PRIVACY POLICY

Last Updated and Effective as of: July 7, 2026

Introduction

This Privacy Policy explains who we are, how we collect, share, and use Personal Data about you, and how you can exercise your privacy rights.

ACCESSING OR USING OUR SERVICE INDICATES YOUR ACKNOWLEDGEMENT OF THIS PRIVACY POLICY.

What Does Corsair Do?

Corsair is one of the world's leading providers of hardware, software, and services to gamers and streamers. With decades of experience in computer and video technology, Corsair offers a complete range of products to equip gamers, content creators, enthusiasts, and e-sports athletes to play at the highest levels of performance and experience and to produce professional content for worldwide audiences.

For more information about Corsair, please see the “About Us” section of our website at www.corsair.com/about.

Privacy Policy Overview

Please read this Privacy Policy to understand how we collect, use, disclose, transfer, and store your information. In this Privacy Policy, “Corsair,” “we,” “us,” and “our” refer collectively to Corsair Memory, Inc. (the “US Controller”) and, for data subjects located in the European Economic Area, the United Kingdom, and Switzerland, Corsair GmbH (the “EU Controller”), together with their family of brands (including Corsair, Elgato, Origin PC, SCUF, and Fanatec, as well as any of our current or future brands, subsidiaries, or affiliates (“Affiliates”/ “Affiliate”)). The EU Controller is the controller of Personal Data of data subjects located in the EEA, UK, and Switzerland; the US Controller is the controller of Personal Data of all other data subjects. This Privacy Policy may use terms defined in Corsair’s Terms of Use (“Terms of Use”).

This Privacy Policy applies to Personal Data processed in connection with our Service including but not limited to our Sites, Software, and any AI-powered chat functionality offered on them (the “AI Chat”), as described below;

1. Our “Sites” (including any mobile versions and subdomains):
   • Corsair.com
   • Elgato.com
   • SCUFGaming.com
   • OriginPC.com
   • Fanatec.com
   • Other domain names we may operate from time to time
2. Our mobile applications (“Apps”), internet-connected hardware (“Hardware”), or internet-enabled software (collectively, “Software”), including (without limitation):
   • Epocam
   • iCUE
   • WaveLink
   • Elgato Control Center
   • Elgato Screen Link
   • Elgato Streamdeck
   • Elgato Streamdeck Mobile
   • Elgato Game Capture
   • Elgato Camera Hub
3. Our “Platforms,” including:
   • Elgato Marketplace
4. Our products/services or advertisements provided on or through third party sites/services (e.g. advertisements delivered by third parties and data we collect through promotions on third party sites), or via social media (e.g. when we correspond with you via social media, when we access information provided by social media platforms in relation to our pages on those platforms, and when you reference or interact with our posts on social media).
5. Our offline services, for example, when we interact with customers at a conference, trade show, event, or over the phone, and our support services (e.g. when you contact us through online form or chat).
6. Our Services may include YouTube API Services. By accessing or using our Services that include YouTube API Services, You agree to YouTube's Terms of Service (https://www.youtube.com/t/terms) and Google Privacy Policy at http://www.google.com/policies/privacy. For the YouTube application, you can revoke YouTube application’s access to your data via the Google security settings page at https://security.google.com/settings/security/permissions(opens in a new tab or window).
7. Unless explicitly stated otherwise, any new products, services, or features of our Service will be subject to this Privacy Policy.
8. In addition to this Privacy Policy, we provide additional information regarding the collection and use of Personal Data through specific products and services in our Supplemental Privacy Notices. Our Supplemental Privacy Notices are incorporated into this Privacy Policy and will control to the extent relevant to your activities and to the extent of any conflict with this Privacy Policy.
9. Finally, we provide specific information for users in certain locations. Click the following links to learn more:
   • Your California Privacy Rights
   • Your Nevada Privacy Rights
   • Your EEA/UK/Swiss Privacy Rights
10. This Privacy Policy only covers how Corsair processes Personal Data as part of our Service. Corsair’s Privacy Policy does not apply to third parties. We encourage you to read third party privacy policies and understand your privacy rights before interacting with them.
11. Please take a moment to familiarize yourself with our privacy practices, accessible via the headings below, and contact us if you have any questions. To exercise your rights in Personal Data, contact us at data.controller@corsair.com.

Navigation

• What is Personal Data at Corsair?
• Personal Data Corsair Collects
• How We Process Personal Data
• Business and Commercial Purposes of Processing
• Your Privacy Rights and Choices
• Data Retention
• Corsair’s Sharing of Personal Data
• Protection of Data at Corsair
• Transfer of Personal Data Between Countries
• Children
• Privacy Questions
• Changes and Updates to our Privacy Policy
• How to Contact Us
• Supplemental Information for Users in the EEA/UK/Switzerland
• Supplemental Information for Nevada Residents
• Supplemental Information for California Residents
• Other Supplemental Privacy Notices

What IS Personal Data at Corsair?

“Personal Data” (also referred to as "personal information" in certain jurisdictions) refers to data that relates, or that is linked or linkable, to an identified or identifiable individual or household. Personal Data includes data that directly identifies you - such as your name - as well as data that does not directly identify you, but that can reasonably be used to identify you - such as the serial number of your device.

"Sensitive Personal Information" is a subcategory of personal data that includes data revealing a consumer's racial or ethnic origin, religious or philosophical beliefs, genetic data, biometric information for uniquely identifying a consumer, health information, sex life or sexual orientation, citizenship or immigration status, Social Security number, driver's license or state identification card number, passport number, financial account information (such as log-in, account number, debit or credit card number in combination with any required access code), precise geolocation, or government-issued identification. Under the EU/UK GDPR, "Special Categories of Personal Data" includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for uniquely identifying a person, data concerning health, or data concerning a natural person's sex life or sexual orientation.

