Version 1.1

Published date: April 27, 2026

Effective date: April 27, 2026

This Privacy Policy specially addresses how PixelSpace collects, uses, discloses, transmits and stores (collectively, "processes") your personal data through the Insta360 Wave, Insta360 Wave Controller and Insta360 InSight website, when providing storage, synchronization, management, AI transcription, AI summarization, editing and sharing services (hereinafter referred to as "Cloud Service" or "Services") for your audio recordings, screenshots taken during recording, and audio tagging recorded by the Insta360 Wave (collectively, "audio recording data").

Insta360 InSight (U.S.) refers to our cloud service for U.S. users (hereinafter referred to as "you"), which is operated by PixelSpace Technology Pte Ltd (hereinafter referred to as "PixelSpace", "we", "us" or "our") improve the efficiency and reliability of cloud service to the U.S. users and comply with U.S. laws and regulations.

PixelSpace is a service provider for cloud services to users in the United States. PixelSpace allows you to use certain Internet services in accordance with the Insta360 InSight (U.S.) User Service Agreement, including storing and managing your audio recording data on compatible devices and computers, as well as processing and sharing your stored audio recording data. Arashi Vision Inc. and its affiliates (hereinafter referred to as "Insta360") may from time to time provide support for PixelSpace with respect to cloud services. If you have any questions about this policy, you may email DPO@pixelspace-tech.com.

BEFORE USING INSTA360 INSIGHT (U.S.), PLEASE CAREFULLY READ AND THOROUGHLY UNDERSTAND THIS POLICY, AND ENSURE YOU DEEM THE AGREEMENT APPROPRIATE. WE WILL ADHERE TO CURRENT LAWS AND REGULATIONS AND PROCESS YOUR PERSONAL INFORMATION APPROPRIATELY, BASED ON LEGAL AND LEGITIMATE MEANS, AND IN GOOD FAITH. SIGNIFICANT TERMS IN THE POLICY THAT RELATE TO YOUR RIGHTS ARE HIGHLIGHTED IN BOLD FOR YOUR ATTENTION. IF YOU DO NOT AGREE TO THIS POLICY, PLEASE DO NOT USE INSTA360 INSIGHT.

This Policy is exclusive to cloud service users based in the United States. In cases where there are specific agreements that differ from the Insta360 Privacy Policy or Insta360 InSight Privacy Policy, this policy shall prevail. Additionally, we recommend carefully reviewing the Insta360 InSight (U.S.) User Service Agreement, especially in cases where this policy does not make specific provisions.

This policy contains:

1. Scope of Application and Basis for Personal Information Processing

2. How We Collect and Use Your Personal Information

3. How We Use Cookies and Similar Technologies

4. How We Share, Transfer, and Disclose Your Personal Information

*Additional Note for California Residents

5. How We Store and Protect Your Personal Information

6. Safeguarding Your Personal Information

7. Your Rights

8. Protection of Children's Personal Information

9. Notifications and Revisions

10. How to Contact Us

1. Scope of Application and Basis for Personal Information Processing

1.1 Scope

This Policy applies to the Insta360 InSight cloud service in the United States, which is operated by PixelSpace. It is applicable when you use Insta360 InSight (U.S.), or access Insta360 InSight (U.S.) through the Insta360 Wave, Insta360 Wave Controller and the Insta360 InSight website.

Please be aware that this policy is only applicable to the personal information we process and does not extend to personal information handled by third-party products and/or services accessed through Insta360 InSight (U.S.), including any third-party websites, apps, mini-programs, etc.

1.2 Legal Basis for Personal Information Processing

We process your personal information when deemed necessary, and under applicable law, on a valid legal basis. This may include your explicit consent, compliance with the law, fulfillment of contractual obligations, protection of rights, or our legitimate business interests or pursuits. We may process your personal information based on the following legal grounds:

a) Consent: Before we process your personal information, you will be informed in an unambiguous way. Without obtaining your consent to the use of your personal information for a specific purpose, we will not process your personal information.

b) Business Purposes: The processing of your personal information is necessary for a business purpose that we will disclose to you at the time of collection. Such business purposes include, but are not limited to, fulfilling the terms of the service agreement and improving your service experience.

