Privacy Policy

Last Updated: August 1, 2026
Effective Date: August 1, 2026

Wuhan InRight Technology Co., Ltd. (“InRight Tech,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, retain, disclose, transfer, and protect personal information when you visit or use www.inrighttech.com, including its Chinese and English pages and related online features (collectively, the “Site”).

Please read this Privacy Policy carefully before submitting a contact form, enabling analytics cookies, or consenting to receive marketing communications.

Where you do not agree with a particular processing activity, you should not provide the relevant information and may reject non-essential cookies. Rejecting analytics cookies will not prevent you from accessing the principal content of the Site or submitting a business inquiry.

1. Scope and Data Controller

This Privacy Policy applies to the Site and online functions operated by InRight Tech that link to this Policy.

The entity responsible for the processing described in this Policy is:

Legal Name: Wuhan InRight Technology Co., Ltd.
Website: www.inrighttech.com
Address: 3F, Optics Valley Overseas Talent Innovation Park, No. 1 Jiayuan Road, Hongshan District, Wuhan, Hubei, China
Privacy and Business Contact: mjwu@inrighttech.com

This Policy does not apply to websites, platforms, social-media services, applications, or other services independently operated by third parties. Those parties process personal information under their own privacy policies.

2. Personal Information We Collect

We collect personal information only for specified and reasonable purposes and limit collection to information directly relevant and reasonably necessary for those purposes.

2.1 Information You Provide

When you contact us through a form, email, or another published contact channel, we may collect:

• Your name;
• Company or organization;
• Telephone number;
• Email address;
• Project requirements, product interests, intended applications, technical questions, or other information included in your message;
• Other information you voluntarily provide during subsequent communications.

Your name, company, email address, and message may be necessary for us to process an inquiry. A telephone number is generally optional unless a particular page clearly states otherwise.

Please do not submit identification documents, financial-account information, precise location data, medical information, biometric information, export-controlled information, confidential technical information, or other sensitive information through an ordinary contact form.

Where confidential technical materials must be provided, please first enter into an appropriate non-disclosure agreement with us and use a secure transmission method agreed by both parties.

If you provide personal information on behalf of another person, you must have lawful authority to do so and must inform that person of the relevant aspects of this Privacy Policy.

2.2 Information Collected Automatically

After obtaining any consent required by applicable law, the Site may use Google Analytics 4 (“GA4”), cookies, and similar technologies to collect usage information, including:

• Browser type, operating system, device type, and screen size;
• Language settings and approximate region;
• Date and time of access, session duration, and visit frequency;
• Pages viewed, navigation paths, clicks, and other on-site interactions;
• Referring page or traffic source;
• Session statistics, error information, and website-performance data;
• Cookie identifiers or similar online identifiers;
• Network information used to derive approximate geolocation.

GA4 may temporarily process an IP address when receiving a request. According to Google’s description of GA4, full IP addresses are not logged or stored by GA4.

Unless separately disclosed and lawfully authorized, we do not intentionally enable Google Signals, cross-device advertising identifiers, personalized advertising, or the use of GA4 data to create advertising profiles about identifiable individuals.

2.3 Server and Security Logs

To maintain the availability and security of the Site, prevent malicious activity, and diagnose technical issues, we or our technical service providers may process necessary server and security logs, such as:

• Request time and pages accessed;
• IP address or network connection information;
• Browser and device information;
• Error logs, security alerts, and abnormal-access records.

Such information is used for website operation, cybersecurity, troubleshooting, and legal compliance, and not for unrelated personalized marketing.

3. How We Use Personal Information

3.1 Inquiries and Business Communications

We may use personal information to:

• Receive, acknowledge, and respond to product, technical, service, or partnership inquiries;
• Understand your application and technical requirements;
• Arrange follow-up by sales, technical, project, or support personnel;
• Provide product materials, technical explanations, proposed solutions, sample information, or preliminary quotations;
• Take steps requested by you before entering into a contract;
• Maintain communication records and continuity of customer service.

3.2 Marketing Communications

Only where you have given separate, voluntary consent may we send you:

• Product updates and new-product information;
• Technical articles, application cases, and industry insights;
• Trade-show, conference, webinar, or event information;
• Company news and other SWIR-related business content.

Consent to marketing is optional and is not required to submit a business inquiry or receive a response.

You may withdraw your marketing consent at any time through an unsubscribe method included in the communication or by contacting us. Withdrawal does not affect processing lawfully carried out before withdrawal.

3.3 Website Analytics and Improvement

After you consent to analytics cookies, we may use GA4 information to:

• Measure traffic volume and traffic sources;
• Understand how visitors navigate product, solution, and technology pages;
• Evaluate page loading, navigation, and information architecture;
• Identify errors, abnormal activity, or ineffective pages;
• Improve content, language versions, functionality, and user experience.

