Rev8 black

Privacy Policy

Privacy Policy
Last Updated: 5th October 2026

Ouster, Inc. and its affiliates (collectively, “Ouster”, “we”, “our”, “us”) are committed to protecting the privacy of visitors to our website - ouster.com (our “Site”), job applicants, users of our hardware and software products and offerings (“Products” and collectively with the Site, our “Services”). Job applicants include individuals applying for a role as an employee, consultant, contingent worker, contractor, intern or trainee, and regardless of whether the role is on a part time, temporary or full-time basis (“Candidates”).

We have established this Privacy Policy to set out the basis on which we will process any personal. data we collect from you, or that you provide to us, in connection with your access and/or use of our Services or if you are a Candidate. Please read this Privacy Policy carefully so that you understand your rights in relation to your personal data.

If you are accepted for a role at Ouster, the information that we collect about you during the recruitment process will form part of your ongoing staff member record and will be processed in accordance with our Employee Privacy Policy. We will inform you of how you can access the Employee Privacy Policy after you have accepted a role with Ouster.

1. WHO WE ARE Ouster, Inc. is a corporation established in Delaware with a registered office at 350 Treat Avenue San Francisco, CA 94110, United States. Ouster has affiliates located in Europe, North America and Asia.

2. DATA WE COLLECT AND HOW WE USE IT The data we collect from you, either directly or indirectly, will depend on how you interact with us and our Services. We collect data from you from the following different sources:

Data that you provide directly

We collect data directly from you when you:

  • Access and/or use our Services that display or link to this Privacy Policy;
  • Visit our branded social media pages;
  • Visit our premises;
  • Respond to communications from us or otherwise communicate with us, including but not limited to emails, phone calls, texts or faxes;
  • Use our Services where we act as a controller of your personal data;
  • Register for, attend or take part in our events, webinars, programs, trainings, certifications or contests;
  • Provide your contact details to us, including at trade shows, networking and industry events;
  • Act as or work for a service provider or supplier to Ouster, to the extent Ouster acts as a controller with respect to your personal data;
  • Are employed by a customer of our Services where your personal data has been shared with us in our capacity as a controller (for example, during the contracting process);
  • Participate in an Ouster community (e.g., open source development community);
  • Apply for a position with us as a Candidate and provide us with information directly.

We may also invite you to participate in a survey or take a questionnaire relating to some aspects of our business. If you choose to participate in an Ouster survey, any personal data you provide may be used in an aggregated and anonymised format for marketing or market research purposes.

Information collected automatically When you access and/or use our Services, we automatically collect internet, electronic activity, and other data sent to us by your computer, mobile phone or other access device. This data includes your IP address, device information, including, but not limited to, identifier, name, and type of operating system, mobile network information and standard web information, such as your browser type and the pages you access on our Services. 

Information from third parties

We may receive data about you from other third-party sources including, without limitation, service providers, suppliers, business partners, and authorized resellers of our Services. This data may include:

  • Data that our service providers have collected from you when providing us with operational assistance, including email, marketing and analytics services;
  • Data that is published by third parties and/or that third parties have collected from you when you contact them and/or visit or use their products or services;
  • Data provided by another individual at your organization; and
  • Platforms such as GitHub to manage code check-ins and pull requests.

If you are a Candidate we may receive information from third parties in connection with your application such as referees, recruiters and organisations that provide background checks (for example, on your right to work, criminal reference checks, motor vehicle record background checks) to the extent permitted by applicable law.

Categories of Data Collected by Ouster

The types of data we collect and maintain through the collection methods above includes, without limitation:

  • Identity and Contact information, including such as your name, job title, company name, address, phone number, email address, username and password, other information you have voluntarily chosen to share; Username, photo, video or other biographical information, such as your occupation, location, social media profiles or usernames, company name, areas of expertise and interests.
    • Sourced Directly from you when you use/purchase the Services
  • Financial and billing information, such as billing name and address, credit card number or bank account information.
    • Sourced Directly from you when you use/purchase the Services
  • Transaction information, such as the items you purchase and your past transactions.
    • Sourced Directly from you when you use/purchase the Services
  • Communication information, such as information concerning how you heard about Ouster and your interest in the company; Correspondence you send to us, including questions, testimonials, comments, and suggestions; Survey responses.
    • Sourced Directly from you
  • Advertising and marketing data, such as requests to receive or not to receive periodic updates from us.
    • Sourced Directly from you
  • Device Data collected from (or as a result of your using) your device (including by means of cookies and similar tracking technology), including your IP address, your ISP, the browser you use to visit our Site, device type, unique device identification numbers or other identifiers including advertising identifiers.
    • Sourced Automatic collection
  • Site Usage Data, such as activity and Site interaction, information that we capture using cookies and similar technologies (see the "Cookies" section below). This will include page views and searches, log-in information, clicks, operating system, information about content viewed, watched or downloaded for offline access, length of visits to certain pages, length of Website / App use, purchase history and other functional information on the Site. performance (for example, application version information, diagnostics, and crash logs).
    • Sourced Automatic collection
  • Candidate identity and application data, such as your name; contact information; date of birth; work experience; educational qualifications; compensation; social security number and/or national ID number; ability to work in the country for which you are applying for employment; any additional information you upload as part of the application process (such as information from your CV).
    • Sourced Directly from you
  • Candidate sensitive information, such as race or ethnic origin.
    • Sourced Directly from you
  • Third party candidate information, such as referees, recruiters and organisations that provide background checks (for example, on your right to work, criminal reference checks, motor vehicle record background checks) to the extent permitted by applicable law.
    • Sourced From Third parties
  • Candidate interview and selection notes, such as notes made by interviewers or other staff in connection with your application.
    • Sourced From Third parties or directly from you

How We Use Your Data (Our Purposes)

We collect and use this data in order to:

  • administer and provide the Services, including to manage your account, facilitate purchases, process payments and warranty claims, provide and customer support per your request;
  • improve the Services;
  • personalise our Services to ensure content displayed through our Services is presented in the most effective manner for you and your device;
  • monitor and analyse trends, usage and activity in connection with our Services;
  • administer our Services by conducting troubleshooting, data analysis, testing, research and statistical analysis;
  • keep the Services safe and secure;
  • enforce the Services’ terms and conditions;
  • measure and understand the effectiveness of the content we serve to you and others; and
  • communicate with you, including contacting you by telephone or email.

If you have consented to marketing, we will also use your personal data to communicate with you about products, services, promotions, events and other news and data we think will be of interest to you. If we send you a marketing email, it will include instructions on how to unsubscribe from these emails in the future.

If you provide us with Candidate identity and application data, we use this information to evaluate your application, determine your eligibility to work, conduct background checks, and contact you.

Where permitted by law, you may have the option of providing certain sensitive personal data with your consent. If you provide us with Candidate sensitive information, we use this information for the purposes of equal opportunities monitoring.

3. COOKIES

We use cookies to collect data about your browsing activities over time. We use cookies for a variety of purposes. For example, they allow us to recognise and count the number of users and to see how users move around our Services when they are using it. This helps us to improve the way our Services work. For more information about cookies, and to manage your cookie preferences, please click the "Your Privacy Choices" link at the bottom of our Site.

4. HOW LONG DO WE STORE YOUR PERSONAL DATA?

We may retain your personal data for a period of time consistent with the original purpose of collection or as long as required to fulfil our legal obligations. We determine the appropriate retention period for personal data on the basis of the amount, nature, and sensitivity of the personal data being processed, the potential risk of harm from unauthorized use or disclosure of the personal data, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation).

In certain circumstances, we will need to keep your information for legal reasons after our contractual relationship has ended and/or your account has been deleted. The specific retention periods depend on the nature of the information and why it is collected and processed and the nature of the legal requirement. For example, to deal with and resolve requests and complaints, and for litigation or regulatory matters where we would retain your information if there was an ongoing legal claim and the information was relevant to the claim. This information would be retained until the legal claim had been concluded.

After expiry of the applicable retention periods, your personal data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of such data.

For more information on data retention periods, please contact us at privacy@ouster.io.

5. WHO WE SHARE YOUR PERSONAL DATA WITH

We do not use or share your personal data to others except as described in this Privacy Policy. We may share any of the categories of personal data identified above for business purposes as described in this section:

Service Providers. We may disclose your data to third party service providers for business purposes, including providers of IT services, cloud storage (to store your personal data and to provide disaster recovery services, including Amazon Web Services), payment processing, shipping and logistics, email and marketing communications, analytics, and other SaaS service providers. These service providers perform tasks on our behalf so we may need to share your personal data with them to the extent needed to provide our services. In certain circumstances service providers may also process your personal data for their own purposes (for example, for product improvement purposes). In these circumstances the service providers are themselves responsible to determine the purposes and means of the processing and for the lawfulness of the processing. Where necessary, we will ensure that appropriate contractual measures are in place to ensure the protection of your personal data.

