X Square Robot Developer Ecosystem Platform Privacy Statement

Release and effective date: September 16, 2026

Update date: September 16, 2026

"X Square Robot Developer Ecosystem Platform" is an integrated development and ecosystem platform provided for you by X Square Robot Technology (Shenzhen) Co., Ltd. and its affiliates (also referred to as "X Square Robot", "we", or "the Company") for world model developers, robot application developers, and ecosystem partners. Our office address is [31st Floor, Aerospace Innovation Building, Nanshan District, Shenzhen].

We are deeply aware of the importance of personal information to you, and therefore we attach great importance to protecting your privacy and personal information. We will take corresponding protective measures in accordance with the requirements of relevant laws and regulations of the applicable countries/regions, and make every effort to keep your personal information secure and controllable. In view of this, we have formulated this privacy statement (hereinafter collectively referred to as "this Statement") to introduce, explain, and process and protect your personal information in accordance with the provisions of this Statement. We also hope this Statement can help you decide whether to provide your personal information to us.

Before using the various services of this platform, please be sure to read carefully and thoroughly understand this Statement. For terms that may involve significant relationships with your rights and interests and the processing of sensitive personal information, we will highlight them in bold in this Statement. Please read them with emphasis and start using after ensuring full understanding of this Statement.

Article 1 How we collect and use your personal information

We will collect and use your personal information based on the purposes described in this Statement in accordance with the principles of legality, legitimacy, fairness, transparency, and minimum necessity.

In order to provide services to you, we will collect and use your following personal information for the purposes described in this Statement. If you refuse to provide it, you will be unable to use the corresponding business functions and services. For sensitive personal information that may be involved, we remind you of it by bolding and underlining.

1.1 Account registration, login, and password reset

When you register or log in to a platform account using an email address or mobile phone number, you need to provide your email address or your real-name mobile phone number (provide one of them according to your chosen method) and set a username and login password as prompted on the page, or log in by entering an email verification code or SMS verification code, so that we can verify your user identity and protect your account from unauthorized access. When you reset your password, we will send a verification code using the email address or mobile phone number corresponding to the account and verify the verification code. If you do not register/log in to an account, we will not collect your aforementioned personal information, but functions related to registration/login will be unavailable.

If you log in via verification code for the first time using an unregistered email address or mobile phone number, we will prompt on the page in advance that "a platform account will be created after verification", and will automatically create an account after you actively check to agree to the User Agreement, read this Statement, and pass the verification code validation. For the processing of personal information that requires your consent according to law, we will obtain your corresponding consent.

If the same user registers separately using an email address and a mobile phone number, two independent accounts will be created, and points, star ratings, activity records, etc., will be recorded separately by account. This platform currently does not support account merging.

1.2 Real-name authentication

This platform currently does not provide or require you to complete real-name authentication. If real-name authentication is needed in the future based on legal and regulatory requirements, event/competition management, security risk control, or specific functions, we will separately inform you of the processing purpose, processing method, types of personal information, retention period, and the impact on your personal rights and interests before collecting your real-name authentication information, and obtain your consent in accordance with the law; Where sensitive personal information is involved or separate consent is required by law, we will obtain your separate consent in accordance with the law.

1.3 Completing personal profile

In order to provide you with better services, you may/need to complete your personal profile, including information such as avatar, nickname, and identity type. Depending on the identity type you select, we may also collect your relevant information such as school, department/faculty, industry, company or organization name, and job title. Your profile picture and nickname will be used for profile display; Your identity type and related information are mainly used for statistical analysis of platform user composition, developer ecosystem, and operational conditions, to help us understand platform user needs and optimize platform services.

We will not currently conduct marketing and promotion to you via SMS, email, etc. based on the above personal profile. Unless otherwise stated in this Privacy Policy, genuinely necessary to fulfill relevant services, or otherwise stipulated by laws and regulations, we will not provide your above personal profile to any third party.

1.4 Event and competition services

We regularly organize events and competitions on this platform for world model developers, robot application developers, and ecosystem partners. If you choose to register and participate on the platform, we need to collect your name, competition identity, mobile phone number, and email address. If you are an enrolled student/university teacher, we need to collect your school name and major; If you are an employed professional, we need to collect your enterprise name and department name to assist you in completing the competition registration.

