Xybot Hub Privacy Policy

Last Updated: April 20, 2026

Effective Date: April 20, 2026

Version Release Date: April 20, 2026

This Privacy Policy (hereinafter referred to as "this Policy") applies to the services provided by Shenzhen Xyser Technology Co., Ltd and its subsidiaries and affiliated companies (hereinafter referred to as "Xyser Technology", "the Company" or "we") to customers (hereinafter referred to as "you") through Xybot Hub, official website, mini-programs, etc. We will introduce to you the principles of personal information protection adopted by Xyser Technology, the methods of collecting and processing your personal information, general protection measures and mechanisms, and present to you the basic standards and systematic construction of personal information protection by Xyser Technology.

We strive to present this Policy in a concise, clear and easy-to-understand manner. Xyser Technology fully understands the importance of personal information to you and will make every effort to protect the security of your personal information. We are committed to maintaining your trust in us and abide by the following principles to protect your personal information: the principle of consistency between rights and responsibilities, the principle of clear purpose, the principle of choice and consent, the principle of minimal sufficiency, the principle of ensuring security, the principle of subject participation, the principle of openness and transparency, etc. Meanwhile, Xyser Technology promises that we will adopt corresponding security protection measures to protect your personal information in accordance with mature industry security standards.

Before using our products, please read this Policy carefully to help you better understand our products and the various services we provide, and make appropriate choices. Unless otherwise provided by laws and administrative regulations, you have the right to know and decide how we process your personal information, and have the right to restrict or reject the processing of your personal information by us or other parties; at the same time, you have the right to require us to explain the personal information processing rules we provide to you. To enable you to fully understand the processing methods, scope and consequences of your personal information, which serves as the basis for you to exercise relevant rights, we have specially written "1. Basic Rules for Our Processing of Your Personal Information" to fulfill our statutory notification obligation to you. Based on this, we strongly recommend that you read this section carefully first and give your corresponding authorization consent after fully understanding the content of this Policy.

If you choose that the product delivered by Xyser Technology adopts or includes a privatized deployment system structure, that is, the product is deployed on a server owned or legally used by you, you acknowledge that all data collection, security measures and permission restrictions are independently controlled by your party. Without your authorization, Xyser Technology cannot access or obtain your data or the data authorized by you.

You acknowledge and understand that the privatized deployed Xyser Technology products are of the same nature as your own systems and are data-isolated from Xyser Technology's data. Without your authorization consent, Xyser Technology will not and cannot access, collect, use or control any information and data on the privatized deployed products and services, and therefore cannot bear the risk responsibility for the compliance of relevant data in your local privatized deployment services.

When you authorize Xyser Technology to use local data, Xyser Technology will still use the local data authorized by you in a data-isolated environment.

If you have any questions, comments or suggestions, please contact us through [Customer Service Contact in Chinese Mainland: +86 188-9008-1265].

This Policy will help you understand the following contents:

1. Basic Rules for Our Processing of Your Personal Information

2. How We Collect and Use Your Personal Information

3. How We Protect Your Personal Information

4. Your Rights

5. How We Process Children's Personal Information

6. Protection of Personal Information of Deceased Users

7. How Your Personal Information Is Transferred Globally

8. How We Update This Privacy Policy and Applicable Law

9. How to Contact Us

1. Basic Rules for Our Processing of Your Personal Information

The important definitions in this Policy are based on the relevant definitions in the Personal Information Protection Law and Information Security Technology—Personal Information Security Specification (GB/T 35273-2020), and we have made relevant supplements based on our actual situation. If there is any inconsistency, the provisions of the Personal Information Protection Law and Information Security Technology—Personal Information Security Specification shall prevail. We would like to draw your extra attention that the core purpose of this section is to guide you to fully understand the rules regarding the processing method, scope and consequences of your personal information, so as to fulfill our statutory notification obligation to you. Based on this, we strongly recommend that you read this section carefully and give your authorization consent or explicit consent after fully understanding the content of this section.

