RAKKA Privacy Policy
- Version date: September 21, 2026
- Effective date: September 21, 2026
This Privacy Policy explains how personal information is handled when you use the RAKKA Global website at rakka.dev (the “Global Site”), a RAKKA account, device and warranty functions, service requests, after-sales support, and related customer services.
株式会社ハルウエ operates the Global Site and RAKKA account service, is the seller for purchases made through the Global Site, and is responsible for deciding why and how personal information is handled for those services.
上海雷喀科技有限公司 provides commissioned website technology and research and development services. 雷喀（绍兴）科技有限公司 manufactures products and, on behalf of 株式会社ハルウエ, maintains device records and provides warranty, after-sales, and repair services. They handle information about Global Site customers only for their assigned work and documented purposes, except where applicable law gives them a separate obligation. You may contact 株式会社ハルウエ through [email protected] with a privacy question or request.
1. Information we handle and why
We process personal information only for specified purposes and to the extent reasonably necessary for those purposes.
| Activity | Information | Main purposes | Typical basis | Retention approach |
|---|---|---|---|---|
| Site access and security | IP address, request time and path, browser and device information, security and error records | Deliver the site, prevent abuse, investigate incidents, and maintain reliability | Providing the requested service; legitimate security interests; legal obligations | Ordinary operational logs are kept for a limited security and troubleshooting period; incident records may be retained until the matter is resolved |
| Account creation and management | Email address, verification result, display name, protected password data, account status, accepted legal-document versions and time | Create and secure an account, authenticate you, recover access, and record acceptance | Entering into and performing the account agreement; consent where specifically required | While the account exists, then deleted or de-identified unless needed for law, security, an open service, or a dispute |
| Passkeys and two-step verification | Credential identifiers, public-key material, device type, feature status, and recovery codes | Provide security options you choose and prevent unauthorized access | Performing the requested account-security service; legitimate security interests | Until the method is removed or the account is deleted, subject to necessary security records |
| Sessions and access control | Session identifier, sign-in and expiry times, IP address, user agent, and permissions | Keep you signed in, enforce access, and show or revoke sessions | Performing the account service; legitimate security interests | Until expiry or revocation, with limited security records retained as necessary |
| Profile and contact details | Name, email address, phone number where supported, and communication preferences | Maintain your profile, contact you, and support account changes | Performing the requested service; consent where required | While needed for the account or communication, subject to legal exceptions |
| Orders and payments, once online sales through the Global Site open | Products, configurations, quantities, price, order and payment identifiers, amount, currency, payment and refund status, billing and delivery details, and fraud signals returned by the payment provider | Create and perform an order, accept or refund payment, reconcile transactions, prevent fraud, and resolve disputes | Entering into and performing a purchase contract; legal, accounting, tax, and fraud-prevention obligations | For the period required to perform the order, provide after-sales service, keep legally required records, and resolve claims |
| Devices and warranty | Device UUID, serial number, model, configuration, device proof, purchase and fulfillment information, registration and warranty status | Identify a device, link it to an account, show warranty status, prevent fraudulent claims, and provide support | Performing product, warranty, and support services; legitimate fraud-prevention interests | While linked to your account and as needed for warranty, product safety, support, and disputes |
| Service requests and after-sales support | Contact details, subject, description, messages, device and purchase information, quotations and decisions, inspection and repair records, return and shipping details | Provide technical support, warranty, repair, replacement, return, refund, and dispute handling | Taking requested steps and performing service or warranty obligations; legal obligations; consent where required | For the period needed to complete the service, honor warranty and financial duties, and resolve claims |
| Files you upload | File name, type, size, digest, and the image, video, proof of purchase, or other content | Receive, secure, review, and use attachments for the service you request | Performing the requested service; consent where required for particular content | Failed uploads are removed promptly; unused uploads are removed after a limited period; used files follow the related service-request period |
| Email and service communications | Recipient address, message purpose and content, provider identifiers, and delivery status | Send verification, security, account, and service messages and troubleshoot delivery | Performing the requested service; legitimate delivery and security interests; consent where required | Verification codes expire quickly; delivery records are retained only as needed for security and troubleshooting |
We do not need unrelated government identifiers, payment credentials, health information, precise location information, or other sensitive content in ordinary support requests. Please do not submit such information unless we specifically request it and explain why it is necessary.
2. How we obtain information
We receive information directly from you, from your browser or device when you use the services, from a RAKKA device when you initiate device proof, and from service providers involved in authentication, hosting, storage, communications, shipping, or a service you request. We may also receive purchase or warranty evidence from an authorized seller where necessary to verify a claim.
If you provide information about another person, such as a return recipient, you must be authorized to do so and should make this Policy available to them.
3. Cookies and browser storage
We use cookies and browser storage that are necessary to keep you signed in, protect requests, remember site or language choices, preserve an anonymous cart where available, and save an unfinished service-request draft in your browser.
We do not currently use personal information for third-party targeted advertising, and we do not sell personal information. If that practice changes, we will update this Policy and provide any notice or choice required by law before the change applies.
4. Where information is handled
The Global Site's account, authentication, session, and account-setting data are stored outside mainland China. Infrastructure and service providers used by the Global Site may be located in more than one country or region.