1.5 Simulation competitions and leaderboards

We will receive the model files or model links, model names, sources, versions, and modification and configuration descriptions affecting evaluation submitted by you through the open portal of the platform, and collect necessary execution records and evaluation results to assist you in completing simulation evaluations and generating scores and rankings. The above materials will only be used to complete your selected evaluation, verify the authenticity of submitted materials, ensure the security of the evaluation environment, and handle score objections and disputes, and the retention period will not exceed the period necessary to achieve the above purposes.

We will not use your model files and non-public submitted materials to train or fine-tune other models, nor will we use them for other purposes unrelated to this competition. If you participate in public leaderboards, we will explain the scope of information intended to be disclosed before you submit the model or confirm being listed. The disclosed content is limited to the model name, source or version description, submitter display name, evaluation task, score, ranking, evaluation time, etc. If personally identifiable information is involved, we will separately obtain your separate consent in accordance with the law.

1.6 Points system

After you register our developer account, we will provide you with point benefits based on your account registration records, participation in events, real-machine reproduction, simulation reproduction, and other behaviors. According to your points, five identity benefits will be formed, including: Juliang Little Star, Juliang Nova, Juliang Morning Star, Juliang Planet, and Juliang Polaris.

1.7 Delivery of gifts and prizes

When you achieve a ranking in our events or competitions, or when your points reach a certain value, we will collect your contact person information, mobile phone number, and delivery address to send you gifts, prizes, etc.

1.8 Exceptions to obtaining consent

In accordance with relevant laws and regulations, we do not need to obtain your consent to collect and use your personal information under the following circumstances:

(1) Where it is necessary for the conclusion or performance of a contract to which you are a party;

(2) Where it is necessary for us to perform statutory duties or statutory obligations;

(3) Where it is necessary to respond to public health emergencies, or to protect the life, health, and property safety of natural persons in emergencies;

(4) Where your personal information is processed within a reasonable scope for conducting news reporting, public opinion supervision, and other acts for the public interest;

(5) Where personal information disclosed by yourself or other legally disclosed personal information is processed within a reasonable scope in accordance with the Personal Information Protection Law of the People's Republic of China;

(6) Other circumstances stipulated by laws and administrative regulations.

Article 2 How we use cookies and similar technologies

Cookies and similar device information identification technologies are widely used technologies on the Internet. When you use our services, we may use relevant technologies to send one or more cookies or anonymous identifiers (hereinafter referred to as "Cookies") to your device to collect, identify, and store information when you access and use this platform. We use cookies mainly to ensure the secure and efficient operation of the platform and services, allowing us to confirm the security status of your account and troubleshoot related abnormal situations such as crashes and delays.

You can manage or delete cookies based on your preferences. Most browsers provide users with the function of clearing browser cache data. You can perform corresponding data clearing operations, or modify the degree of acceptance of cookies or reject our cookies, but you may consequently not be able to fully use some of our service functions that rely on cookies for convenience and security.

Article 3 How we share, transfer and publicly disclose your personal information

3.1 Sharing

We will not share your personal information with any company, organization or individual, unless one or more of the following circumstances exist:

(1) Your separate consent has been obtained in advance;

(2) Proposed by yourself;

(3) Necessary sharing with our affiliates: We may share your personal information with our affiliates. We will only share necessary personal information, and such sharing is bound by the purposes stated in this statement. If an affiliate intends to change the purpose of processing personal information, it will seek your authorization and consent again.

3.2 Transfer

Transfer refers to the transfer of control over personal information from us to other personal information processors. In principle, we will not transfer control over your personal information to third parties, except in the following circumstances:

(1) After obtaining your separate consent in advance, we will transfer your personal information to a third party;

(2) Where it is necessary to transfer your personal information in circumstances involving merger, division, dissolution, or declaration of bankruptcy, we will notify you of the recipient's name and contact information, and require the recipient to continue to be bound by this statement. If the recipient changes the original processing purpose or processing method, it will seek your authorization and consent again.

3.3 Public disclosure

Public disclosure refers to the act of releasing information to society or unspecified groups of people. In principle, we will not publicly disclose your personal information. Except in the following circumstances:

(1) Based on your separate consent, we may publicly disclose your personal information;

(2) If we determine that you have violated laws and regulations or seriously violated our relevant agreements and rules, or in order to protect the personal and property safety of users of us and our affiliates or the public from infringement, we may disclose personal information about you in accordance with laws and regulations or with your separate consent, including your relevant violations and the measures we have taken against you.

