Privacy Policy

Last updated: October 14, 2026

Kosmo website is operated by Hesai Technology Pte. Ltd. and its affiliates (“we”, “our”, or “us”) respects your right to privacy and values the protection of your personal data. This Kosmo Website Privacy Policy (this “Policy”) is intended to inform you how we collect and use your personal data, how we protect your personal data, and how you may exercise your rights in personal data when you access Kosmo official website. By accessing Kosmo official website, you acknowledge that you have carefully read and understood this Policy and agree to be bound by it.

If you have any questions about this Policy, please contact us using the contact details provided in “How to contact us”.

This Policy describes:

• How do we collect and use your personal data 
• How do we use cookies and similar technologies 
• How do we entrust the processing of, share, transfer, and publicly disclose your personal data
• How do we transfer your personal data internationally 
• How do we retain your personal data
• How do you protect your personal data 
• How do we process minors’ personal data 
• Your rights  
• How do you update this Policy 
• How to contact us.

1. How do we collect and use your personal data

We may collect personal data from you in the course of our business, including through your use of our website, when you contact or request information from us. In general, we will use your personal data only for the purposes described in this Policy or for purposes that we explain to you at the time we collect relevant personal data.

1. User behavior on the website

When you interact with our website, including when you add products to favorites or download materials such as selection guides or white papers, we may collect information about those interactions. We use this information to analyze user preferences, optimize product recommendations and user journeys, and support shopping path analysis.

2. Recruitment and event interactions

When you submit a job application via our careers page or attend our events, exhibitions or partner conferences, we may collect your name, email address, phone number, resume/CV, education and work history, areas of interest and position preferences, portfolio links (optional), job title, company, badge scan data, and photos and video recordings taken at events. We use this information to evaluate your job application, register you for events, enable networking, and maintain event security and safety.

3. Access logs and device/session information

When you access or use our website, we may collect your IP address, navigation paths, time spent on pages, page click data, browser type/version, operating system type, token expiry time, login time, login device and logout time. We use this information to analyze regional traffic and user behavior, prevent malicious access, ensure server security, resolve compatibility issues, optimize access experience across devices and browsers, maintain session status, support “remember me” or auto logout functions, release server resources, and analyze login patterns across devices.

4. Enterprise partner inquiries

When you contact us regarding potential cooperation or business discussions, we may collect your company name, contact name, phone number, email address and cooperation requirements, including industry application information. We use this information to verify cooperation qualifications, manage cooperation requests, follow up on business discussions, conduct due diligence where appropriate, and manage cooperation progress.

If you provide us with any personal data of any data subjects other than yourself, please bring this Policy to their attention. You hereby acknowledge that you have obtained their consent or satisfied conditions as required by other lawful bases for personal data processing in lieu of consent before providing such personal data to us. By submitting such information to us, you represent to us that you are entitled to provide and we are entitled to process relevant personal data for the purposes stated in this Policy.

2. How do we use cookies and similar technologies

We use cookies and similar technologies to enhance your experience on our official website. Cookies typically contain identifiers, the site name, and certain numbers and characters. We may use cookies and similar technologies to verify your identity, maintain the security of data and services, store your preferences, and provide you with better user experience.

You may control or disable cookies through your browser settings; however, disabling certain cookies may affect our website functionality. For more information, please refer to our Cookie Policy.

3. How do we entrust the processing of, share, transfer, and publicly disclose your personal data
4. Entrusted processing

Where necessary for the provision of hosting, maintenance, security, communications, or other operational services, we may entrust third-party service providers to process personal data on our behalf. We will enter into agreements with such entrusted parties requiring them to keep the data confidential and to process the data in accordance with applicable laws, this Policy, and our instructions. We will supervise their personal data processing activities.

2. Sharing

• We will not share your personal data with any company, organization, or individual other than us, unless we have obtained your separate consent.
• To provide you with the Services of the Platform and protect the security of your account, we may share your personal data with our affiliates or partners. We will share your personal data with our affiliates or partners in accordance with this Policy, but only to the extent necessary and subject to the purposes stated in this Policy. If our affiliates or partners intend to change the purpose of processing your personal data, they will seek your authorization and consent again.
• We may share your personal data externally where required by laws and regulations, or in response to mandatory requirements from competent government authorities.

3. Transfer

Without your consent, we will not transfer your personal data to any third-party company, organization, or individual. Where a transfer is truly necessary due to a merger, division, dissolution, bankruptcy declaration, or similar circumstance, we will carry out the corresponding statutory procedures in accordance with law. Before such transfer, we will inform you of the name and contact information of the recipient and require the recipient to continue performing the obligations related. If the recipient changes the original purpose or method of processing, we will require it to obtain your consent again in accordance with law.

