Terms of Service

1. Acceptance of these terms

These Terms of Service ("Terms") govern your access to and use of Candle Light Cloud (the "Service"). By creating an account, using the Service, or ticking the agreement boxes at checkout, you agree to be bound by these Terms. If you do not agree, do not use the Service.

Ticking the Privacy Policy and Terms of Service boxes on the Pricing page forms a binding electronic agreement between you and us; we record that acceptance and provide you a downloadable receipt from your Dashboard.

2. Who we are

Candle Light Cloud is a service of Digitalsurfing Limited, registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact: legal@candlelight.cloud.

3. The Service

Candle Light lets you publish a life story, build a gallery and map of moments, draft biography content with an AI biographer, schedule future activity (messages, gifts, tasks, digital cash), operate an AI Presence and a foundation, and configure posthumous release of your content. The Service is provided online via candlelight.cloud and related URLs.

Digital cash features additionally include self-custodied and MPC-custodied crypto wallets, inbound deposit detection, sender-return recovery, optional liquid staking, and posthumous or scheduled on-chain transfers. The crypto-specific rules in clauses 10 and 11 apply whenever you use those features.

4. Eligibility

You must be at least 18 years old and able to enter a binding contract under the law of England and Wales. You must give accurate registration information and keep it up to date.

5. Account and security

You are responsible for the activity on your account and for keeping your sign-in credentials safe. Notify us immediately if you suspect unauthorised access.

6. Acceptable use

You agree not to:

• Use the Service to impersonate another person or misrepresent your identity.
• Upload content that is unlawful, defamatory, harassing, infringing of third-party rights, sexually explicit involving any person, or that targets a real, identifiable person without their consent.
• Use AI features to generate content that depicts minors sexually, instructs on the creation of weapons or other harmful uplift, plans violence, coordinates harassment, generates fraud or scam material, or produces deceptive political or health misinformation.
• Attempt to extract, scrape or distil our models, prompts or other users' content, or reverse-engineer the Service.
• Use the Service to send spam or unsolicited messages, or to evade rate limits and abuse controls.
• Interfere with the security, integrity or availability of the Service.
• Resell, sub-licence or expose the Service to third parties beyond what your plan permits.

We may remove content or suspend accounts that breach this clause and, where required, report unlawful content to the competent authorities.

7. Your content and the licence you grant us

You keep all rights in the content you upload or create ("User Content"). You grant Digitalsurfing Limited a non-exclusive, worldwide, royalty-free licence to host, store, copy, transmit, display and process your User Content, including via third-party AI providers, solely as needed to operate and provide the Service as you direct (e.g. publish your story, generate your biography, run your AI Presence, deliver future activity).

You warrant that you have the rights necessary to upload your User Content and to grant this licence, and that doing so does not infringe any third party's rights.

7A. Research and insights from public information

Some content you publish through Candle Light is, by your choice, public — including your public profile, your published biography, sections you mark as public, public foundation memberships, and other material you actively share with the world. You agree that Digitalsurfing Limited may access, read, store, organise and analyse this public information — including with the help of artificial intelligence and statistical methods — to study patterns across published lives and produce insights intended to benefit humanity (for example: understanding shared themes in how people are remembered, how communities form around causes, and how memorial and legacy practices evolve).

This permission applies only to information you have made public through the Service. Content you keep private, draft content, posthumous-only content that has not yet been released, and account/billing data are not included and remain governed by the Privacy Policy and the rest of these Terms.

Where we publish or share derived insights externally, we will do so in aggregated or de-identified form, except where you have explicitly consented to be named (for example, by publishing under your own name in your public profile, which remains attributable to you as the author).

You may withdraw this permission for future analysis at any time by removing the relevant content from public visibility or deleting your account; insights already produced from previously-public material may continue to exist in aggregated form.

8. AI-generated content

Biography drafts, AI Presence responses and synthesised audio/video are produced with the assistance of artificial intelligence. AI outputs may be inaccurate or unsuitable. You are responsible for reviewing AI output before you publish it or rely on it. We do not warrant accuracy of AI-generated content. You can edit or delete AI output at any time and disable your AI Presence in your settings.

9. Posthumous activation

The Service includes features designed to operate after your death — scheduled messages, gifts, tasks, AI Presence, and trusted-contact release of content. By configuring these features you give us a standing instruction to act on the rules you set, including after we receive credible notice of your death. You can change or revoke these instructions at any time while you are alive.

