LAB CHAT Privacy Policy

* This is a reference translation of the Japanese original. If there is any discrepancy between this translation and the Japanese version, the Japanese version shall prevail.

TGLAB Inc. ("we," "us," or "our") sets forth the following provisions regarding the handling of personal information in the chat service "LAB CHAT" (the "Service") provided by us.

Article 1 (Compliance with Relevant Laws and Regulations)

We comply with the Act on the Protection of Personal Information (the "APPI") and other relevant laws, regulations, and guidelines, and handle personal information appropriately.

Article 2 (Definitions)

1. "Personal information" means information relating to a living individual that can identify a specific individual by name, date of birth, or other description contained in such information (including information that can be readily collated with other information and thereby identify a specific individual), or that contains an individual identification code.
2. "Personal data" means personal information constituting a personal information database, etc.
3. "User" means an individual who has completed registration for use of the Service.
4. "Fan club" means an artist's official fan club or other membership service operated by us that is linked with the Service.
5. "Retained personal data" means personal data that we have the authority to disclose, correct, add to, delete, suspend the use of, erase, and suspend the provision to third parties. The information set forth in Article 3 that we acquire in the Service falls under this category in principle.

Article 3 (Information We Collect)

In providing the Service, we collect the following information.

[Information you enter or provide]

- Email address
- Password
- Username or nickname
- Profile image
- Content of messages sent on the Service
- Content of inquiries

[Information acquired from the fan club when you log in using fan club membership registration information]

- Membership ID, name, email address, presence and type of membership status

[Payment-related information]

- Information regarding payment methods, purchase history, payment status

* Credit card numbers, expiration dates, and security codes are collected and managed directly by the payment processing company and are not stored on our servers.

[Information automatically collected through use of the Service]

- Device information (model, OS type and version, browser type, etc.)
- IP address, access date and time, browsing history, and other access logs
- History of point acquisition, consumption, and expiration
- Identifiers acquired through cookies and similar technologies

Article 4 (Purposes of Use)

We use the personal information we collect for the following purposes.

1. Provision and operation of the Service
2. Identity verification, authentication, and account management of Users
3. Verification of fan club membership status and provision of member benefits (granting of points, etc.)
4. Granting and management of points and payment processing
5. Intermediation of the sending and receiving of messages between Users and artists
6. Responding to inquiries and requests from Users
7. Delivering important notices regarding the Service and other necessary communications
8. Analysis of usage of the Service, and improvement of the Service and development of new features
9. Prevention of and response to acts violating the Terms of Service, unauthorized use, and other improper conduct
10. Response to disputes, litigation, and other legal proceedings
11. Performance of operations incidental to the preceding items

Article 5 (Use Within the Scope of the Purposes of Use)

1. We handle personal information only within the scope necessary to achieve the purposes of use set forth in the preceding Article.
2. Notwithstanding the preceding paragraph, we may handle personal information beyond the scope of the purposes of use in the following cases.
　(1) Where based on laws and regulations
　(2) Where necessary for the protection of the life, body, or property of a person and it is difficult to obtain the consent of the individual
　(3) Where specially necessary for improving public health or promoting the sound growth of children and it is difficult to obtain the consent of the individual
　(4) Where it is necessary to cooperate with a national government organ, a local government, or a party entrusted by either of them in performing affairs prescribed by laws and regulations, and obtaining the consent of the individual is likely to impede the performance of such affairs

Article 6 (Proper Acquisition)

We do not acquire personal information by deception or other improper means.