Personal Data Corsair Collects

1. The Personal Data Corsair collects depends on how you interact with Corsair and Corsair’s Affiliates. When you use our Service, we collect the following categories of Personal Data:
   • Identity Data. Your name, Corsair account ID and related account details, including email address, devices and services registrations, account status, age, and geographic location.
   • Device/Network Data. Data from which your device could be identified, such as device serial number or unique ID, or information about your device, such as software version. We may also collect information about how your device has interacted with our Service, including the pages accessed and links clicked, IP address, as well as data from cookies or pixel tags that may be used to identify your device or behavior. This information may also include hardware IDs or information about our Products.
   • Contact Data. Data such as email address, physical address, phone number, or other contact information.
   • Payment Data. Data about your billing address and method of payment, such as credit, debit, or other payment card information. We keep your payment information until the warranty period on your purchased product expires.
   • Transaction Data. Data about purchases of Corsair products and services or transactions facilitated by Corsair, including purchases made through our Service.
   • Audio/Visual Data. Recordings and images collected through our Service, such as audio files, video recordings, and the like.
   • Usage Data. Data about your activity on and use of our Hardware and Service, such as site and app performance data, browsing metadata; device and software interactions; user navigation flows; clickstream data; Software and device crash data, performance and other diagnostic data; and other device connectivity data.
   • Inference Data – We may make inferences from Personal Data to create a profile, e.g. individual predispositions, behavior, and attitudes.
   • Location Data. Personal Data relating to your geographic location, such as information collected from your device’s GPS, or location information you voluntarily provide to us.
   • Government ID Data. In certain jurisdictions, we may ask for a government-issued ID in limited circumstances for the purpose of extending credit, verifying your identity, tax/income reporting, or complying with law.
   • User Content. Information such as unstructured/free-form data that may include any category of Personal Data, e.g. data that you give us in free text fields such as comment boxes, chat transcripts you enter into the AI Chat (we do not require you to provide Personal Data to use the AI Chat and we instruct you not to submit personal or sensitive information), Personal Data you provide when you complete forms on our Service, or answers you provide when you participate in sweepstakes, contests, and surveys. AI Chat transcripts are not linked to your account or personal identifiers. When you use the AI Chat while logged into your account, chat transcripts may be associated with your account information (such as your name or email address). As a result, these transcripts may be treated as personal data under applicable privacy laws, even though Corsair does not require you to provide personal data to use the AI Chat and instructs you not to submit personal or sensitive information.
2. Certain Personal Data is necessary for us to complete transactions and otherwise provide our Service, so if you choose not to provide Personal Data, we may not be able to provide our Service to you or respond to requests you may have.
3. Sources of Personal Data

We collect Personal Data in various ways, which vary depending on the context in which we process that Personal Data:

• Data you provide to us. You may provide us or service providers/partners with Personal Data directly, for example, as part of account registration or when you provide information through the Service.
• Automatic Collection. We (or third parties operating on our behalf) may collect certain Personal Data automatically, for example, Device/Network Data is typically collected automatically through the use of cookies and similar technologies used on our Service.
• Third Parties. We may receive Personal Data from third parties with whom we have a relationship. For example, we may receive certain Personal Data from social media companies or data aggregators.
• Inferred Data. We may create Personal Data relating to inferences drawn from Personal Data we process in order to create a profile about you, or generate information relating to your predispositions, behavior, and attitudes.

How we process Personal Data

We generally process your Personal Data in connection with the following activities and purposes, as well as for the general purposes described below.

Account Registration

1. When you create an account on our Service, we process certain Personal Data, which typically includes Identity Data, Device/Network Data, Contact Data, and if you choose to provide it, Location Data. Similarly, if you use single sign-on services, we may receive this Personal Data from the provider of the single sign-on service, and we may associate this information with your Corsair account or specific Affiliate account, as appropriate. Please note Affiliate accounts may be associated with Corsair accounts if we have information to link those accounts, and we may allow single sign-on for Affiliate accounts using your Corsair account. However, note that if you create an account using a third-party single sign on, your account may not be automatically linked with your Corsair account.
2. We process this Personal Data primarily to create, maintain, and provide you with important information about your account, and provide the features and services you request. Additionally, we use the Transaction Data, Identity Data, and Contact Data as necessary to complete and provide you with important information regarding any related subscriptions. We process Payment Data only as necessary to process any purchases or subscription transactions that you request. A deletion of your customer account is possible at any time and can be done by sending a message to data.controller@corsair.com.
3. We may create certain Inference Data from your account data, or associate Inference Data with your account. We may use such Personal Data for our Commercial Purposes, including for personalization, to create consumer profiles, and for marketing purposes, as described below.

When you make a Purchase or Conduct Another Transaction through our Service

1. We generally process Identity Data, Payment Data, Transaction Data and Contact Data when you engage in a purchase transaction, or subscription payment/renewal. Our Service may allow you to pay using third-party payment service providers (such as Venmo, Stripe, PayPal or Square). If you use a third-party payment processor where you have an account, your Personal Data will be processed by the third party as set forth in the third party’s privacy policy. We may receive your Contact Data, Identity Data and Transaction Data from the third party, in which case, such Personal Data will be processed as set forth in this section.
2. We process this Personal Data as necessary to perform or initiate a contract with you, process your order and payment, and carry out fulfillment and delivery. In addition, we may also collect or create Device/Network Data and Inference Data based on your transaction. Payment Data, together with other data we collect in this context is used as necessary in connection with our business purposes and may be used for our Commercial Purposes, including for personalization, to create consumer profiles, and for marketing purposes, each as described below.

We may also disclose your Personal Data to third-party service providers that carry out security and anti-fraud checks on the purchase transaction on our Service. The disclosure of Personal Data may be based on our legitimate interest in preventing fraudulent online transactions on the legal basis applicable in your country of residence.

