Ambitop Cognitive Privacy Policy

1. Privacy Policy Overview and Scope

1.1 Purpose of This Privacy Policy

This Privacy Policy explains how Ambitop Cognitive collects, processes, uses, stores, and protects personal information and related digital data when users access or interact with its research platforms, educational services, technology systems, and other related services.

Ambitop Cognitive recognizes that privacy protection is an essential part of responsible technology development and professional research practices. The company is committed to managing personal information according to applicable privacy laws, security standards, and responsible data governance principles.

This Privacy Policy aims to provide users with a clear understanding of the types of information collected, the purposes of processing, the methods of protection, and the rights available to individuals regarding their personal information.

1.2 Scope of Application

This Privacy Policy applies to information collected through Ambitop Cognitive services, including but not limited to:

Digital research platforms and related technology systems;
Ambitop Smart Sphere (ATP) research infrastructure and user interaction functions;
Financial research content and educational services;
User accounts, platform activities, and service communications;
Data analysis, technology development, and operational support services.

This Privacy Policy does not apply to independent third-party websites, applications, platforms, payment providers, or external services that may operate separately from Ambitop Cognitive. Such third parties may maintain their own privacy policies and data processing practices.

1.3 Definitions

For the purposes of this Privacy Policy:

“Personal Information” means information that can directly or indirectly identify an individual.

“Research Data” means information related to research activities, analytical processes, technology systems, and structured information management.

“Processing” includes collection, storage, analysis, use, transfer, modification, restriction, deletion, and anonymization of information.

“Service Providers” means third parties that provide technical support, data processing, infrastructure services, security services, or other operational assistance.

1.4 Acceptance and Policy Updates

By accessing or using Ambitop Cognitive services, users acknowledge that they have reviewed and understood this Privacy Policy.

Ambitop Cognitive may update this Privacy Policy due to legal requirements, technology development, service adjustments, or changes in data processing practices. Updated policies will become effective when published through appropriate channels.

2. Categories of Information We Collect

2.1 Information Provided by Users

Ambitop Cognitive may collect information voluntarily provided by users when they create accounts, participate in educational programs, access research resources, communicate with service teams, or use related platform functions.

Such information may include:

Name or user identification information;
Account registration details;
Authentication information;
Professional background information;
Educational preferences;
Communication records;
Information submitted through forms, surveys, or platform interactions.

Users should provide accurate and complete information when required for specific services. Users may choose not to provide certain information; however, refusing to provide necessary information may limit access to certain functions.

2.2 Identity Verification and Compliance Information

Where required for legal, security, or compliance purposes, Ambitop Cognitive may collect identity verification information.

Such information may include documentation, verification records, compliance-related information, and other necessary details required to establish user eligibility, prevent misuse, and maintain responsible service operations.

The company processes such information only for legitimate purposes, including regulatory compliance, security protection, and risk management.

2.3 Service Usage Information

When users interact with Ambitop Cognitive platforms, the company may collect information related to service usage, including:

Access history;
Platform interaction records;
Research content preferences;
Educational activity records;
System usage patterns;
Technical performance information.

This information helps improve platform functionality, enhance user experience, maintain system reliability, and develop better research and educational services.

3. Research Data, Technology Systems and Analytical Information

3.1 Ambitop Smart Sphere (ATP) Related Data

Ambitop Cognitive operates technology-based research infrastructure, including Ambitop Smart Sphere (ATP), which supports structured research processes, analytical workflows, and information organization.

During interaction with relevant systems, certain technical information may be processed, including system usage records, research preferences, analytical settings, and platform performance data.

Such information is primarily used to maintain technology systems, improve research capabilities, evaluate platform performance, and support responsible development of analytical tools.

3.2 Research and Analytical Data

Ambitop Cognitive may process structured research-related information generated through platform activities, including:

Market research materials;
Analytical frameworks;
Data organization records;
Research workflow information;
System performance measurements;
Aggregated analytical results.

