# Privacy Policy

## Effective date

In this Privacy Policy (“Policy”), Espressif and its subsidiaries and affiliates（“we”, “us”, and “our”）provide information about how we collect, use, process and transfer personal data. For this Policy, we use the term “personal data” broadly to cover the many privacy and data protection laws applicable to us; “personal data” means information related to an identified natural person or that could reasonably be used (by itself or in combination with other data reasonably available) to identify a natural person.

We are committed to protecting and respecting your privacy. Please read this Policy carefully before accepting and/or using our ESP Component Registry (or “Registry”) to understand our views and practices regarding your personal data and how we will treat it. Once you choose to use Registry, it is deemed that you agree to the entire content of this Privacy Policy and consent to our collection and use of your relevant information in accordance with it. If you have any questions about this policy during the reading process, you can contact us using the details at the end of this Policy.

## Scope

This Policy applies to our Platform. This Policy covers only personal data collected through the Platform and not any other data collection or processing, including, without limitation, data collection practices of other services that maintain their own, separate privacy policies.

## What Personal Data Is Collected

-   **Account Information:** We requires User to have a GitHub or GitLab account to sign up on Registry through the Desktop apps, CLI, website, or any other means to uniquely identify a user.
-   **Cookies:** We uses cookies and similar technologies to provide functionality, such as storing your settings and authentication.
-   **Device Information and Identifiers:** When you access and use Registry, we collect information about your device, which may include: device type, your device operating system; browser type and version; language preference; IP address, cookie identifiers, and hardware identifiers, for security reasons.
-   **Email addresses:** We will contact you through the email address you provide to us, such as sending event notifications and other information.

## Where We Store and Process Data

We store and process all the relevant information in Amazon Web Services (AWS) servers in Hong Kong.

## International Data Transfers

Espressif is a global company, and we may transfer your information to Espressif subsidiaries, affiliates, representatives, or third-party contractors acting on our behalf worldwide. Each Espressif subsidiary and affiliate collaborates closely with Espressif and any transfer of personal data between these affiliated entities will be compliant with the applicable Privacy and Data Protection Laws. If any of these parties are using your information for direct marketing purposes, we will only transfer the information to them for that purpose with your express and separate consent.

## Individual Rights

We have defined a procedure for you to seamlessly exercise the rights you have to manage your personal information collected by us. We act as a controller for the personal data collected through Registry.

## You can exercise below rights by contact us.

-   Request access to the personal data we process about you
    This right entitles you to know whether we hold personal data about you and, if we do, to obtain information on and a copy of that personal data.

-   Request a rectification of your personal data
    This right entitles you to have your personal data be corrected if it is inaccurate or incomplete.

-   Object to the processing of your personal data
    This right entitles you to request that we no longer process your personal data.

-   Request the erasure of your personal data
    This right entitles you to request the erasure of your personal data, including where such personal data would no longer be necessary to achieve the purposes.

-   Request the restriction of the processing of your personal data
    This right entitles you to request that we only process your personal data in limited circumstances, including with your consent.

-   Request portability of your personal data
    This right entitles you to receive a copy (in a structured, commonly used, and machine-readable format) of personal data that you have provided to us.

-   Withdraw of Consent
    To the extent that the processing of your personal data is based on your consent, you have the right to withdraw such consent at any time by contacting us. We will process your request within a reasonable time from when the request was made, and thereafter not collect, use and/or disclose your personal data as per your request.

-   Complaint
    You can also complain to the authority if you are unhappy with how we have used your data.

## Security

We ensure your data remains secure and confidential, including certain processing carried out by the sub-processor. For this purpose, the appropriate technical and organizational measures are in place to prevent the loss, misuse, alteration, and deletion of your personal data. These measures are adapted according to the level of sensitivity of this processed data and the level of risk that the processing or implementation of it presents.

## Storage period

Unless otherwise expressly required by law or with your permission, we will only retain your personal information for as long as is necessary for the purposes described in this Privacy Policy.

## Data related to Minors

If you are under 18 years old or you are a minor pursuant to the laws and regulations of the place in which you reside, we recommend you to ask your parents or guardians to read this Policy and use our Platform or provide your information to us with the prior consent from your parents or guardians. If your guardians do not allow you to use our Platform or provide your information to us according to this Policy, please stop using our Platform immediately and give a notice on time so that we can react accordingly. Espressif does not knowingly collect or store any personal information from anyone under 18 years old. Espressif will keep personal information of minors confidential and safe in accordance with the relevant laws and regulations.

If we discover that we have collected personal information from minors without first obtaining verifiable parental consent, we will try to delete the relevant data as soon as possible. If you are the guardian of a minor, when you have any questions about the use of our Platform by the minor under your guardianship or the user information provided to us, please contact us in time. We will protect the confidentiality and security of minor user information in accordance with relevant laws and regulations and the provisions of this policy.

## Integration with external components and links to other websites

As part of services, we have integrated third-party plug-ins or components in our websites to provide you the smooth sign-in option. However, we are not responsible for the privacy practices employed, including their intent or behavior by those external sources or websites. This Policy applies solely to the information collected by us through our Site. Therefore, this Privacy Policy does not apply to your use of a third-party plug-ins or components or website accessed by selecting a link on our Site or via our Site. To the extent that you access or use the Platform through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

## Modification of the personal data protection notice

This Privacy Notice is subject to change.

This policy is provided to facilitate the rights of natural persons with regard to the processing of personal data under Directive 95/46/EC (General Data Protection Regulation), also known as the GDPR. We hope that the above content concerning services and this website are as concise, transparent, and intelligible as possible.
This Privacy Notice is subject to change.

## Contact Us

If you need to get in touch about accessing your data stored on our servers, or for any other complaint or query, please reach out to us at components@espressif.com.