プライバシーポリシー

制定日:2026年10月9日 改定日:2026年10月11日(Google カレンダーの予定の取り込みと反映を足しました) / English version

masc-harness 運営事務局(以下「運営者」)は、企業向け Web アプリ「masc-harness」(以下「本サービス」)と、このサイトで扱う個人の情報を、次のとおり取り扱います。

1. 対象

このポリシーは、本サービスを使う契約企業のスタッフ(以下「利用者」)の情報と、このサイトを見た方の情報を対象にします。

契約企業が本サービスに登録する顧客・見込み客の情報は、運営者が契約企業から預かって扱うものです。その扱いは、契約企業との契約と、契約企業のプライバシーポリシーに従います。

2. 受け取る情報

このサイト(masc-harness.com)は、運営者が独自に設定した Cookie やアクセス解析を使っていません。サイトは Cloudflare 社のサーバーから配信しており、配信のために閲覧者の IP アドレスなどが Cloudflare 社に届きます。

3. 使う目的

4. Google・Microsoft のカレンダーとの連携

利用者が設定画面で「連携する」を選び、Google または Microsoft の画面で許可したときだけ、次のことを行います。4.2 と 4.3 は、契約企業の管理者がその機能を入れ、さらに利用者本人が設定画面で「取り込みを始める」を押したときだけ動きます(いまは Google だけです)。押す前に、何が社内で見えるかを画面でお知らせします。

4.1 専用のカレンダーへの書き込み(Google・Microsoft)

4.2 Google カレンダーの予定の取り込み

4.3 本サービスで直した・消した予定の Google への反映

4.4 読まないもの・許可の範囲

Google のユーザーデータの扱い:本サービスが Google API から受け取った情報の使用と他のアプリへの転送は、Limited Use(限定使用)の要件を含む Google API Services User Data Policy に従います。

Google・Microsoft から受け取った情報は、上のカレンダー連携の機能(利用者が画面で使う機能)の提供と、その安全のためだけに使います。売ったり、広告に使ったり、AI のモデルの学習に使ったりしません。本サービスの AI の機能(「AI に頼む」や、利用者がつないだ外の AI)にも渡しません。AI から本サービスの予定を読むときは、Google から来た予定(同期をやめたあとのものも)の件名・場所・メモと取り込みの状態を伏せ、「予定あり」として渡します(渡るのは、日時、予定あり・空きの別、公開の設定、状態、予定の番号、本サービスで結んだ相手・会社・商談だけです)。ただし、利用者が 4.2 のとおり了承して作った対応の記録(件名に予定の件名が入ることがあります)は、本サービスの AI の機能で使われ、そのために AI の会社(6)に送られます。この記録も Google から受け取った情報から作ったものとして、上の Limited Use の決まりの範囲で扱います。本サービスを動かすためのサーバー(Cloudflare 社)に保存すること、4.2 のとおり同じ契約企業のスタッフが本サービスで見ること、利用者が了承して作った対応の記録を AI の機能のために AI の会社(6)に送ることを除き、第三者に渡しません。人が読むのは、利用者が読む対象を特定してはっきり同意した場合、安全上の問題(不正な使い方など)を調べるのに必要な場合、法令を守るために必要な場合だけです。

契約企業の管理者は、設定画面で、各スタッフの連携の状態(連携した Google・Microsoft アカウントのメールアドレス、つながっているか、最後に同期した時刻など)を見られます。取り込んだ予定の見え方は 4.2 のとおりです。