When you Access or Use our Service

1. When you use our Service, we automatically collect and process Device/Network Data and Usage Data. We process these data as necessary to initiate or fulfill your requests for certain features or functions through our Service, such as keeping you logged in, delivering pages, logging activities for security purposes, etc. In addition, we may also collect and process Contact Data, Identity Data, and Inference Data that we collect, create, and/or receive (including through the use of cookies and similar technologies, subject to any necessary consents required under applicable law). For more information, please visit our Cookies and Similar Technologies page here.
2. We may also process Identity Data, Contact Data, and User Content if you interact with or identify us, or relevant teams, sponsors, or other partners on social media platforms. Further, with your consent where required by law, we may process Location Data or Audio/Visual Data.
3. We process the above data, together with Inference Data, and Device Data to improve our products and Service, to allow you to use certain interactive aspects of our Service, to allow you to participate in features or events, and in connection with other features that require the use of such data. Further, we may process Personal Data collected from your use of our Service for our Commercial Purposes, including for personalization, to create consumer profiles, and for marketing purposes, , subject to your region's consent/opt-out rules and your privacy choices.
4. We may process User Content (your chat inputs), Usage Data, and Inference Data when you interact with the AI Chat to assist with product discovery and customization. Personal Data is not required to use the AI Chat, and you are instructed not to submit personal or sensitive information. We may use the chat input to: (i) provide, maintain, and improve the AI Chat; (ii) develop and improve our products and Services using de-identified, pseudonymized, or aggregated data; and (iii) where permitted by law and your choices, derive marketing insights. Where AI Chat-derived insights are used for profiling related to direct marketing or targeted advertising, we will obtain consent where required and offer opt-out or objection options as applicable.
5. While we instruct users not to submit personal or sensitive information, we cannot fully prevent users from voluntarily entering such data. If you are logged in, your chat interactions may be linked to your account. Any personal data inadvertently submitted will be processed in accordance with this Privacy Policy and applicable law. Users are instructed not to submit personal or sensitive information. Corsair does not implement automated input filters to detect or redact personal data. Any inadvertently submitted personal data will be processed in accordance with this Privacy Policy and automatically deleted pursuant to our 30-day retention policy. We do not use Personal Data submitted through the AI Chat for AI model training purposes. Our AI service provider is contractually prohibited from using your chat inputs for training.
6. We collect certain Personal Data when you use our Software and certain products. For example, we may process Identity Data, Device/Network Data, Usage Data, or Audio/Visual Data relating to you and the relevant product or Software you are using. We may also create Inference Data derived from information collected through your use of our products/Software.
7. We generally use this information as you request, or in accordance with our legitimate business interests (or subject to any necessary consents), for certain telemetry, bug fixing, crash reporting, and similar logs and metrics relating to the performance and operation of the Software or Hardware. We may also process Personal Data collected via our products and Software for our Commercial Purposes, including for personalization, to create consumer profiles, and for marketing purposes, as described below.
8. Please see our Corsair Supplemental Privacy Notices for more information regarding the processing of Personal Data via specific Corsair products or Services.

Email and SMS Campaigns

1. If you enroll in email or text message (SMS) marketing campaigns or if you engage in a transaction that allows us to enroll you in such campaigns (e.g. when you make a purchase, in certain jurisdictions) we may collect Identity Data and Contact Data, such as an email or phone number. We may also collect Device/Network Data and Contact Data so that we can determine whether you have opened an email or otherwise interacted with our communications, and we may generate Inference Data based on these interactions.
2. We will process these data as necessary to send you marketing and promotional communications for Corsair products and services, or those of our Affiliates, unless otherwise limited at the time you enroll. We process Personal Data collected for email/SMS campaigns for Commercial Purposes, including to create consumer profiles, and for marketing purposes, as described below.
3. Marketing to Existing Customers

If you have given us your e-mail address when purchasing goods or services or when registering a customer account, we reserve the right to regularly send you offers for similar goods or services from our range by e-mail. This includes customers whose details were obtained by Corsair through the acquisition of other businesses where those customers had an existing relationship with the acquired business. For users in the EEA, UK, and Switzerland, the EU Controller (Corsair GmbH) processes such Personal Data in accordance with Article 6 (1) (f) GDPR and Section 7 (3) of the German Unfair Competition Act (UWG); we do not need to obtain separate consent from you for this type of direct marketing, as the data processing takes place on the basis of our legitimate interest in personalized direct mail to existing customers. California residents may also have additional rights under the CCPA/CPRA as described in the California-specific section of this Privacy Policy. If you initially objected to the use of your e-mail address for this purpose at the time of registration or purchase, we will not send you marketing e-mails. You are entitled to opt out of receiving marketing e-mails at any time by clicking the unsubscribe link in any marketing e-mail, or by notifying us at data.controller@corsair.com. After receipt of your opt-out request, the use of your e-mail address for advertising purposes will be stopped in accordance with applicable law.

Cookies and Other Technologies

1. The Service may use “cookies” and other technologies such as pixel tags and web beacons. These technologies help us to better understand customer behavior including for security and fraud prevention purposes, tell us which parts of our websites people have visited, facilitate and measure the effectiveness of advertisements and web searches, and help us improve our marketing and advertising efforts.
2. As part of such processing, we (or our service providers) typically process Identity Data, Device/Network Data, Usage Data, Transaction Data, and Inference Data. Further, we may process such Personal Data for our Commercial Purposes, including for personalization, to create consumer profiles, and for marketing purposes, as described below. For details regarding the data we collect, how we process and share that data, and your choices, please review our Cookies and Similar Technologies page here or you may visit our Cookie Settings section of our website at https://www.corsair.com/us/en. If our AI Chat widget or related SDKs set non-essential cookies or similar technologies, we will obtain consent where required (e.g., EEA/UK) and honor opt-out signals where applicable.