Research data may be combined, analyzed, or anonymized to improve methodologies, enhance system efficiency, and support technology development.

Personal information will not be used beyond the purposes described in this Privacy Policy unless additional authorization or legal requirements apply.

3.3 Technical and Security Information

The company may automatically collect technical information when users access digital services, including:

Device information;
Browser type;
Operating system;
Network information;
Access timestamps;
Security logs;
Error reports.

This information is used to maintain platform stability, detect abnormal activities, improve cybersecurity protection, and support technical operations.

4. How We Use Personal Information

4.1 Providing and Maintaining Services

Ambitop Cognitive uses collected information to provide, maintain, and improve its services.

Processing activities may include:

Creating and managing user accounts;
Providing access to research resources;
Supporting educational services;
Maintaining platform operations;
Delivering service-related communications;
Managing user preferences.

The company processes information only when necessary to support legitimate business operations, provide requested services, or comply with applicable requirements.

4.2 Research Development and Service Improvement

Information collected through platform activities may be analyzed to improve research infrastructure, technology systems, and user experiences.

Such analysis may support:

Technology improvement;
Research workflow optimization;
Platform performance evaluation;
Data organization improvement;
Development of educational materials.

Where possible, Ambitop Cognitive uses aggregated or anonymized information to reduce unnecessary exposure of personal information.

4.3 Security and Risk Management

Personal information may be processed for security and operational protection purposes.

These purposes include:

Account protection;
Unauthorized activity detection;
Fraud prevention;
System monitoring;
Technical issue investigation;
Internal risk assessment.

Such measures are designed to protect users, maintain platform integrity, and support responsible service management.

4.4 Compliance Obligations

Ambitop Cognitive may process personal information when necessary to comply with legal obligations, regulatory requirements, contractual responsibilities, or legitimate protection of rights and interests.

The company maintains appropriate procedures to ensure that information processing activities remain consistent with applicable privacy and compliance standards.

5. Cookies, Artificial Intelligence and Automated Technologies

5.1 Cookies and Similar Technologies

Ambitop Cognitive may use cookies, local storage technologies, and similar digital tools to support platform functionality.

These technologies may help:

Maintain user sessions;
Improve platform security;
Remember user preferences;
Analyze service performance;
Improve digital experiences.

Users may manage cookie preferences through browser settings or available platform controls. Disabling certain technologies may affect some platform functions.

5.2 Artificial Intelligence and Analytical Technologies

Ambitop Cognitive may use artificial intelligence, machine learning, and automated analytical technologies to support research processes, system optimization, information organization, and service improvement.

These technologies are designed to assist research and operational activities. They are not intended to independently replace professional judgment, governance processes, or human decision-making.

Automated analysis may involve limitations, including incomplete information, technical errors, or unexpected outcomes. Ambitop Cognitive applies reasonable review and governance measures to ensure responsible technology usage.

5.3 User Choice and Control

Users may have options to manage certain technology permissions, including cookies, communication preferences, and optional data processing activities.

Where applicable laws require consent, Ambitop Cognitive will provide appropriate notice and obtain necessary authorization before processing information for specific purposes.

6. Information Sharing and Disclosure

6.1 Service Providers

Ambitop Cognitive may share limited personal information with selected service providers when necessary to support business operations, technology infrastructure, security protection, and service delivery.

Such service providers may include:

Cloud infrastructure providers;
Data storage and processing providers;
Technology maintenance providers;
Cybersecurity service providers;
Communication service providers;
Professional support providers.

These service providers are authorized to process information only for specific purposes defined by contractual agreements or applicable legal requirements. They are expected to maintain appropriate security measures and protect personal information from unauthorized access, disclosure, or misuse.

6.2 Research and Technology Partners

Ambitop Cognitive may cooperate with external organizations, research institutions, technology providers, and professional partners to support research development, technology improvement, and knowledge exchange.

