Privacy Policy

PRIVACY POLICY

Last Updated: December 14, 2024

Introduction

SNUGOGO (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you:

  • Visit our website (www.aitoysupplier.com)
  • Use our AI-powered devices and companion products
  • Engage with our OEM/ODM manufacturing services
  • Communicate with our sales and support teams

Please read this Privacy Policy carefully. By accessing our website or using our products and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

Website Visitors & Potential Clients:

  • Contact information (name, email address, phone number, company name)
  • Business inquiry details (project requirements, technical specifications, budget range)
  • Account credentials (if you create an account on our portal)
  • Payment information (processed securely through third-party payment processors)
  • Communication records (emails, chat transcripts, support tickets)

AI Device Users:

  • Device registration information (serial number, purchase date, location)
  • Voice interaction data (when using AI voice assistants – see Section 1.3)
  • User preferences and settings configured through our web portal
  • Feedback and support requests

OEM/ODM Partners:

  • Company information (business license, tax ID, authorized representatives)
  • Technical documentation (design files, API specifications, NDAs)
  • Project communication (meeting notes, design approvals, production updates)

1.2 Information Collected Automatically

Website Usage Data:

  • IP address and device identifiers
  • Browser type and version
  • Operating system and device type
  • Pages visited, time spent, and navigation patterns
  • Referral sources (how you found our website)
  • Cookies and similar tracking technologies (see Section 5)

AI Device Telemetry (When Applicable):

  • Device performance metrics (uptime, battery status, connectivity)
  • Error logs and diagnostic data
  • Firmware version and update history
  • WiFi/4G network connection status (no network traffic content)
  • Feature usage statistics (anonymized)

1.3 Voice Interaction Data (AI Devices)

IMPORTANT NOTICE – AI Voice Assistant Data Collection:

When you use SNUGOGO AI voice assistant devices, we may collect and process:

  • Voice recordings: Audio captured during wake word detection and conversation
  • Transcripts: Text versions of your voice commands and questions
  • Interaction metadata: Timestamps, device ID, session duration, language used
  • AI model responses: The content generated by our AI systems

Your Control Over Voice Data:

  • Voice data is processed to provide AI functionality (speech recognition, natural language understanding)
  • You can delete voice recordings through our web portal or device settings
  • You can opt-out of voice data storage (device will still function but with limited learning capabilities)
  • We do NOT sell voice data to third parties
  • Voice data may be processed by our AI technology partners (Alibaba Cloud Qwen) – see Section 4

Children’s Voice Data (COPPA Compliance): For AI toys designed for children under 13:

  • Parental consent is required before activation
  • Parents can review and delete all voice recordings
  • We do not use children’s voice data for advertising or profiling
  • Strict data retention limits (30 days maximum, unless legally required)

2. How We Use Your Information

2.1 Business Operations & Service Delivery

We use collected information to:

For Website Visitors & Clients:

  • Respond to inquiries and provide quotes for OEM/ODM services
  • Process orders and manage manufacturing projects
  • Communicate project updates, delivery schedules, and technical support
  • Improve our website functionality and user experience
  • Send marketing communications (with your consent – see Section 2.3)

For AI Device Users:

  • Activate and register your device
  • Provide AI voice assistant functionality (speech recognition, natural language processing)
  • Deliver firmware updates and new features (OTA updates)
  • Troubleshoot technical issues and provide customer support
  • Improve AI accuracy and device performance through machine learning
  • Personalize your experience based on usage patterns (optional)

For OEM/ODM Partners:

  • Manage custom integration projects (BYOA, hardware design, plush manufacturing)
  • Coordinate design reviews, prototyping, and production milestones
  • Ensure quality control and compliance with specifications
  • Process payments and maintain financial records
  • Fulfill contractual obligations and legal requirements

2.2 Analytics & Product Improvement

We analyze aggregated, anonymized data to:

  • Understand how users interact with our website and products
  • Identify technical issues and optimize device performance
  • Develop new features and improve existing AI capabilities
  • Conduct market research and competitive analysis
  • Measure the effectiveness of our marketing campaigns

2.3 Marketing Communications (Opt-In Required)

With your explicit consent, we may send:

  • Product announcements and new AI device launches
  • Educational content (AI hardware guides, manufacturing insights)
  • Special offers, discounts, or promotional campaigns
  • Industry news and company updates

You can opt-out anytime via:

We do NOT:

  • Sell your contact information to third parties
  • Send unsolicited marketing to individuals who have not opted in
  • Use children’s data for marketing purposes

3. Legal Basis for Processing (GDPR Compliance)

For users in the European Economic Area (EEA), we process your data based on:

Contractual Necessity:

  • Fulfilling OEM/ODM manufacturing agreements
  • Delivering AI device functionality and support services
  • Processing payments and shipping orders

Legitimate Interests:

  • Improving our products and services
  • Preventing fraud and ensuring security
  • Conducting business analytics and market research
  • Defending legal claims

Consent:

  • Marketing communications
  • Optional AI personalization features
  • Cookies and tracking technologies (see Section 5)

Legal Obligations:

  • Compliance with tax and accounting regulations
  • Responding to law enforcement requests
  • Meeting product safety and certification requirements

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

4. Information Sharing & Third-Party Services

4.1 Third-Party Service Providers

We share information with trusted partners who assist in our operations:

AI Technology Partners:

  • Alibaba Cloud (Qwen AI): Voice recognition, natural language processing, AI model hosting

Cloud Infrastructure:

  • AWS / Azure / Google Cloud: Website hosting, data storage, backup services
    • Data Processing Location: Configurable by region (US, EU, Asia-Pacific)
    • Purpose: Secure data storage and platform operations

Payment Processors:

  • PayPal, Stripe, Alipay: Secure payment processing
    • We do NOT store full credit card information
    • Payment data handled according to PCI-DSS standards

Logistics & Shipping:

  • DHL, FedEx, UPS, China Post
    • Shipping address and contact information shared for delivery
    • Tracking information provided to customers

Analytics & Marketing Tools:

  • Google Analytics (website traffic analysis – anonymized IPs)
  • Mailchimp / SendGrid (email campaigns – opt-in only)
  • HubSpot / Salesforce (CRM for B2B client management)

All third-party providers are contractually required to:

  • Process data only for specified purposes
  • Implement appropriate security measures
  • Comply with applicable data protection laws (GDPR, CCPA, etc.)
  • Not use data for their own purposes without authorization

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent website notice before your data is transferred and becomes subject to a different privacy policy.

4.3 Legal Disclosures

We may disclose your information when required by law or to:

  • Comply with legal processes (subpoenas, court orders, government requests)
  • Enforce our Terms of Service or other agreements
  • Protect our rights, property, or safety
  • Investigate fraud, security breaches, or illegal activities
  • Protect the safety of users or the public

5. Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. We use cookies to enhance your browsing experience, analyze website performance, and deliver personalized content.

5.2 Types of Cookies We Use

Essential Cookies (Always Active):

  • Session management (keeping you logged in)
  • Security features (CSRF protection, fraud prevention)
  • Load balancing and site functionality

Performance & Analytics Cookies (Opt-In):

  • Google Analytics (traffic analysis, page views, bounce rates)
  • Heatmaps (understanding user behavior on pages)
  • A/B testing (optimizing website design)

Marketing Cookies (Opt-In):

  • Retargeting ads (Google Ads, Facebook Pixel)
  • Email campaign tracking (open rates, click-through rates)
  • Conversion tracking (measuring ROI of marketing efforts)

5.3 Your Cookie Preferences

Managing Cookies:

  • Cookie Banner: Choose your preferences when you first visit our site
  • Browser Settings: Block or delete cookies in your browser preferences
  • Opt-Out Tools: Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout

Note: Disabling essential cookies may affect website functionality (e.g., inability to log in or submit forms).

5.4 Do Not Track (DNT) Signals

Our website does not currently respond to “Do Not Track” browser signals. However, you can control tracking through cookie preferences and browser settings.

6. Data Security

6.1 Security Measures

We implement industry-standard security practices to protect your data:

Technical Safeguards:

  • Encryption: TLS 1.2/1.3 for data in transit, AES-256 for data at rest
  • Secure Authentication: Multi-factor authentication (MFA) for admin accounts
  • Firewalls: Network-level protection and intrusion detection systems
  • Access Controls: Role-based access, principle of least privilege
  • Secure Boot: Device firmware integrity protection (for AI hardware)

Organizational Safeguards:

  • Employee Training: Regular privacy and security awareness training
  • Background Checks: Vetting of employees with data access
  • NDA Agreements: Confidentiality obligations for all staff and contractors
  • Incident Response Plan: Documented procedures for data breach handling

Physical Safeguards:

  • Secure Facilities: Access-controlled data centers with 24/7 monitoring
  • Redundancy: Backup systems and disaster recovery protocols

6.2 Data Breach Notification

In the event of a data breach that compromises personal information, we will:

  • Notify affected users within 72 hours (GDPR requirement)
  • Provide details of the breach (what data, when, how)
  • Describe mitigation steps taken
  • Offer guidance on protective measures users should take
  • Report to relevant authorities (e.g., EU supervisory authorities, state attorney generals)

7. Data Retention

7.1 Retention Periods

We retain personal information only as long as necessary for the purposes outlined in this Privacy Policy:

Website Visitors & Marketing Contacts:

  • Active contacts: Until you unsubscribe or request deletion
  • Inactive contacts: 2 years of inactivity, then deleted

AI Device Users:

  • Account data: Duration of device ownership + 1 year after last use
  • Voice recordings: 30 days (or until user deletion request)
  • Device telemetry: 90 days (anonymized aggregates retained indefinitely)

OEM/ODM Clients:

  • Project files: 7 years (accounting and legal compliance)
  • Contracts and NDAs: Duration of agreement + 10 years
  • Communication records: 3 years after project completion

Legal & Tax Records:

  • Financial transactions: 7 years (China tax law requirement)
  • Product safety records: 10 years (regulatory compliance)

7.2 Deletion Requests

You can request deletion of your data at any time (subject to legal retention obligations). We will:

  • Delete or anonymize your personal information within 30 days
  • Notify third-party processors to delete shared data
  • Provide confirmation of deletion upon request

8. Your Privacy Rights

8.1 Rights Under GDPR (EU Users)

If you are in the European Economic Area, you have the right to:

Access: Request a copy of your personal data we hold Rectification: Correct inaccurate or incomplete information Erasure (“Right to be Forgotten”): Request deletion of your data Restrict Processing: Limit how we use your data Data Portability: Receive your data in a machine-readable format Object: Object to processing based on legitimate interests or marketing Automated Decision-Making: Not be subject to solely automated decisions with legal effects

How to Exercise Rights:

  • Email: privacy@aitoysupplier.com
  • Subject Line: “GDPR Data Subject Request”
  • Include: Full name, email address, specific request details
  • Response Time: Within 30 days

8.2 Rights Under CCPA (California Users)

California residents have the right to:

Know: What personal information we collect, use, and share Delete: Request deletion of your personal information Opt-Out of Sale: We do NOT sell personal information (not applicable) Non-Discrimination: Equal service regardless of privacy rights exercise

Verification Process: We may request additional information to verify your identity before processing requests.

8.3 Children’s Privacy Rights (COPPA)

For AI toys designed for children under 13:

Parental Rights:

  • Review all information collected from your child
  • Request deletion of your child’s data
  • Refuse further collection or use of your child’s information
  • Receive notice of our information practices

Parental Consent:

  • Required before activating AI features for children
  • Verifiable consent process (email confirmation + age verification)
  • Option to consent to collection without third-party disclosure

Contact for Parental Requests: Email: parents@aitoysupplier.com Subject: “COPPA Parental Request – [Child’s Device Serial Number]”

9. International Data Transfers

9.1 Cross-Border Data Processing

SNUGOGO operates globally. Your information may be transferred to and processed in:

China (Headquarters & Manufacturing):

  • Primary data processing location
  • Subject to China’s Personal Information Protection Law (PIPL)
  • Manufacturing, R&D, customer support operations

United States:

  • Cloud infrastructure (AWS, Google Cloud)
  • Payment processing (Stripe, PayPal)

European Union:

  • EU-based cloud servers (for EU customers opting for regional data storage)
  • GDPR-compliant data processing

Singapore:

  • Regional Alibaba Cloud servers (for Asia-Pacific customers)

9.2 Data Transfer Safeguards

When transferring data outside your country, we ensure adequate protection through:

EU-China Transfers:

  • Standard Contractual Clauses (SCCs) approved by EU Commission
  • Supplementary measures (encryption, access controls, legal analysis)
  • Regular audits and compliance assessments

US-China Transfers:

  • Contractual data protection obligations
  • Encryption and pseudonymization
  • Limited data sharing (only necessary information)

Your Options:

  • Request regional data storage (EU customers can opt for EU-only storage)
  • Contact privacy@aitoysupplier.com for specific data localization needs

10. Third-Party Links & Services

10.1 External Websites

Our website may contain links to third-party websites (e.g., Alibaba Cloud documentation, social media profiles). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

Linked Services Include:

  • Alibaba Cloud (AI technology partner)
  • GitHub (open-source code repositories)
  • LinkedIn, Facebook, Twitter (social media)
  • YouTube (product demo videos)

10.2 Integrations & APIs

If you use our BYOA (Bring Your Own AI) service or custom API integrations, your data may be processed by:

  • Your proprietary AI models and backend systems
  • Third-party AI providers you specify (OpenAI, Anthropic, etc.)
  • MCP (Model Context Protocol) compatible services

Your Responsibility: You are responsible for ensuring your own AI systems and third-party integrations comply with applicable privacy laws. We recommend:

  • Reviewing privacy policies of your AI providers
  • Implementing appropriate data protection agreements
  • Informing end users about data processing practices

11. Changes to This Privacy Policy

11.1 Policy Updates

We may update this Privacy Policy periodically to reflect:

  • Changes in our business practices or services
  • New legal or regulatory requirements
  • Technological advancements
  • User feedback and best practices

Notification Process:

  • Minor Changes: Updated “Last Updated” date at the top
  • Material Changes: Email notification to registered users + prominent website banner
  • Advance Notice: 30 days before significant changes take effect

Version History: Previous versions available upon request at privacy@aitoysupplier.com

11.2 Your Continued Use

By continuing to use our website or products after policy changes, you acknowledge acceptance of the updated Privacy Policy. If you disagree with changes, please discontinue use and contact us to delete your account.

