Privacy

This Privacy Notice (also referred to as our "Privacy Statement") explains how Xatabase, Inc., and our subsidiaries and affiliated companies ("Xata," "we," "our," or "us") collect, use, share and otherwise process information that identifies or could be identifiable to you ("personal data") and that we use to manage our business and our relationships with customers, visitors and event attendees. It does not address our privacy practices relating to job applicants, employees and other personnel.

We may choose or be required by law to provide different or additional disclosures, relating to the processing of Personal information (as defined below) about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:

Nevada: If you are a resident of the State of Nevada, Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. Although we do not currently sell covered information, please contact us at privacy@xata.io to submit such a request.

European Economic Area, United Kingdom or Switzerland: If you are located in the European Economic Area (“EEA”), United Kingdom (“UK”) or Switzerland, or otherwise engage with our European operations, please see the Privacy Disclosures for the European Economic Area, United Kingdom and Switzerland section below for additional European-specific privacy disclosures, including what constitutes your personal data, the lawful bases we rely on to process your personal data, how we use cookies when you access our Site from the EEA, UK or Switzerland, and your rights in respect of your personal data.

When we use the term “Personal Information” in this Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual. It does not include aggregated or de-identified information that is maintained in a form that is not reasonably capable of being associated with or linked to an individual.

Sometimes we collect Personal Information automatically when an individual interacts with our Services and sometimes we collect Personal Information directly from an individual. At times, we may collect Personal Information about an individual from other sources and third parties, even before our first direct interaction.

Personal Information Collected from Site Visitors and Account Holders:

We may collect the following Personal Information submitted to us by visitors to our Site and account holders:

• Contact Information, including name, email address, mailing address, employer, job tile, company name, phone number and communication preferences.
• Inquiry Information, including information provided in custom messages sent through the forms or contact information provided on our Site.
• Account Information, including name, company name, employer, job title, email address, username and password, profile information, payment and purchase history information, and any other information you provide to us. Please note we utilize a third-party provider to process payments on our behalf and do not accept payment directly through our Site.
• Online Community-Related Information, including username, photo or other biographical information, such as occupation, location, social media profiles, company name, areas of expertise and interests.
• Survey Information, including information provided in any questions submitted through surveys, or content of any testimonials.
• Event Information, including registration information, attendee badge information, and contact information.

As is true of most digital platforms, we and our third-party providers may also collect Personal Information from an individual’s device, browsing actions and site usage patterns automatically when visiting or interacting with our Site, which may include log data (such as internet protocol (IP) address, operating system, browser type, browser id, the URL entered and the referring page/campaign, date/time of visit, the time spent on our Site and any errors that may occur during the visit to our Site), analytics data (such as the electronic path taken to our Site, through our Site and when exiting our Site, as well as usage and activity on our Site) and location data (such as general geographic location based on the log data we or our third-party providers collect). We and our third-party providers may use (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”) to automatically collect this Personal Information. For example, our Site uses Datadog is a monitoring service provided by Datadog, Inc. (“Datadog”), to collect and view reports about the traffic on our Site. More information about the use of Datadog for these analytical and non-advertising purposes can be obtained by visiting Datadog’s privacy policy here. To manage cookies, an individual may change their browser settings to: (i) notify them when they receive a cookie, so the individual can choose whether or not to accept it; (ii) disable existing cookies; or (iii) automatically reject cookies. Please note that doing so may negatively impact an individual’s experience using our Site, as some features and offerings may not work properly or at all. Depending on an individual’s device and operating system, the individual may not be able to delete or block all cookies. In addition, if an individual wants to reject cookies across all browsers and devices, the individual will need to do so on each browser on each device they actively use. An individual may also set their email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether they have accessed our email and performed certain functions with it. For more information about these practices in relation to our European operations, please see the “Cookies and Similar Technologies Used on Our Site” section of the Privacy Disclosures for the European Economic Area, United Kingdom and Switzerland below.