Affiliates. We may share any categories of personal data we collect within our global corporate family.

Business Partners. We may share your personal data with our business partners that offer supplementary services to those provided by Ouster or that resell the Services.

Event sponsors. If you attend an event or webinar organized by us, or download or access an asset on our Services, we may share your personal data with sponsors of the event. If required by applicable law, you may consent to such sharing via the registration form. In these circumstances, your data will be subject to the sponsors’ privacy statements.

We will share your data with law enforcement agencies, public authorities or other organisations if legally required to do so, or based on our legitimate business interest if such use is reasonably necessary to:

  • comply with a legal obligation, process or request; enforce our terms and conditions and other agreements, including investigation of any potential violation thereof;
  • detect, prevent or otherwise address security, fraud or technical issues; or
  • protect the rights, property or safety of us, our customers, a third party or the public as required or permitted by law (exchanging data with other companies and organisations for the purposes of fraud protection and credit risk reduction).

We may also disclose your data to third parties in our legitimate business interests if we either:

  • sell, transfer, merge, consolidate or re-organise any part(s) of our business, or merge with, acquire or form a joint venture with, any other business, in which case we may disclose your data to any prospective buyer, new owner, or other third party involved in such change to our business; or
  • sell or transfer any of our assets, in which case the data we hold about you may be sold as part of those assets and may be transferred to any prospective buyer, new owner, or other third party involved in such sale or transfer.

Ouster permits third parties to collect the data described above for business purposes as described in this Privacy Policy.

6. WHEN YOU SHARE YOUR INFORMATION

Our Services may include social media features for sharing purposes (e.g. sharing an embedded YouTube video on various social media sites). Where our Services let you share data with other people, you have control over how you share. We will not share your data or post to your social networks without your permission.

7. LOCATION OF OPERATION; INTERNATIONAL TRANSFERS

The Services are offered and operated globally. Your personal data will be transferred to and stored at/processed in the United States, the European Union, and those other jurisdictions in which Ouster operates.

Therefore, your personal data may be processed outside your country or jurisdiction, including in places that are not subject to an adequacy decision by the European Commission or your local legislature or regulator, and that may not provide for the same level of data protection.

Specifically, our Site and Service/Product servers are located in the USA and Canada and our group companies in Europe, North America and Asia. Our third-party service providers and partners operate around the world. This means that when we collect your personal data, we will process it in any of these countries.

We ensure that the recipient of your personal data offers an adequate level of protection and security, for instance by entering into the appropriate back-to-back agreements and, if required, European Commission's Standard Contractual Clauses, the UK ICO's International Data Transfer Agreement or its Addendum or an alternative mechanism for the transfer of data as approved by the European Commission (Art. 46 GDPR) or other applicable regulators or legislators. Where required by applicable law, we will only share, transfer or store your Personal Data outside of your jurisdiction with your prior consent.

8. CHILDREN

The Services are not intended for persons under 13 years of age, and we do not knowingly collect personal data from any person under 13 years of age. If you are a child under 13, please do not attempt to send any personal data about yourself to us. If you believe that your child under the age of 13 has submitted personal data to us in connection with our Services, please contact us at privacy@ouster.io (mailto:privacy@ouster.io) so that we may take steps to delete such information as quickly as possible, as may be required under the Children’s Online Privacy Protection Act of 1998 and other relevant laws.

ADDITIONAL POLICY INFORMATION

9. No Guarantee of Security in Transmission

Once we receive your personal data, we take appropriate technical and organisational measures to safeguard your personal data against loss, theft, unauthorised use, access or modification. However, although we use commercially reasonable efforts consistent with industry standards to keep your personal data secure, we cannot guarantee complete security of your personal data transmitted through our Services or over email. We will, from time to time, host links to and from the websites of our affiliates or third parties. If you follow a link to any of these websites, these websites will have their own privacy policies, and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any information to those websites.

