Privacy Policy for Sony account (XYN account)

Last Updated: 2026-03

This Privacy Policy explains how we collect, use and/or store your personal data in connection with your Sony account (XYN account) (“Account”). It also describes your data protection rights, including your right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in Section 8. Privacy Rights below.

By “we” “us” or “our”, we mean Sony Corporation (1-7-1, Konan, Minato-ku, Tokyo 108-0075, Japan) (“Sony”), which is a Sony group company. For the purposes of applicable data protection laws and regulations where the concepts of "controller" and “processor” are defined, Sony is the "controller" of the Collected Data described in this Privacy Policy.

In order to use certain Sony applications or application features, you will need to maintain this Account.

This privacy policy only applies to this Account service and is in addition to any other privacy policy that may apply to your interactions with the Sony group companies or any third party, regarding their products, software or services.

In this Privacy Policy, when we say:

“Sony group companies”, we mean Sony Group Corporation or the ultimate parent company of Sony and any company or legal entity that is controlled by the ultimate parent company of Sony.

SUMMARY OF KEY POINTS

1. What personal data does Sony collect in connection with the Account

We collect following information in addition to information about your usage of the website of the Account (access status, etc.), some of which may be considered personal information in certain jurisdictions (collectively, the “Collected Data”).

(A) Basic information

When you create the Account, Sony will collect the following:

Please be aware that when you have another Sony account(s) for other Sony group companies’ products and services and you use the same sign-in ID (email address) and password to sign in to this Account, the accounts will be linked automatically and you will be able to sign in to this Account with the same sign-in ID (email address) and password. For more information about linking accounts, please go: https://acm.account.sony.com/linking-account

For password management/reset and authentication, you can also register a security question and answer and cellphone number at the Account security setting page. This Collected Data is not used for any other purpose.

(B) Information related to authentication/authorization

When you use the Account, Sony will use cookies, tokens, and other technologies to collect credentials (information issued to identify customers, such as a combination of random alphanumeric characters) necessary for authentication and authorization with this Account.

2. How Sony uses Collected Data

Providing services

Sony processes Collected Data in order to perform its contract with you to:

3. Who else has access to Collected Data?

Sony will make Collected Data available to third party as below:

Sony group companies

If you contact your Sony group company in relation to queries or for repair or return requests of Sony group companies’products, we also may need to share Collected Data with that Sony group company in connection with your request.

For the purposes stipulated in section 2(B) Email Marketing, Sony may also make Collected data available to Sony Electronics Inc or Sony of Canada Ltd.

Third-party service providers

Sony may use Sony group companies and third party service providers to process the Collected Data. Our service providers include customer support vendors, IT vendors and data hosting vendors, including Amazon Web Services, Inc., which provides data back-up services to us and is located in the US. The service providers are engaged for the purposes of pursuing the activities outlined in this Privacy Policy on Sony’s behalf, acting as processors of Sony.

Business transfer

In the event that we sell or transfer a portion or all of our business, Collected Data may be transferred by us to the purchasing or acquiring entity as part of the transaction. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, we will delete the Collected Data as soon as reasonably practicable after such transaction.

Compliance and enforcement

We will retain, use and/or disclose any of Collected Data as required or permitted by law, regulation or order, including to the police or other appropriate authorities, to investigate complaints made by or against you, or to protect or defend ourselves, Sony group companies or third parties, against illegal, criminal or harmful activities.

4. Data Retention, Managing Collected Data

We will continue to retain Collected Data for 6 months after you delete the Account unless local law tells us to keep it for longer. Please note that we may be required to retain certain information by law.

Where Sony no longer requires the Collected Data, it will be destroyed or de-identified in line with internal Sony information security policies. When we say de-identified, we mean that we will remove information that could be used to identify you from the Collected Data.