1.1 Personal Information: Refers to various information recorded electronically or in other ways that relates to an identified or identifiable natural person. Such as personal phone numbers, personal information subject accounts, IP addresses, unique device identifiers, etc.Sensitive Personal Information: Refers to personal information that, once leaked or illegally used, can easily lead to infringement of the natural person's personality dignity or endanger personal and property safety, including biometric identification, religious beliefs, specific identity, medical health, financial accounts, location tracking and other information, as well as personal information of minors under the age of fourteen (or the age of minors specified by the laws of your jurisdiction). In this Policy, if personal information is sensitive personal information, we will prompt you in bold font and obtain your separate consent, and you should pay extra attention to the enumeration of such information. You can understand the types of personal information we process in which scenarios and for which purposes through the explanations in the tables listed in "2.1 Collection and Use of Personal Information". For the services we provide to you, the scope of your personal information we process is as follows:

1.2 Personal Information Processor: Refers to an organization or individual that independently determines the purpose and method of processing personal information in personal information processing activities.

1.3 Processing: Includes collection, storage, use, processing, transmission, provision, disclosure and deletion of personal information. For how we collect and use your personal information, you can refer to "2. How We Collect and Use Your Personal Information".

1.3.1 Collection: Refers to the act of obtaining control of personal information and being able to independently determine the purpose and method of processing personal information, including "automatic collection" methods such as active provision by the personal information subject to us, recording the behavior of the personal information subject through our interaction with the personal information subject, and "indirect acquisition" methods such as our receiving other personal information and/or collecting public information.

1.3.2 Use: We will explain in the table listed in "2.1 Collection and Use of Personal Information" what scenarios and purposes we will use your personal information for, and list the corresponding legal processing reasons for you to understand the corresponding obligations we need to comply with. When we intend to use information collected for a specific purpose for other purposes, we will ask for your consent in advance or inform you of other legal processing reasons. The term "use" described in this Policy specifically refers to our processing and utilization of data to achieve data storage, access and presentation, aggregation and fusion, statistical analysis and other usage methods.

1.3.3 Retention: Refers to the act of recording personal information in an accessible and retrievable medium in electronic or non-electronic form. For normal business needs, we will retain the personal information required for the product within the retention period required for different legal processing reasons:

a) Personal information processed based on your authorization consent will be retained from the date of collection until the processing purpose is achieved, the user cancels/deletes all account information, or withdraws consent and the agreed reconsideration period expires;

b) Personal information necessary for the conclusion or performance of a contract in which you are a party will be retained from the date of collection until the contract is fully performed and the statute of limitations expires;

c) Personal information necessary for the performance of legal obligations will be retained from the date of collection until the legal obligations are fully performed and the statute of limitations expires.

Where laws, regulations, normative documents and regulatory requirements have different requirements for the above retention periods, we will comply with the requirements of laws, regulations, normative documents and regulatory requirements. In addition, with respect to your personal information collected based on our products, we will process it based on permitted legal bases and exceptions and will comply with the requirements related to such transmission and storage under applicable laws. Your information may be processed on servers located outside the country/region where you reside. Wherever your information is processed, we will adopt the protection measures described in this Policy. Personal information generated or collected by us within the territory of the People's Republic of China is stored on servers within China. Without meeting the conditions and procedures required by laws, regulations, normative documents and regulatory requirements, we will not provide any of your personal information to overseas entities.

1.3.4 Provision to Third Parties: Refers to the activity in which a personal information processor provides personal information to another personal information processor, and the recipient processes personal information under the category, purpose and method of processing that have been notified to the personal information subject.

1.3.5 Entrusted Processing: Refers to the activity in which a personal information processor entrusts a trustee to process personal information and supervises the personal information processing activities of the trustee. The trustee can only process personal information within the entrusted scope, and without the consent of the personal information processor, the trustee may not entrust others to process personal information.

1.3.6 Anonymization: Refers to the process in which personal information cannot be processed to identify a specific natural person and cannot be restored.

1.3.7 Affiliated Parties: Refers to entities directly or indirectly controlled by Shenzhen Xyser Technology Co., Ltd, or any company or legal entity under common control with Shenzhen Xyser Technology Co., Ltd. The term "entity" in this definition includes but is not limited to individuals, partnerships, companies and other legal entities.