10. Service Announcements

We may, from time to time, send you announcements (for example, security, privacy, or administrative-related communications). You may not opt-out of these service-related announcements, which are not promotional in nature.

11. Policy Updates

We make revisions or updates to this Privacy Policy from time to time. If we make such an update or revision, we will place a notice on our Site. Please check our Services regularly for notices of changes to our Privacy Policy as any updates, once noticed and published, will still govern your use of our Services. If you use our Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes.

12. How to contact us

If you have any questions or concerns about our use of your personal data, please contact us using the following details: privacy@ouster.io (mailto:privacy@Ouster.io). You may also write to us at 350 Treat Avenue, San Francisco, CA 94110, United States.

13. Further Information

If you have any questions or concerns or complaints regarding our Privacy Policy or our practices, please send us a detailed message to privacy@ouster.io (mailto:privacy@Ouster.io), and we will try to resolve your concerns as soon as possible.

Annex 1 – UK and EU Residents

If you are located in the United Kingdom or the European Union, you may have additional rights under the UK General Data Protection Regulation ("UK GDPR") and UK Data Protection Act (“DPA”) or the EU General Data Protection Regulation (“EU GDPR”), respectively. The UK GDPR and EU GDPR are collectively referred to in this Annex 1 as the "GDPR". This Annex 1 provides you with additional information, including your rights, under the GDPR.

A) Lawful Basis for Processing

We process the personal data collected for the purposes described in the section entitled “Data We Collect and How We Use It” in our Privacy Policy. We rely upon the following lawful bases for processing of your personal data:

I) Legitimate Interest. We process your personal data in our legitimate interest (except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require protection of personal data) such as for marketing purposes, to respond to your inquiries, to provide technical and other support, to otherwise inform you about our business operations, to maintain the safety and security of our Services, to detect and prevent illegal activities (such as fraud), and to improve our products and services. We may also rely upon a legitimate interest where we are processing your personal data to comply with law or legal obligations or in connection with a merger or sale of the company.

II) Necessary to Perform Contract. We process your personal data as necessary to enter into and perform contracts, such as to manage and administer your account, to sell and ship products to our customers, to facilitate purchases you make and process payments and provide warranty and other services.

III) Consent. We may request your consent to process your personal data, for example where you are a Candidate we may request your explicit consent to process racial or ethnic origin information. Please note that if we rely upon consent, you may withdraw your consent at any time by emailing us at privacy@ouster.io, but such withdrawal will not affect the lawfulness of the processing prior to the withdrawal.

IV) Legal Obligation. We may process your personal data where it is necessary to comply with a legal obligation, for example, to conduct Know Your Client checks.

The following table provides more details on our purposes for processing your data and the related legal bases. The legal basis under which your personal data is processed will depend on the data concerned and the specific context in which we use it.

  • Purpose/Activity: Administer and provide the Services, including to manage your account, facilitate purchases, process payments and warranty claims, and provide customer support per your request

Type of personal data:

  • Identity and Contact information
  • Financial and billing information
  • Transaction information

Lawful basis for processing including basis of legitimate interest:

  • Performance of a contract with you
  • Otherwise as necessary for our legitimate interests (to operate, provide and improve our business; to communicate with you) – where our communications are not necessary to perform or enter into a contract with you.

Identity and Contact information

Transaction information

  • Lawful basis for processing including basis of legitimate interest:

Necessary for our legitimate interests (to operate, provide and improve our business; to communicate with you) – where such processing is not necessary to perform or enter into a contract with you.