9A. Legal Declaration (supplement to your Will)

9A.1 What it is. The Legal Declaration is a one-page PDF you can generate from your account that lists the Candle Light settings you have configured (scheduled messages, gifts, tasks, AI Presence, trusted contacts, death-detection methods) and is signed by you and two witnesses, each with their date and location.

9A.2 Purpose. The Declaration is intended to provide written, witnessed evidence that the settings on your Candle Light account reflect your genuine wishes, so that after your death no other person can credibly claim the right to shut down, alter, or override those settings.

9A.3 Supplement to any other Will. The Declaration is intended to function as an additional component alongside any other valid Will, codicil, lasting power of attorney, or estate document you may have. It does not replace them. Where the Declaration and a formally executed Will conflict, your Will governs your property and legal estate; the Declaration governs only the operation of your Candle Light account.

9A.4 Not legal advice. Candle Light does not provide legal advice, does not verify the identity of witnesses, and does not guarantee that the Declaration will be treated as a testamentary instrument in every jurisdiction. You are encouraged to consult a qualified legal professional in your own jurisdiction about how the Declaration fits with the rest of your estate planning.

9A.5 Storage and release. The signed PDF is stored privately in your account and is released or referenced under the posthumous procedures described in clause 9.

9A.6 Revocation and replacement. Generating and uploading a new signed Declaration supersedes any earlier one. You can also revoke a Declaration at any time from your account while you are alive.

10. Digital assets, wallets and crypto custody

10.1 Software interface, not a financial institution. Candle Light is a non-custodial software interface to public blockchains. We are not a bank, broker-dealer, exchange, money transmitter, investment adviser, or e-money issuer. We do not hold customer fiat balances, do not lend, and do not take title to your crypto assets.

10.2 Custody modes. Funding sources can be self-custody references you control off-platform, exchange-custodial references, or Privy MPC wallets. For Privy MPC wallets, Candle Light uses Privy Inc.'s multi-party computation wallet service to generate and manage wallet addresses; Privy holds key material and Candle Light stores only an opaque reference. Privy's terms and security model apply to those wallets in addition to ours.

10.3 Supported assets and networks. Currently Ethereum mainnet (ETH and selected ERC-20 tokens), Solana mainnet (SOL and selected SPL tokens), and Bitcoin (read-only deposit detection). We may add, change, or remove networks and assets at any time; nothing here is a commitment to support any specific asset.

10.4 Blockchain irreversibility. Blockchain transfers are irreversible. Once a transaction is broadcast, Candle Light cannot reverse, claw back, freeze, or reissue funds. You are responsible for verifying destination addresses, networks, and amounts before authorising a transfer.

10.5 Deposits and recovery. Our deposit scanner is a convenience using public RPC and explorer endpoints; it may miss, delay, or misclassify transactions. The "send back to sender" recovery flow submits a new outbound transfer to the address the deposit originated from. Network fees are deducted from the returned amount. The originating address may belong to an exchange or third-party hot wallet rather than the actual sender, in which case the returned funds may not reach the intended person.

10.6 Liquid staking. When you opt in, ETH may be staked via Lido (stETH) and SOL via delegation to a public validator. Staking yields are variable estimates, not guaranteed returns, and may be lower or zero. Staking carries smart-contract, validator, slashing, and withdrawal-queue risks. Unstaking is subject to protocol cool-down periods (typically 1–5 days for ETH, 2–4 days for SOL). Candle Light does not guarantee principal, performance, timing, or the availability of any staking protocol.

10.7 Posthumous and scheduled crypto transfers. Posthumous gifts and scheduled transfers configured against a crypto source execute automatically once their trigger conditions are met. You are responsible for keeping the source funded, the destination valid, and your trusted-contact and death-detection configuration current. Auto-unstake runs ahead of scheduled releases on a best-effort basis; we do not guarantee liquidity at release time.

10.8 Fees, taxes and compliance. Network (gas) fees, validator commissions, staking-protocol fees (e.g. Lido's ~10% on rewards), and third-party provider fees are borne by you and deducted from the relevant amounts. You are solely responsible for any tax, reporting, AML, or sanctions obligations arising from your crypto activity. You warrant that you are not located in, or transacting with, a jurisdiction or person subject to applicable sanctions.