2. How We Collect and Use Your Personal Information

We will abide by the principles of legality, propriety and necessity, collect and process your personal information for the purpose of providing you with relevant products and services, and disclose this to you in a list (see the example below). We strive to disclose the collection and use of your personal information to you comprehensively, completely and timely. If you find any errors or omissions in our disclosure, please contact us through the contact information described in this Policy.

2.1 Collection and Use of Personal InformationWith the iteration, expansion and upgrade of products or services, the types of your personal information we collect and use will change. If the above situation occurs, we will explain it to you in detail by updating this Policy and through pop-ups, pages and other methods in Xyser Technology products, and ask for your consent. For this service, the categories of personal information we need to collect and process based on different processing purposes are listed below:

Basic Functions:

2.2 Collection and Use of Device Permission InformationIn order to comply with the requirements of laws, regulations, normative documents and regulatory provisions, ensure transaction security, and achieve the purpose of collecting personal information, we need to apply for you to enable corresponding device access permissions for different business functions you choose. Where permitted by your system, we will pop up a window to explain the purpose and obtain your consent when permissions need to be enabled. Your enabling of these permissions means you authorize us to collect and process this information to implement corresponding functions. You can cancel the authorization through the relevant settings of your device, but after cancellation, we will not be able to provide you with the corresponding business functions. Such permissions that need to be enabled and their specific usage scenarios are listed in the table below:

2.3 Use of Your Personal Information Within Xyser Technology

2.3.1 We will aggregate and jointly use all information listed in the table of "2.1 Collection and Use of Personal Information" in this Policy within the scope of Xyser Technology in accordance with the unified information security management requirements and operation control strategies of Xyser Technology. If our provision scope or the usage purpose of the recipient exceeds the description in this Policy, the recipient who changes the purpose must re-obtain your consent. You have the right to file a complaint with us or any affiliated party that has collected and processed your personal information through the contact information described in this Policy, or require us or any affiliated party that has collected and processed your personal information to make an explanation and respond to the issue of corporate data sharing described in this article.

2.3.2 Your personal information may be shared and jointly used within the scope of Xyser Technology for the following processing purposes:a) Create a unified login account, verify your identity within the company, implement unified identity authentication and enable you to enjoy corresponding rights and interests.b) Jointly provide services to you with affiliated parties or jointly implement the business functions of specific products.c) Prevent security risks, comprehensively judge your personal information, tag information and other information within the company, detect and prevent security risks (such as phishing websites, fraud, network vulnerabilities, computer viruses, network attacks, network intrusions, etc.), more accurately identify violations of laws and regulations or rules of product service agreements, so as to protect the legitimate rights and interests of you, other users, us or affiliated companies.d) Identify, analyze and process tag information within the company, and use it for automated decision-making, operation support, academic research, notification and push (including sending commercial advertisements and information push to you) and improvement of products and services by affiliated parties within the company.e) Other uses permitted by laws, regulations, normative documents and regulatory provisions and authorized by you.

2.3.3 We will control the security of internal data flow within Xyser Technology through systems, agreements and technical means. At the same time, to ensure the security of internal data flow within Xyser Technology, we will implement regular internal inspection measures and require all affiliated parties within Xyser Technology to strictly implement the company's information security management requirements and operation control strategies.

2.3.4 For the avoidance of doubt, only for the purposes of this Policy, Xyser Technology includes Shenzhen Xyser Technology Co., Ltd, its subsidiaries, and entities under common control with Shenzhen Xyser Technology Co., Ltd.

2.4 Provision to Third Parties

2.4.1 We will not provide your personal information to third parties unless permitted by laws, regulations, normative documents and regulatory provisions or there are other legal processing reasons. We will only provide your personal information to third-party personal information processors for legal, proper, necessary, specific and clear purposes. We will legally sign relevant confidentiality agreements with the recipients and require them to process personal information in accordance with the requirements of this Policy and other necessary confidentiality and security measures. The main circumstances where we provide your personal information to third parties include:

a) Entrusted Processing: To implement the business functions of specific products, we will entrust external suppliers to assist us in providing you with relevant services. Under the entrusted processing method, the third party receiving personal information is only entitled to provide services to you on our behalf in accordance with our instructions, and we are responsible to you for their entrusted behavior within the entrusted scope. For example, we entrust suppliers, service providers and other partners that support our business to provide us with technical infrastructure services (such as short message verification services), analyze the usage mode or potential risks of our services, advertising services, transportation, warehousing, customs clearance, final delivery, payment facilitation, customer service, data storage or data analysis services, third-party additional business function services (such as voice input, map functions).