5. 保存と安全管理

6. 第三者への提供

法令で認められた場合を除き、本人の同意なく第三者に渡しません。Google から受け取った情報は、さらに 4 の Limited Use の決まりの範囲でだけ扱います。本サービスを動かすために、Cloudflare 社(サーバー)と、利用者が連携を選んだ場合の Google 社・Microsoft 社(カレンダー)を使います。本サービスの AI の機能(要約・次の一手の提案・メールの下書き・「AI に頼む」など)には、Anthropic 社の API(契約企業が自社の鍵を設定したときは、その鍵)と Cloudflare 社の Workers AI を使い、AI の処理に要る内容だけを送ります。どちらも、送った内容をモデルの学習に使わないサービスです。受信メールへの返信案を作る常駐の AI(運営者のサーバーで動かします)には、Google から来た予定から作った記録がある相手(その記録の相手・商談の相手、相手のいない会社の記録ではその会社の相手)について、返信案を作るための情報(受信メールを含みます)を渡しません。

7. 連携を外すとき・情報を消すとき

8. 開示・訂正・削除のご依頼とお問い合わせ

ご自身の情報の開示・訂正・利用停止・削除のご依頼、このポリシーへのお問い合わせは、下記までご連絡ください。ご本人であることを確かめたうえで、すみやかに対応します。

運営
masc-harness 運営事務局 菅 泰志
所在地
北海道札幌市豊平区
メール
nanc.taishikan@gmail.com

9. 改定

このポリシーを変えるときは、このページで知らせます。大きな変更は、本サービスの画面でもお知らせします。

Privacy Policy (English)

Effective: October 9, 2026 — Updated: October 11, 2026 (added importing Google Calendar events and writing changes back)

The masc-harness office (“we”) operates masc-harness, a business web application used only by staff of contracted companies (“users”). This policy explains how we handle personal information. Customer and lead data that a contracted company enters into masc-harness is processed on behalf of that company under its contract and its own privacy policy.

Information we collect

  • User account information: name, email address, role, and sign-in and activity logs.
  • Calendar sync (only when a user connects): the email address and account ID of the connected Google or Microsoft account, OAuth tokens, granted scopes, the IDs of the calendar and events created by masc-harness, the times of the events written and their mapping to masc-harness appointments, and sync status (processing times and errors).
  • Imported events (only when the contracted company's administrator turns importing on and the user connects Google; see “Importing Google Calendar events”): for events in the user's primary Google Calendar, the title (up to 200 characters), the location (with URLs removed), date and time (or all-day), free/busy/out-of-office status, public/private setting, whether the user is the organizer, whether there are other attendees (yes/no only), the event ID and version (etag), and keyed hashes used to detect changes (not the text itself).
  • Activity records: connecting, reconnecting and disconnecting (for security).

This website (masc-harness.com) does not set its own cookies or use analytics. It is served by Cloudflare, which receives visitors' IP addresses and similar data to deliver the pages.

How we use information

  • To provide masc-harness and verify signed-in users.
  • To write a user's appointments to Google or Microsoft calendars when the user chooses to connect.
  • When the user chooses to connect, to import the user's Google Calendar events into the user's masc-harness calendar so that schedules can be shared within the company, and to write the user's own edits and deletions of those events in masc-harness back to the user's Google Calendar.
  • To prevent misuse and investigate failures.
  • To respond to inquiries.

Google and Microsoft calendar sync

All of the following happens only when a user chooses to connect in the settings screen and grants permission on the Google or Microsoft screen. Importing and writing back (the second and third parts) work only when the contracted company's administrator has turned them on and the user has pressed “Start importing” in the settings screen, and currently only for Google. Before pressing it, the screen explains what will be visible to other staff.

Dedicated calendar (Google and Microsoft). masc-harness creates one secondary calendar named “masc-harness” in the user's account and writes the user's assigned appointments into it. Each event is titled 予定あり (Japanese for “Busy”); the original title, location, notes and attendee names are not written. What is written: date and time (or all-day), the 予定あり title, a fixed notice with a link to that day in masc-harness, the free/busy/out-of-office and private flags, and an identifier used for syncing. It covers appointments from 14 days before to 120 days after today by default (adjustable by an administrator). Events that drop out of the range on the past side are left as they are; if the future side is shortened or an appointment is moved beyond it, events outside it are deleted. When an appointment changes or is removed, masc-harness updates or deletes only the events it created. Events imported from Google (below) are not written to this calendar.