We primarily use aggregated statistics and do not make decisions that have legal or similarly significant effects on you solely on the basis of Site browsing data.

3.4 Security, Compliance, and Dispute Resolution

We may process information where reasonably necessary to:

• Prevent fraud, misuse, malware, and cyberattacks;
• Protect the lawful rights and interests of InRight Tech, customers, partners, or others;
• Investigate breaches of the Terms of Use;
• Comply with laws, regulatory requirements, court proceedings, or lawful government requests;
• Establish, exercise, or defend legal claims;
• Handle audits, complaints, disputes, or security incidents.

4. Legal Bases for Processing

Depending on the applicable law, our legal bases may include:

• Your freely given and informed consent;
• The necessity to respond to your request, take pre-contractual steps, or perform a contract;
• Compliance with a legal obligation;
• The necessity to protect network and information-system security;
• Legitimate business interests where recognized by applicable law and not overridden by your rights and interests;
• Other grounds permitted by applicable law.

We seek the appropriate form of consent for marketing communications, non-essential cookies, analytics services, and cross-border transfers where separate consent is required.

5. Cookies and Similar Technologies

5.1 Strictly Necessary Technologies

The Site may use cookies or similar technologies necessary for core operation, security, form submission, spam prevention, and recording your privacy choices.

Such technologies may not be fully disabled through the Site’s preference center. You may restrict cookies through your browser, although doing so may impair certain functions.

5.2 Analytics Cookies

GA4 and related analytics cookies are non-essential.

Unless otherwise permitted by applicable law, we activate analytics only after you affirmatively select an option such as “Accept Analytics Cookies” through our cookie banner or preference center.

Rejecting analytics cookies will not prevent you from:

• Accessing the principal content of the Site;
• Viewing product, technology, solution, and company information;
• Submitting a contact form;
• Receiving the basic level of service available through the Site.

5.3 Managing and Withdrawing Consent

You may manage or withdraw cookie consent by:

• Using the Site’s “Cookie Settings” or “Manage Privacy Preferences” function;
• Deleting or blocking cookies through your browser;
• Using an Analytics opt-out tool made available by Google;
• Contacting us.

Withdrawal stops future collection based on that consent but does not affect processing lawfully carried out before withdrawal.

6. Disclosure and Processing by Service Providers

We do not sell your personal information.

We may disclose or entrust processing of limited information to the following parties where reasonably necessary for the purposes described in this Policy.

6.1 Authorized Personnel

An inquiry may be handled by authorized sales, marketing, technical support, research and development, management, or legal personnel. Access is limited according to role and necessity.

6.2 Technical and Business Service Providers

We may engage service providers for hosting, server maintenance, cybersecurity, email, backup, website development, or analytics.

We require service providers, through appropriate contractual, confidentiality, access-control, and security obligations, to process information only for agreed purposes and in accordance with our instructions.

6.3 Google Analytics

After you consent to analytics cookies, Site usage information may be processed through GA4.

The relevant overseas recipient may include:

Recipient: Google LLC and relevant affiliates lawfully providing the service
Principal Location: United States
Purpose: Website traffic measurement, performance analysis, and user-experience improvement
Method: Collection, transmission, analysis, and reporting through GA4 tags, first-party cookies, and related network technologies
Categories: Cookie identifiers, device and browser information, approximate geolocation, pages viewed, interactions, traffic source, time, and session statistics
Exercise of Rights: Through Google’s privacy controls, an Analytics opt-out tool, the Site’s cookie settings, or by contacting us.

Google processes the relevant information under its privacy policy and applicable data-processing terms.

6.4 Legal Requirements and Protection of Rights

We may disclose information where necessary:

• To comply with laws, regulatory requirements, court proceedings, or lawful government requests;
• To investigate or prevent illegal activity, fraud, infringement, or security incidents;
• To protect the life, property, security, and lawful rights of InRight Tech, users, partners, or the public;
• To establish, exercise, or defend legal claims.

6.5 Corporate Transactions

Information may be transferred where reasonably necessary in connection with a merger, division, restructuring, financing, asset transfer, change of control, dissolution, or insolvency.

We will comply with applicable notice requirements and require the recipient to continue protecting the information. A recipient that materially changes the original purposes or methods of processing must complete any required notice and consent procedures.

7. International and Cross-Border Processing

Because the Site serves an international audience and uses international technology providers such as GA4, certain Site usage information may be transferred to or processed using facilities outside China or outside your jurisdiction.