b) Provision to Third Parties: To perform the contract concluded with you or for other reasonable purposes, we may provide certain of your personal information to third-party personal information processors. We will disclose this to you in accordance with the law. The third-party personal information processor receiving personal information has the right to process personal information within the scope of the processing purpose, processing method and types of personal information that have been notified to you. If the recipient changes the original processing purpose and processing method, it must re-obtain your consent, unless otherwise provided by laws. For details on our provision of information to third parties, please see the following third-party sharing list.We would like to specially remind you that if you authorize a third party to require us to provide all or part of your personal information in this service, you agree that we have the right to verify the authenticity of your identity and your authorization to the third party based on our own experience, and have the right to independently decide whether to agree or refuse to provide your aforementioned personal information, unless you issue a separate instruction through the contact information described in this Policy. For example, if you authorize a third-party financial institution to obtain your specific personal information from us, and the third party requests us to provide your personal information based on the content of your authorization, we will respond to the third party's request and provide it within the scope of your authorization.

c) Third-Party SDKs:We will access third-party personal information processors in the form of SDKs and provide your personal information to them. If you refuse to allow us to provide your relevant personal information to the corresponding affiliated parties and third-party processors, you will not be able to use the corresponding business functions. For details on the SDKs we integrate, please see the following "Third-Party Information Sharing List".Third-Party Information Sharing List:

2.4.2 For the avoidance of doubt, you should acknowledge and understand that related products may contain links to websites, applications, products and services operated by other independent third parties. We do not make any express or implied warranties for such third-party websites, applications, products and services, and such links are only provided for the convenience of users to browse relevant pages. When you access such third-party websites, applications, products and service links, we will provide your personal information to the third party based on your explicit authorization. You should note that you need to separately agree to their privacy policy or personal information protection provisions. You should pay special attention that SDKs independently accessed by such third-party websites and applications are jointly responsible by the access party and the SDK provider. We and such third-party websites, applications, products and service providers each bear independent personal information protection responsibilities to you within the scope of the provisions of the law and the agreements between both parties.

2.5 TransferWe will not transfer your personal information to any company, organization or individual, except in the following circumstances:2.5.1 Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties;2.5.2 If we need to transfer personal information due to merger, division, dissolution, declaration of bankruptcy and other reasons, we will inform you of the name and contact information of the recipient and require the recipient to continue to be bound by this Policy. If the recipient changes the original processing purpose and processing method, we will require the recipient to re-obtain your consent.

2.6 Public DisclosureWe will only publicly disclose your personal information in the following circumstances:2.6.1 After obtaining your separate consent;2.6.2 Disclosure based on law: We may publicly disclose your personal information under the requirements of law, legal procedures, litigation or mandatory requirements of government competent departments.

3. How We Protect Your Personal Information

3.1 We have used security protection measures that meet industry standards to protect the personal information you provide, preventing unauthorized access, use, modification, public disclosure, damage or loss of data. We will take all reasonable and feasible measures to protect your personal information. For example, we use encryption technology to ensure the confidentiality of data; we use trusted protection mechanisms to prevent malicious attacks on data; we deploy access control mechanisms to ensure that only authorized personnel can access personal information; and we hold data security and privacy protection training courses to strengthen employees' awareness of the importance of personal information protection.

3.2 Our data security capabilities: Xyser Technology has established an information security department to build a complete and advanced data security protection system for Xyser Technology's products, including classification and grading of user information, encrypted storage, and data access permission control; we have formulated internal data management systems and operating procedures, and there are strict process requirements from collection, use, deletion or anonymization of data to avoid illegal use of user privacy data; we have determined the security management responsibilities of each department and its person in charge that access user personal information; we have established work processes and safety management systems for the collection, use of user personal information and related activities; we implement permission management for staff and dealers, review batch queries, modifications, replications, exports and deletions of personal information, and take anti-leakage measures; we properly store paper media, optical media, electromagnetic media and other carriers that record user personal information, and take corresponding safe storage measures; we implement access review for information systems that store user personal information, and take intrusion prevention, virus protection and other measures; we record the personnel, time, location, matters and other information of operations on user personal information; we regularly hold data security and privacy protection training to improve employees' awareness of personal information protection.