Note: Some of these technologies can be used by us and/or our third-party partners to identify you across platforms, devices, sites, and services. If you prefer that Corsair not use certain cookies, we may provide you with the means to disable their use (e.g. via our Cookie Settings) or you may disable cookies via your browser settings menu. Certain features of the Service may not be available or your experience may be impaired if you do not allow the use of certain cookies and similar technologies. At this time, we do not respond to browser “do-not-track” requests.

Social Media Promoters

We may work with certain individuals that promote Corsair products (“Promoter”). We may track information relating to such Promoters, such as Device/Network Data, Identity Data, Contact Data, Inference Data, and Transaction Data relating to promotional communications, purchase conversations, and related metrics.

We process this Personal Data to establish and manage the Promoter relationship and assess performance, as well as for our Commercial Purposes, including for personalization, to create consumer profiles, and for marketing purposes, as described below.

Please note – Certain Promoters may be active on third-party platforms, including social media platforms. We do not control the processing of Personal Data by such parties. Please review the privacy policies of the social media platforms for more information.

When you Enter a Contest or other Promotion

We collect and process Identity Data, Contact Data, and in some cases, User Content, Transaction Data, Device/Network Data, and Inference Data when you participate in a contest, sweepstakes or other promotion. In some cases, service providers, third party providers, and social media platforms may collect and process this Personal Data on our behalf. Some third-party providers and social media platforms may also collect Personal Data and share it with us, or use it for their own purposes, as set forth in the applicable third party privacy policies.

We process this Personal Data as necessary to process your request to enter a contest or take part in a promotion, to notify you if you have won, to process delivery of a prize, or to further other related purposes. We also process such Personal Data in connection with our legitimate business interests, such as verifying your identity for authentication and security purposes and helping us to prevent fraud. Where allowed by applicable law, we may use this Personal Data for our Commercial Purposes, including for personalization, to create consumer profiles, and for marketing purposes, as described below.

If you win a contest/sweepstakes, we may publicly post some of your Personal Data on our website (such as on a winners’ page). Where required by law, your Personal Data will not be posted without your consent.

Please note – certain promotions may be offered by third parties, including social media platforms. We do not control the processing of Personal Data by such third parties. Please review the privacy policies of the social media platforms for more information.

Affiliate Relationships

If you would like to register to be an affiliate promoting Corsair products, you may be required to register with a third-party partner who will manage the affiliate relationship. We may receive certain Identity Data and Contact Data from this third-party partner to the extent permitted by the third-party partner, or as required for us to fulfill our legal obligations. We use this Personal Data as necessary to maintain the affiliate relationship and fulfill our obligations under applicable law, as well as for the general business and Commercial Purposes described further in our Privacy Policy.

When you Contact us or Submit Personal Data to us

We collect and process Identity Data, Contact Data, Transaction Data, Usage Data, and User Content as necessary to address your request, fulfill the business purpose for which that data was provided, or for other related purposes. We process this Personal Data to respond to your request and to otherwise fulfill our contract or communicate with you, as appropriate. If you contact us to inquire about a product or Service, or for other similar purpose, we may use the Personal Data we collect for our Commercial Purposes, including for personalization, to create consumer profiles, and for marketing purposes, as described below.

Warranty, Returns, and Repairs

If you have a warranty claim regarding a Corsair product you purchased, or if you submit a product for return/repair, we may collect additional Device/Network Data, as well as Identity Data, Contact Data, and Transaction Data in connection with the submission and processing of your claim. If you are entitled to a refund, we may collect Payment Data in order to process the refund transaction. We process this Personal Data as necessary to fulfill the transaction, and for our business purposes, described below.

When you Interact with us in Person

We process your Contact Data and Identity Data when you interact with us in person, such as at an event, tradeshow, or conference. Additionally, in some cases, we may receive from organizers of events certain attendee data that includes your Identity Data or Contact Data. We will process this Personal Data to provide you with the information you request, in accordance with the rights we are granted by the organizers, including where appropriate or allowed by law, for our Commercial Purposes, including for personalization, to create consumer profiles, and for marketing purposes, as described below.

Feedback and Surveys

We generally process Identity Data, Contact Data, Inference Data, and User Content collected in connection with customer surveys or questionnaires. We generally process this Personal Data as necessary to respond to customer requests/concerns, to create aggregate analytics regarding customer satisfaction, to improve our products, or to allow our third-party partners to communicate with customers. We may also store and analyze feedback related to our Service for our Commercial Purposes, including personalization, to create consumer profiles, and for marketing purposes, as described below.

Support and Professional Services

We collect and process Identity Data, Contact Data, Transaction Data, Usage Data, and in some cases, Device/Network Data, User Content (e.g. documentation or descriptions of issues) or Audio/Visual Data (e.g. recordings of support calls) when you contact us for support, or if we provide support and professional services to you as part of our Service. We use this Personal Data as necessary to provide support and professional services, to respond to your request, and to otherwise fulfill our contract with you, as appropriate. If you purchase these support and professional services from us, we will process information as set forth in the “When you make a Purchase or other Transaction through our Service” section above, including for our Commercial Purposes, including for personalization, to create consumer profiles, and for marketing purposes, as described below.

Human Resources

If you are an applicant for a position at Corsair in California, the EEA, or the UK, Personal Data will be processed as set forth in the Corsair Human Resources Privacy Notice for California Residents.

Business and Commercial Purposes of Processing

In addition to the specific purposes described in this Privacy Policy, we may process any Personal Data we collect for certain internal business purposes and where necessary, as set forth below. If you would like more information about the legal basis for processing your Personal Data, please see the Supplemental Information below, or you can contact the Data Protection Officer at data.controller@corsair.com.

Business Purposes

Service Provision & Contractual Obligations

We process Personal Data as necessary to process transactions, provide customer support, provide warranty service, and otherwise fulfill our contract with you.