Article 7 (Handling of Message Content)

1. We handle the content of messages sent by Users on the Service for the following purposes.
　(1) Transmission to and display for the artist
　(2) System processing and storage necessary for provision of the Service
　(3) Responding to inquiries from Users, and investigation and recovery of Service failures
　(4) Investigation of and response to acts violating the Terms of Service
　(5) Where based on laws and regulations or in response to legal proceedings
2. Our employees review message content only where necessary for the purposes set forth in items (3) through (5) of the preceding paragraph. We limit in advance the scope of employees who may conduct such review.
3. We do not use message content for the purposes of advertising delivery, analysis of Users' interests, or profiling. Nor do we analyze message content by AI or other automated means.
4. We do not provide message content to third parties except in the cases set forth in Article 9.
5. Given the nature of the Service, messages sent by Users may contain special care-required personal information such as health conditions or beliefs. Where a User voluntarily includes such information in a message and sends it, we treat such information as having been acquired based on the User's consent.
6. Even where a message contains special care-required personal information, we do not use it for any purpose other than those set forth in Paragraph 1. We particularly limit the scope of employees who may view such information for the purposes set forth in Paragraph 1.
7. Users are asked not to include the special care-required personal information of persons other than themselves (such as a family member's medical condition) in messages without that person's consent.

Article 8 (Linkage of Information with the Fan Club)

1. The fan club is operated by us, the same as the Service. Where you log in to the Service using fan club membership registration information, we also use the fan club membership information within the Service.
2. The items of information used under the preceding paragraph and the purposes of such use are as follows.
　Items - Membership ID, name, email address, presence and type of membership status
　Purposes of use - Verification of membership status at the time of login to the Service, provision of benefits for fan club members (granting of points, etc.), and response to inquiries
3. The use of information under this Article is use within our company and does not constitute provision to a third party.

Article 9 (Provision to Third Parties)

Except in the following cases, we do not provide personal data to third parties without obtaining the prior consent of the User.

1. Where based on laws and regulations
2. Where necessary for the protection of the life, body, or property of a person and it is difficult to obtain the consent of the individual
3. Where specially necessary for improving public health or promoting the sound growth of children and it is difficult to obtain the consent of the individual
4. Where it is necessary to cooperate with a national government organ, a local government, or a party entrusted by either of them in performing affairs prescribed by laws and regulations, and obtaining the consent of the individual is likely to impede the performance of such affairs
5. Where personal data is provided in connection with the succession of business due to merger or other reasons

Article 10 (Outsourcing)

1. We may outsource all or part of the handling of personal data to third parties within the scope necessary to achieve the purposes of use.
2. The principal contractors and the operations outsourced are as follows.
　- Payment processing company - Payment processing and management of credit card information
　- Cloud service provider - Provision of the system infrastructure for the Service and storage of data
3. We exercise necessary and appropriate supervision over contractors to ensure the secure management of personal data.

Article 11 (Provision to Third Parties in Foreign Countries)

1. The payment processing company and cloud service provider to which we outsource the handling of personal data are both business operators located in Japan.
2. If in the future we outsource the handling of personal data to a third party in a foreign country, we will do so in accordance with the APPI, either by obtaining the prior consent of Users or after confirming that such third party continuously maintains the systems necessary for the protection of personal information. In such case, we will provide, upon a User's request, information on the personal information protection system of the foreign country in which such third party is located and other information that should serve as a reference.

Article 12 (Security Control Measures)

We implement the following measures to prevent the leakage, loss, or damage of personal data and otherwise to manage personal data securely.

1. Formulation of basic policy - We have formulated this Policy to ensure the proper handling of personal data.
2. Organizational security control measures - We have designated a person responsible for the handling of personal data and have clarified the scope of employees who handle personal data and the scope of the personal data handled.
3. Human security control measures - We provide employees with training on points to note regarding the handling of personal data and have established provisions concerning confidentiality.
4. Physical security control measures - We control entry to and exit from areas where personal data is handled and take measures to prevent the theft of devices and electronic media.
5. Technical security control measures - For information systems that handle personal data, we set access privileges for each person in charge and limit them to the scope necessary for their duties. We have introduced mechanisms to protect against unauthorized external access and malicious software, and we encrypt communication channels.
6. Understanding of the external environment - We handle personal data only within Japan and do not handle personal data in foreign countries. If in the future we handle personal data in a foreign country, we will take necessary measures after understanding the personal information protection system of that country.