10.9 No insurance, no advice. Crypto assets and staking positions are not protected by FSCS, FDIC, or any equivalent deposit-protection or investor-compensation scheme. Nothing in the Service is investment, tax, or legal advice. You acknowledge that crypto assets can lose value rapidly and that you may lose the full value of any deposit.

11. Legal claims against custodied funds

11.1 No contest of valid claims. Where a third party asserts a legal claim (for example a probate grant, court order, estate administrator request, regulatory order, or successor-in-interest claim) over funds held in a Privy MPC wallet provisioned through Candle Light, neither Candle Light nor, to the extent within our control, Privy will mount a legal contest against a claim that is determined to be valid. Our role is limited to qualifying the validity of the claim against the documentation provided.

11.2 Validation and qualification. We will assess each claim on its face: confirming identity of the claimant, authenticity of supporting legal instruments, scope of authority granted by those instruments, and consistency with the account owner's recorded posthumous-release configuration. We may require certified copies, apostilled documents, sworn statements, or independent legal opinions before recognising a claim. We may decline, defer, or seek a court direction in respect of any claim that is ambiguous, conflicting, fraudulent, suspected to be fraudulent, or in conflict with another asserted claim.

11.3 Costs of validation. The reasonable costs of validating and qualifying a claim — including legal review, identity verification, document authentication, third-party adviser fees, and network/transfer fees — will be deducted from the custodied funds before any release to the qualified claimant. We will provide a written accounting of deducted costs alongside the release.

11.4 Discharge on release. Once the custodied funds have been released to the qualified claimant by any method (on-chain transfer, off-chain payout, or transfer of control of the relevant wallet), all legal, contractual, and fiduciary obligations of Candle Light, Digitalsurfing Limited, Privy Inc., and their respective affiliates, officers, employees, agents, and successors in relation to those funds cease in full. The qualified claimant is solely responsible for the subsequent custody, use, taxation, and distribution of the released funds, and indemnifies each of the foregoing parties against any further claim in respect of those funds.

11.5 No waiver of mandatory rights. Nothing in this clause excludes or limits any right that cannot be excluded under applicable law, including the non-excludable rights of UK consumers and the supervisory jurisdiction of competent courts.

11A. Money-rule claim links and retry schedule

11A.1 What a money rule is. A "money rule" is an optional setting you can attach to a Scheduled Message that, when the message fires, also sends the recipient a one-time claim link giving them the option to accept a fixed amount or a percentage of the funds held in a verified wallet or bank you have selected.

11A.2 Claim-link lifetime. Each claim link is valid for thirty (30) days from the moment it is generated. After that period the link expires and the recipient can no longer use it to claim the funds.

11A.3 Automated re-send schedule. If the recipient has not accepted the funds before their claim link expires, Candle Light will automatically generate a fresh thirty-day claim link and re-send it via the same email and/or SMS channels you configured on the Scheduled Message, on the following fixed cadence measured from the previous send:

• Attempt 1 — the initial send when the Scheduled Message fires.
• Attempt 2 — seven (7) days after Attempt 1.
• Attempt 3 — thirty (30) days after Attempt 2.
• Attempts 4 through 13 — once every three hundred and sixty-five (365) days, for a further nine (9) yearly attempts after Attempt 3.

In total, Candle Light will make up to thirteen (13) delivery attempts spanning approximately ten (10) years and thirty-seven (37) days from the initial send. This retry schedule is an aspirational service period and is subject to clause 12B.

11A.4 Final escalation. If the funds remain unclaimed after all thirteen attempts and every other Scheduled Message on your account (including any other Scheduled Message that itself carries a money rule) has fired, expired, or otherwise finalised, the final claim link will be sent to ds@digitalsurfing.com.au so that Digitalsurfing Limited can attempt to direct the funds in accordance with this clause 11A and clause 11. While other Scheduled Messages remain pending, the final escalation is deferred and re-checked at thirty (30) day intervals.

11A.5 Use of unclaimed funds. Where, after the final escalation in clause 11A.4 and after all other scheduled payments on your account have been finalised, funds remain unclaimed in your account, Candle Light will first apply those funds to extend the paid duration of the tier(s) you selected up to their contractual maximums — namely Future Activity up to fifty (50) years from the date of extension and AI Presence up to one hundred (100) years from the date of extension. Any amount that remains after both selected tiers have been extended to their maximum durations is retained by Candle Light for the benefit of further developing the Candle Light platform. This is in addition to the costs of validation that may be deducted under clause 11.3.