Product and Service Improvement

We process Personal Data as necessary for our legitimate interests in understanding the use of and to improve our Service. For example, we process Personal Data as necessary to improve our offerings, for internal purposes such as auditing or data analysis, to improve our software and devices, and for troubleshooting. We may analyze access and control of device, configurations, notifications, or error reports submitted through our Service.

Security and Incident Detection

We may process Personal Data to improve the security of our Service, to identify and prevent crime, and prevent fraud. We may analyze network traffic, device patterns and characteristics, maintain and analyze logs and process similar Personal Data in connection with our information security activities.

Personalization

We process certain Personal Data as necessary in connection with our legitimate interest in personalizing our Service. For example, aspects of the Service may be customized to you so that it displays your name or reflects your preferences, to display content or features with which you have interacted in the past, or to display material that we think may be of interest to you based on your interactions with our Service. This processing may involve the creation and use of Inference Data relating to your preferences.

Aggregated/Anonymized data

We process Personal Data about our customers and users who use our Service in order to identify trends, such as to create aggregated or anonymized data about buying and spending habits, use of our Service, and other similar information (“Aggregated Data”). For example, we may process Aggregated Data to determine aggregate trends, response to various activities, games, and other aspects of our digital services. We may also retain and use this Aggregated Data in connection with the development of products or services. We may pass Aggregated Data to certain third parties to give them a better understanding of our business and to improve our Service. Aggregated Data will not contain information from which you may be personally identified.

Communicate with You

To respond, to communicate, reach out to you about your transactions or account, provide other relevant notifications or information, or request information or feedback. From time to time, we may use your Personal Data to send important notices, such as communications about purchases and changes to our terms, conditions, and policies, reports on device performance, notifications of upgrades, and flags for critical device security or performance issues.

Security, Safety, and Fraud Prevention

To protect individuals, employees, and Corsair brands, for loss prevention, and to prevent fraud, including to protect individuals, employees, and Corsair for the benefit of all our users.

Compliance, Safety, and Public Interest

We may also process any Personal Data as necessary to comply with our legal obligations, such as where you exercise your rights under data protection law and make requests, for the establishment and defense of legal claims, or where we must comply with our legal obligations, lawful requests from government or law enforcement officials, and as may be required to meet national security or law enforcement requirements or prevent illegal activity. We may also process data to protect the vital interests of individuals, or on certain public interest grounds, each to the extent allowed under applicable law.

Commercial Purposes

Additionally, in some cases, we may use your data for certain commercial purposes, e.g. to help grow our business, to inform you of certain offers, to understand our customer (including through insights from AI Chat interactions), and in connection with other marketing or commercial purposes, as described below (“Commercial Purposes”).

Consumer Profiles

To understand our customers’ preferences and better recommend products and services that are personalized to our customers, we may create a consumer profile by linking together and analyzing Personal Data collected in the following contexts, in addition to those described in our Supplemental Privacy Notices:

• Account Registration
• When you make a Purchase or Conduct Another Transaction through our Service
• When you Access or Use our Service
• When you Use our Software or Certain Products
• Email and SMS Campaigns
• Cookies and Other Technologies
• Social Media Promoters
• When you Enter a Contest or other Promotion
• When you Contact us or Submit Personal Data to us
• When you Interact with us in Person
• Feedback and Surveys
• Support and Professional Services
• AI Chat
• We may also augment consumer profiles with Personal Data that we create (such as Inference Data) or that we receive from our Affiliates or third parties, which may include Personal Data such as information about which portions of our Service you have used previously, information about products you have purchased, devices and hardware that you use, and demographic data or other Inference Data.
• We use consumer profiles for our legitimate interests in market research and statistical analysis in connection with the improvement of our Service. For example, we may analyze the Personal Data of people who have purchased certain products or services or who may be in the market for products of services. We may target our marketing to new people we have identified in our database, for example by sending direct marketing emails. We may conduct the profiling and send direct marketing emails automatically. We may also use consumer profiles for other commercial purposes.
• Where AI Chat-derived insights are used for profiling related to direct marketing or targeted advertising, we will honor applicable opt-out rights (e.g., "Do Not Sell or Share" under California law) and applicable consent requirements (e.g., in the EEA/UK). You may object to profiling used for marketing at any time by emailing us at data.controller@corsair.com.

Marketing Communications

We (or if appropriate, certain third parties) may send you marketing and promotional communications if you sign up for such communications or purchase products or services from us. For example, we may process Contact Data and Identity Data when you opt-in to receive marketing communications via email or SMS text messaging. You may opt out of receiving these communications at any time.

Link Tracking/Read Receipts

In some email messages and to allow for secure software downloads and installations, Corsair sends to you, we provide a “click-through URL” that links you to content on the Sites. When you click one of these URLs, they pass through a separate server before arriving at the destination page on the Sites. We track this click-through to help us determine interest in particular topics and measure whether we are communicating with you effectively.

Targeted Advertising

We may engage in targeted advertising. This form of advertising includes various parties and service providers engaged in the processing of Personal Data in connection with advertising tailored to individual interests. These parties may be able to identify you across sites, devices, and over time. The parties that control the processing of Personal Data for targeted advertising purposes may create or leverage information derived from your profile and certain marketing communications. In some cases, these parties may also develop and assess aspects of a profile about you to determine whether you are a type of person to whom a company wants to advertise and to determine whether and how ads you see are effective. These third parties may augment your profile with demographic and other Inference Data derived from these observations, and may also track whether you view, interact with, or how often you have seen an ad, and whether you complete a purchase for a good or service you were shown in an advertisement.

Data Sales

Certain commercial processing involves “sales” of data as defined by applicable law. For example, we may “sell” certain Personal Data when we engage in certain social media marketing campaigns, conduct targeted online advertising, or sell or grant access to Personal Data to our marketing partners, sponsors, and other advertisers.