  • Purpose/Activity: Personalise our Services to ensure content displayed through our Services is presented in the most effective manner for you and your device
    • Type of personal data:
      • Transactional information
      • Device Data
      • Site Usage Data
    • Lawful basis for processing including basis of legitimate interest:
      • Consent (where required under applicable law)
      • Otherwise as necessary for our legitimate interests (to personalize and tailor the Services for customers).
  • Purpose/Activity: Monitor and analyse trends, usage and activity in connection with our Services
    • Type of personal data:
      • Transaction information
      • Device Data
      • Site Usage Data
    • Lawful basis for processing including basis of legitimate interest:
      • Consent (where required under applicable law).
      • Otherwise as necessary for our legitimate interests (to operate, provide and improve our business, including our Services, including to collect and use insights to improve or develop marketing activities and promote our products and services).
  • Purpose/Activity: Administer our Services by conducting troubleshooting, data analysis, testing, research and statistical analysis
    • Type of personal data:
      • Transaction information
      • Device Data
      • Site Usage Data
    • Lawful basis for processing including basis of legitimate interest:
      • Performance of a contract with you.
      • The legitimate interests of us and our third parties (to operate, provide and improve our business, including our Services; to detect or prevent Illegal activities (e.g. fraud) and/or to manage the security of our IT infrastructure).
  • Purpose/Activity: Keep the Services safe and secure
    • Type of personal data:
      • Device Data
      • Site Usage Data
    • Lawful basis for processing including basis of legitimate interest:
      • The legitimate interests of us and our third parties (to operate, provide and improve our business, including our Services; to detect or prevent Illegal activities (e.g. fraud) and/or to manage the security of our IT infrastructure).
  • Purpose/Activity: Enforce the Services’ terms and conditions
    • Type of personal data:
      • Identity and Contact information
    • Lawful basis for processing including basis of legitimate interest:
      • Performance of a contract with you.
  • Purpose/Activity: Measure and understand the effectiveness of the content we serve to you and others
    • Type of personal data:
      • Identity and Contact information
      • Transaction information
      • Communication information
    • Lawful basis for processing including basis of legitimate interest:
      • Consent (where required under applicable law – see cookie consent tool on our website).
      • Otherwise (for strictly necessary cookies) as necessary for our legitimate interests to operate, provide and improve our business, including our Services, including to collect and use insights to improve or develop marketing activities and promote our products and services.
  • Purpose/Activity: Communicate with you regarding service updates and notifications per your request, including contacting you by telephone or email
    • Type of personal data:
      • Identity and Contact information
      • Communication information
    • Lawful basis for processing including basis of legitimate interest:
      • Performance of a contract with you
  • Purpose/Activity: Marketing to you to communicate with you about products, services, promotions, events and other news and data we think will be of interest to you.
    • Type of personal data:
      • Identity and Contact information
      • Communication information
    • Lawful basis for processing including basis of legitimate interest:
      • Consent (where required under applicable law).
      • Otherwise as necessary for our legitimate interests (to communicate with you and to develop marketing activities and promote our products and services).
  • Purpose/Activity: To evaluate your application, determine your eligibility to work, conduct background checks and contact you.
    • Type of personal data:
      • Candidate identity and application data
      • Third party candidate information
      • Candidate interview and selection notes
    • Lawful basis for processing including basis of legitimate interest:
      • Legitimate interests of managing applications for positions with us
  • Purpose/Activity: Equal opportunities monitoring
    • Type of personal data:
      • Candidate sensitive information
    • Lawful basis for processing including basis of legitimate interest:
      • Legal obligation.
      • With your consent.

B) Data Subject Rights. Data subjects of the European Union and United Kingdom have the following rights:

I) Access, Correction and Erasure Requests. You have the right to: (a) contact us to confirm whether we are processing your personal data; (b) receive information on how your personal data is processed; (c) obtain a copy of your personal data; (d) request that we update or correct your personal data, and (e) request that we delete personal data in certain circumstances.

II) Right to Object to Processing. You have the right to request that we cease processing of your personal data for marketing activities, including profiling for statistical purposes where such processing is based on our legitimate business interests, unless we are able to demonstrate a compelling legitimate basis for such processing or we need to process your personal data for the establishment, exercise, or defense of a legal claim

III) Right to Restrict Processing. You have the right to request that we limit the processing of your personal data: (a) while we are evaluating or in the process of responding to a request by you to update or correct your personal data where such processing is unlawful and you do not want us to delete your personal data; (b) where we no longer require such data, but you want us to retain the data for the establishment, exercise, or defense of a legal claim; (c) where you have submitted an objection to processing based on our legitimate business interests, pending our response to such request.

IV) Data Portability Requests. You have the right to request that we provide you or a third party that you designate with certain of your personal data in a commonly used, machine readable format. Please note, however, that data portability rights apply only to personal data that we have obtained directly from you and only where our processing is based on consent or the performance of a contract.

To exercise any of these rights, please contact privacy@ouster.io (mailto:privacy@ouster.io).

C) Alleged Violations.

If you believe our processing of your personal data violates data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the United Kingdom or European Union member state of your habitual residence, your place of work, or the place of the alleged violation.