3.4 Exceptions to obtaining prior consent when sharing, transferring, and publicly disclosing personal information

Under the following circumstances, sharing, transferring, or publicly disclosing your personal information does not require your prior consent:

(1) Where it is necessary for the conclusion or performance of a contract to which you are a party, or necessary for the implementation of human resources management in accordance with labor rules and regulations formulated according to law and collective contracts concluded according to law;

(2) Where it is necessary for us to perform statutory duties or statutory obligations;

(3) Where it is necessary to respond to public health emergencies, or to protect the life, health, and property safety of natural persons in emergencies;

(4) Where your personal information is processed within a reasonable scope for conducting news reporting, public opinion supervision, and other acts for the public interest;

(5) Where personal information disclosed by yourself or other legally disclosed personal information is processed within a reasonable scope in accordance with the provisions of the Personal Information Protection Law of the People's Republic of China;

(6) Other circumstances stipulated by laws and administrative regulations.

3.6 Entrusted processing

In order to provide you with more comprehensive and high-quality products and services, we will entrust our service providers to provide certain services, and the service providers will process certain personal information of yours at our request: providing you with the function of email verification for registering and logging into the platform, and providing you with the function of collecting event registration information. We will agree with the entrusted party on the purpose, term, processing method, categories of personal information, protection measures, and rights and obligations of both parties regarding the entrusted processing, and supervise their personal information processing activities. The entrusted party shall not process your personal information beyond the agreed processing purposes and processing methods, and shall not sub-entrust without our consent.

3.7 List of integrated third-party SDKs and services

In order to ensure the implementation of certain functions and enable you to use and enjoy more services and functions, we may embed third-party SDKs or services in the APP, and we will prudently evaluate the purposes of using such SDKs and services:

Alibaba Cloud SMS service

Third-party entity: Alibaba Cloud Computing (Beijing) Co., Ltd.

Information provided: Mobile phone number, SMS verification code

Usage scenario: Register and log in to the APP on a mobile phone via mobile phone number and verification code

Purpose of use: Register and log in to the APP

Third-party personal information processing rules:

https://terms.alicdn.com/legal-agreement/terms/privacy_policy_full/20230922101800634/20230922101800634.html

Article 4 How we store your personal information

4.1 Information storage location

We will store your personal information collected and generated by this platform within the territory of China.

We promise that, unless otherwise required by laws and regulations, the storage period of your personal information will be limited to the shortest time necessary to achieve the purpose of your authorized use.

If we cease operations due to business requirements or other reasons, unless otherwise provided by laws, regulations, or normative documents, we will inform you of such circumstances and at the same time delete the collected personal information or anonymize it.

4.2 Information storage period

Generally speaking, after the purpose of your authorized use is achieved, we will delete or anonymize your personal information.

Article 5 How we protect your personal information

We attach great importance to the security of your personal information. To this end, we have adopted multi-level protection measures such as security technical measures complying with industry standards and supporting organizational structures and management systems, so as to prevent your personal information from being leaked, damaged, misused, unauthorizedly accessed, unauthorizedly disclosed, or altered to the greatest extent, specifically including:

5.1 Data security technical measures

In terms of data security protection, we will take corresponding technical protection measures according to the type, sensitivity, processing scenarios, and potential risks of personal information to prevent personal information from unauthorized access, public disclosure, tampering, damage, loss, or illegal use. During data transmission, storage, and use, we will take necessary security measures in combination with actual business conditions, including but not limited to permission control, access management, cryptographic technology, security audit, transmission protection, storage protection, anomaly monitoring, vulnerability screening, and other measures to ensure the security of personal information processing activities. For processing scenarios that may involve sensitive personal information, we will take stricter protection measures and control the scope of access in accordance with the principle of minimum necessity to reduce security risks during personal information processing.

5.2 Data security organizational and management measures

In accordance with relevant regulatory requirements, we have established a department specifically responsible for personal information protection. We have also established relevant internal control management processes, adhering to the principle of least privilege, to strictly set information access permissions for personnel who may come into contact with your personal information and control the scope of awareness of personal information.