4. Public disclosure

We may publicly disclose your personal data in the following circumstances:

• after obtaining your explicit consent; or
• where disclosure is required by law: we may publicly disclose your personal data where required by laws, legal procedures, litigation, or mandatory requirements of competent government authorities.

Unless we have obtained your consent in accordance with law, or as otherwise required by laws and regulations, we will not entrust the processing of, share, transfer, or publicly disclose your personal data beyond the circumstances described in this Policy.

4. How do we transfer your personal data internationally

For the needs of our global operations, your Personal Data may be transferred to, or accessed from jurisdictions outside the place where you are located. Those jurisdictions may not provide the same level of protection as your home jurisdiction.

When we transfer Personal Data across borders, we will obtain your (separate) consent where required by applicable law and take appropriate safeguards in accordance with applicable legal requirements.

5. How do we retain your personal data

We will take all reasonably practicable steps to ensure that no unrelated personal data is collected. Unless otherwise required by laws and regulations, we will retain your personal data for the following periods：

• We may retain your personal data to meet our legitimate business needs.
• When there is no such legitimate business need to use your personal data, or when the retention period required by applicable laws and regulations expires, we will delete or anonymize your personal data or, if neither deletion nor anonymization is possible (e.g., if your personal data has already been stored in a backup), store it securely and insulate it from other data processing areas.

6. How do we protect your personal data

We use appropriate technical and organizational measures to protect your personal data that we collect and process. These measures will be applied depending upon the level of risk of your personal data. Please be aware and understand that an absolute secure network is in no way assured. If you find that your personal data are breached, please immediately contact us using the contact details disclosed in “How to contact us” in this Privacy Policy so that we can take corresponding measures.

In the event of any accident, force majeure event or other circumstances leading to the breach of your personal data, we will make every effort to control the situation and promptly inform you of the cause, the security measures we have taken, and you can take and other relevant information. In the event of a security incident related to personal data, we will report to the competent authorities in accordance with the requirements of applicable laws and regulations, promptly investigate the problem, and take emergency measures.

7. How do we process minors’ personal data

Please note that normally we do not intentionally collect or process personal data of minors (as defined by applicable laws). For the personal data of minors we collect upon the consent of parents or guardians, we will process such information only to the extent permitted by law, explicitly authorized by parents or guardians, or necessary for the protection of minors.

If you become aware that we may have collected minors’ personal data without their parents’ or guardians’ consent, please contact us in the manner set out in this Policy. Upon verification, we will delete or otherwise process such personal data in accordance with applicable law and the requests of the minor’s parents or guardians.

8. Your rights

If you want to access, correct, update or delete your personal data, and exercise other legal rights of a data subject under applicable laws and regulations (e.g., to withdraw your consent to our collection and processing of your personal data, or to request us to transfer your personal data to a designated third party as long as the legal conditions are met, or to restrict our processing of your personal data, or to object to any processing of your personal data carried out by us on the basis of legitimate interests, etc.), you can contact us using the contact details provided in “How to contact us” below.

We will respond to all requests you make to exercise the data subject’s rights in accordance with the requirements of applicable laws and regulations within the required time limit. To the extent permitted by applicable laws and regulations, we may not be able to respond to your request to exercise your rights under certain circumstances. For instance, if your request is contrary to our obligations under applicable laws and regulations, or may infringe our trade secrets, we may refuse to respond to your request.

9. How do we update this Policy

In order to provide you with better services and in line with the development of our business, we may update this Policy from time to time. Without your explicit consent, we will not reduce the rights you are entitled to under this Policy. We will publish the updated version on the Platform and, before it takes effect, notify you of the relevant updates through website announcements or other appropriate means. We also encourage you to visit the Platform periodically so that you can stay informed of the latest Privacy Policy.

For material changes, we will also provide more prominent notice, including but not limited to sending you text messages or displaying special notices on browsing pages, to explain the specific changes to this Privacy Policy.

Material changes referred to in this Policy include, but are not limited to:

• significant changes to our service model, such as the purposes for processing personal data, the types of personal data processed, or the manner in which personal data is used;
• significant changes to our ownership structure or organizational structure, such as changes in ownership arising from business adjustments, bankruptcy, or mergers and acquisitions;
• changes to the main recipients of personal data sharing, transfer, or public disclosure;
• significant changes to your rights relating to participation in personal data processing and the methods for exercising those rights;
• changes to the department responsible for personal data security, contact details, or complaint channels; and
• where a personal data protection impact assessment report indicates a high risk.

In order for you to receive notices in a timely manner, we recommend that you promptly notify us if your contact details are updated. If you continue to use our Platform services after an updated version of this Policy takes effect, this means that you have fully read, understood, and accepted the updated Privacy Policy and agree to be bound by it.

10. How to contact us

If you have any questions or concerns about this Policy or our processing of your personal data, please contact us using the details below. We will review your request and respond in accordance with applicable law.

Contact email address: service@kosmoai.com