Importing Google Calendar events. masc-harness reads the events in the user's primary Google Calendar and imports those from 14 days before to 120 days after today (by default) into the user's masc-harness calendar, keeping them up to date when they are changed or deleted in Google. On the first sync and when a sync has to be rebuilt, it reads the primary calendar's events regardless of date to track changes (only events within the range are stored). The fields received from Google are limited to the title, location, date and time, event type and status, free/busy/out-of-office, public/private setting, whether the user is the organizer, for each attendee whether it is the user and the response status (including other attendees' responses), the event ID and version, and the recurrence rule. Of the attendee information, only the user's own response and whether there are other attendees are used and stored. Descriptions, attendees' email addresses and names, attachments, reminders and conference details are excluded already when requesting the data from Google. It stores the title (up to 200 characters, as is), the location (with URLs starting with http, https or www and meeting addresses such as Google Meet, Zoom or Teams removed), date and time, free/busy/out-of-office status and the public/private setting. Birthdays, working-location and focus-time events, and events the user has declined are not imported. By default, other staff of the same contracted company see only that the user is busy and when; the title and location are visible only to the user (if the contracted company's administrator chooses in the settings to share the details within the company, the title, location and time are visible to its staff). Events marked private in Google are visible only to the user; other staff see only “Busy”. The user can also make any event private in masc-harness. Newly imported events stay visible only to the user until they have been verified. Users can add notes, links and activity records to imported events; these stay in masc-harness and are not written to Google. Before a user creates an activity record from an imported event, the screen asks them to confirm that the record will be shared within the company and used by masc-harness's AI features (summaries, next-step suggestions, email drafts); the record's title starts from the event title and can be edited. When the same field of an event is changed both in Google and in masc-harness, masc-harness keeps its own value and keeps the Google value for 90 days in a record visible only to the user.

Writing changes back to Google. Only for imported events that the user organizes and that have no other attendees, when the user edits the title, location, time, free/busy status or private setting in masc-harness, masc-harness writes those fields to that event; when the user deletes the event in masc-harness, it is also deleted from Google (the confirmation screen says so). Only the edited fields are written; descriptions, attendees, reminders and conference details are not changed. The visibility setting is only ever changed toward private, never from private to public. masc-harness does not write to events the user was invited to, events with other attendees, or special event types such as out-of-office, and does not delete an event from Google if it was changed in Google after the user deleted it in masc-harness. Fields the user edited in masc-harness while the administrator had this feature turned off are written to Google once it is turned on; events deleted in masc-harness while it was off are not deleted from Google.

What we do not read, and scopes. masc-harness does not read any calendar other than the user's primary calendar and the calendar it created, and does not read mail or contacts. On Microsoft, to find the calendar and events it created, it retrieves only the IDs of items carrying its own identifier (importing from Microsoft is not offered at present). Google scopes: openid, userinfo.email, calendar.app.created and calendar.events; calendar.events is used only for importing and writing back as described above, and only for events in the primary calendar. Microsoft permissions: openid, email, offline_access and Calendars.ReadWrite; although Calendars.ReadWrite covers all of the user's calendars, masc-harness uses it only for the calendar it created and the events in it. To check that the integration works, an administrator may run a diagnostic that creates a temporary calendar in the administrator's own account, writes test events to it and deletes it right away; the primary calendar is then read only to count event types, and no event content is stored.

masc-harness's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data received from Google or Microsoft is used only to provide the user-facing calendar features described above and to keep them secure. We do not sell it, use it for advertising, or use it to train AI models. We do not pass it to the AI features of masc-harness (the in-app assistant or external AI tools a user connects): when they read appointments, the title, location, notes and import status of events that came from Google (including ones no longer synced) are withheld and the events are shown only as “Busy” (only the time, free/busy status, visibility setting, state, event ID and the contacts, companies or deals linked in masc-harness remain). Activity records that a user chose to create from imported events after the confirmation described above (their titles may contain the event title) are used by the AI features and are sent for that purpose to AI providers (see Sharing); these records are treated as derived from Google data and remain subject to the Limited Use requirements. We do not transfer it to third parties, other than storing it on the servers that run the service (Cloudflare), showing imported events to staff of the same company as described above, and sending activity records that the user chose to create to AI providers for the AI features. Humans do not read it unless the user has given explicit consent for specific data, it is necessary for security purposes (such as investigating abuse), or it is necessary to comply with applicable law.