Lookalike Audiences

We may send marketing communications via social media or third-party platforms, including by creating custom marketing audiences on third-party websites (such as Facebook). Marketing communications may be personalized or customized based on your account profile.

Your Privacy Rights & Choices

You may have certain rights and choices regarding the Personal Data we process. Please note these rights may vary based on the country or state where you reside, and our obligations under applicable law. Additional rights and disclosures for residents of the EEA, UK, Switzerland, California, Nevada, and other jurisdictions are described further below.

Marketing Communications

You can withdraw your consent to receive marketing communications by clicking on the unsubscribe link in an email or by submitting a request using the information below.

Withdrawing Your Consent/Opt-Out/Opt-Out of Sales

Where we are processing your Personal Data based on your consent, you may change your mind and withdraw your consent at any time. The consequence of you withdrawing consent might be that we cannot perform certain services for you. To exercise your rights under applicable law, you may email us at data.controller@corsair.com.

Submission, Deletion, and Verification

In accordance with applicable law, you have the right to request the deletion of your Personal Data that we have collected, subject to certain exceptions.

1. How to Request Deletion

You can request the deletion of your Personal Data/personal information(as defined under the CCPA) by:

Submitting a Request:

Emailing us at data.controller@corsair.com with the subject line “Data Deletion Request.”

Identity Verification:

1. To protect your data, we may require you to verify your identity before processing your request. This may involve confirming specific details associated with your account. We will require you to provide us with two types of information to verify your identity. This information may include your name, telephone number, email address, or home address, as well as supplemental information, such as purchase data or other unique information in your account. We may also require you to provide a signed declaration under penalty of perjury that you are the consumer whose Personal Data/personal information is the subject of the request. We will match this information to the Personal Data/personal information we maintain

Providing proof of identity (where required by law).

AI Chat logs and deletion. AI Chat logs are stored without intentional linkage to user accounts or emails. As a result, we may be unable to identify or delete specific chat logs in response to a per-user deletion request. We apply a strict rolling retention period (see “Data Retention”) and will continue to honor applicable deletion rights for other Personal Data we maintain and for future versions where log identification is feasible.

1. There may be situations where we cannot grant your request, e.g. if Corsair is legally obligated to keep Personal Data/personal information to comply with applicable law. We may also decline to grant a request where our legitimate use of the data outweighs individual privacy concerns, e.g. in relation to anti-fraud and security purposes, or a request for deletion of an account that is being investigated for security concerns. We may also deny your privacy request if it jeopardizes the privacy of others, is frivolous or vexatious, and where applicable law allows the denial.

Data Retention

We retain Personal Data for so long as it is necessary to achieve the processing purposes described in this Privacy Policy, and in any event, for so long as is required by law or necessary to provide the Service, achieve the processing purposes described in this Privacy Policy, to comply with applicable legal, tax, and regulatory obligations, to resolve disputes, and to enforce our agreements. For AI Chat logs, raw AI Chat text is retained on a rolling basis for 30 days and then automatically deleted (including from backups where feasible). We may retain only pseudonymized or aggregated analytics derived from chat interactions beyond 30 days. If chat logs are associated with your account, they will be treated as personal data and handled in accordance with applicable law and your privacy rights. We will review retention periods periodically and may sometimes pseudonymize or anonymize data held for longer periods. We may also retain and use your Personal Data as necessary to comply with our legal obligations, resolve disputes, and/or for the period required or permitted by laws in applicable jurisdictions. Please note that some or all of the Personal Data we have collected may be required for the Service to function properly.

Corsair’s Sharing of Personal Data

Corsair may share Personal Data within our Affiliates and with service providers who act on our behalf, our partners, or others at your direction.

• Service Providers. Corsair may engage third parties to act as our service providers and perform certain tasks on our behalf, such as processing or storing data, delivering products to customers. Corsair’s service providers are obligated to handle Personal Data consistent with this Privacy Policy and according to our instructions. For the AI Chat, we may use an AI/model provider (e.g., OpenAI, ElevenLab, etc) acting as our processor for voice and AI-powered services. We contractually require service providers to process data only on our instructions, implement appropriate security, honor deletion, and (where available) disable training on our data and minimize provider-side logging and retention. We also require providers to support our obligations to respond to data subject rights requests, where feasible.
• Affiliates. To streamline business operations and develop products and services that better meet the interests and needs of our customers and to inform our customers about relevant products and services, we may share your Personal Data with any of our current or future Affiliates.
• Partners. At times, Corsair may partner with third parties to provide services or other offerings. For example, Corsair offers financing in cooperation with partners who manage the extension of credit and financing offers. We may share Personal Data with these partners, and they may process Personal Data for their own purposes as a separate controller, or share certain Personal Data with Corsair, each as set forth in the applicable privacy policy.
• Social Media/Advertisers. To improve personalization, deliver more relevant advertisements to you and others, and develop better products and services, we may share certain Personal Data with third parties for marketing, advertising, or other commercial purposes, and we may allow third parties (such as Facebook and social media advertisers, ad exchanges, data management platforms, or ad servers) to operate on our Service and process data for targeted advertising. These transfers may be made for commercial purposes and in connection with data sales.
• Data Aggregators. In connection with our marketing operations, we may share certain Personal Data with data aggregators to help us better personalize our services, enrich Consumer Profiles and help ensure that you see advertisements that are more relevant to your interests.
• Successors. Any Personal Data may be processed in the event that we go through a business transition, such as a merger, acquisition, liquidation, sale of all or a portion of our assets, joint venture, securities offering, bankruptcy, reorganization, liquidation, dissolution, or other transaction. For example, Personal Data may be part of the assets transferred, or may be disclosed (subject to confidentiality restrictions) during the due diligence process for a potential transaction.
• Others. We may also disclose information about you if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate. We may also disclose information about you where there is a lawful basis for doing so, if we determine that disclosure is reasonably necessary to enforce our terms and conditions or to protect our operations or users.

