1. Introduction

BODEN AI ("BODEN AI," "we," "our," or "us") respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, and protect information when you visit https://www.boden.ai (the "Website") or interact with our services. This Policy applies to: Website visitors Prospective customers and partners Business contacts and representatives This Privacy Policy forms part of the Legal Information published on this Website and should be read together with the Terms of Service below.

2. Information We Collect (Website Data)

2.1 Information You Provide

We may collect information you voluntarily submit, including: Name Company name Job title Business email address Contact information Messages or inquiries

2.2 Information Collected Automatically

When you access the Website, we may automatically collect: IP address Browser and device information Pages visited and usage data Referring URLs This information is collected using cookies and similar technologies.

3. Customer Data Processing (Core Principle)

BODEN AI provides data annotation, data collection, and related AI data services as a data processor or service provider on behalf of our business customers. Key principles: Customer data is provided, controlled, and owned by the customer We process such data only according to customer instructions and contractual agreements We do not use customer data to train our own models or for any purpose beyond service delivery, unless explicitly agreed in writing Customers remain responsible for ensuring they have appropriate rights and permissions for the data they provide

4. Data Collection Activities

Where our services involve data collection (including, but not limited to, sensor data, video, images, teleoperation logs, interaction data, or task demonstrations): Data collection is conducted under customer authorization Collection is limited to defined project scopes We aim to minimize the collection of personal data whenever possible If personal data is involved, it is handled in accordance with applicable laws and contractual safeguards BODEN AI does not independently collect personal data from the public for resale or advertising purposes.

5. Cookies and Analytics

We use cookies and analytics tools to: Understand Website usage and performance Improve content and user experience You may disable cookies through your browser settings. Some features of the Website may be limited as a result.

6. Data Sharing and Disclosure

We do not sell personal data. We may share information only: With trusted service providers under confidentiality obligations To comply with legal requirements or lawful requests To protect the rights, security, and integrity of BODEN AI and its users

Personal Data Category: user ID, name, email address and other contact and shipping information

Recipient/Category of Recipient: Third-party sellers (those who sell their products on our services and who may ship the products to you directly)

Why: For third party-sellers to respond to you or fulfill your order and provide your personal data to their service providers in order to ship the products to you.

7. Data Retention

We retain personal data only for as long as necessary to fulfill business, contractual, or legal purposes, unless a longer retention period is required by law. We determine the retention period of personal data based primarily on the following criteria: To fulfill the purposes described in this Privacy Policy; Whether you have agreed to a longer retention period; Based on the needs related to the statute of limitations for litigation; Whether there are other special agreements or legal regulations concerning the retention period. After exceeding the retention period, we will delete or anonymize your personal data in accordance with applicable laws.

8. Data Security

We implement reasonable technical and organizational measures to protect data from unauthorized access, loss, or misuse. The Internet is not an absolutely secure environment. We strongly recommend that you use a secure method and use a complex password to help us ensure the security of your account. We also strongly advise that you neither share your password with others nor re-use passwords on our Services that you use on other sites or apps, as doing so increases the likelihood of your being the victim of a credential stuffing attack or other malicious cyber behavior. If you feel that the security of your account or personal data has been compromised, please immediately contact us as described in the Contact Us section below.

9. International Data Transfers

As a global company, information may be transferred to and processed in jurisdictions outside your country of residence. We apply appropriate safeguards consistent with applicable data protection laws. For transfers of personal information from the EEA, the UK, and Switzerland to third countries, we will transfer personal information according to the requirements of applicable data protection legislation by putting in place appropriate safeguards, including by entering into European Commission Standard Contractual Clauses. A copy of the relevant mechanism can be obtained for your review on request by using the contact details below.

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

Right: The right to access information
Summary: Enables you to receive information regarding whether we are processing your personal data

Right: The right to rectification
Summary: Enables you to correct any inaccurate or incomplete personal data we hold about you

Right: The right to erasure
Summary: Enables you to ask us to delete your personal data in certain circumstances

Right: The right to restrict processing
Summary: Enables you to ask us to halt the processing of your personal data in certain circumstances. You have the right to request the restriction of the processing of your information where (a) you are challenging the accuracy of the information, (b) the information has been unlawfully processed, but you are opposing the deletion of that information, (c) where you need the information to be retained for the pursuit or defence of a legal claim, or (d) you have objected to processing and you are awaiting the outcome of that objection request

Right: The right to object
Summary: Enables you to object to us processing your personal data on the basis of our legitimate interests (or those of a third party), including processing for direct marketing purposes - your objection will be upheld, and we will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims that may be brought by or against us

Right: The right to data portability
Summary: Enables you to request us to transmit personal data that you have provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible

Requests can be submitted using the contact information below. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you wish to exercise any of these rights, please contact us at the contact details set out below. Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We may however have other legal grounds for processing your data for other purposes, such as those set out above. If you have unresolved concerns, you have the right to lodge a complaint to a data protection authority in the country that you reside in or, the country of your place of work or the country where the alleged infringement took place. A list of data protection authorities in the EU/EEA is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en#member-is. For non-EU countries, please refer to the website of your local data protection authority.

11. Children's Data

Our Website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

12. Third-Party Links

The Website may contain links to third-party websites. We are not responsible for their privacy practices or content.

13. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.

14. Contact Us

If you have questions about this Privacy Policy, please contact: BODEN AI Email: company@bodenai.com Website: https://www.boden.ai

‍