11A.6 Cancellation. You may cancel a money rule at any time from the Scheduled Messages screen before the underlying Scheduled Message fires, and may cancel an in-flight retry sequence by cancelling the underlying gift from the same screen. Cancellation immediately invalidates any outstanding claim link and stops further retries.

11A.7 Delivery is best-efforts. Email and SMS delivery depend on third-party providers and on the recipient's contact details remaining current and reachable. Candle Light does not guarantee that any individual retry will be delivered, opened, or acted upon, and is not liable where a recipient fails to claim because a message was filtered, blocked, undelivered, or ignored.

12. Payments

This clause covers Candle Light's own fees and subscriptions. On-chain network fees and third-party staking-protocol fees are governed by clause 10.

• One-time extensions add 12 months of visibility per purchase.
• Annual subscriptions renew automatically each year at the price shown on Pricing until you cancel; cancellation takes effect at the end of the paid period.
• Future Activity and AI Presence are one-time purchases per ten-year block. AI Presence decades that overlap an existing Future Activity decade are charged at the discounted upgrade price.
• Payment processor: Stripe. Currency and applicable taxes are shown at checkout.
• Refunds: outside of statutory consumer rights, fees are non-refundable. If you exercise a statutory right of withdrawal that applies in your jurisdiction, contact us within the applicable period. UK consumers retain their non-excludable rights under the Consumer Rights Act 2015 and related law.
• Price changes apply at the next renewal; we will give at least 30 days' notice by email before any change.
• Free-account lifecycle. A free account that never purchases at least one paid year is permanently deleted 12 months after account creation, together with all of its content. We send warning emails 30 days and 7 days before deletion so you can purchase a paid year to preserve your account. Purchasing any paid year at any time removes the account from the deletion schedule permanently.

All subscribed and purchased periods referenced in this clause 12 — including annual renewals, one-time 12-month extensions, and ten-year Future Activity / AI Presence blocks — are aspirational service periods and are subject to clause 12B.

12A. Scheduled Messages, Future Tasks and Scheduled Gifts — usage limits

To keep the Service stable and prevent abuse, Scheduled Messages, Future Tasks and Scheduled Gifts share a single per-account capacity pool:

• Included with your subscription. Every active Future Activity or AI Presence subscription includes a free allotment of 100 active items combined across Scheduled Messages, Future Tasks, and Scheduled Gifts per user. All three feature types draw from the same shared pool.
• What counts. Only active (scheduled, armed, pending, or awaiting release) items count toward your allotment. Cancelled items, completed tasks, and items that have already been delivered or released no longer count.
• Additional capacity. You may purchase additional capacity in packs at any time: $100 for a pack of 100 additional items added to the same shared pool. A pack can be used freely across Scheduled Messages, Future Tasks, and Scheduled Gifts — there is no per-feature sub-limit. Packs are one-time, non-recurring, and stack additively — buying two packs lifts your combined ceiling by 200, and so on. Previously purchased packs of 50 Scheduled Messages or 10 Scheduled Gifts continue to count toward this shared pool at their original size.
• Pack terms. Packs are tied to the purchasing account, are non-transferable, and remain valid for the lifetime of the account, subject to the suspension and termination provisions of these Terms.
• Refunds and price changes. Pack purchases are non-refundable except where required by law. We may adjust the included allotment and pack pricing for future purchases, but we will not retroactively reduce capacity you have already paid for.
• Abuse. We may pause or refuse the creation of further Scheduled Messages, Future Tasks or Scheduled Gifts in cases of automated abuse, spam, or breach of the Acceptable Use rules in clause 6, regardless of remaining capacity.

12B. Aspirational service periods and no compensation on discontinuance

12B.1 Aspirational nature of subscription periods. All time periods associated with any Candle Light plan or purchase — including annual visibility renewals, one-time 12-month extensions, ten-year Future Activity blocks, ten-year AI Presence decades, the ten-year money-rule retry schedule described in clause 11A, and any posthumous release timeframe — are aspirational service periods, not guaranteed periods of delivery. They describe the duration for which Candle Light intends and endeavours to provide the relevant feature, on the assumption that Candle Light remains economically, technologically, and legally successful throughout that period.