c) Legal Obligations: To comply with applicable laws, government requests, judicial procedures, court orders, or legal processes, such as responding to court orders or subpoenas (including responding to public authorities to meet national security or law enforcement requirements), we may process your personal information as required by law.

d) Scientific, Historical, or Statistical Research: To the extent permitted by applicable laws and regulations, the processing of your personal information may be for public or peer-reviewed scientific, historical, or statistical research in the public interest.

e) Debugging: The processing of your personal information may be executed in order to identify and repair errors that impair the functionality of our services.

f) Legitimate Interests: Within the permissible scope of applicable laws, to achieve our legitimate business interests or to exercise or defend legal claims, we may process your data under reasonable and necessary circumstances.

g) Other legal bases permitted by applicable laws and regulations.

2. How We Collect and Use Your Personal Information

2.1 The categories of Information we collect are as follows:

a) Contact information, such as your email address.

b) Account information and membership information, such as your Insta360 account user ID, login IP address, account location, regional data center, current membership plan and validity, order information (including membership type, duration, purchase date, order amount, payment channel, order number).

c) Cloud space usage information, such as your user ID, total storage size of cloud space, usage data, cloud data ID, storage paths within the Insta360 InSight, file types, file size, etc.

d) Metadata of audio recording data, such as the date of the audio recording, the storage path of audio recording data inside the Insta360 Wave.

e) Device information, such as device model, operating system, IP address, MAC address, browser language, the state or country from which you accessed the service, Wi-Fi network, and software and hardware attributes.

f) Cloud sharing data(if cloud sharing services are enabled): such as user ID, share expiration time, permissions, and information of the shared audio recording data, including the topic of the audio recording, date of the audio recording, etc.

g) Editing data (if editing service is enabled), such as your editing records and editing time.

h) Customer Service interaction information, such as your messages, questions, feedback and any content sent to Customer Service.

i) Information collected through automated technologies(e.g., cookies or similar technologies) about your use of the services.

j) Other personal information we collect from you based on your advance explicit consent.

2.2 How We Use Your Personal Information:

a) Selecting account location and choosing your membership plan for the Insta360 InSight (U.S.) service:

After registration, you can view the membership service introduction of Insta360 InSight (U.S.) service, choose a membership plan, confirm your account location when selecting a membership plan for the first time and confirm and complete payment to purchase the corresponding package. Upon receiving or purchasing these Services, PixelSpace collects and uses your [account information (user ID, login IP address, account location, the Regional Data center), current membership plan and validity, order information (membership type, duration, purchase date, order amount, payment channel, order number)]. If you refuse to provide the aforementioned information, you will be unable to use the Insta360 InSight (U.S.) service.

b) Upload and Download Services: After subscribing or purchasing Insta360 InSight (U.S.), you can connect your device to your Insta360 InSight (U.S.) in order to upload audio recording data directly from your device. You can also choose to download stored files from Insta360 InSight (U.S.) and configure the network conditions for uploads and downloads. For this, Pixelspace will collect your [data from the connected Insta360 Wave device (if enabled, including your user ID, device type, device serial number, and the storage path of audio recording data inside the Insta360 Wave)]. Uploading and downloading is a basic function of Insta360 InSight (U.S.), if you do not provide the above data, you will be unable to use the service.

c) Auto Backup Service: You can set the Insta360 Wave to automatically upload audio recording data to Insta360 InSight during your device is in idle, connected to Wi-Fi, and charging status to backup data. You can choose whether to enable the automatic upload service yourself.

d) Transcript/Summary Services: Upon uploading audio recording data to the Insta360 InSight platform, you may utilize transcript generation and AI-powered summary services. Specific operations include:

i. Data Upload.

To enable transcription/summary services, you must upload audio recording data to Insta360 InSight (U.S.). We collect and process: [User ID, total/used/remaining cloud storage capacity, audio recording data ID, Insta360 InSight storage path, file type, name, creation timestamp, duration, and file size]. Denial of such data will result in service unavailability.

ii. Transcript & AI Summary.

