Privacy Policy

Effective Date: March 1, 2026

This Privacy Policy describes how Persimmons, Inc. ("Company," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with our business as a developer of semiconductor technologies, custom application-specific integrated circuits (ASICs), artificial intelligence (AI) acceleration hardware and software, engineering services, and related products and services (collectively, the "Services").

This Privacy Policy applies to personal information we collect through our website, developer portals, customer and partner engagements, technical support interactions, hardware and software products, and any other websites or online services that we own or control and that link to this Privacy Policy.

Personal Information We Collect

Information You Provide to Us

We collect personal information that you voluntarily provide to us, including:

• Business contact information, such as your name, company name, job title, department, business email address, mailing address, and phone number.
• Account and registration information, such as login credentials, authentication data, and account preferences for customer portals, developer platforms, or evaluation programs.
• Technical and project information, such as information you provide in connection with semiconductor design engagements, ASIC development, AI acceleration deployments, product evaluations, proof-of-concept testing, or technical support requests. This may include design requirements, system configurations, debugging logs, performance data, and related technical documentation.
• Communications and correspondence, including information you provide when you contact us with questions, feedback, or support requests.
• Marketing and event information, such as information provided when you register for newsletters, webinars, conferences, or product demonstrations.
• Job applicant information, such as resumes, employment history, education, and other professional information submitted through our recruiting process.
• Other information not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Information We Collect Automatically

We and our service providers may automatically collect information about your device, systems, and interactions with our Services, including:

• Device and system data, such as operating system type and version, hardware model, browser type, IP address, device identifiers, and network information.
• Usage and activity data, such as pages viewed, time spent on pages, navigation paths, access times, system performance metrics, and interactions with communications or online tools.
• Product and telemetry data, such as diagnostic information, system health data, firmware or software version information, error reports, and performance metrics generated by our hardware or software products, developer tools, or evaluation systems.
• Security and access logs, such as authentication attempts, system access records, and network activity information used to maintain the security and integrity of our infrastructure and products.

Information We Obtain from Third Parties

We may receive personal information from third parties, including:

• Business partners, distributors, or resellers who provide us with contact information in connection with commercial relationships;
• Service providers that support our operations, such as identity verification, security monitoring, and analytics providers; and
• Publicly available sources, such as professional networking platforms (e.g., LinkedIn).

How We Use Personal Information

We use personal information for the following business and commercial purposes:

To Provide and Operate Our Services

• Provide semiconductor products, ASIC design services, AI acceleration technologies, software tools, and related support;
• Manage customer and partner relationships, including contract administration, onboarding, and account management;
• Provide technical support, maintenance, updates, and troubleshooting;
• Operate and maintain our websites, platforms, and infrastructure.

Research, Development, and Engineering

• Develop, test, validate, and improve semiconductor, hardware, firmware, software, and AI acceleration technologies;
• Conduct performance analysis, system optimization, and reliability testing;
• Create aggregated, anonymized, or de-identified data sets for engineering, research, and product improvement purposes.

Security, Integrity, and Compliance

• Protect our systems, intellectual property, products, and users from unauthorized access, cyber threats, fraud, or misuse;
• Monitor and maintain system security and operational reliability;
• Comply with applicable laws, regulations, and contractual obligations, including export control, trade compliance, cybersecurity, and data protection requirements;
• Enforce our agreements, policies, and terms of service.

Communications and Business Operations

• Respond to inquiries and provide customer, partner, and technical support;
• Send administrative communications such as service updates, security alerts, product notices, and operational messages;
• Provide information about products, services, events, or industry developments, subject to applicable law and your communication preferences.

How We Disclose Personal Information

We may disclose personal information in the following circumstances:

Service Providers and Contractors

We may disclose personal information to third-party vendors, contractors, and service providers that perform services on our behalf, including:

• Cloud hosting and infrastructure providers;
• Engineering and technical support providers;
• Security, monitoring, and incident response providers;
• Professional advisors such as lawyers, auditors, insurers, and consultants; and
• Customer relationship management, analytics, and communication service providers.

These parties are authorized to use personal information only as necessary to provide services to us and are required to protect it in accordance with contractual obligations.