When information sharing is necessary, the company will apply reasonable safeguards, including limiting the scope of information shared, evaluating the purpose of processing, and reducing unnecessary personal data exposure.

Where possible, aggregated, anonymized, or de-identified information may be used for research and analytical purposes.

6.3 Legal and Regulatory Disclosure

Ambitop Cognitive may disclose necessary information when required by applicable laws, regulations, legal procedures, governmental requests, or regulatory authorities.

Information may also be disclosed when necessary to:

Protect user safety;
Prevent fraud or unlawful activities;
Protect company rights and interests;
Investigate security incidents;
Resolve disputes;
Support compliance obligations.

The company will seek to ensure that such disclosures are limited to information reasonably necessary for the relevant purpose.

6.4 Corporate Transactions

If Ambitop Cognitive undergoes a business transition, including restructuring, merger, acquisition, transfer of assets, or organizational changes, personal information may be transferred as part of the relevant business records.

Any receiving organization will be expected to handle transferred information according to applicable privacy requirements and appropriate data protection standards.

6.5 Aggregated and De-Identified Information

Ambitop Cognitive may use aggregated, statistical, or de-identified information for purposes including:

Research improvement;
Technology development;
Service analysis;
Operational planning;
Industry studies.

Such information is processed in a manner designed to reduce the possibility of identifying individual users.

7. Data Storage, Retention and Security Protection

7.1 Data Retention Principles

Ambitop Cognitive retains personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, provide services, maintain operational records, satisfy legal obligations, and support security management.

The retention period may depend on:

The purpose of information collection;
The relationship between users and services;
Legal and regulatory requirements;
Accounting and audit obligations;
Security and dispute resolution needs.

When information is no longer required, the company may delete, anonymize, or restrict access to such information according to applicable requirements.

7.2 Account and Service Records

During the period when users access Ambitop Cognitive services, the company may maintain account information, service history, educational participation records, communication records, and relevant platform activity data.

Certain records may continue to be stored after service termination when necessary for compliance, security protection, legal obligations, or internal record management.

7.3 Security Protection Measures

Ambitop Cognitive applies reasonable technical and organizational measures to protect personal information.

Security measures may include:

Access control management;
Identity verification procedures;
Data encryption;
Security monitoring;
System audits;
Backup and recovery procedures;
Internal information protection policies.

The company continuously reviews security practices based on technology development, operational requirements, and potential risks.

7.4 Data Security Events

Although Ambitop Cognitive implements reasonable security protections, no digital system can guarantee absolute security under all circumstances.

In the event of unauthorized access, data breaches, system attacks, or other security incidents, the company will take appropriate measures, including investigation, risk assessment, remediation, and notification where required by applicable laws.

7.5 User Responsibilities

Users are responsible for protecting their account credentials, authentication information, and device security.

Users should avoid sharing account access information with unauthorized individuals and should promptly report suspected unauthorized activities.

Maintaining responsible account security practices helps reduce risks related to unauthorized access and misuse of personal information.

8. Cross-Border Data Processing

8.1 Global Data Processing Environment

Ambitop Cognitive operates within a digital environment where technology infrastructure, service providers, and research systems may involve different regions.

As a result, personal information may be stored, accessed, or processed in locations outside the user’s primary region.

Different jurisdictions may apply different privacy standards, regulatory requirements, and data protection frameworks.

8.2 Purposes of Cross-Border Processing

Cross-border data processing may occur for purposes including:

Maintaining digital platforms;
Providing research and educational services;
Supporting cloud infrastructure;
Improving technology systems;
Conducting security monitoring;
Managing global operational activities.

Such processing allows Ambitop Cognitive to maintain reliable services and develop technology capabilities while applying appropriate protection measures.