Annex 2 – Residents of specific US States

This Annex 2 provides additional details about our privacy practices related to your personal information as required by U.S. state privacy laws in the following states ("US State Consumer Privacy Laws"): California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Rhode Island, Oregon, Tennessee, Texas, Utah and Virginia. Some portions of this Annex 2 apply only to residents of particular states. In those instances, we have indicated that such language applies only to those residents

This Annex 2 supplements the Privacy Policy and applies to consumers (as defined in the relevant U.S. State Consumer Privacy Laws) who live in U.S. states that have enacted the U.S. State Consumer Privacy Laws. If anything in this Annex 2 contradicts what is contained in the Privacy Policy, this Annex 2 will take precedence. It outlines our practices regarding the collection, use, and disclosure of personal information through both online and offline interactions with Ouster's products, services, and representatives.

Collection of Personal Information

The information that we collect, and the source of such information is described in more detail in the sub-section "Categories of Data Collected by Ouster" under section 2 above titled "DATA WE COLLECT AND HOW WE USE IT" of the Privacy Policy. The California Consumer Privacy Act ("CCPA") requires that companies disclose their collection and use of specific categories of personal information enumerated in CCPA. We collect and have collected the following categories of personal information:

Identifiers, such as real name, preferred name, alias, preferred pronouns, postal address, unique personal identifier, online identifier, internet protocol (IP) address, or other similar identifiers;

Contact and financial information, including phone number, address, email address, bank account information;

Commercial information, including records of products or services purchased or considered, and other purchasing histories;

Characteristics of protected classifications under state or federal law, such as data of birth, gender, race, or self-identified physical or mental health conditions;

Internet or other electronic network activity information, such as browsing history and search history;

Audio, electronic, visual, or similar information, such as a profile photograph;

Professional or employment-related information, such as work history and prior employer;

Education information, such as academic information and records; and

Inferences drawn from any of the information listed above to create a profile about an individual reflecting the individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, abilities, and aptitudes (e.g., predictions about an individual’s preferences or tendencies).

Disclosure of Personal Information

We collect and process personal information as described in the sub-section "How We Use Your Data (Our Purposes)" under section 2 "DATA WE COLLECT AND HOW WE USE IT".

The categories of recipients of personal information are further described in section 5 "WHO WE SHARE YOUR PERSONAL DATA WITH" of our Policy.

We have disclosed the following categories of personal information to service providers and third parties for business purposes:

Identifiers, such as real name, preferred name, alias, preferred pronouns, postal address, unique personal identifier, online identifier, internet protocol (IP) address, or other similar identifiers;

Contact and financial information, including phone number, address, email address, bank account information;

Commercial information, including records of products or services purchased or considered, and other purchasing histories;

Characteristics of protected classifications under state or federal law, such as data of birth, gender, race, or self-identified physical or mental health conditions;

Internet or other electronic network activity information, such as browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement;

Audio, electronic, visual, thermal, olfactory, or similar information, such as a profile photograph;

Professional or employment-related information, such as work history and prior employer;

Education information, such as academic information and records; and

Inferences drawn from any of the information listed above to create a profile about an individual reflecting the individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, abilities, and aptitudes (e.g., predictions about an individual’s preferences or tendencies).

We do not "sell" personal information for monetary consideration; however, the use of cookies and online tracking technologies may be considered a “sale” / “sharing” under certain US state privacy laws. Visitors to our US website can opt out of being tracked by these third parties by clicking the “Your Privacy Choices” link at the bottom of our Site and selecting their preferences.

Categories of personal information disclosed that may be considered “sale” / “sharing”: Identifiers; Contact and financial information, Characteristics of protected classifications under state or federal law; Internet or other electronic network activity information; Audio, electronic, visual, thermal, olfactory, or similar information; Professional or employment-related information; Education information; Inferences.

Categories of third parties to whom personal information was disclosed that may be considered “sale”/ “sharing” include advertisers and marketing partners, data analytics providers, and social media networks.

Nevada consumers have the right to submit a verified request that we do not sell Nevada consumer's covered information. To submit a request, please contact privacy@ouster.io. We do not sell any covered information as defined in the Nevada Internet Privacy Law.

Privacy Rights Requests

Consistent with applicable state laws, you may exercise the rights described in this section. Please note that some of the rights may vary depending on your state of residence.