Administrators of the contracted company can see each staff member's connection status in the settings screen (the connected Google or Microsoft email address, whether it is connected, and the last sync time). Visibility of imported events is as described above.

Storage and security

Data is stored on Cloudflare servers, which may be located outside Japan. OAuth tokens are encrypted at rest. Values used to detect changes are stored as keyed hashes, not as copies of the text. Access to masc-harness is limited to staff authorized by the contracted company, with per-role access controls. We may keep backups for recovery; tokens remain encrypted in them.

Sharing

We do not share personal information with third parties without consent, except as permitted by law. We use Cloudflare (hosting) and, when a user connects, Google and Microsoft (calendar). For the AI features (summaries, next-step suggestions, email drafts and the in-app assistant) we use the Anthropic API (or the contracted company's own API key if it has set one) and Cloudflare Workers AI, sending only what the processing needs; neither uses the content to train models. For contacts that have an activity record created from an event that came from Google (the record's contact, the contact of its deal, or, for a company-only record, the contacts of that company), no information for drafting replies (including their inbound mail) is given to the resident AI that drafts replies to inbound mail (which runs on our own server). Data received from Google is further limited by the Limited Use requirements above.

Disconnecting and deletion

Users can disconnect at any time from the settings screen. When disconnection completes, we delete the connected account information (email address and status), the tokens and the mapping of events in the dedicated calendar (imported events are handled as described below). If external clean-up temporarily fails, it is retried automatically and the tokens are kept only until it finishes. For Google we also attempt to revoke the grant; you can always revoke it yourself as described below. The user chooses whether to keep or remove the “masc-harness” calendar: removing it also deletes any events the user added to it; a kept calendar is no longer updated or cleaned up by masc-harness and is managed by the user. If a calendar chosen for removal remains because of an external error, please delete it in Google Calendar or Outlook. When disconnecting, the user chooses whether to remove or keep imported events (remove by default). Removed events are deleted in masc-harness (restorable for 30 days, then purged); events the user edited in masc-harness or added notes or records to are always kept, visible only to the user and no longer synced. For kept events, the external identifiers (external account ID, calendar and event IDs, and keyed hashes) are retained so that they can be matched again if the user reconnects; to avoid re-importing events deleted in Google or in masc-harness, the external event IDs are kept as markers (no content). Records of Google values from conflicting edits are deleted after 90 days (even after disconnecting). Sync records (IDs and keyed hashes) are deleted after 30 days for settled write-backs and after 180 days for deleted-event records (kept while a matching event remains); records of write-backs whose result is unknown are kept while the event remains in masc-harness (including events kept after disconnecting, so they can be matched on reconnection). Contact us to have any of these deleted sooner. Activity records of connecting and disconnecting and records of data-erasure processing are kept for security and verification until the contract with the company ends. Temporary sign-in data is deleted by a scheduled job one day after it expires. Revoking access only on the Google or Microsoft side does not delete the data held by masc-harness (the connection shows as needing sign-in again); disconnect in masc-harness or contact us to delete it. Access can also be revoked from Google Account permissions or Microsoft account app permissions (work accounts: My Apps). To request deletion of your data, contact us at the address below; after verifying your identity we delete it promptly (except the activity records above). Copies in recovery backups are removed as the backups are replaced.

Contact

masc-harness office (Taishi Kan), Sapporo, Hokkaido, Japan — nanc.taishikan@gmail.com

We will post any changes to this policy on this page.