Privacy Policy
Introduction
Espressif Systems (Shanghai) Co., Ltd. (“Espressif”, “we,” “us,” or “our”), as the developer and operator of this Website, takes the protection of users’ personal data seriously. Accordingly, we have adopted this Privacy Policy (hereinafter referred to as this “Policy”). Before accessing or using this website and its services, please read this Policy carefully, ensure that you understand its contents, and make an informed decision.
Please Note Before Reading
This Policy explains how we collect, use, store, provide, disclose, and protect your personal data. Depending on the specific features you use and the requirements of applicable laws, we may process your personal data on a legal basis permitted under applicable laws. Where your consent is required by law for a processing activity, we will obtain your consent through appropriate means. If you do not consent to non-essential processing activities, this will not affect your ability to use other services that do not require such processing.
1. Information We May Collect
To provide you with this website and its services more effectively and to protect the security of user accounts and related legitimate rights and interests, we may collect and process the following information depending on the specific features you use. We will process personal data only to the extent necessary to achieve the specific purposes of processing.
1.1 Registration and Login Information
When you register for or log in to this Website using an email address, we may collect and process necessary information such as your email address, verification code records, account identifier, and registration and login timestamps. If you set a login password, we will also process the information necessary to authenticate your account. Your email address is basic information required to use the account features of this website.
1.2 Third-Party Account Login Information
If this website supports registration and login through third-party accounts, such as GitHub, in the future, when you voluntarily select and authorize such a login method, we may obtain, within the scope of authorization granted by the relevant third-party platform, or ask you to provide separately, information including but not limited to:
• Login method;
• User ID and/or Username provided by the third-party platform;
• Email address provided by the third-party platform (if you register for or log in to this website using your GitHub account, we will obtain the email address associated with that GitHub account; if you register for or log in through another third-party platform, you will need to provide your email address separately); and
• Other information associated with your third-party account that is necessary to complete login or account linking
We will use the email address provided through the third-party platform or entered separately by you to identify or create your account on this website. If that email address differs from the email address associated with an existing account on this website, we will create a new account for that email address. The accounts will not be automatically merged.
After you register for, log in to, or link your account on this website using a third-party account, we may generate and maintain the following information associated with your account on this website:
• Unique User ID for this website; and
• Account linking status and login method records.
1.3 Log and Device Information
When you access or use this Website and/or related services, we may automatically collect logs and technical information relating to such access and use, including your IP address, access timestamps, browser type, device type, operating system, page visit records, error logs, and information relating to website security, operation, and troubleshooting. For details of how we use cookies and similar technologies, please refer to our Cookie Policy.
1.4 Information You Submit and Make Public
When you upload user-generated content (“User Content”), including but not limited to code, images, documents, comments, or other content, for information sharing, commenting, or other interactions, we will collect and process the information you voluntarily submit as required by the relevant features. This may include User Content, project names, usernames/nicknames, avatars, and publication timestamps. Depending on the features and your settings, such information may be displayed to other users of this website or to the public. Please avoid publishing unnecessary personal data, trade secrets, or other sensitive information. We may also feature selected User Content on our official social media accounts and other official promotional channels that we operate or manage, as part of our efforts to operate and promote this website and its services. Where applicable laws require separate consent for the public disclosure of personal data, we will obtain your separate consent before making such disclosure..
1.5 Other Information Generated Through Your Use of This Website
When you use this website and/or our services, including by accessing or downloading content, uploading User Content, commenting, or liking content, we may collect and process your activity records, access timestamps, and other information necessary to provide relevant features, ensure security, and conduct operational analytics.
If we introduce new personal data processing activities in the future, we will update this Policy based on the actual processing activities and, where required by applicable laws, provide you with the necessary information and obtain your consent before commencing the relevant processing.
This website may obtain and display limited information about relevant projects through public APIs provided by third-party platforms, such as project covers, titles, summaries, and original links. We use such information to display projects, facilitate technical exchange, and direct users to the relevant third-party platforms. We will process such information only to the extent reasonably necessary for these purposes.
Important Notice: For sensitive information as defined by applicable laws, and for information not covered in the disclosures above, we will inform you, through page notices or other appropriate means, of the scope of collection, purposes and methods of processing, and other required details, and obtain your consent where required by law. Your authorization for us to access certain information does not necessarily mean that we will collect all information covered by that authorization. Any information we collect under such authorization will be used only to the extent necessary.