12B.2 Conditions of continued delivery. Continued delivery over these long horizons depends on Candle Light and Digitalsurfing Limited continuing to operate as a going concern, on the continued availability and viability of the underlying third-party infrastructure (payment processors, cloud hosts, AI providers, custody providers, blockchain networks, email/SMS carriers, and similar), and on the continued legal permissibility of the Service in relevant jurisdictions. None of these can be guaranteed for the full length of any subscribed or purchased period.

12B.3 Discretion to discontinue. Digitalsurfing Limited may, in its sole discretion, decide that the Service or any feature should cease operating — whether for commercial, technological, regulatory, safety, or any other reason. Where reasonably possible we will give advance notice by email and endeavour to provide export or wind-down assistance, but we are not obliged to continue offering the Service for any minimum period.

12B.4 No compensation on discontinuance. If Candle Light or Digitalsurfing Limited unilaterally determines that the business, the Service, or any feature should cease operating, then, to the fullest extent permitted by law, neither you, your estate, your trusted contacts, your beneficiaries, nor any other representative acting on your behalf shall have any right of recourse or any claim for compensation of any type against Digitalsurfing Limited, Candle Light, their affiliates, officers, employees, agents, or successors — whether by way of refund of unused subscription time, damages for unfulfilled scheduled activity, loss of expected posthumous execution, loss of AI Presence continuity, loss of goodwill, or otherwise.

12B.5 Our commitment of intent. Candle Light aspires to be economically, technologically, and legally successful precisely so that the service periods you have paid for can be delivered in full and so that the Service continues to provide meaningful value to users and their loved ones. This clause records the honest limits of what any provider can promise across decades; it does not diminish our commitment to work toward those aspirations.

12B.6 Non-excludable rights preserved. Nothing in this clause 12B excludes or limits any right that cannot be excluded or limited under applicable law, including the non-excludable rights of UK consumers under the Consumer Rights Act 2015 and equivalent legislation.

13. Third-party services

The Service interoperates with third parties including Stripe, Google (Maps and sign-in), Apple sign-in, Facebook, AI model providers, Privy (MPC wallet provisioning), Lido (ETH liquid staking), public Solana validators, public blockchain RPC providers, and block explorers such as Etherscan, Basescan and Blockstream. Your use of those services is governed by their own terms and privacy notices. We are not responsible for the acts or omissions of third parties.

14. Suspension and termination

You can close your account at any time. We can suspend or terminate access immediately if you breach these Terms, if continued service would expose us or others to legal risk, or if required by law. On termination the licence you granted in clause 7 ends, except to the extent we must keep records for legal compliance or to complete a scheduled future activity you have already triggered.

Termination or wind-down of the Service as a whole is additionally governed by clause 12B (aspirational service periods and no compensation on discontinuance).

15. Disclaimers and limitation of liability

Nothing in these Terms excludes or limits liability for death or personal injury caused by our negligence, fraud, or any other liability that cannot be excluded under applicable law (including your non-excludable rights as a consumer in the UK).

Subject to the above, the Service is provided "as is" and "as available". To the fullest extent permitted by law, we exclude all implied warranties, and our aggregate liability arising out of or in connection with the Service in any 12-month period is capped at the fees you paid us in the 12 months preceding the event giving rise to the claim. We are not liable for indirect or consequential loss, loss of profits, loss of goodwill, or for failure of any third-party delivery channel beyond our reasonable control.

Without limiting the general disclaimers above, you acknowledge the additional crypto-specific risks set out in clause 10 and the claims-handling framework in clause 11, and that Candle Light is not liable for losses arising from blockchain congestion, fork events, third-party custody or staking provider failure, smart-contract bugs, or your own address/network mistakes.

16. Indemnity

You agree to indemnify Digitalsurfing Limited against third-party claims arising from your User Content, your use of the Service in breach of these Terms, or your infringement of any third-party right.

17. Changes to the Service and these Terms

We may change the Service and these Terms from time to time. We bump the version number at the top of this page for any change and, for material changes, notify you by email before they take effect. Your continued use after the effective date is acceptance of the new version; older accepted versions remain referenceable from your receipts.

18. Governing law and jurisdiction

These Terms and any dispute arising out of them (including non-contractual disputes) are governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction, save that consumers may bring proceedings in the courts of their place of residence where applicable law gives them that right.

19. Contact

Digitalsurfing Limited, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom · legal@candlelight.cloud.