Dimensional Data Access Policy

Effective as of September 1, 2026

This Data Access Policy (this “Policy”) forms part of the Dimensional Developer Terms and governs Developer’s access to, and handling of, Robot Data obtained through the Dimensional Platform. Capitalized terms have the meanings given in the Developer Terms.

1. Scope

1.1 This Part governs Developer’s access to, and handling of, Robot Data obtained through the Platform. It applies to every App, including Developer Builds, and to every person acting for Developer.

2. Permitted Use

2.1 Developer may process Robot Data: (a) to serve the request from which it originates and return the result to the requesting Dimensional Robot; (b) to provide, maintain, secure, and support the App, including to debug and investigate Safety Issues and abuse; and (c) for any further purpose, including training, that Developer has disclosed in its submission and in its Customer-facing terms, and that the Customer has accepted through the Platform’s acceptance flow, provided the App obtained the Robot Data in accordance with the App Review Guidelines and its approved Permissions. Dimensional will provide a standard disclosure format in the acceptance flow for this purpose.

2.2 Developer will not use Robot Data for any purpose other than those in the preceding paragraph, and will not disclose it to any third party other than a subprocessor under Section 5.

2.3 Robot Data that the App obtained outside its approved Permissions or in breach of the App Review Guidelines may not be used for any purpose and must be deleted on discovery, with written confirmation to Dimensional.

3. Roles Under Data Protection Law

3.1 To the extent Robot Data includes personal information, Developer acts as a service provider or processor for Dimensional and its Customers when processing under Section 2(a) and (b), and as a separate business or controller when processing under Section 2(c). Developer will not sell or share personal information (as defined under Applicable Law) except as disclosed and accepted under Section 2(c), and will sign any data processing agreement Dimensional reasonably requests.

3.2 For processing under Section 2(c), Developer is responsible for its own lawful basis, notices, and consents under Applicable Law. Dimensional presents Developer’s disclosures to the Customer through the acceptance flow but does not obtain consents on Developer’s behalf for Developer’s own purposes.

4. Personal Information in Sensor Data

4.1 Robot Data may include images, audio, and movement of people at Customer sites, including people who have no relationship with Developer or Dimensional. Developer will: (a) collect only what the App’s declared functionality requires; (b) not attempt to identify any individual from Robot Data, or combine it with other data to do so, unless identification is the App’s disclosed and accepted purpose; (c) apply de-identification (such as face blurring, audio removal, and precise-location removal) before any use under Section 2(c) where that use does not require the identifying content; and (d) not use Robot Data to profile, track, or make decisions about individuals.

4.2 Where an App uses audio, Developer will treat all audio as potentially containing personal information and biometric data and will process it accordingly.

5. Security and Subprocessors

5.1 Developer will protect Robot Data with industry-standard safeguards, including encryption in transit and at rest, access controls, and logging. Developer may use subprocessors only under written terms at least as protective as this Part, must disclose them in its submission, and remains responsible for them.

5.2 Developer will notify Dimensional within seventy-two (72) hours after becoming aware of any unauthorized access to or disclosure of Robot Data, will remediate it, and will bear notification costs to the extent caused by Developer or its subprocessors.

6. Retention and Deletion

6.1 Developer will retain Robot Data processed under Section 2(a) and (b) no longer than needed for that purpose and in any case no longer than the period disclosed in its submission. On termination, or on Dimensional’s or the relevant Customer’s written request, Developer will delete Robot Data that it is not entitled to retain under Section 2(c) and will certify deletion in writing. Models trained in accordance with Section 2(c) are not Robot Data and are not subject to deletion.

7. Data Subject and Customer Requests

7.1 Developer will cooperate with Dimensional and Customers in responding to access, deletion, and other requests from individuals under Applicable Law, and will act on a verified request within the time Applicable Law requires.

8. International Transfers

8.1 Where Robot Data is subject to data protection law that restricts international transfer, Developer will transfer it only under a lawful mechanism (such as standard contractual clauses) and will sign the transfer terms Dimensional or the Customer reasonably requests.

9. Monitoring and Verification

9.1 Dimensional may monitor the App’s access to and transmission of Robot Data through the Platform, in review and in production, to verify compliance with this Part. In production, monitoring is limited to metadata (Permissions used, endpoints contacted, and data volumes); Dimensional will not inspect the content of Robot Data the App transmits without notice to Developer, except to investigate a Safety Issue or a suspected breach of this Part. On reasonable request, not more than once per year unless Dimensional has reason to suspect non-compliance, Developer will provide a written statement of its data handling practices for the App and reasonable supporting evidence.