2. Purposes and Rules for the Use of Information We Collect
2.1 Purposes for Which We May Use the Information We Collect
2.1.1 To provide, maintain, and improve this website and/or our services;
2.1.2 To identify users, manage accounts, and verify logins;
2.1.3 To support the display of user content and interactive features such as likes and comments;
2.1.4 To provide technical documentation downloads and related services;
2.1.5 To ensure website functionality and security, identify risks, and detect anomalies;
2.1.6 To comply with applicable laws and regulations or respond to regulatory requirements;
2.1.7 To handle complaints, disputes, infringement notices, or user feedback; and
2.1.8 For other reasonable purposes related to this website and/or our services.
2.2 Rules Governing the Use of Your Personal Data
2.2.1 We will use the information we collect in accordance with this Policy and as necessary to provide the functions of our products and/or services. After collecting your information, we will take reasonable and necessary measures, consistent with the current state of technology, to protect it.
2.2.2 Please note that we will process the personal data you provide when using this website and/or our services in accordance with the specific purposes of processing and on the legal basis prescribed by applicable laws and regulations. Where processing is based on your consent, you may withdraw your consent by deleting the relevant information, contacting us, or using other available methods. Upon withdrawal of your consent, we will cease the relevant processing and erase or anonymize the relevant personal data in accordance with applicable laws. If erasure or anonymization is technically impracticable, we will cease all processing other than storage and the implementation of necessary security measures, unless otherwise provided by applicable laws and regulations.
2.2.3 As a general rule, we will retain your personal data for the shortest period necessary to achieve the purposes described in this Policy while you use our products and/or services. Upon account deletion, when the relevant processing purpose has been achieved, has become impossible to achieve, or is no longer necessary, or when the applicable statutory retention period expires, we will erase or anonymize your personal data in accordance with applicable laws, unless continued retention is required or otherwise permitted by applicable laws and regulations or is necessary to handle complaints or disputes or fulfill statutory obligations.
2.2.4 If we intend to use your personal data for additional processing purposes not specified in this Policy, and such further processing cannot lawfully be carried out on the basis originally relied upon, we will provide you with the necessary information before commencing the further processing and obtain your consent or separate consent where required by applicable laws.
3. Sharing, Transfer, and Disclosure of Personal Data
3.1 Sharing of Personal Data
3.1.1 As a general rule, unless necessary, Espressif will not proactively share your personal data with any company, organization, or individual outside our organization, except in the following circumstances:
• Where we have obtained your prior express consent or authorization;
• Where disclosure is required by applicable laws and regulations or at the request of an administrative, judicial, or other competent authority;
• Where necessary, to the extent permitted by applicable laws and regulations, to respond to public emergencies or other emergencies and protect the life, property, or other interests of ours, you, or our other users, or to safeguard public interests, property, or safety;
• Where sharing your personal data is necessary to provide the basic functions of this website or the services you request;
• Where necessary to assist you, at your request, in resolving disputes or controversies between you and others;
• Where sharing is provided for under relevant agreements entered into with you (including electronic agreements entered into online and applicable platform rules) or other legal documents;
• Where your personal data is used for academic research, subject to appropriate safeguards; or
• Where such sharing is necessary to serve a public interest provided for under applicable laws, subject to the implementation of necessary technical and organizational measures.
3.1.2 We may share your personal data with our affiliates. We will share only the personal data necessary for the relevant purposes and only to the extent necessary, subject to this Policy. We will require our affiliates to process personal data within the agreed scope and in accordance with applicable laws.
3.1.3 We may provide necessary personal data to service providers and other third parties that provide us with services such as server hosting, email delivery, identity authentication, and technical support, to ensure the proper delivery of our services. We will share your personal data with such parties only for specified, legitimate, and necessary purposes and will require them to process your personal data only within the agreed scope.
3.1.4 We may provide your information to other companies, organizations, or individuals where necessary to comply with applicable laws and regulations, enforce or apply this Policy or agreements governing your use of this website, or protect the legitimate interests of us, you, or our other users, including interests relating to personal data security and property.
3.1.5 Before providing your personal data to another controller, we will inform you of the recipient’s name and contact details, the purposes and means of processing, and the categories of personal data involved, and obtain your separate consent where required by applicable laws.