Protection of Data at Corsair

1. We use administrative, technical, and physical safeguards to protect your Personal Data, taking into account the nature of the Personal Data and the processing, and the threats posed. The measures we use are designed to provide a level of security appropriate and reasonable in connection with the risk of processing your Personal Data.
2. While we take reasonable measures to protect Personal Data against loss, theft, and unauthorized use, disclosure, or modification, we cannot guarantee its absolute security. No Internet, email, or mobile application transmission is ever fully secure or error free. Email or other messages sent through the Service may not be secure.

Transfer of Personal Data Between Countries

The US Controller (Corsair Memory, Inc.) operates in and uses service providers located in the United States. For data subjects in the EEA, UK, and Switzerland, Personal Data is held by the EU Controller (Corsair GmbH). Where Personal Data is transferred from the EEA, UK, or Switzerland to the United States or other third countries, such transfers are made pursuant to the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or other appropriate transfer mechanisms or derogations available under applicable law, together with supplementary measures where required.

Categories of recipients to whom we may transfer your Personal Data include: (i) Corsair Memory, Inc. and other entities within the Corsair group of companies, acting as processors or, where applicable, joint controllers; (ii) cloud and hosting service providers (for storage, security, and infrastructure purposes); (iii) payment processors (for payment processing); (iv) analytics providers (for usage analytics); and (v) AI and model providers supporting the AI Chat functionality, where such providers host or process data outside your region.

The United States does not provide the same legal protections guaranteed to Personal Data in the EEA, UK, and Switzerland.

Children

Except in limited cases described below or in our Supplemental Privacy Notices, our Service is not directed at users under 16 years of age. The AI Chat is not intended for children, and users should not submit any personal information-particularly about or from minors-via the AI Chat, including any voice recordings or audio from children. If you are under the age of 16, or the applicable age threshold in your jurisdiction, you should not use the AI Chat or submit any personal information. All users are strictly prohibited from uploading, transmitting, or otherwise making available voice data or audio recordings from children under the age of 18. We do not knowingly collect Personal Data from minors unless we have the necessary consent from the child, parent, or guardian. If you have reason to believe that we may have accidentally received Personal Data from a minor, please contact us immediately at data.controller@corsair.com.

Privacy Questions

If you have questions about this Privacy Policy or our privacy practices, you can contact us at data.controller@corsair.com. Please refer below on how to contact the data controller.

Changes and Updates to our Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time without prior notice. Please review this Privacy Policy periodically, especially before you provide any information. This Privacy Policy was made effective on the date indicated above.

How to Contact Us

For all other data subjects.

CORSAIR MEMORY, Inc.

115 N. McCarthy Boulevard, Milpitas, CA 95035

data.controller@corsair.com

For data subjects in the EEA and Switzerland (Data Controller):

CORSAIR GmbH

Landshuter Allee 10, 80637, Germany

data.controller@corsair.com

For data subjects in the United Kingdom (UK Article 27 Representative):

CORSAIR COMPONENTS LIMITED

1020 Eskdale Road, Winnersh Triangle,

Wokingham, RG41 5TS, United Kingdom

data.controller@corsair.com

For data subjects in Switzerland

Corsair is in the process of appointing a representative in Switzerland pursuant to Article 14 of the Swiss Federal Act on Data Protection (nFADP).

In the interim, Swiss data subjects may direct enquiries to the EU Controller, Corsair GmbH, Landshuter Allee 10, 80637, Munich, Germany.

data.controller@corsair.com

SUPPLEMENTAL INFORMATION

14.1Supplemental information for Users in the EEA/uK/Switzerland

Legal Bases for Processing Your Information (For Users in EEA/UK)

Performance of a Contract

The use of your Personal Data may be necessary to perform the agreement you have with us to provide products and services, e.g. to ship your products you have ordered, open and maintain your user accounts, or process your request.

Legitimate Interests

We may use your Personal Data for our legitimate interests. For example, we rely on our legitimate interest to administer, analyze and improve our content, to operate our business including through the use of service providers and subcontractors (who may have access to your data – see further under the section Corsair’s Sharing of Personal Data), to send you notifications about our services, for archiving, recordkeeping, statistical and analytical purposes, and to use your Personal Data for administrative, fraud detection, audit, training, security, or legal purposes. See the Purposes of Processing section above for more information regarding these processes.

Consent

You are free to withdraw any consent you may have provided, at any time, subject to the Your Privacy Rights & Choices section and the preceding Legal Bases for Processing Your Information in this Section.

Compliance with Legal Obligations

We may use your Personal Data to comply with legal obligations to which we are subject, including to comply with legal processes.

Performance of a Task Carried Out in the Public Interest

We may use your Personal Data to perform a task in the public interest or that is in the vital interests of an individual.

Corsair does not use automated systems to make decisions about you that have legal or other significant effects on you (such as decisions about credit, employment, or similar matters). While we may use profiling for marketing purposes-for example, to understand your preferences or show you relevant ads-this type of profiling does not have legal or significant effects on you. You have the right to object to this marketing-related profiling at any time by contacting us at data.controller@corsair.com.