To transcribe selected audio recordings, our servers generate text transcripts, which will be anonymized before being sent to third-party AI models for summarization. Please rest assured that neither Insta360 nor AI vendors use your data for model training. Opting out of this process disables transcript/summary functionality.

You may provide feedback on our AI summary content or use the [Custom Summary Template] to create AI summaries. To improve and optimize our products and services, we may collect this feedback and any text you upload via the [Custom Summary Template]. Once securely encrypted and stripped of any identifying information, this data may be used to analyze and enhance the summary functionality and to improve your overall experience. We will not associate this information with personal identifiers, nor will we use it for model training or any unrelated purposes. This processing is non-essential. If you do not wish your data to be used in this way, please contact us and, once we have verified your request, we will cease such use.

iii. Speakers Tagging.

To streamline transcript readability, you may tag speakers with: [Name, title, company, email, bio]. These tags are securely linked to attendee voice profiles stored on Insta360 Wave devices for automated future tagging. Please make sure that you have obtained consent from attendees before processing their data. Refusal to provide such data disables attendee tagging and directory features.

e) Cloud Sharing of Data

You can externally share the data (including audio recording data, transcript and AI summary, hereinafter referred to as "data") stored in Insta360 InSight (U.S.) through links (valid for 7 days). You can view the information links you have shared or cancel the sharing in the Insta360 Wave. To enable cloud sharing of data, we need to collect and use your [User ID, data name, creation timestamp, duration, audio, transcript, speaker names, and AI summary]. If you refuse to provide the aforementioned information, you will be unable to use the sharing service of Insta360 InSight (U.S.).

Shared link recipients may view shared data via a web interface or save it to their Insta360 accounts for future access. You are solely responsible for vetting the shared content. Neither PixelSpace nor Insta360 is responsible for any subsequent actions taken by shared link recipients regarding the shared content.

Additionally, with the aim of preventing the dissemination of illegal content, if we receive a complaint of illegality or infringement on your shared content, we may temporarily disable access to the shared content and conduct content moderation(including manual moderation) on data shared by you upon prior notice to you and without violating your privacy. Please understand and agree that during manual moderation, our staff will check the data you share and we will do our best to protect your privacy and security. In regard to the complaint channel and the relevant rules of content safety inspections, please refer to Insta360 InSight (U.S.) User Service Agreement.

You understand and commit to obtaining authorization from others if the shared data involves their privacy or intellectual property rights before sharing it with data recipients.

f) AI Assistant

You may query the AI Assistant about your audio recording records or transcriptions via Insta360 InSight. Responses are generated by third-party AI models using your audio recording data (audio, transcripts, summaries) and public information. Your audio recording data will be transmitted to third-party AI providers to enable this feature. Opting out disables the AI Assistant. Please rest assured that neither we nor AI providers use your data for model training or algorithmic refinement.

g) Third-Party Service Connections

(i) File Storage. To facilitate the management and storage of your files, you may choose to connect your Google, Notion, or other third-party platform accounts to Insta360 InSight. You may limit the information we receive by adjusting the authorization settings made available by the applicable third-party platform. Subject to your instructions, we may sync and save files that you generate in, or select for storage through, Insta360 InSight to Notion, Google Drive, or other third-party platforms you authorize. You may manage your authorizations through "Account & Settings - Integrations". If you withdraw our access to information from a third-party platform, such withdrawal will not affect information we lawfully obtained from that third party prior to the withdrawal.

If you choose to connect your Google Account and use the relevant export functionality, Insta360 InSight's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

The Google permissions we request（ https://www.googleapis.com/auth/drive.file and https://www.googleapis.com/auth/documents ）solely to create and write formatted meeting‑minute content into Google Docs that our application itself creates in the user's own Google Drive, triggered by the user clicking "Export to Google Drive" on their own meeting in InSight. We do not read, list, or modify any other files in the user's Drive. We do not transfer, sell, or share this data with third parties, do not use it for advertising, and do not use it to train AI/ML models. Users can revoke this authorization at any time from within InSight.