3.3 We will take all reasonable and feasible measures to ensure that irrelevant personal information is not collected. We will only retain your personal information for the period necessary to achieve the purposes described in this Policy, unless an extension of the retention period is required or permitted by law. When the above retention period expires, we will delete or anonymize your personal information held by us within a reasonable period of time. (In this Privacy Policy, "anonymization" refers to the process of technically processing personal information so that the personal information subject cannot be identified and the processed information cannot be restored. Information obtained after anonymization of personal information is not personal information.)

3.4 Before we stop providing products or services, we will notify you of the stop of provision through reasonable methods such as announcement and message push. When we stop providing products or services, we will promptly stop collecting your personal information and delete or anonymize the personal information we already hold within a reasonable period of time. The Internet environment is not 100% secure, and we will do our best to ensure or guarantee the security of any information you send to us. If our physical, technical or management protection facilities are damaged, resulting in unauthorized access, public disclosure, tampering or destruction of information, which leads to damage to your legitimate rights and interests, we will bear the corresponding legal responsibility.

3.5 After an unfortunate personal information security incident occurs, we will promptly notify you in accordance with the requirements of laws and regulations: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedial measures for you. We will promptly inform you of the relevant situation of the incident by email, letter, phone, push notification and other methods. When it is difficult to inform each personal information subject one by one, we will issue a public announcement in a reasonable and effective manner.At the same time, we will also actively report the disposal of personal information security incidents in accordance with the requirements of regulatory authorities.If you find that your personal information has been leaked, please contact us immediately through the contact information described in this Policy so that we can take corresponding measures in a timely manner.

4. Your Rights

In accordance with the common practice of relevant Chinese laws, regulations and standards, we will strive to protect the rights you enjoy in our personal information processing activities, including but not limited to:

4.1 Access, copy and transfer your personal information.

4.1.1 You have the right to log in to the Xyser Technology-related websites, APPs and mini-programs you registered through your Xyser Technology account to access and copy your relevant personal information by yourself, except for exceptions provided by laws and regulations. Where technically feasible, we will provide you with the function to export relevant personal information by yourself. Please note that due to the limitations of current legal requirements and/or our technical capabilities, some personal information cannot be exported by yourself. The specific exportable personal information shall be subject to the prompts on the export interface.

4.1.2 You have the right to obtain a copy of your personal information or require us to transmit your personal information to a third party designated by you. You can contact us and submit your request at any time through the contact information of the personal information protection department disclosed in Article 9 of this Policy [support@xyserrobotics.com], and we will complete the processing and reply to you within fifteen working days. The types of personal information that can be copied or transmitted to a third party designated by you include: personal account, email contact information.

If you cannot access, copy or transfer this personal information through the above methods, you can contact us at any time through the contact information described in this Policy. We will complete the processing of your access, copy and transfer request and reply to you within fifteen working days, and provide corresponding transfer methods when the transfer conditions meet the requirements of the national cyberspace authority.

4.2 Correct and supplement your personal information

4.2.1 When you find that your personal information is inaccurate or incomplete, you have the right to correct and supplement it in the following way: you can contact your dealer to revise the information.

4.3 Delete your personal information

4.3.1 In the following circumstances, if we have not actively deleted your personal information, you can submit a request to delete your personal information to us through the contact information described in this Policy:

a) The processing purpose has been achieved, cannot be achieved, or is no longer necessary to achieve the processing purpose;

b) We stop providing products or services, or the retention period has expired;

c) You have withdrawn your consent;

d) We process your personal information in violation of laws, administrative regulations or agreements;

e) Other circumstances specified by laws and administrative regulations.

4.3.2 For part of your personal information, you can contact your dealer to delete your account and information.

4.3.3 After you delete information from our service, we may not immediately delete the corresponding information in the backup system, but will delete this information when the backup is updated.