Article 13 (Retention Period of Personal Data)

1. We retain personal data only for the period necessary to achieve the purposes of use.
2. The handling of data when a User withdraws is as follows.

　- Account information, profile, message content
　　　Deleted within 30 days after withdrawal
　- Records relating to payment and transactions
　　　Retained for 7 years in accordance with laws and regulations
　- History of acquisition, consumption, and expiration of points
　　　Retained for 7 years in accordance with laws and regulations
　- Access logs
　　　Deleted successively after one year has elapsed from acquisition

3. Upon completion of the withdrawal procedure, the User will no longer be able to log in to the Service or view message history. The 30-day period in the preceding paragraph is the period required for system deletion processing and erasure from backups.
4. Notwithstanding the preceding two paragraphs, the following information is retained for the periods specified below.
　(1) Information whose retention is required by laws and regulations - The period prescribed by such laws and regulations
　(2) Information necessary for responding to disputes, litigation, or other legal proceedings - Until six months have elapsed after the conclusion of such proceedings
　(3) Records relating to acts violating the Terms of Service (limited to the fact of the violation, the date and time, the identifier of the account concerned, and the measures we took; as for message content, limited to the scope necessary to prove such violation) - Three years from the creation of such record

Article 14 (Personal Information of Minors)

Where a minor uses the Service, please provide personal information only after obtaining the prior consent of a parent or legal guardian.

Article 15 (Use of Cookies, etc.)

1. The Service uses cookies and similar technologies to maintain login status, improve convenience, and understand usage.
2. Users may disable cookies through their browser settings. In such case, however, some functions of the Service may not be available.

Article 16 (Requests for Disclosure, etc. of Retained Personal Data)

1. A User or the User's agent may request that we notify the purpose of use, disclose, correct, add to, or delete the content of, suspend the use of or erase, or suspend the provision to third parties of, the User's retained personal data.
2. Requests under the preceding paragraph are accepted by postal mail. Please send a written request stating the details of the request and your contact information to the address of the inquiry desk below. If circumstances make it difficult to send a written request by mail, please consult us in advance by email. We will respond on an individual basis.
3. When requesting disclosure, you may specify either delivery of a document or provision by electromagnetic record. We will make disclosure by the method you specify, except where disclosure by such method would require substantial cost or would otherwise be difficult.
4. In the case of a request by an agent, please also submit a document evidencing the power of representation (a family register transcript, etc. in the case of a legal representative of a minor; a power of attorney in the case of a voluntary agent).
5. To prevent leakage to third parties, we will verify your identity by the method we prescribe. If we cannot verify your identity, we may not comply with the request.
6. We will respond without delay after identity verification is completed.
7. No fee is charged for requests under this Article.

Article 17 (Changes to This Policy)

1. We may change this Policy in response to changes in laws and regulations or changes to the content of the Service.
2. The revised Policy takes effect from the time it is posted on the Service.
3. Notwithstanding the preceding paragraph, where we change the purpose of use of personal information beyond the scope reasonably deemed to have relevance to the purpose of use before the change, we will do so after obtaining the prior consent of Users.
4. Where we make a material change to this Policy, we will give advance notice of the revised content and the effective date by posting on the Service or by other appropriate means.
5. The Japanese version of this Policy is the official text. Even if we provide a translation of this Policy into a foreign language, such translation is provided for reference only, and in the event of any discrepancy between the Japanese version and the translation, the Japanese version shall prevail.

Inquiry Desk

For inquiries regarding this Policy and the handling of personal information, please contact us at the following.

TGLAB Inc.
Representative Director: Makoto Ozawa
Dai-ni Shintoku Building 402, 354 Yamabuki-cho, Shinjuku-ku, Tokyo 162-0801, Japan
Email: lab-chat@tglab.jp
Telephone: +81-50-5491-3866 (Weekdays 11:00-17:00, excluding Saturdays, Sundays, and national holidays)

* We aim to respond to general inquiries within 7 business days. Requests for disclosure, etc. of retained personal data are governed by Article 16.

Date of Establishment: August 1, 2026