(ii) AI Tool Connections. To enable you to manage and use your file content more efficiently through third-party AI tools, you may choose to connect Insta360 InSight with a third-party AI platform of your choice. Based on the scope of authorization you select on the relevant authorization page, we may provide the third-party AI tool with your Insta360 InSight account information and file content so that you can manage and use your file content through that tool. You may manage your authorizations through "Account & Settings - Integrations". If you revoke the relevant authorization, such revocation will not apply to information that was obtained, processed, or used to complete operations requested by you prior to the revocation.

h) Ensuring Service Security, Optimization, and Improvement: When you use Insta360 InSight (U.S.), we collect and use your [User ID, user order information, user transaction information, transaction currency, cloud space usage details, subscription duration, status, region, and location of storage chosen by you on your first subscription]. This data is utilized for internal purposes only, such as ensuring the normal use of Insta360 InSight (U.S.) services, addressing issues encountered during service usage, improving and optimizing the Insta360 InSight (U.S.) service experience, securing your account, preventing, detecting, and investigating fraud, actions harmful to security, illegal activities, or violations of our agreements, policies, or rules. It aims to protect your, our, or our affiliated companies', partners', and the public's legitimate rights and interests. This data will not be disclosed externally.

i) Sending Marketing and Promotional Information: We do not serve third-party advertisements to you while using our services. However, we may [process your personal information, such as email addresses, as well as other data obtained from your interactions with our services, to send marketing information to you via email]. Before sending such marketing information, we will seek your explicit consent. You can unsubscribe at any time by clicking the unsubscribe link in these emails. Please note that if you choose not to receive marketing information, we may still contact you regarding your use of our services, including but not limited to responding to your questions or requests.

Please be aware that, according to relevant laws and regulations, anonymized data is not considered personal information, and we do not need your consent for processing such data. In cases involving the training and application of generative artificial intelligence large models, we adhere to transparency requirements by publicly disclosing relevant information.

*Notice Regarding Sensitive Personal Information

DATA UPLOADED BY YOU TO INSTA360 INSIGHT CLOUD SERVICES MAY CONTAIN SENSITIVE PERSONAL INFORMATION, INCLUDING [AUDIO RECORDING DATA, SCREENSHOT INFORMATION, etc. ]. PLEASE EXERCISE CAUTION WHEN UPLOADING CONTENT CONTAINING SENSITIVE PERSONAL INFORMATION, WHETHER PERTAINING TO YOURSELF OR OTHERS. WE DO NOT DIRECTLY PROCESS THE DATA YOU UPLOAD. THROUGH TECHNOLOGICAL MEANS, WE ENSURE THE SECURITY OF DATA UPLOADED TO THE CLOUD SPACE.

3. How We Use Cookies and Similar Technologies

Cookies, device identifiers, and similar technologies are standard tools widely adopted in internet operations. Within the Insta360 InSight (U.S.) website, we exclusively deploy strictly necessary cookies to verify your login status and authentication credentials, solely for ensuring the website's core functionality and security compliance. We expressly confirm that Cookies will not be utilized for any purposes beyond those explicitly defined in this Privacy Policy.

4. How We Share, Transfer, and Disclose Your Personal Information

We fully understand the legal responsibilities we must bear in the event of illegal sharing, transfer, or disclosure of personal information, causing harm to users. We are committed to maintaining confidentiality in handling your personal information. Any sharing, transfer, or disclosure of your personal information will be strictly conducted in accordance with the following terms:

4.1 Sharing

In the following circumstances, we may share your personal information: a) With Service Providers: To enable core product functionalities and ensure your access to requested services, we may share your personal information with service providers under strict contractual obligations, including:

i. Payment Processors: Transaction details (order information, payment amounts) to facilitate payment services;

ii. Identity Verification Providers: Data required for real-name authentication;

iii. AI Model Vendors: Anonymized audio recording data (transcripts/summaries) for AI-driven services like audio recording summaries and assistants;

iv. Other Providers: Essential vendors supporting service operations (e.g., cloud storage, analytics).

b) With Business Partners: To optimize service stability (e.g., crash diagnostics, network performance), we may share aggregated, non-identifiable usage data (e.g., crash rates, error logs) with partners. Such data cannot be linked to individual users.

c) With Government Agencies: We may provide personal information to government authorities as required by public authorities, auditors, or agencies authorized to inspect us, in accordance with their legal obligations, which may request your information.

d) With Your Consent: With your consent, we may disclose your personal information for any other purpose.