12. Contact Information

12.1 Privacy Inquiries

Data Protection Officer: Email: privacy@aitoysupplier.com Subject: “Privacy Inquiry – [Your Concern]”

General Privacy Questions: Email: support@aitoysupplier.com Phone: +86-755-1234-5678 (China headquarters)

Mailing Address: SNUGOGO Technology Co., Ltd. Attn: Data Protection Officer [Building/Floor], [District] Shenzhen, Guangdong 518000 China

12.2 Response Times

We strive to respond to all privacy inquiries within:

  • General questions: 3-5 business days
  • Data subject requests: 30 days (GDPR/CCPA requirement)
  • Urgent security concerns: 24-48 hours

12.3 Complaints & Regulatory Authorities

EU Users: If you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority:

California Users: Contact the California Attorney General’s Office:

China Users: Contact the Cyberspace Administration of China (CAC):

13. Specific Privacy Notices

13.1 AI Device Voice Data Processing

Real-Time Voice Processing: When you speak to a SNUGOGO AI device:

  1. Wake word detection (processed locally on device)
  2. Voice recording sent to cloud (encrypted TLS connection)
  3. Speech-to-text conversion (Alibaba Cloud Qwen)
  4. AI response generation
  5. Text-to-speech conversion
  6. Audio playback on device

Voice Data Retention:

  • Temporary cache: 24 hours (for conversation context)
  • User-deletable history: 30 days maximum
  • Anonymized analytics: Indefinite (voice patterns for AI improvement)

Opt-Out Options:

  • Disable voice history saving (Settings → Privacy → Voice History OFF)
  • Use local-only ASR/TTS (limited functionality, no cloud connection)
  • Mute microphone physically (hardware switch on device)

13.2 Children’s Data (COPPA & GDPR-K Compliance)

For AI Toys Designed for Children Under 13/16:

Data Minimization: We collect only the minimum data necessary:

  • Device serial number (for warranty and support)
  • Age-appropriate voice interactions (filtered for sensitive topics)
  • Usage statistics (anonymized)

No Behavioral Advertising: Children’s data is NEVER used for:

  • Targeted advertising
  • Behavioral profiling
  • Third-party marketing purposes

Parental Controls: Parents can:

  • Review all voice recordings
  • Delete data at any time
  • Set time limits and content filters
  • Disable internet connectivity (offline mode)

School/Educational Use: Special provisions for FERPA compliance available for educational institutions. Contact education@aitoysupplier.com for details.

13.3 Employee & B2B Data

For OEM/ODM Partners & Employees:

We process additional information for business purposes:

  • Employment records (for SNUGOGO employees)
  • Business contact information (OEM partners, suppliers)
  • Project files and technical documentation (NDA-protected)
  • Financial and contractual records

Legal Basis: Contractual necessity and legitimate business interests Retention: 7-10 years (accounting and legal compliance) Access Rights: Same rights as consumers (GDPR/CCPA apply)

14. Accessibility

This Privacy Policy is designed to be accessible to all users. If you require this document in an alternative format (large print, audio, accessible PDF), please contact:

Email: accessibility@aitoysupplier.com Subject: “Privacy Policy Alternative Format Request”

We will provide the requested format within 7 business days.

Summary of Key Points

Quick Reference:

✓ What We Collect: Contact info, voice recordings (AI devices), website usage data ✓ Why We Collect: Provide AI services, improve products, fulfill business obligations
✓ Who We Share With: Alibaba Cloud (AI), payment processors, logistics (never sold) ✓ Your Rights: Access, delete, correct, opt-out of marketing ✓ AI Voice Data: 30-day retention, user-deletable, encrypted transmission ✓ Children’s Privacy: Parental consent required, no ads, data minimization ✓ Security: TLS encryption, secure storage, regular audits ✓ Contact: privacy@aitoysupplier.com

By using SNUGOGO products and services, you acknowledge that you have read and understood this Privacy Policy.

Last Updated: December 14, 2024
Version: 2.1
© 2025 SNUGOGO Technology Co., Ltd. All rights reserved.

Scroll to Top