Business Partners and Customers

We may disclose personal information to customers, suppliers, distributors, or technology partners as necessary to:

• Deliver products or services;
• Support joint development or integration activities;
• Fulfill contractual obligations; or
• Maintain supply chain and manufacturing operations.

Legal and Regulatory Authorities

We may disclose personal information when we believe in good faith that disclosure is necessary to:

• Comply with applicable laws, regulations, legal processes, or government requests;
• Satisfy export control, trade compliance, or national security obligations;
• Protect the rights, safety, and property of the Company, our customers, or others; or
• Detect, investigate, and prevent fraud, security incidents, or other unlawful activities.

Business Transactions

We may disclose or transfer personal information in connection with a merger, acquisition, financing, reorganization, sale of assets, or other corporate transaction, or in the event of bankruptcy or dissolution.

Information Security and Compliance

Persimmons, Inc. maintains a comprehensive information security program designed to protect personal information, confidential business information, and intellectual property. Our security program is aligned with recognized industry standards and frameworks, including the SOC 2 Trust Services Criteria and ISO/IEC 27001 information security management system (ISMS) principles.

Our security practices are designed to support the following core objectives:

• Security — Protection of systems and data from unauthorized access or disclosure;
• Availability — Reliable and resilient operation of systems and services;
• Confidentiality — Protection of sensitive business and technical information;
• Integrity — Accuracy and completeness of data processing; and
• Privacy — Responsible handling of personal information.

We implement administrative, technical, and physical safeguards designed to protect personal information and confidential business information from unauthorized access, disclosure, alteration, or destruction. These safeguards include, where appropriate and consistent with applicable standards:

• Access controls and authentication mechanisms;
• Encryption of data in transit and at rest, where appropriate;
• Network monitoring and intrusion detection systems;
• Security testing, vulnerability management, and incident response procedures; and
• Personnel training and confidentiality obligations.

We continuously monitor and improve our security controls through risk assessments, internal audits, vendor management processes, and incident response procedures. While we maintain robust safeguards, no system can be guaranteed to be completely secure, and we cannot ensure or warrant the absolute security of personal information.

Risk Management and Vendor Management

We maintain processes to identify, assess, and manage information security and operational risks. This includes periodic risk assessments, security reviews, and evaluation of third-party service providers.

We conduct due diligence and ongoing oversight of vendors and partners that process or access sensitive information on our behalf. These vendors are required to implement appropriate security controls and contractual protections consistent with our security standards and applicable regulatory requirements.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to:

• Provide products and services;
• Maintain business and contractual relationships;
• Comply with legal, regulatory, accounting, and recordkeeping requirements; and
• Resolve disputes and enforce our agreements.

Retention periods may vary depending on the type of information and applicable legal obligations.

International Data Transfers

Persimmons, Inc. operates globally and may transfer personal information to countries other than the country in which the information was originally collected. We take appropriate measures to ensure that such transfers comply with applicable data protection laws and that personal information remains protected in accordance with this Privacy Policy.

Your Choices and Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, including the right to:

• Request access to personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of personal information, subject to legal and contractual limitations;
• Object to or restrict certain processing activities; and
• Opt out of receiving marketing communications.

You may exercise these rights by contacting us using the information provided below.

Opt Out of Marketing Communications

You may opt out of marketing-related emails by following the unsubscribe instructions included in the message. You may continue to receive service-related or administrative communications necessary for our business relationship.

Children

Our Services are intended for business and professional use and are not directed to children under the age of 13. We do not knowingly collect personal information from children.

Incident Response and Business Continuity

We maintain incident response and business continuity procedures designed to detect, respond to, and recover from security incidents, system disruptions, or other operational events. These procedures include escalation protocols, communication plans, forensic investigation processes, and recovery testing to support the resilience and continuity of our operations.

Transparency for Enterprise Customers and Partners

We may provide additional documentation regarding our security and privacy practices to customers, partners, and auditors upon reasonable request. This may include security questionnaires, compliance reports, or summaries of our information security controls, subject to confidentiality obligations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements, or operational practices. When we make material changes, we will update the effective date and post the revised Privacy Policy on our website.

How to Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Persimmons, Inc.
Email: privacy@persimmons.ai