If there is any sharing of your data, we will obtain your consent in accordance with the relevant laws and regulations. We will also require affiliated companies, partners, and third parties to provide evidence of data security capabilities and information security qualifications. In the processing of sensitive personal information, we will request third parties to adopt technologies such as de-identification and encryption to better protect the security of personal information. If you have objections to the third-party processing of personal information or identify risks in their personal information processing activities, please contact us using the contact information provided in this policy.

4.2 Disclosure

We will only disclose your personal information publicly in the following circumstances:

a) After obtaining your explicit consent.

b) Based on legal requirements, in cases where mandatory legal regulations or government and judicial authorities require it, we may publicly disclose your personal information. When we receive requests for the disclosure of personal information, we will require the requesting party to provide corresponding legal documents, such as subpoenas or investigation letters. We firmly believe that for requests for the disclosure of personal information, transparency should be maintained to the fullest extent possible within the limits allowed by laws and regulations. We will carefully review all requests to ensure that the disclosure of personal information has a legal basis.

c) For the normal management and maintenance of Insta360 InSight (U.S.) data, we may announce penalties for accounts engaging in violations, fraud, or other severe activities that harm the legitimate rights and interests of PixelSpace, Insta360 and other users. The announcement may include user account information and details of the violation.

4.3 Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following cases:

a) With your consent, we may transfer your personal information to other parties.

b) Transfer is required by applicable laws and regulations or mandatory requests from government departments and judicial authorities.

c) In the event of a merger, acquisition, or bankruptcy liquidation that involves the transfer of personal information, we will require the new entity holding your personal information to continue to be bound by this policy. Otherwise, we will request the new entity to obtain your consent again.

4.4 Exceptions to Obtaining Prior Consent for Sharing, Transfer, and Public Disclosure of Personal Information

In accordance with legal regulations, there are situations where the sharing, transfer, and public disclosure of personal information do not require prior consent from users:

a) Related to our fulfillment of obligations stipulated by laws and regulations.

b) Directly related to national security and defense security.

c) Directly related to public safety, public health, and significant public interests.

d) Directly related to criminal investigations, prosecutions, trials, and judgment executions.

e) Necessary for the protection of your or other individuals' vital legitimate interests but it is impossible to obtain your personal consent despite attempts.

f) Personal information voluntarily disclosed by you to the public.

g) Collection of personal information from legally publicized information sources, such as lawful news reports and government information disclosures.

h) According to legal regulations, sharing, transferring, or publicly disclosing de-identified personal information, ensuring that it cannot be restored and re-identified as a specific natural person. Such actions do not constitute the sharing, transfer, and public disclosure of personal information, and no separate notification or consent from users is required for the processing of such data.

*Additional Note for California Residents

If you are a California resident, we are required to disclose whether your collected personal information has been shared with or sold to any third parties for Advertising/Analytics Purposes under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act of 2020 (CPRA).

Under the CCPA, sharing is defined as renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer's personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration. While selling is defined as any arrangement involving the exchange of value between the business and a third party or another company for consumers' personal information. This is expanded by the CPRA, which further clarifies that sharing for targeted advertising purposes is included.

The following chart provides a detailed overview of the sharing or sale of your personal information in the past twelve months:

We do not "sell" or "share" the personal information of known minors under 16 years of age."

We do not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the CCPA regulations.

You have the right to limit our use of your personal information, to opt out of our share/sale of your personal information for purposes of online analytics and advertising, or to request or execute your other rights under CCPA by simply emailing us at DPO@pixelspace-tech.com with your registered email address.

5. How We Store and Protect Your Personal Information

5.1 Storage Duration

We only store your personal information for the necessary period as described in this policy and within the time limits specified by laws, regulations, and regulatory authorities, unless there is a mandatory retention requirement under the law. If we terminate our services or operations, we will promptly cease the continued collection of your personal information, comply with relevant legal requirements to notify you in advance, and, upon termination of services or operations, either delete or anonymize your personal information, except as otherwise required by laws, regulations, or regulatory authorities.