  • Right to Receive Information on Privacy Practices: You have the right to receive the following information:
    • The categories of personal information to be collected;
    • The purposes for which the categories of personal information are collected or used;
    • Whether or not that personal information is sold or shared;
    • If we collect sensitive personal information, the categories of sensitive personal information to be collected, the purposes for which it is collected or used, and whether that information is sold or shared; and
    • The length of time we intend to retain each category of personal information, or if that is not possible, the criteria used to determine that period.
  • Right to Delete: You may request that we delete any personal information about you that we collected from you.
  • Right to Correct: You may request that we correct any inaccurate personal information we maintain about you.
  • Right to Know: You may request that we provide you with the following information about how we have handled your personal information:
    • The categories of personal information we collected about you;
    • The categories of sources from which we collected such personal information;
    • The business or commercial purpose for collecting personal information about you;
    • The categories of Personal information about you that we shared or disclosed and the categories of third parties with whom we shared or disclosed such personal information; and
    • The specific pieces of personal information we have collected about you.
  • Right to Receive Information About Onward Disclosures: You may request that we disclose to you:
    • The categories of personal information that we have collected about you;
    • The categories of personal information that we have sold or shared about you and the categories of third parties to whom the personal information was sold or shared; and
    • The categories of personal information we have disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
  • Right to Non-Discrimination: You have the right not to be discriminated against for exercising your data subject rights. We will not discriminate against you for exercising your data subject rights.
  • Right to Opt-Out of the Sale and Sharing of Personal Information: If we sell or share your personal information to or with third parties, you have the right, at any time, to direct us not to sell or share your personal information. We do not have actual knowledge about any selling or sharing of personal information of minors under 16 years of age without affirmative authorization.
  • Right to Limit the Use of Sensitive Personal Information: We do not collect or process sensitive personal information for the purpose of inferring characteristics about you. Some of the purposes for the collection and processing of sensitive personal information allowed by law include: to perform the services or provide the goods reasonably expected; to prevent, detect, and investigate security incidents; to resist malicious, deceptive fraudulent, or illegal actions directed at us and to prosecute those responsible for those actions; to ensure the physical safety of natural persons; for short-term, transient use; to perform services on behalf of Ouster; and to verify or maintain the quality or safety of a product or service provided by Ouster. Therefore, Ouster does not offer the right to limit the use of sensitive personal information.

Submitting a Privacy Rights Request

To exercise any of these rights, please contact privacy@ouster.io (mailto:privacy@ouster.io). You may also authorize an agent to make data subject requests on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. When you submit a data subject request, please indicate the type of request you are making, so that we may properly process and respond to your request in accordance with applicable law.

Depending on the type of data subject request you submit, we may ask you to provide information that will enable us to verify your identity before complying with the request. We verify requests carefully and in accordance with applicable law. In particular, if you authorize an agent to make a request on your behalf, we may require the agent to provide proof of signed permission from you to submit the request, or we may require you to verify your own identity to us or confirm with us that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.

We will not discriminate against you for exercising your data subject rights. For example, we will not deny goods or services to you, or charge you different prices or rates, or provide a different level of quality for products or services as a result of you exercising your privacy rights.

Appealing Requests

Depending on your state of residence in the U.S., you may be able to appeal our decision to your request regarding your personal information. To do so, please contact us at privacy@ouster.io. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.

Other Disclosures

  • Disclosure About Direct Marketing for California Residents. Under California Civil Code 1798.83, California residents who have provided personal data to Ouster may obtain information regarding Ouster’s disclosures, if any, of personal data to third parties for third-party direct marketing purposes. Requests must be submitted to the following email address: privacy@ouster.io. This request may be made no more than once per calendar year.
  • Financial Incentives. Under California law, we do not provide financial incentives to individuals who allow us to collect, retain, or use their personal information. We will describe such programs to you if and when we offer them to you.
  • California Residents Under Age 18. If you are a resident of California under the age of 18 and a registered user of our website, you may ask us to remove content or data that you have posted to the website by writing to privacy@ouster.io. Please note that your request does not ensure complete or comprehensive removal of the content or data, as, for example, some of your content or data may have been reposted by another user.

We reserve the right to amend this Annex 2 at any time. If we materially change our privacy practices, this Annex 2 will be updated to reflect these changes, and the effective date of the revised Policy will be referenced above.