RAKKA's device-registration, warranty, service-request, and after-sales systems are operated in mainland China by 雷喀（绍兴）科技有限公司 as a commissioned service provider. 上海雷喀科技有限公司 provides commissioned technical operations and research and development services. When you use those functions, the Global Site sends the necessary account-linking identifier, contact details, device information, request content, and information needed to access attachments through a restricted regional gateway. Global Site account passwords, passkeys, two-step verification secrets, and session cookies are not transferred through that gateway.
Your information may therefore be processed in countries whose laws differ from those where you live. Where applicable law requires a transfer mechanism or other safeguard, we will use the required contractual, organizational, or technical measure. You may contact us for further information about safeguards relevant to your information.
5. When we disclose information
We disclose only the information reasonably necessary for the relevant purpose:
| Recipient | Role and purpose | Information involved |
|---|---|---|
| Hosting, database, content-delivery, and storage providers | Operate the Global Site, databases, file storage, security, and delivery infrastructure on our instructions | Site, account, log, service-request, and file data required for the hosted function |
| Email and communications providers | Deliver verification, security, and service messages | Email address, message content, purpose, and delivery information |
| 上海雷喀科技有限公司 and authorized staff | Provide commissioned website technical operations and research and development | Limited site-operation information, account-linking identifiers, and diagnostic information required for the assigned work |
| 雷喀（绍兴）科技有限公司 and authorized staff | Manufacture products, maintain device and warranty records, and perform requested commissioned after-sales and repair services | Account-linking identifiers, contact details, device, warranty, service-request, shipping, and relevant attachment information |
| Payment and fraud-prevention providers, once online sales through the Global Site open | Process and authenticate payments, refunds, disputes, and fraud checks on behalf of the seller | Customer and billing details, order and amount, payment identifiers, device or network fraud signals, and transaction results |
| Shipping, repair, and service providers | Collect, transport, inspect, repair, replace, or return a product | Recipient and contact details, addresses, shipment identifiers, and necessary service details |
| Professional advisers, authorities, or transaction successors | Comply with law, establish or defend claims, obtain professional advice, or complete a lawful corporate transaction | Information reasonably necessary for that matter, subject to applicable duties and safeguards |
We do not disclose personal information to an independent third party for its own marketing without the notice and choice required by applicable law.
6. Retention
We retain personal information only for as long as reasonably necessary for the purposes described above, including account operation, security, warranty and product-safety obligations, service delivery, tax or accounting requirements where applicable, dispute resolution, and enforcement of agreements.
When information is no longer needed, we delete or de-identify it. If immediate deletion is not possible because of a backup cycle, legal hold, security requirement, or technical limitation, we isolate the information from ordinary use until deletion is possible.
7. Your choices and rights
Depending on the law that applies to you, you may have rights to:
- receive information about how we process personal information;
- access or obtain a copy of personal information;
- correct inaccurate or incomplete information;
- delete information or restrict its processing;
- object to particular processing;
- withdraw consent where processing depends on consent, without affecting earlier lawful processing;
- receive portable information where the law provides that right;
- opt out of a sale, sharing for cross-context behavioral advertising, or targeted advertising if we ever engage in an activity covered by such a right;
- complain to a privacy, data-protection, or consumer authority; and
- receive equal service and pricing when exercising a privacy right, subject to lawful differences.
Some settings can be managed directly in your account. For another request, email [email protected] with the subject “Privacy Request,” identify the account and the right you want to exercise, and provide only the information reasonably needed to verify the request. We may ask for additional verification, especially before disclosing or deleting account information. You may use an authorized representative where applicable law permits it.
Rights may be subject to legal exceptions. For example, we may retain information needed for security, an open warranty or service request, a legal obligation, or the establishment or defense of a claim. If we deny or limit a request, we will explain the reason where required.
8. Security
We use technical and organizational measures appropriate to the nature and risk of the information, including encryption in transit, access controls, credential protection, request authentication, separation of regional account credentials from service systems, file validation, logging, backup, and incident response.
No system is completely secure. You should use a strong unique password where a password is supported, protect verification codes and passkeys, review active sessions, and contact us promptly if you suspect unauthorized access.
If a personal-information incident occurs, we will investigate, limit the harm, and notify affected people and authorities where required by applicable law.
9. Children
The Global Site is not directed to children under 16, and they should not create their own accounts or submit personal information. A parent or legal guardian should handle a purchase, warranty, or support matter for a child. If you believe a child provided information contrary to this Policy, contact us so that we can take appropriate action.
10. Third-party services
A link to a payment provider, a carrier, or another independent service takes you to a service governed by that provider's privacy notice for its independent processing. We are responsible for the information we send or receive and for our selection and instruction of processors as required by law, but we do not control an independent provider's unrelated processing.
11. Changes to this Policy
We may update this Policy when our services, providers, legal obligations, or processing practices change. We will identify the version and effective date and provide additional notice or request renewed agreement where required for a material change.
An updated Policy does not make previously unlawful processing lawful or reduce rights that have already accrued.
12. Contact
- Global Site operator, entity responsible for personal-information handling, and seller: 株式会社ハルウエ
- Corporate number:
5120001260469 - Commissioned technical service provider: 上海雷喀科技有限公司
- Manufacturer and commissioned after-sales service provider: 雷喀（绍兴）科技有限公司
- Privacy contact: RAKKA User Support
- Email:
[email protected]