5.2 Storage Location

Your cloud data will be stored and stay safe in AWS Virginia, USA. We will not transfer your cloud data to any other countries or regions outside of the United States.

5.3 Storage Security

We have implemented security measures that comply with industry standards to protect your information and prevent unauthorized access, disclosure, use and modification, damage, or loss of personal information. The following measures are taken to ensure the security of your data:

a) We use encryption technology to enhance the security of personal information. Data exchanged between your browser and our servers is encrypted using the TLS protocol, providing a secure browsing experience through the HTTPS protocol.

b) Trusted protection mechanisms are employed to prevent personal information from falling victim to malicious attacks.

c) Access control mechanisms are deployed to ensure that only authorized personnel can access personal information, thus enhancing overall data security.

d) We conduct training courses on security and privacy protection to strengthen employees' understanding of the importance of safeguarding personal information.

e) We have established dedicated data compliance management systems, processes, and organizational structures to ensure information security. For example, access to information is strictly restricted, and individuals are required to adhere to confidentiality obligations. Regular audits are conducted to verify compliance.

We will take all reasonable and feasible measures to ensure that irrelevant personal information is not collected. We only retain your personal information for the shortest period necessary to achieve the purposes described in this Policy, unless otherwise required by local laws and regulations.

The internet environment is not entirely secure. We will make every effort to ensure or guarantee the security of any information you send to us. In the event that our physical, technical, or managerial protective measures are compromised, leading to unauthorized access, public disclosure, alteration, or destruction of information, resulting in harm to your legitimate rights and interests, we will bear corresponding legal responsibilities. In the unfortunate occurrence of a personal information security incident, we will strictly adhere to the requirements of the local laws and regulations in your jurisdiction. We will promptly inform you of the basic details and potential impacts of the security incident, the measures we have taken or will take to address it, suggestions for you to autonomously prevent and mitigate risks, and remedial measures available to you. We will notify you of event-related information via email, letters, phone calls, push notifications, or other effective means. In cases where it is difficult to inform individual data subjects one by one, we will adopt reasonable and effective methods to make public announcements. Additionally, we will proactively report to regulatory authorities the handling of personal information security incidents and fulfill other obligations stipulated by applicable laws and regulations.

6. Safeguarding Your Personal Information

We place great importance on the security of personal information and take all reasonable and feasible measures to protect your personal information:

a) We employ security measures in line with industry standards, including the establishment of reasonable regulations and secure technologies to prevent unauthorized access, use, modification, and to avoid data damage or loss of your personal information.

b) In the event that we cease the operations of Insta360 InSight (U.S.) we will promptly cease the processing of your personal information, notify you of the cessation in an individual or public manner, and delete or anonymize the personal information we hold.

c) We employ physical, technical, and managerial security measures to reduce the risks of personal information loss, misuse, unauthorized access, disclosure, and alteration. This includes but is not limited to data encryption during transmission, firewall and encrypted storage, physical access controls, and data access authorization controls.

d) We conduct regular training on personal information protection to enhance employees' awareness of the importance of protecting personal information.

e) We have developed relevant emergency plans for personal information security incidents, and regularly organize internal personnel for emergency response training and drills to ensure that they understand their responsibilities and emergency response strategies and procedures.

f) The modern internet environment is not entirely secure. We make every effort to ensure or guarantee the security of any information you send us. In the event that our physical, technical, or managerial protective measures are compromised, leading to unauthorized access, public disclosure, alteration, or destruction of information, resulting in harm to your legitimate rights and interests, we will bear corresponding legal responsibilities.

g) We strongly recommend that you use secure methods and complex passwords to assist us in ensuring the security of your account. If you discover a leakage of your personal information, especially if your account or password has been compromised, please contact us immediately using the contact information provided in this policy so that we may take appropriate measures. We are not responsible for this until we become aware of the situation and take action within a reasonable time.

7. Your Rights

In accordance with relevant laws, regulations, standards, and prevailing practices in other countries and regions, we ensure the following rights over your personal information. Please note that if the requested personal information has already exceeded the minimum retention period for achieving the purposes stated in this policy or has been deleted, we may be unable to respond to your requests.