3.1.6 For any company, organization, or individual to whom we entrust the processing of personal data or with whom we share personal data, we will take appropriate measures in accordance with applicable laws and corresponding agreements, and require such parties to process personal data only within the agreed purposes, means, and scope.
3.2 Transfer of Personal Data
As a general rule, unless necessary, we will not transfer your personal data to any company, organization, or individual, except in the following circumstances:
3.2.1 Where we have obtained your prior express consent or authorization；
3.2.2 Where the transfer is required under applicable laws and regulations or at the request of an administrative, judicial, or other competent authority;
3.2.3 Where the transfer is made in accordance with relevant agreements entered into with you (including previously executed electronic agreements and applicable platform rules) or other legal documents;
3.2.4 Where a transaction involves the transfer of personal data, we will, in accordance with applicable laws, inform you of the recipient’s name and contact details and require the recipient to continue to fulfill the applicable personal data protection obligations. If the recipient changes the original purposes or means of processing, we will fulfill our corresponding obligations under applicable laws, and the recipient must obtain your consent again, including separate consent where required by law.
3.3 Disclosure of Personal Data
We may publicly disclose your personal data in the following circumstances, subject to the implementation of reasonable security measures:
3.3.1 Where you have consented to or authorized such disclosure;
3.3.2 Where you use the features of this website to voluntarily disclose information to the public. Such disclosure is made at your own discretion, and we provide the corresponding technical services solely in accordance with your instructions;
3.3.3 Where disclosure of your personal data is required under applicable laws and regulations or at the request of an administrative, judicial, or other competent authority. In such cases, we may disclose your personal data in accordance with the specified categories of personal data and disclosure requirements. Subject to applicable laws and regulations, we will conduct a necessary review of the relevant request and disclose personal data only to the extent that such disclosure is lawful and necessary;
3.3.4 Where expressly authorized by law, to the extent necessary in an emergency to protect your legitimate rights and interests, those of us or other users, or public safety and interests;
3.3.5 Where expressly provided for under applicable laws and regulations and in accordance with the terms of the user agreements or similar agreements governing our relevant products and services.
3.4 International Transfers of Personal Data
As we and our affiliates and partners may provide services in different countries or regions, your personal data may be transferred to, stored in, or otherwise processed in countries or regions outside your own. In such cases, we will take reasonable measures to protect your personal data and fulfill our obligations under applicable laws and regulations, taking into account the relevant circumstances.
4. Personal Data Security
4.1 Espressif will implement security measures that meet industry standards, including establishing reasonable policies and procedures, to prevent unauthorized access to, use of, or alteration of your personal data and to prevent data damage or loss. We will use security technologies and procedures to monitor and record network operations and security incidents, and take necessary technical measures to safeguard network security and prevent the loss or misuse of information and unauthorized access to or disclosure of information. For example, we may use encryption technology to protect the personal data you provide in certain services. However, please understand that, due to technical limitations and the possibility of various malicious acts, we cannot always guarantee the absolute security of information, despite our best efforts to strengthen security measures in the internet environment. You should be aware that the systems and communication networks through which you access our platform and/or services may experience issues due to factors beyond our control.
4.2 We permit access to users’ personal data only to employees and partners who need to know such information and have established strict access control and monitoring mechanisms for this purpose. We also require all personnel who may have access to your personal data to comply with applicable confidentiality obligations.
4.3 The internet is not an entirely secure environment. Communications with other users through email, instant messaging, social media, or similar channels may not be fully encrypted. We recommend that you use strong passwords when using such tools and take care to protect your personal data.
4.4 To address risks that personal data breaches, damage, or loss may pose to users, we will activate appropriate emergency response plans for different types of security incidents, promptly take steps to mitigate harm, investigate the incidents, develop remedial measures, and work with the relevant responsible departments to trace the source of and respond to such incidents. In accordance with applicable laws and regulations, we will promptly notify you of the basic circumstances of a security incident and its potential impact, the measures we have taken or intend to take, recommendations on steps you may take to prevent or reduce risks, and any remedial measures available to you. We may notify you through email, postal mail, telephone, push notifications, or other appropriate means. Where it is difficult to notify affected individuals individually, we will issue an announcement through reasonable and effective means. We will also report the handling of personal data security incidents to the competent regulatory authorities as required by applicable laws and regulations.