EEA/UK/Swiss Privacy Rights

Users based in the EEA/UK/Switzerland (“User”) have the following legal rights with respect to their information:

• The right to require Corsair to confirm whether or not their information is being processed, the purpose of any such processing, the categories of Personal Data concerned, the recipients or categories of recipients of any information that has been disclosed, the period for which their information is to be stored (or the criteria used to determine that period), and whether any automated decision-making processes, including profiling, are used in relation to their information, and meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject;
• The right to require Corsair to rectify inaccurate information without undue delay;
• The right to request the erasure of their information. Subject to certain conditions, Corsair may be required to erase the information in response to such request where:
  • the information is no longer necessary in relation to the purpose for which it was collected, such as where a User chooses to terminate his or her use of the Service;
  • the processing of the information is based on the User’s consent (and the other circumstances described in the Legal Bases for Processing Your Information and Corsair’s Sharing of Personal Data sections above no longer apply), if the User withdraws his or her consent; or
  • the User objects to the processing of his or her information and there are no overriding legitimate grounds for the processing.
• Where Corsair has disclosed the information of an EEA/UK user to a third party and the user requests the erasure or rectification of the data, Corsair will take all reasonable steps to inform the third party of such request.
• The right to restrict Corsair from processing User information in certain circumstances, such as where the accuracy of that information is disputed or an objection has been raised (see below). In such circumstances, Corsair will only process that information with the express consent of the User, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest;
• User’s right to receive their information from Corsair in a structured, commonly-used and machine-readable format;
• User’s right to object to the processing of their information by Corsair where:
  • Corsair has relied on the “legitimate interest” basis for processing that information, in which case we will immediately stop processing the User’s information unless we have compelling legitimate grounds which override the interests, rights, and freedoms of the User; or
  • the information is used for direct marketing purposes, in which case we will immediately stop processing the User’s information for such purposes; and
  • The right to lodge a complaint with the data protection supervisory authority of the EU member state where the User resides (for example, in Germany, the relevant Landesbeauftragte für den Datenschutz or the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit), or the data protection supervisory authority in the UK (the Information Commissioner's Office) or Switzerland (the Federal Data Protection and Information Commissioner), where applicable.

1. The above legal rights are subject to various conditions and exceptions, including where the data is used for statistical or scientific research purposes, and the exercise of the right would prevent such purposes from being attained or would seriously impair their attainment.

supplementAL INFORMATION for Nevada residents

The Nevada Revised Statutes (NRS 603A.300 et seq.) permit a Nevada consumer to direct an operator of an Internet website or online service to refrain from making any sale of any covered information the operator has collected or will collect about that consumer. You may submit a request pursuant to this directive by emailing us at data.controller@corsair.com. We will provide further information about how we verify the authenticity of the request and your identity.

supplementAL INFORMATION for California Residents

California residents have the following rights. You will not need to create an account to exercise your rights. To exercise one of these rights, please provide a verifiable consumer request by emailing us at data.controller@corsair.com.

Your California Privacy Rights

Right to Delete

You have the right to delete certain Personal Data that we hold about you, subject to exceptions under applicable law. Please click here for more information on how to submit a request to delete.

1. Right to Correct

You have the right to request that we correct inaccurate Personal Data that we maintain about you. We will use commercially reasonable efforts to correct your Personal Data as directed by you.

1. Right to Limit Use and Disclosure of Sensitive Personal Information

You have the right to limit our use and disclosure of your Sensitive Personal Information to only what is necessary to perform the services or provide the goods you request, or as otherwise permitted by law. To exercise this right, you may email us at data.controller@corsair.com with the subject line "Limit Use of Sensitive Personal Information" or use our "Limit the Use of My Sensitive Personal Information" link where available.

Direct Marketing

You may request a list of Personal Data we have disclosed about you to third parties for direct marketing purposes during the preceding calendar year.

Right to Know

You may request that, for Personal Data that we have collected in the preceding 12 months, we disclose, free of charge (unless your requests are manifestly unfounded or excessive) (1) the categories of Personal Data we have collected about you, or that we have sold, or disclosed for a Commercial Purpose; (2) the categories of sources from which your Personal Data was collected; (3) the business or Commercial Purpose for which we collected or sold your Personal Data; (4) the categories of third parties to whom we have sold your Personal Data or disclosed it for a business purpose; and (5) the specific pieces of Personal Data we have collected about you.

Do Not Sell My Personal Information

You may direct us, at any time, not to sell or share your Personal Data. We may sell or share personal information as defined in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (“CCPA/CPRA”). Under the CCPA/CPRA, “sell” means sell, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate orally, in writing, or by electronic or other means a consumer’s personal information by the business to another business or a third party for monetary or other valuable consideration. "Share" means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer's personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration. The law contains exceptions to these definitions which may limit how we respond to your direction. To opt out of the sale or sharing of your personal information, you may email us at data.controller@corsair.com or use our "Do Not Sell or Share My Personal Information" link.

Nondiscrimination

We may not discriminate against you because you exercised any of your rights under the CCPA, including, but not limited to, by: (A) denying goods or services to you; (B) charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; (C) providing a different level or quality of goods or services to you; or (D) suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

However, nothing prohibits us from charging you a different price or rate, or from providing a different level or quality of goods or services to you, if that difference is reasonably related to the value provided to us by your data.

We may offer financial incentives, including payments to you as compensation, for the collection of personal information, the sale of personal information, the retention of personal information, or the deletion of personal information. We may also offer a different price, rate, level, or quality of goods or services to you if that price or difference is directly related to the value provided to us by your data.

Submission of Requests

To exercise your privacy rights, including the right to opt out of the sale or sharing of your personal information, you may email us at data.controller@corsair.com.

You have the right to opt out of Corsair’s use of automated decision-making technology, including profiling, to the extent such technology is used to make decisions that produce legal or similarly significant effects concerning you. To exercise this right, you may email us at data.controller@corsair.com with the subject line “Opt Out of Automated Decision-Making.”

Right to Know Disclosure

The charts below summarize how we process specific categories of Personal Data. Please see the corresponding definitions/headings above for more information regarding each category of Personal Data, the purposes of processing, and categories of recipients.

OTHER Supplemental Privacy Notices

• iCUE
• Origin PC
• SCUF Gaming
• Human Resources Privacy Notice for California Residents
• Cookies and Similar Technology