The personal information rights you can exercise include:

7.1 Right to be Informed

You have the right to be informed about how your personal information is processed.

7.2 Right to Access

You have the right, in accordance with relevant laws and regulations, to access your personal information. If you wish to access and edit personal information in your account, you can log in to your account on our website or app and navigate to the relevant pages, such as personal profile, password change, or email change.

7.3 Right to Rectify

If you discover inaccuracies in how we process your personal information, you have the right to request corrections.

7.4 Right to Erasure

You can request the erasure of personal information in the following situations, except as otherwise provided by laws and regulations:

a) The purpose of collecting or otherwise processing personal information no longer requires your information.

b) Our processing is based on your consent, and you withdraw your consent.

c) You object to our processing, and there are no overriding legitimate grounds for processing (including but not limited to completing transactions with you, fulfilling contracts with you, preventing security incidents, fraud and malicious or illegal activities).

d) We unlawfully processed your personal information.

e) Applicable laws require erasure.

The right to request erasure of personal information does not apply in the following cases: where laws and regulations provide otherwise; processing is necessary for the exercise of the right to freedom of speech and information; processing is necessary for compliance with a legal obligation; processing is necessary for archiving purposes in the public interest, scientific research, historical research, or statistical purposes, and erasure is likely to render impossible or seriously impair the achievement of such processing objectives; or processing is necessary for the establishment, exercise, or defense of legal claims.

If we decide to respond to your erasure request, we will also notify entities that have obtained your personal information from us (if any) to promptly erase it unless otherwise required by laws and regulations or these entities have obtained your separate authorization. When you erase information from our services, we may not immediately erase the corresponding information from the backup system but will do so when the backup is updated.

7.5 Right to Account Deletion

You can deactivate a previously registered account by contacting our Customer Service as stated in Section 11.1 in this policy. When you contact our Customer Service for account deactivation, we will fulfill your request within 15 working days. After deactivating the account, we will cease to provide our Services to you and, as per your request, delete your personal information, except as otherwise provided by laws and regulations.

7.6 Right to Data Portability

You have the right to obtain a copy of your personal information. You can contact us at any time, and we will respond to your request within 30 days. If technically feasible, such as through data matching, we can also directly transmit a copy of your personal information to a third party specified by you. It is important to note that the right to data portability may be restricted when our processing of your personal information is necessary for public interests or for the exercise of official authority vested in us. Additionally, exercising the right to data portability should not adversely affect the rights or freedoms of others.

7.7 Restrictions on Automated Decision-Making for Information Systems: In certain business functions, we may make decisions solely based on non-human automatic decision-making mechanisms, including information systems and algorithms. If these decisions significantly affect your legal rights, you have the right to request an explanation from us, and we will also provide appropriate remedies.

7.8 Limited Processing Right for Personal Information

You can restrict our processing of your personal information in the following circumstances:

a) You question the accuracy of the personal information we collect from you, or we are verifying the accuracy of the personal information.

b) You believe that our processing of your personal information is unlawful.

c) We no longer need your relevant personal information for the processing purposes stated in this policy, but you need the personal information for legal claims.

d) The legal basis for processing your personal information is for public interest, or our legitimate interests, or those of third parties.

7.9 Right to Object to Personal Information Processing

In the following situations, you have the right to object to our processing of your personal information:

a) You withdraw your consent.

b) The processing of personal information is necessary for the performance of a task carried out in the public interest. However, this does not apply if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

c) The processing of personal information is necessary for the pursuit of legitimate interests.

d) Personal information is processed for direct marketing purposes. You have the right to object to such processing at any time, and once you exercise this right, personal information must not be processed for such purposes.

e) The processing of personal information is for scientific or historical research or statistical purposes. This does not apply if the processing is necessary for the performance of a task carried out for reasons of public interest.

f) Solely relies on automated processing (including user profiling) to make decisions that produce legal effects or similarly significantly affect data subjects.

7.10 Right to Opt-Out

You have the right to opt-out of the processing of personal information for the following purposes: 1. Targeted advertising; 2. Sale of personal information; 3. User profile decisions that have significant legal or similar effects on consumers.