We have established internal specification systems for safe data use to ensure that the processing of your personal information meets the security requirements of laws and regulations in aspects such as collection, transmission, use, storage, transfer, and destruction. In accordance with relevant regulatory requirements, for personnel who need to access personal information, we will require them to obtain approval from the person in charge of personal information protection or an authorized manager, record access situations, and take technical measures to prevent illegal copying and downloading of personal information.

We organize employees to participate in security and privacy protection-related training and require them to complete specified assessments to enhance employees' awareness of the importance of protecting personal information.

5.3 Security incident handling

To cope with potential risks such as leakage, damage, and loss of personal information, we have established a dedicated emergency response team to initiate security contingency plans for different security incidents, stop losses, conduct analyses, formulate remedial measures, and cooperate with relevant departments to trace sources and crack down on illegal acts.

Please understand and acknowledge that the internet is not an absolutely secure environment, and we strongly recommend that you assist us in ensuring the security of your account through secure methods and using complex passwords. In the unfortunate event of a personal information security incident, we will promptly inform you in accordance with the requirements of laws and regulations of: the causes of the security incident, potential harm that may be caused, types of personal information involved, response measures we have taken or will take, suggestions and measures you can take to prevent and reduce risks on your own, etc. We will promptly inform you of the incident-related circumstances by email, SMS, telephone, push notification, etc. When it is difficult to inform personal information subjects individually, we will issue an announcement in a reasonable and effective manner. At the same time, we will also proactively report the handling of personal information security incidents in accordance with regulatory requirements. Please be aware that, pursuant to applicable laws and regulations, if the measures taken can effectively avoid harm caused by information leakage, tampering, or loss, we may not inform you.

Article 6 How you manage your personal information

6.1 Access, copy, correct, or supplement your personal information

You have the right to access, copy, correct, or supplement your personal information. If you have the aforementioned requests, you may submit them to us through the contact information indicated in Article 9 of this statement. Subject to compliance with relevant laws and regulations, and after verifying and confirming your user identity, we will provide feedback within 15 working days.

6.2 Transfer your personal information

You have the right to request the transfer of your personal information to a personal information processor designated by you. Where it complies with relevant legal provisions and is technically feasible, we will provide you with the means for such transfer. If you have the aforementioned requests, you may submit them to us through the contact information indicated in Article 9 of this statement. Subject to compliance with relevant laws and regulations, and after verifying and confirming your user identity, we will provide feedback within 15 working days.

6.3 Delete your personal information

In the following circumstances, you may submit a request to delete your personal information to us through the contact information indicated in Article 9 of this statement, except where personal information has been anonymized or otherwise provided by laws and regulations:

(1) The processing purpose has been achieved, cannot be achieved, or is no longer necessary to achieve the processing purpose;

(2) We cease to provide the platform or services, or the retention period has expired;

(3) You withdraw your consent;

(4) We process personal information in violation of laws, administrative regulations, or agreements;

(5) Other circumstances stipulated by laws and administrative regulations.

You hereby agree that once the deletion request is responded to, your personal information will be deleted or anonymized, unless otherwise provided by laws, regulations, or normative documents.

If backup data is temporarily difficult to delete technically, we will cease processing other than storage and taking necessary security protection measures during this period, and delete it promptly after technical obstacles are removed.

6.4 Change the scope of your authorization and consent

You may submit a request to change or withdraw your consent to us through the contact information indicated in Article 9 of this statement. After you change the scope of your consent, we will no longer collect and use your corresponding personal information, unless you re-authorize. You hereby agree that your change of the scope of authorization and consent or withdrawal of authorization and consent will not affect our processing of your personal information based on your previous authorization and consent.

6.5 Cancel your account

You have the right to cancel your account. If you have the aforementioned request, you may contact us at developer@x2robot.com to cancel your account. After verifying and confirming your user identity, we will process it for you as soon as possible within 15 working days. After the account is canceled, unless otherwise provided by laws and regulations, we will promptly delete or anonymize your personal information. Please choose to cancel your account prudently. In addition, the bound mobile phone number and email account will be released simultaneously and can be used to re-register an account.

6.6 Responding to your above requests

To exercise the user rights described in Articles 6.1 to 6.5 of this statement, you may contact us through the methods provided in Article 9 of this statement. To ensure security, we will verify your identity before processing your request. In principle, we will provide feedback on your request within 15 working days after receiving it. We have the right to limit or reject your request to the extent permitted by laws and administrative regulations, and explain the reasons to you.

