Japan Privacy Notice
Last Updated: August 1, 2026
This notice supplements the Candle Privacy Policy with the disclosures required under Japan’s Act on the Protection of Personal Information (個人情報の保護に関する法律, the “APPI”).
Where this notice and the Privacy Policy differ, this notice governs for individuals in Japan.
1. Personal Information Handling Business Operator
Section titled “1. Personal Information Handling Business Operator”| Name | 7 Candlesticks, Inc. |
| Address | 201 S Las Vegas Blvd #95, Las Vegas, NV 89101, USA |
| Representative | Andrew Lee, Chief Executive Officer |
| Contact | privacy@candle.tv |
2. Purpose of Use (APPI Article 21)
Section titled “2. Purpose of Use (APPI Article 21)”We use personal information for the following purposes:
- To provide, operate, maintain, and improve the Candle Services;
- To create and administer your account and authenticate you;
- To execute, route, and verify blockchain transactions you initiate;
- To compute Wallet IQ scores, determine Believer NFT eligibility, and apply access gates;
- To distribute staking rewards, airdrops, and giveaway entries;
- To deliver, record, and moderate livestreams, video, and chat;
- To communicate with you about the Candle Services, including service notices and, where permitted, promotional material;
- To provide security and to detect, investigate, and prevent fraud, abuse, market manipulation, and unauthorized activity;
- To comply with legal obligations, including tax, anti-money-laundering, and sanctions requirements, and to respond to lawful requests;
- To analyse usage and improve the products and content we offer.
Where we intend to use personal information for a purpose beyond those above, we will notify you or obtain your consent, as required.
3. Categories of Personal Information Handled
Section titled “3. Categories of Personal Information Handled”The categories are set out in Personal Information We Collect in the Privacy Policy. In summary: wallet addresses and on-chain activity, Wallet IQ scores and their breakdown, account and profile information, linked social account identifiers and access credentials, content you create including chat and streams, and automatically collected technical and usage information.
4. Provision to Third Parties
Section titled “4. Provision to Third Parties”We provide personal information to third parties as described in When We Disclose Personal Information.
We entrust the handling of personal information to service providers, and exercise necessary and appropriate supervision over them. The current list, with the category of information each receives and the country in which it is located, is published at Subprocessors.
5. Cross-Border Transfer (APPI Article 28)
Section titled “5. Cross-Border Transfer (APPI Article 28)”Personal information you provide is transferred outside Japan, principally to the United States, and to other countries where our service providers operate. Those countries are identified for each provider at Subprocessors.
Under the APPI we are required to inform you of the personal information protection systems of the countries concerned:
- United States — the United States has no single comprehensive federal data protection law equivalent to the APPI. Protection is provided by a combination of sector-specific federal laws, state comprehensive privacy laws (including in California, Colorado, Connecticut, Texas, and Virginia), and enforcement by the Federal Trade Commission against unfair or deceptive practices. The United States is not designated by the Personal Information Protection Commission as a country with an equivalent standard of protection under Article 28.
- European Economic Area countries, where any provider is located there, are designated by the Personal Information Protection Commission as having an equivalent standard of protection.
We take measures equivalent to those required of a personal information handling business operator in Japan when transferring information to a recipient outside Japan, including contractual commitments requiring the recipient to handle the information in accordance with APPI standards.
You may request information about the measures taken by a specific recipient by emailing privacy@candle.tv.
6. Joint Use
Section titled “6. Joint Use”Candle jointly uses personal information with its affiliates for the purposes described in section 2 above.
| Items jointly used | The categories described in section 3 |
| Scope of joint users | 7 Candlesticks, Inc. and its affiliates |
| Purpose of joint use | As described in section 2 |
| Party responsible for management | 7 Candlesticks, Inc., contactable at privacy@candle.tv |
7. Personally Referable Information
Section titled “7. Personally Referable Information”Candle may receive Personally Referable Information (個人関連情報) and acquire it as personal data, including:
- Browsing history on other websites collected via cookie or device identifier;
- Interaction with other websites and applications via advertising identifier; and
- Other data used to provide advertising, content, and optimized services.
Where we acquire such information as personal data, we obtain your consent as required by the APPI.
8. Third-Party Services
Section titled “8. Third-Party Services”We make available certain experiences, services, and applications provided by third parties, for example when you link a Candle account to another account. Such an experience is initiated only at your explicit request, and the third party is identified to you. Those third parties may be located outside Japan, and information you choose to share with them is subject to their own privacy policies and the legal regime of their location.
9. Security Control Measures
Section titled “9. Security Control Measures”We take the following measures to control the security of personal data:
- Organizational — designated personnel responsible for handling personal data, defined reporting lines for incidents, and internal policies governing handling and access.
- Human — training on the handling of personal data, and confidentiality obligations in staff and contractor agreements.
- Physical — controls on access to facilities and devices used to handle personal data.
- Technical — access control limiting personal data to those with a business need, encryption of data in transit, segregation and protection of secrets and signing keys, and logging and monitoring of access.
- Understanding the external environment — we have identified the personal information protection regimes of the countries in which personal data is handled, as set out in section 5, and take those into account in the measures above.
10. Disclosure, Correction, Suspension of Use, and Deletion
Section titled “10. Disclosure, Correction, Suspension of Use, and Deletion”You may request disclosure, correction, addition, deletion, suspension of use, or cessation of third-party provision of your retained personal data, and disclosure of records of third-party provision.
Email privacy@candle.tv. We may ask you to verify your identity, including by signing a message from the wallet associated with your account. We respond without undue delay.
Withdrawing consent. Where our processing relies on your consent, you may withdraw it at any time by contacting privacy@candle.tv and asking us to close your account and delete your information.
11. Complaints
Section titled “11. Complaints”If you are dissatisfied with our handling of your personal information, contact privacy@candle.tv. You may also file a complaint with the Personal Information Protection Commission of Japan (個人情報保護委員会).
12. Language
Section titled “12. Language”This notice is published in English, and the English version is the authoritative one. Any Japanese or other translation is provided for convenience; where it differs in meaning from the English, the English governs.
Candle accepts enquiries and requests under this notice in Japanese. Write to privacy@candle.tv in either language. Where a Japanese translation of this notice is published, it will be marked as a translation and will carry the date of the English version it was translated from.