7.11 Response to the Above Requests

If you are unable to exercise the rights mentioned above, or if you believe that we have violated any provisions of laws, regulations, or agreements regarding the processing of your personal information, you can contact us through the channels specified in this policy.

For security reasons, you may need to provide a written request or other proof of your identity. In general, we may request you to verify your identity first and will respond appropriately within [30 days] in accordance with applicable laws. We will retain your requests and our responses (including any supporting documents) as required by applicable laws.

For your reasonable requests, we generally do not charge any fees. However, for repeated or excessive requests beyond reasonable limits, we may charge certain costs. We may refuse requests that are unfounded, repetitive, require excessive technical means (such as developing new systems or fundamentally changing current practices), pose risks to the legitimate rights and interests of others, or are impractical (involving information stored on backup tapes). In the following situations, we may be unable to respond to your requests according to laws and regulations:

a) Directly related to national security or national defense.

b) Directly related to public safety, public health, or significant public interests.

c) Directly related to criminal investigation, prosecution, trial, and execution of judgments.

d) There is sufficient evidence to prove your intention of malice or abuse of rights.

e) Responding to your request would cause serious harm to your or other individuals' legitimate rights and interests.

f) Involving trade secret(s).

If we respond to your erasure request, we will also notify entities that have obtained your personal information from us to promptly delete the corresponding information unless otherwise provided by laws and regulations or unless these entities have obtained your independent authorization.

Within 45 days of receiving your personal information request, we will respond. Considering the quantity and complexity of your requests, if necessary, we will explain any extensions and reasons for the extension within the initial 45 days, with the response period extended by an additional 45 days.

If we refuse to take action on your personal information request, we will provide reasons for the refusal and avenues for appeal within 45 days of receiving the request. Within 60 days of receiving the appeal, we will respond in writing, explaining the decision and providing reasons. If the appeal is denied, we will provide an online mechanism (if available) or other means for you to contact the Attorney General to file a complaint.

8. Protection of Children's Personal Information

PixelSpace understands the importance of safeguarding the personal data of children which we consider to be an individual under the age of 17 or the equivalent age as specified by law in your jurisdiction.

We will not knowingly collect children's personal information. Children are not allowed to register accounts on our platform or provide personal information such as names, addresses, phone numbers, or email addresses to us.

If we discover that we have collected personal information from a child without obtaining the consent of their legal guardians, we will promptly delete the relevant data once informed. If you believe that we may be in possession of personal information from or about a child inappropriately, please contact us.

9. Notifications and Revisions

In order to provide you with better services and to keep pace with the development of our business, this policy may be updated. However, without your consent, we will not diminish the rights you are entitled to under this policy. We will publish updated versions on our website and mobile platforms, and notify you of the relevant updates through appropriate means before they take effect. Please visit our platform to stay informed about the latest privacy policy.

For significant changes, we will provide more prominent notifications (such as pop-ups and pushes through the Insta360 Wave, Insta360 Wave controller or Insta360 InSight website) to explain the specific changes to the privacy policy. Significant changes referred to in this policy include, but are not limited to: a) Significant changes in our services model, such as the purposes of processing personal information, types of personal information processed, and the ways in which personal information is used.

b) Significant changes in ownership structure, organizational structure, etc., resulting from business adjustments, bankruptcy, mergers, or other events causing changes in ownership.

c) Major changes in the main entities with whom personal information is shared, transferred, or publicly disclosed.

d) Significant changes in your rights to participate in the processing of personal information and how they are exercised.

e) Changes in the department responsible for the security of personal information, contact methods, and complaint channels.

f) When the personal information security impact assessment report indicates a high risk.

We will also archive previous versions of this policy for your reference.

10. How to Contact Us

If you have any questions, feedback, or complaints regarding this policy, or if you wish to contact us, please use the following methods:

10.1 For specific issues related to the subscription or the service, please email our Customer Service at service@insta360.com or service@pixelspace-tech.com.

10.2 For general inquiries or complaints about privacy issues, please email us at DPO@pixelspace-tech.com.

If you are dissatisfied with our response, especially if our handling of personal information has harmed your legitimate rights, you can also file a complaint or report to the regulatory authorities in your jurisdiction.