8.3 Data Transfer Protection

When transferring personal information across regions, Ambitop Cognitive seeks to implement reasonable safeguards, including:

Data access restrictions;
Encryption protection;
Contractual requirements;
Security assessments;
Data minimization principles.

The company aims to ensure that cross-border processing is conducted responsibly and only for legitimate business purposes.

8.4 Regional Privacy Rights

Depending on applicable laws, users may have rights relating to their personal information, including:

Access rights;
Correction rights;
Deletion rights;
Processing restriction rights;
Objection rights;
Data portability rights.

The availability and scope of these rights may vary depending on the user’s jurisdiction.

9. User Privacy Rights and Account Choices

9.1 Access and Correction Rights

Users may request access to certain personal information maintained by Ambitop Cognitive or request corrections when information is inaccurate, incomplete, or outdated.

To protect user privacy and prevent unauthorized requests, the company may require reasonable verification before processing such requests.

9.2 Deletion and Restriction Rights

Where permitted by applicable laws, users may request deletion of personal information or request restrictions on certain processing activities.

However, some information may need to be retained due to:

Legal obligations;
Security requirements;
Regulatory responsibilities;
Dispute resolution needs;
Technical limitations.

Ambitop Cognitive will evaluate requests according to applicable requirements and provide appropriate explanations where restrictions apply.

9.3 Data Portability and Consent Withdrawal

Where applicable, users may request personal information in a structured and commonly used format.

For processing activities based on user consent, users may withdraw consent through available account or privacy management functions.

Withdrawal of consent does not affect the legality of processing activities completed before withdrawal.

9.4 Communication and Preference Management

Users may manage certain communication preferences, including optional educational updates, research information, or promotional communications.

Users may continue receiving necessary service-related communications, including security notifications, account updates, and important policy changes.

9.5 Privacy Requests and Verification

Users may submit privacy-related requests through available service channels.

To protect personal information, Ambitop Cognitive may conduct identity verification or security checks before responding to requests.

The company will process requests within applicable legal timeframes and provide explanations when additional time or information is required.

10. Compliance, Third-Party Services and Policy Updates

10.1 Compliance and Responsible Data Governance

Ambitop Cognitive considers privacy protection, responsible data management, and compliance governance as important components of long-term organizational development.

The company may process information related to compliance requirements, including identity verification, risk management, security monitoring, and regulatory obligations.

Where applicable, information processing may support procedures related to:

Know Your Customer (KYC);
Anti-Money Laundering (AML);
Counter-Terrorist Financing (CFT);
Fraud prevention;
Regulatory reporting obligations.

Such activities are conducted according to applicable laws and responsible governance principles.

10.2 Third-Party Services

Ambitop Cognitive may integrate or interact with third-party technologies, platforms, research resources, or service providers.

These third parties may maintain independent privacy policies and information practices.

Users should review relevant third-party policies before accessing external services. Ambitop Cognitive is not responsible for privacy practices outside its reasonable control.

10.3 Minors’ Privacy Protection

Ambitop Cognitive does not intentionally collect personal information from minors without appropriate authorization.

Where applicable, minors should use related services under the supervision and approval of parents, guardians, or legally responsible individuals.

If unauthorized collection of minor information is identified, appropriate measures will be taken according to applicable laws.

10.4 Policy Updates

Ambitop Cognitive may update this Privacy Policy due to changes in:

Legal requirements;
Technology development;
Service structures;
Data processing practices;
Security standards.

Material changes affecting user rights, information collection, or processing purposes will be communicated through appropriate notices.

10.5 Effective Date and Continued Use

Updated versions of this Privacy Policy become effective upon publication or the stated effective date.

By continuing to access or use Ambitop Cognitive services after updates become effective, users acknowledge the revised policy and agree that information processing will be conducted according to the updated terms.

This Privacy Policy shall be interpreted together with applicable privacy laws, regulatory requirements, and responsible data governance principles. Where mandatory legal requirements conflict with this policy, applicable legal requirements shall prevail.