5. Management of Your Personal Data
5.1 You have the right to access, review, obtain copies of, supplement, rectify, and erase your personal data. Where the conditions prescribed by applicable laws are met, you may also request the restriction of processing, the transfer of your personal data to a personal data processor designated by you, or object to specific processing activities. Please note that modifying or deleting certain information may affect your ability to use this website and/or the services or the functionality available to you.
5.2 You have the right to change or withdraw your authorization. Where the processing of your personal data is based on your consent, you may withdraw that consent by deleting the relevant information or contacting us. Please understand that, if certain personal data are necessary to provide a particular website feature, we may no longer be able to provide that feature or service if you withdraw your consent or authorization, and we will cease processing the relevant personal data, unless otherwise permitted or required by applicable laws and regulations. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
5.3 Subject to the applicable terms and conditions, you may directly request the deletion of your account. For information on how personal data are handled following account deletion, please refer to Section 2.2.3 of this Policy.
5.4 We will implement appropriate technical measures and provide convenient means for you to access, supplement, rectify, or erase your personal data, or contact us to request such actions. Upon receiving your request, we will process it in accordance with our procedures, which may include asking you to provide relevant evidence to verify your identity.
6. Protection of Children’s Personal Data
6.1 We attach great importance to the protection of minors’ personal data and will protect such data in accordance with applicable laws and regulations.
6.2 This website is not intended for minors. You must have reached the age of majority under the applicable laws of the country or region where you reside in order to register for and use this website and its services. We will not knowingly collect personal data from users who do not meet the foregoing age requirement.
6.3 If we discover or become aware that a user has not reached the age of majority required under the applicable laws of the country or region where the user resides, we will take appropriate measures in accordance with applicable laws and regulations, including ceasing to provide the relevant services and deleting or ceasing to process the relevant personal data.
7. Information Security and Limitation of Liability
7.1 We will implement reasonable technical and organizational measures to protect your personal data, taking into account applicable laws and the actual risks associated with the processing of personal data. We will also take appropriate measures to handle security incidents in accordance with applicable laws.
7.2 Provided that we have duly fulfilled our applicable security and incident response obligations, to the fullest extent permitted by applicable laws, we shall not be liable for any loss or liability arising from personal data breaches, loss, misuse, or alteration resulting from any of the following circumstances:
7.2.1 Your failure to properly safeguard your account information, including disclosing your account password to others, sharing your registered account with others, or other circumstances attributable to you;
7.2.2 Causes beyond our reasonable control, including hacker attacks, computer viruses, government actions, or network failures; or
7.2.3 Other circumstances in which the incident does not result from our violation of applicable laws or failure to fulfill our corresponding obligations.
7.3 This website may contain links or features that redirect you to third-party platforms independently operated by third parties. Their personal data processing activities are governed by their own applicable policies and rules. To the fullest extent permitted by applicable laws, we shall not be liable for losses arising from personal data processing activities independently carried out by such third parties.
8. Scope of This Privacy Policy
8.1 This Policy applies to all services provided through this website. Where specific privacy policies apply to particular products and/or services, they will be separately set out in the relevant user agreements or in separate privacy policies. Such specific privacy provisions form part of this Policy. In the event of any inconsistency between this Policy and the privacy provisions applicable to a particular product and/or service, the latter shall prevail.
8.2 This Policy applies only to information we collect and process through this website. It does not apply to products and/or services provided by third parties or to their data processing activities. When you access or use third-party products and/or services, including third-party platforms, through this website, the relevant third parties will process the information they collect in accordance with their own privacy policies or applicable rules. We recommend that you carefully review those policies or rules before using such products or services. To the fullest extent permitted by applicable laws, we shall not be liable for data processing activities independently carried out by third parties.
9. Amendments to and Notice of Changes to This Policy
We may update this Policy from time to time to improve the functionality of this website and the user experience. If material changes are made to this Policy, such as significant changes to the purposes or methods of processing personal data or the applicable retention periods, we will notify you through website announcements, pop-up notifications, email, or other appropriate means, and obtain your explicit consent where required.
10. Contact Us
If you have any suggestions, feedback, or questions regarding this website or its services, you may contact us by returning to the homepage of this website and using the “Feedback” entry in the bottom-right corner of the page, or through other available channels. We will review your feedback and provide an appropriate response.