4.3.4 Where the retention period specified by laws and administrative regulations has not expired, or it is technically difficult to delete personal information, we will stop processing except for storage and taking necessary security protection measures.

4.4 Change the scope of your authorization consent or withdraw your authorization

4.4.1 Each business function requires some basic personal information to be completed. After you withdraw your consent, the corresponding business function will no longer be available. For part of your personal information, you can withdraw your consent on the relevant function page of the product service. Specifically:You can check the box to revoke the consent clause on the login page.

4.4.2 If you have other requests to withdraw consent that cannot be implemented, you can send a notification to us through the contact information described in this Policy to change the scope of authorization consent.

4.4.3 After you withdraw your consent, we will no longer process the corresponding personal information. However, your decision to withdraw consent will not affect the personal information processing carried out based on your authorization before the withdrawal.

4.4.4 Specifically, if you do not want to receive commercial marketing messages sent by us to you, you can reply to unsubscribe through the unsubscribe method clearly stated in the marketing email or short message, or contact us through the contact information described in this Policy.

4.5 Account cancellation by personal information subject

You can contact your dealer, and the dealer will cancel the account through the merchant management function. Or you can contact customer service to cancel your account and contact information. We will complete the processing and reply within fifteen working days.

4.6 Restrict automated decision-making by information systems

4.6.1 In some business functions, such as the login environment detection function, we may make decisions only based on non-manual automated decision-making mechanisms including information systems and algorithms. Such decisions may significantly affect your legitimate rights and interests. You have the right to request us to make an explanation through the contact information described in this Policy, and have the right to refuse us to make decisions only through automated decision-making. We will provide appropriate remedies to protect your legitimate rights and interests, such as explaining the automated decision-making logic and the relevant impact on you, or introducing manual review to recheck the correctness of the automated decision-making results.

4.7 Responding to your above requests

4.7.1 To ensure security, you may need to provide a written request or otherwise prove your identity. We may first require you to verify your identity before processing your request.

4.7.2 We will complete the processing of your request and reply to you within fifteen working days. If you are not satisfied with our reply, you can file a complaint with us through the contact information described in this Policy.

4.7.3 We generally do not charge fees for your reasonable requests, but for multiple repeated requests beyond a reasonable limit, we will charge a certain cost fee as appropriate. We may reject requests that are unreasonably repeated, require too many technical means (for example, require the development of a new system or fundamentally change current practices), bring risks to the legitimate rights and interests of others, or are very unrealistic.

4.7.4 In the following circumstances, we will be unable to respond to your request in accordance with the requirements of laws and regulations:

a) Related to the performance of the obligations of the personal information processor in accordance with laws and regulations;

b) Directly related to national security and national defense security;

c) Directly related to public security, public health and major public interests;

d) Directly related to criminal investigation, prosecution, trial and execution of judgments, etc.;

e) The personal information processor has sufficient evidence that the personal information subject has subjective maliciousness or abuses rights;

f) It is for the protection of major legitimate rights and interests such as the life and property of the personal information subject or other individuals, but it is difficult to obtain the consent of the person concerned;

g) Responding to your request will cause serious damage to the legitimate rights and interests of the personal information subject or other individuals and organizations;h) Involving trade secrets.

5. How We Process Children's Personal Information

5.1 When you browse our products without logging in, we only collect the current device status information and necessary common personal device information related to your use of specific products. Limited by existing technology, we cannot judge whether you are a child under the age of 14 (or the age of minors specified by the laws of your jurisdiction), but we will use such information strictly in accordance with the scope of your authorization consent and protect your personal information in accordance with the commitments in this Policy.

5.2 If we find that we have collected personal information of minors under the age of 14 (or the age of minors specified by the laws of your jurisdiction) without verifiable parental or guardian consent, we will try to delete the relevant data as soon as possible.

6. Protection of Personal Information of Deceased Users

6.1 After the death of a user (limited to natural persons), their close relatives may exercise the rights of access, copying, correction, deletion and other rights to the relevant personal information of the deceased user through the contact information described in this Policy for their own legitimate and legitimate interests, unless the deceased user has made other arrangements during their lifetime.