5. International Transfer of Collected Data

Collected Data will be processed, stored and transferred for the purposes outlined in this Privacy Policy to various jurisdictions outside your jurisdiction of residence, including Japan and the US. Collected Data will be processed by staff operating outside your jurisdiction who work for us or for one of our service providers and may be seen by such staff in those countries.

By providing us with the Collected Data, you consent to the transfer, processing and storage of your information in jurisdictions in which the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen. Further, courts, law enforcement, and other authorities in countries/regions outside your residence may be entitled to access Collected Data upon its transfer. We have taken reasonable steps to ensure that any transfers of Collected Data meet the requirement of applicable data protection legislation and that your personal information will not be used for purposes not relevant to the purpose for which it was collected or communicated to service providers without your consent except when required or permitted by law.

6. Security

Sony undertakes reasonable security measures designed to protect against the loss, misuse or alteration of Collected Data. We take information security very seriously but we cannot guarantee or warrant the absolute security of any information that we store on our systems or that is stored on our third party contractors’ systems.

7. Policy Regarding Children/Minors

The Service is intended for a general audience; the Service is not directed to and do not knowingly collect personal information from users younger than the age of 18. If you are a parent or guardian and are concerned that your child/minor has provided SONY with personal information (as defined by applicable law), you should contact us as indicated below.

8. Privacy Rights

In some jurisdictions, you have certain rights with respect to the Collected Data that SONY holds about you. These may include the right to request access to the Collected Data and/or you may request that SONY corrects, amends, deletes, erases, destroys, blocks/restrict processing and/or use of such Collected Data. You may also object to SONY’s processing of Collected Data. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. If you would like to exercise any rights available to you, please contact us as described in “Section 10. Contact Us”.

(i) Notice to Residents of U.S. States (including but not limited to: VA, CO, CT, MT, IA, DE, UT, TN, TX and OR; but excluding California)

We set forth in our Privacy Policy and Table 1 the categories of personal data we process, the purpose for processing personal data, the categories of personal data shared, and the categories of third parties with whom personal data is shared.

Consumers in certain states with comprehensive privacy laws may have the following rights:

If you would like to submit a request to exercise one of the rights listed above, you can do so by completing this form: Data Requests

(ii) Notice to California Residents: California Privacy Notice

This California Privacy Notice is effective as of March 23, 2026.

This California Privacy Notice supplements our Privacy Policy and sets forth the disclosures and rights for California Consumers regarding their personal information, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and any implementing regulations adopted thereunder (“CPRA”). Terms (including defined capitalized terms) used in this California Privacy Notice have the same meanings given in the CPRA, unless otherwise defined.

California Consumer Rights. Subject to certain exceptions, as a California consumer, you may have the following rights regarding your Personal Information:

Agents. If you are an authorized representative submitting a request on a consumer’s behalf, please complete the applicable request per the instructions below. We will follow up to request a signed, written permission signed by the individual who is the subject of the request authorizing you to make the request on their behalf. The written permission must state your full legal name, the full legal name of the individual who is the subject of the request, and a clear description of the permission granted. Alternatively, you may submit a copy of a power of attorney under applicable state law. In either case, please also indicate in your email the nature of your request. The consumer’s identity, in addition to your own, will need to be independently verified in order for us to be able to fulfill your request. We may also ask the consumer to directly confirm with us that they provided you permission to submit the request. Please keep in mind that if we do not receive adequate proof that you are authorized to act on the consumer’s behalf, we may deny the request.

Verifying Requests. In your request, you must provide enough information to allow us to verify you are the person about whom we collected Personal Information, or their authorized representative. You must also describe your request with enough detail so that we can understand, evaluate and respond to it. We will only use the information you provide in a request to verify your identity.

When you exercise your Right to Know, Right to Delete, and/or Right to Correct, we may ask that you provide us with additional information in order to verify your identity and fulfill your request. If we are unable to verify your identity, we will not be able to process the request.

Exercising Your Rights.

Right to Know; Right to Delete; Right to Correct.

