; essential account and service messages may still be sent.

Your content, drafts, and Git

Published text belongs in your Git repository. Saving a draft does not create a Git commit. Prosefly keeps working drafts and collaboration data in the workspace, and accesses connected repository files to provide editing and synchronization. Publishing writes the selected changes to your repository as a commit or pull request.

Repository visibility and the website you build determine who can see published files. Your organization roles determine who can access workspace content. Public repositories, published websites, and Git history may expose information beyond Prosefly, and deleting a workspace does not remove files or history from GitHub.

Media library uploads are stored separately and can be delivered through public URLs. Images added through a repository’s Public files workflow can become repository files when published. Do not treat a media URL as a private access control mechanism. Copies may remain in third-party caches or on a website you operate.

Cookies and browser storage

The application uses cookies and related storage for authentication, security, and preferences. The marketing website stores your color-mode preference locally and does not add advertising or analytics scripts. Hosting and security providers still process network requests and associated technical information.

You can clear browser storage or block cookies through browser settings. Doing so may reset preferences or prevent sign-in and other essential functionality.

Audio and video delivery statistics

When someone requests hosted audio or video, our delivery service processes request information to deliver the file and produce usage reports. We use Google Analytics through server-side events for delivery starts, approximate country information, media identifiers, organization identifiers, and classified client or device types. Session identifiers are hashed where available; otherwise random client identifiers are used.

The events we submit do not contain raw IP addresses, raw user-agent or referrer strings, full media URLs, or raw playback-session values. The delivery infrastructure still processes network information to serve requests. Statistics are estimates of delivery activity, not a guarantee of unique listeners or completed playback. Images do not use this delivery analytics feature.

If you distribute media to your own audience, you are responsible for providing an appropriate privacy notice and obtaining any consent required for your use.

Who receives information

We disclose information to authorized organization members according to their roles, and use service providers where needed to operate Prosefly:

We may disclose information when required by law, to respond to valid legal requests, or as reasonably necessary to protect rights, safety, and security. If our business is reorganized or transferred, information may transfer with it, subject to applicable safeguards and notification requirements. We do not sell personal information or share it for cross-context behavioral advertising.

International processing

We are based in Japan and use providers that operate internationally. Information may be processed outside your country, including in Japan and countries where our providers operate. Applicable legal protections may differ between locations. We use contractual and other safeguards where required by law; this policy does not promise that all information stays in one country.

Retention and deletion

We retain information for as long as needed for the purposes described here, taking account of the account relationship, security, support, accounting requirements, and legal obligations. Different records can have different retention periods. Backups, caches, and provider systems may not be cleared immediately when a deletion request is completed.

You can manage connected accounts, repository authorization, workspace content, and security settings through the available controls. Account owners must transfer or delete organizations they own before deleting their account. Organization deletion removes its workspace data and schedules hosted-media cleanup; repository files remain in GitHub. We may retain limited billing, security, legal, and organization-retirement records where necessary. Subscription cancellation or expiry is not an instruction to delete your content.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Withdrawal does not affect processing already lawfully carried out. We may verify your identity and need to retain certain records or decline requests where the law permits. You may also complain to the relevant data-protection authority.

For content controlled by an organization, contact its owner or administrator first. We can assist with requests concerning information we handle on that organization’s behalf. Removing data from Prosefly does not automatically remove copies from a repository, website, or third-party service.

Security and eligibility

We use access controls, protected connections, and safeguards for credentials and repository authorization. No service can guarantee absolute security. Keep your account credentials secure, review organization access, and contact us if you suspect unauthorized use.

Prosefly is intended for people who can lawfully enter into its service agreement. It is not directed at children. If you believe a child has supplied personal information without the required authorization, contact us so we can investigate.

Changes and contact

We may update this policy when the service or legal requirements change. The effective date appears above. We will provide additional notice of material changes where required.

For privacy questions or requests, contact Hsiaoming Ltd. (暁明株式会社) at [email protected]. You may also write to our registered address: 〒343-0828 日本埼玉県越谷市レイクタウン6-35-74.

Related policies: Terms of Service and Refund Policy.