Specific circumstances and reasons may include:

(1) Related to the performance of obligations stipulated by laws and regulations by the personal information handler;

(2) Related to national security or national defense security;

(3) Directly related to public safety, public health, or major public interests;

(4) Directly related to criminal investigation, prosecution, trial, and judgment execution;

(5) Where there is sufficient evidence showing that the personal information subject has subjective malice or abuses rights;

(6) For the purpose of protecting the major legitimate rights and interests, such as life and property, of the personal information subject or other individuals, but where it is difficult to obtain the consent of the individual;

(7) Where responding to your request will result in serious damage to the legitimate rights and interests of you or other individuals or organizations;

(8) Involving trade secrets.

6.7 Rights of relatives of the deceased

If a user of the developer ecosystem platform unfortunately passes away, their relatives may contact us through the methods listed in "9. Contact us" to obtain relevant guidance to exercise their legitimate and legal rights and interests stipulated by law.

Article 7 How to protect minors' personal information

This platform currently only provides services to adults and has no intention of collecting any personal information of minors, but we attach great importance to and are committed to protecting the privacy of minors under the age of 18 (hereinafter referred to as "minors"). If we discover that personal information of minors has been collected without prior consent from guardians, we will take measures to delete the relevant information as soon as possible. If at any time a guardian has reason to believe that we have collected personal information of a minor without the guardian's consent, or has any questions regarding the personal information of the minor under guardianship, please contact us at compliance@x2robot.com, and we will cooperate in taking all reasonable measures to protect the minor's privacy.

Article 8 How to update this statement

We reserve the right to update or modify this statement from time to time. However, without your explicit consent, we will not diminish your rights under this statement. Such changes constitute a part of this statement. We will publish the updated content of this statement on the X Square Robot Developer Ecosystem Platform.

Please read the updated content of this statement carefully. For the processing of personal information based on your consent, if the purpose of processing, method of processing, or category of personal information changes, we will obtain your consent again before processing. If you do not agree with this statement or have any objection to the modified or updated content of this statement, you may choose to stop using this service or delete your account. However, please be aware that your actions and activities prior to the deletion of your account or the cessation of using this service remain subject to this statement.

If major and substantive changes are involved, we will notify you in a prominent manner based on specific circumstances.

Circumstances of major and substantive changes include, but are not limited to, the following:

(1) Major changes occur in our service model. Such as the purpose of processing personal information, the types of personal information processed, the way personal information is used, etc.;

(2) Major changes occur in our control and other aspects. Such as changes in information controllers caused by mergers, acquisitions, restructuring, etc.;

(3) Changes occur in the main recipients of personal information sharing, transfer, or public disclosure;

(4) Significant changes occur in your rights regarding personal information processing and the ways to exercise them;

(5) Changes occur in our department responsible for personal information security, contact information, and complaint channels;

(6) When the personal information security impact assessment report indicates high risks.

Article 9 Contact us

If you have any questions regarding this statement when using this platform, you may contact us through the following channels:

Contact email: Send an email to compliance@x2robot.com

Contact address: 31st Floor, Aerospace Innovation Mansion, 7013 Liuxian Avenue, Xili Community, Xili Subdistrict, Nanshan District, Shenzhen

We will review the issues involved as soon as possible and provide feedback within 15 working days after receiving your request. If you are not satisfied with our response and we refuse to make improvements, you may file a complaint or report with the relevant regulatory authorities.

Article 10 Supplementary provisions

The interpretation and dispute resolution of this statement shall be governed by the laws of the People's Republic of China. Any dispute related to this statement shall be resolved through friendly consultation between both parties; If no settlement can be reached through consultation, you hereby agree to submit the dispute to the People's Court of Nanshan District, Shenzhen.

If any provision of this statement is held to be invalid by any court of competent jurisdiction, such provision will be removed from this statement, but the invalidity of such provision shall not affect the validity of the remaining provisions of this statement. The remaining provisions of this statement will continue to be enforced.

The headings in this statement are for convenience of reading only and do not affect the meaning or interpretation of any provision of this statement.

X Square Robot Technology (Shenzhen) Co., Ltd.