If you are a California Consumer and would like to exercise your Right to Know, Right to Delete, and/or Right to Correct, please submit your request at: Data Requests; or you may call us toll-free at 1-833-681-9900.

Right to Opt-out of Sales and Sharing

If you are a California Consumer and would like to submit a request to opt-out of the “sale” or “sharing” of your personal information, click here: Opt-out request

Data Retention.

We will continue to retain Collected Data for 6 months after you delete the Account unless local law tells us to keep it for longer. Please note that we may be required to retain certain information by law.

Where Sony no longer requires the Collected Data, it will be destroyed or de-identified in line with internal Sony information security policies. When we say de-identified, we mean that we will remove information that could be used to identify you from the Collected Data.

Data Reporting.

Click here to access our data reporting metrics for the previous calendar year.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights.

California Consumers have the right to not receive discriminatory treatment for exercising CPRA rights. We will not discriminate against you for exercising your CPRA rights.

Notice of Financial Incentive.

Under California regulations, if we offer certain loyalty or similar program(s) directly or reasonably related to the collection, retention or deletion of your Personal Information, such program may be considered a “financial incentive”. In such case, we will be required to make additional disclosures to you, which we will provide when you agree to participate.

Personal Information We Collect & Purposes for Collection.

The Personal Information we collect about you will depend upon how you use the Account. Accordingly, we may not collect all of the below information about you. In addition to the below, we may collect and/or use additional types of information and will do so after providing notice to you and obtaining your consent to the extent such notice and consent is required by applicable law.

We may have used Personal Information for the business or commercial purposes described in Table 1:

[Table 1]

Categories of Personal Information Collected

Purposes for Collection of Personal Information

Who We Share Personal Information With for a Business Purpose

Third Parties We Sell To, or Share With for Cross Context Behavioral Advertising

Identifiers:

Such as: Contact information(including name, email address), account information and User ID

Providing the Service

Business planning and forecasting

Service improvement

Sony Affiliates

IT Service Providers

Email Vendors

Hosting Service Providers

Analytics Service Providers

Not applicable

Sensitive Information:

Such as: account log-in/password

Providing the Service

IT Service Providers

Hosting Service Providers

Not applicable

Additional Notice to California Residents:

If you are a California resident, under the California “Shine the Light” law, you have the right to receive: a) information identifying any third party company(ies) to which we may have disclosed, within the past year, personal information pertaining to you and your family for that company's direct marketing purposes; and b) a description of the categories of personal information disclosed. To obtain such information, please email your request to SonyElectronicsPrivacy@sony.com, and include your name, email address, mailing address or zip code, and a reference to “Your California Privacy Rights – XYN account.” We are not responsible for requests that are not labeled or sent properly, or do not have complete information. 

(iii) Notice to Nevada Residents

If you are a Nevada resident, you have the right to opt-out of the sale of certain personally identifiable information we have collected about you to third parties. SONY does not currently sell your personally identifiable information as those terms are defined under Nevada law. However, if you wish to submit a request to opt-out of the sale of such information if Sony were to engage in such a sale in the future, you may submit your request in writing to: SonyElectronicsPrivacy@sony.com. Your request must reference “Your Nevada Rights –“XYN account” and include your name, mailing address, zip code, and email address. We are not responsible for requests that do not come through the designated request mechanism or do not contain sufficient information to allow us to process your request. We will respond to valid requests within 60 days.

9. Changes

From time to time we may have to update this Privacy Policy. We will let you know of any material changes to this Privacy Policy through the Account. If the applicable law requires us to obtain your consent, we will ask you for your consent.

10. Contact Information

If you have any questions or comments about our practices regarding your Collected Data or about this Privacy Policy, please contact us at:

Sony Electronics Inc.

16535 Via Esprillo

San Diego, CA 92127

Attn: Privacy Office

Telephone: 1-833-681-9900

Email: SonyElectronicsPrivacy@sony.com

Last Updated and Effective: March 23, 2026