Privacy Policy — Japan

Privacy Addendum for Japan

This addendum supplements the ZhiYin global privacy policy with requirements specific to Japan. Where this addendum conflicts with the global policy, this addendum takes precedence for users located in Japan.

Regulatory Authority

Personal Information Protection Commission (PPC)

Applicable legislation: Act on the Protection of Personal Information (APPI)

Data Residency

No strict data localization, but cross-border transfers require consent or equivalent protection assurance.

Breach Notification

APPI requires a prompt preliminary report to the PPC (within roughly 3 to 5 days) and a final report within 30 days (60 days for breaches caused by malicious acts); affected individuals must be notified promptly.

ZhiYin aligns its incident-response process with these requirements and will notify the relevant regulatory authority and affected individuals within the timeframe required by applicable law.

Data Retention

Organizations must specify and publish retention periods. Data must be deleted after the retention period.

Your Rights in Japan

In addition to the rights outlined in our global privacy policy, users in Japan have the following specific rights under local law:

• Right to request disclosure of personal data
• Right to request correction, addition, or deletion
• Right to request cessation of use or provision to third parties
• Right to request disclosure of records of third-party provision