Where Chinese personal-information protection law applies, we will, as appropriate:

• Inform you of the overseas recipient, purposes, methods, categories of information, and methods for exercising rights;
• Obtain separate consent where required;
• Conduct and retain a personal-information protection impact assessment;
• Determine, based on applicable thresholds and exemptions, whether a security assessment, standard-contract filing, or personal-information protection certification is required;
• Use contractual, access-control, data-minimization, and other safeguards designed to ensure an appropriate level of protection.

If we later introduce an overseas email-marketing, customer-relationship-management, live-chat, or other provider that materially changes the recipient, purpose, method, or categories of processing, we will update this Policy and obtain any additional consent required by law.

8. Retention

We retain personal information only for the shortest period reasonably necessary for the applicable purpose, unless a longer period is required by law or is reasonably necessary for contract performance, dispute resolution, or legal liability.

As a general rule:

• Contact-form and inquiry information: No longer than three years following the last substantive business communication;
• Contractual or transactional records: For periods required for contract performance, taxation, audit, quality traceability, intellectual-property matters, or dispute resolution;
• Marketing contact information: Until you withdraw consent or unsubscribe; a minimal suppression record may be retained to prevent further marketing;
• GA4 event-level data: Generally no longer than 14 months;
• Security and diagnostic logs: For a reasonable period based on security risk, operational needs, and applicable law;
• Anonymous or aggregated statistics: May be retained where they can no longer identify an individual.

At the end of the applicable retention period, we delete, anonymize, or restrict information to storage and security purposes as required by law.

Information may remain in backup systems for a limited period and will be overwritten or deleted through normal backup-rotation processes.

9. Security

We use reasonable technical and organizational measures appropriate to the nature, purpose, and risk of processing, which may include:

• HTTPS/TLS transmission protection;
• Access control and authentication;
• Least-privilege principles and separation of duties;
• Security logging, anomaly monitoring, and vulnerability remediation;
• Backup and recovery arrangements;
• Security and confidentiality requirements for providers;
• Internal privacy procedures and personnel training;
• Personal-information incident-response procedures.

No Internet transmission or electronic storage system can be guaranteed to be completely secure. Although we use safeguards appropriate to the risk, we cannot promise that a security incident will never occur.

Where a personal-information breach, alteration, or loss occurs or is reasonably suspected, we will take appropriate remedial measures and provide any notification required by applicable law.

10. Your Rights

Subject to applicable law, you may have the right to:

• Be informed about our processing of your personal information;
• Decide, restrict, or object to certain processing;
• Access or obtain a copy of your information;
• Correct or supplement inaccurate or incomplete information;
• Request deletion;
• Withdraw consent;
• Opt out of marketing communications;
• Manage analytics cookies;
• Request an explanation of our processing rules;
• Request portability where applicable;
• Submit a complaint or seek relief from an appropriate supervisory authority.

Requests may be sent to mjwu@inrighttech.com and should describe the right you wish to exercise.

To protect information from unauthorized access, alteration, or deletion, we may reasonably verify your identity. We will respond within the period required by applicable law.

Where permitted by law, we may reasonably limit a request that is manifestly unfounded, repetitive, technically disproportionate, or likely to infringe the lawful rights of another person, and will explain the basis for doing so.

11. Children

The Site is intended primarily for business customers, research institutions, professional users, and industry partners, and is not directed to children.

We do not knowingly collect personal information from children under 14. Where a higher age of digital consent applies in your jurisdiction, that age will apply.

If we learn that a child’s information has been collected without appropriate parental or guardian authorization, we will take reasonable steps to delete it or stop processing it.

A parent or guardian who believes that a child has provided information to us may contact us using the details in this Policy.

12. Third-Party Links and Social Media

The Site may contain links to third-party websites, journal pages, partner websites, social-media services, or other external resources.

These services are independently operated, and we do not control their content, security, or privacy practices. You should review the privacy policy and terms of each third-party service before using it.

A link does not constitute our endorsement, warranty, or acceptance of responsibility for that third party, its products or services, its content, or its privacy practices.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in law, Site functionality, technology providers, or our business.

The updated Policy will be published on the Site and will state the latest revision date. Where a change may materially affect your rights, we may provide an additional notice through the Site, a cookie banner, email, or another appropriate method and obtain renewed consent where required.

14. Contact Us

Questions, comments, complaints, or requests regarding this Privacy Policy, cookies, cross-border processing, or your privacy rights may be directed to: mjwu@inrighttech.com

We will review and respond in accordance with applicable law.

15. Language

This Privacy Policy is published in Chinese and English.

To the extent permitted by applicable law, the Chinese version prevails in the event of an inconsistency. Mandatory laws applicable in the user’s jurisdiction remain unaffected.