6.2 You understand and confirm that in order to fully protect the personal information rights and interests of the deceased user, the close relative of the deceased user who applies to exercise the rights in this article needs to submit the deceased user's identity document, death certificate, the applicant's identity document, the applicant's kinship certificate with the deceased user in accordance with the designated process of Xyser Technology or the prompts of customer service, and provide the type and purpose of the rights applied for. You can call the customer service contact number +86 188-9008-1265 or contact us through the contact information described in this Policy to obtain more information about the procedures, conditions and other matters related to the protection of the deceased user's personal information.

7. How Your Personal Information Is Transferred Globally

7.1 Since this service relies on overseas server deployment, the personal information we collect and generate within the territory of the People's Republic of China during your use of this service will be transmitted overseas and stored on overseas servers.

7.2 We will only provide your personal information overseas for the purpose of performing the service contract between you and us, or other legal processing purposes required by laws and regulations. We will strictly comply with the requirements of the current laws and regulations of the People's Republic of China, meet the outbound compliance requirements through legal methods such as security assessment and signing of standard contracts, and require overseas recipients to adopt security protection measures that meet legal requirements to ensure the security of your personal information.

7.3 If we are required to comply with the personal information protection requirements of data protection laws and regulations of other countries or regions according to applicable law, we will take corresponding compliance protection measures in accordance with local laws to protect the personal information-related rights you enjoy in accordance with the law.

8. How We Update This Privacy Policy and Applicable Law

8.1 Our privacy policy may be changed. Without your explicit consent, we will not reduce the rights you are entitled to under this Policy. We will publish the updated version of this Policy.

8.2 For material changes, we will also provide a more prominent notification (including pop-up notification or message notification, and for some services, we may send a notification via email).

8.3 Material changes to this Policy include but are not limited to:

8.3.1 Major changes in our service model. Such as the purpose of processing personal information, the types of personal information processed, the usage of personal information, etc.;

8.3.2 Major changes in our ownership structure, organizational structure, etc. Such as changes in ownership caused by business adjustments, bankruptcy and mergers and acquisitions, etc.;

8.3.3 Major changes in the main recipients of personal information provided to third parties, transferred or publicly disclosed;

8.3.4 Major changes in your rights to participate in personal information processing and the ways you exercise these rights;

8.3.5 Changes in the responsible department, contact information and complaint channel responsible for handling personal information security;

8.3.6 When a personal information security impact assessment report indicates that there is a high risk.

8.4 We will also archive the old version of this Policy for your reference.

8.5 This Policy only applies to our customers located in China. If you want to know the privacy policy of other countries/regions covered by our business, please refer to the relevant privacy protection documents in Article 7.3 of this Policy.

8.6 The conclusion, performance, interpretation and dispute resolution of this Policy shall be governed by the laws of the People's Republic of China (excluding Hong Kong, Macao and Taiwan regions), and the application of conflict of laws rules is excluded.

9. How to Contact Us

9.1 If you have any questions, comments or suggestions, you can contact our delivery and service team or our specialized department responsible for personal information protection through the following methods. Generally, we will complete the processing and reply within fifteen working days.Company Name: Xyser Technology Co., LtdRegistered Address: Room 2705, East Tower, Building A Manjinghua Innovation Center, Songgang Street, Bao'an District, Shenzhen, ChinaCommon Office Address: Room 2705, East Tower, Building A Manjinghua Innovation Center, Songgang Street, Bao'an District, Shenzhen, ChinaCustomer Service Contact: +86 188-9008-1265Contact Information of the Department Responsible for Personal Information Protection: support@xyserrobotics.com

9.2 You have the right to contact us and file a complaint through the method disclosed in Section 9.1 of this Policy. We will complete the processing and give a reply within fifteen working days from the date we receive your complaint. If you are not satisfied with our reply, especially if you believe that our personal information processing behavior has damaged your legitimate rights and interests, you can also file a complaint or report with regulatory authorities such as the cyberspace administration, public security, and industry and commerce, or file a lawsuit with the People's Court of Bao'an District, Shenzhen or other courts with jurisdiction.