Personal Information from Third Parties:

We also obtain Personal Information from third parties; which we often combine with Personal Information we collect either automatically or directly from an individual. We may receive the same categories of Personal Information as described above from the following third parties:

• Your Employer / Company: If you engage in our Services through your employer or company, we may receive information from the company or another employee of the company such as name and contact information.
• Platforms: We may receive your information from other platforms (e.g., GitHub) to manage code check-ins and pull requests. If you participate in an open source or community development project, we may associate your code repository username with your community account so we can inform you of program changes that are important to your participation or relate to additional security requirements.
• Social Media: When an individual interacts with our Services through various social media networks, such as when someone logs in through a social network, “Likes” us on Facebook or follows us or shares our content on Google, Facebook, LinkedIn, Twitter, or other social networks, we may receive some information about individuals that they permit the social network to share with third parties. The data we receive is dependent upon an individual’s privacy settings with the social network. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services.
• Service Providers: Our service providers that perform services solely on our behalf, such as survey and marketing providers, collect Personal Information and often share some or all of this information with us.
• Information Providers: We may from time to time obtain information from third-party information providers to correct or supplement Personal Information we collect. For example, we may obtain updated contact information from third-party information providers to reconnect with an individual.
• Publicly Available Sources: We collect Personal Information about individuals that we do not otherwise have, such as contact information, employment-related information, and interest-in-services information, from publicly available sources. We may combine this information with the information we collect from an individual directly. We use this information to contact individuals, to send advertising or promotional materials or to personalize our Services and to better understand the demographics of the individuals with whom we interact.

We may use Personal Information we collect to:

• Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, to deliver the Services you have requested and to process transactions;
• Manage our organization and its day-to-day operations;
• Communicate with individuals, including via email, text message, social media and/or telephone calls;
• Request individuals to complete surveys about our organization, organizations we partner with, and Services;
• Market our Services to individuals, including through email, direct mail, phone or text message;
• Administer, improve and personalize our Services, including by recognizing an individual and remembering their information when they return to our Site;
• Process payment for our Services;
• Facilitate client benefits and services, including customer support through our command center services;
• Identify and analyze how individuals use our Site and Services;
• Conduct research and analytics on our client base and our Services;
• Improve and customize our Services to address the needs and interests of our client base and other individuals we interact with;
• Test, enhance, update and monitor the Services, or diagnose or fix technology problems;
• Help maintain the safety, security and integrity of our property and Services, technology assets and business;
• Defend, protect or enforce our rights or applicable contracts and agreements;
• Prevent, investigate or provide notice of fraud or unlawful or criminal activity;
• Comply with legal obligations.

Where an individual chooses to contact us, we may need additional information to fulfill the request or respond to inquiries. We may provide additional privacy disclosures where the scope of the inquiry/request and/or Personal Information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information provided at that time.

We may disclose Personal Information in the following ways:

• Affiliates: We may share Personal Information with other companies owned or controlled by Xata, and other companies owned by or under common ownership as Xata, which also includes our subsidiaries (i.e., any organization we own or control) or our ultimate holding company (i.e., any organization that owns or controls us) and any subsidiaries it owns, particularly when we collaborate in providing the Services.
• Your Employer / Company: If you engage in our Services through your employer or company, we disclose your information to the company such as name and contact information.
• Online Community Members: If you participate in any of our online communities, we may disclose your public profile information to other online community members, as well as any other information you choose to provide or make public.
• Survey Providers: We share Personal Information with third parties who assist us in delivering our survey offerings and processing the responses.
• Marketing Providers: We coordinate and share Personal Information with our marketing providers in order to communicate with individuals about the Services we make available.
• Customer Service and Communication Providers: We share Personal Information with third parties who assist us in providing our customer services and facilitating our communications with individuals that submit inquiries.
• Other Service Providers: In addition to the third parties identified above, we engage other third-party service providers that perform business or operational services for us or on our behalf, such as website hosting, infrastructure provisioning, IT services, analytics services, administrative services.
• Other Business As Needed To Provide Services: We may share Personal Information with third parties that an individual engages with through our Services or as needed to fulfill a request or transaction including, for example, payment processing services.
• Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose Personal Information to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal Information may also be disclosed in the event of insolvency, bankruptcy or receivership.
• Legal Obligations and Rights: We may disclose Personal Information to third parties, such as legal advisors and law enforcement:
  • in connection with the establishment, exercise, or defense of legal claims;
  • to comply with laws or to respond to lawful requests and legal process;
  • to protect our rights and property and the rights and property of others, including to enforce our agreements and policies;
  • to detect, suppress, or prevent fraud;
  • to protect the health and safety of us and others; or
  • as otherwise required by applicable law.
• Otherwise With Consent or Direction: We may disclose Personal Information about an individual to certain other third parties or publicly with their consent or direction. For example, with an individual’s consent or direction we may post their testimonial on our Site or service-related publications.

Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit Personal Information from children under the age of 13. If an individual is under the age of 13, they should not use our Services or otherwise provide us with any Personal Information either directly or by other means. If a child under the age of 13 has provided Personal Information to us, we encourage the child’s parent or guardian to contact us to request that we remove the Personal Information from our systems. If we learn that any Personal Information we collect has been provided by a child under the age of 13, we will promptly delete that Personal Information.

Our Site and Services may include links to third-party websites, plug-ins and applications. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any Personal Information practices of third-party websites and online services or the practices of other third parties. To learn about the Personal Information practices of third parties, please visit their respective privacy notices.

We will update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on this Site or our Services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to privacy@xata.io.

Alternatively, inquiries may be addressed to:

Xatabase, Inc. Attn: Legal Department 584 Castro St #2144 San Francisco CA 94114-2512 US

This section contains disclosures on how we collect, store, process, transfer, share use data that identifies or is associated with residents of the European Economic Area (“EEA”), Switzerland, and the United Kingdom (“UK”) ("Personal Data") and information regarding our use of cookies and similar technologies (“EU Disclosures”). These EU Disclosures apply solely to residents of the EEA, Switzerland, and the UK (“you”). Please ensure that you have read and understood these EU Disclosures before accessing or using the Services. Unless otherwise expressly stated, all terms in this section have the same meaning as defined in our Privacy Policy or as otherwise defined in the General Data Protection Regulation (“GDPR”). Xatabase, Inc. is the controller of the personal data we hold about you in connection with your use of the Services. This means that we determine and are responsible for how your personal data is used.

We collect personal data as set out in the “Our Collection of Personal Information” and “Our Use of Personal Information” sections of our Privacy Notice. We will indicate to you where the provision of certain personal data is mandatory. If you choose not to provide such personal data, we may not be able to provide those parts of the Services to you or respond to your other requests.

The table in Annex 1 sets out in detail the categories of personal data we collect about you and how we use that information when you use the Services, as well as the legal basis which we rely on to process the personal data and recipients of that personal data.

We also automatically collect personal data indirectly about how you access and use the Services, and information about the device you use to access the Services, or otherwise engage with us. Please see the “Personal Information Automatically Collected” section of our Privacy Notice for more information about what data we collect and how we use it.

• The table at Annex 2 sets out in detail the categories of personal data we collect about you automatically and how we use that information. The table also lists the legal basis which we rely on to process the personal data and recipients of that personal data. For more information on cookies and other tracking technologies we use, please see the “Cookies and Similar Technologies Used on Our Site” section below.
• We may link or combine the personal data you provide and the information we collect automatically. This allows us to provide you with a personalized experience regardless of how you interact with us.
• We may anonymize and aggregate any of the personal data we collect (so that it does not directly identify you), and may use the anonymized and aggregated information or disclose it as set out in our Privacy Notice.

We will usually store the personal data we collect about you for no longer than necessary for the purposes set out in Annexes 1 and 2, including for the purposes of our legitimate business interests and satisfying any legal or reporting requirements, and in accordance with our legal obligations and legitimate business interests.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and the applicable legal requirements.

We may share your personal data with the recipients as set out in the “Our Disclosure of Personal Information” section of our Privacy Notice (as required in accordance with the purposes set out in Annexes 1 and 2).

From time to time we may contact you with information about our products and services, including sending you marketing messages and asking for your feedback on our products and services.

• For some marketing messages, we may use personal data we collect about you to help us determine the most relevant marketing information to share with you.
• We will only send you marketing messages if you have given us your consent to do so. You can withdraw your consent at a later date by clicking on the unsubscribe link at the bottom of our marketing emails or by updating your preferences via the website and app settings.

• Security. We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, change or damage. We will never send you unsolicited emails or contact you by phone requesting your account ID, password, credit or debit card information or national identification numbers.
• International Transfers of Your Personal Data. The personal data we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations, including in the United States. If you are accessing our Site from the EEA, your personal data may be processed outside of the EEA.

In the event of such a transfer, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as standard data protection clauses adopted by the European Commission.

If you wish to enquire further about these safeguards used, please contact us using the details set out at the end of these EU Disclosures.

In accordance with applicable privacy law, you have the following rights in respect of your personal data that we hold:

• Right of access. You have the right to obtain:
  • confirmation of whether, and where, we are processing your personal data;
  • information about the categories of personal data we are processing, the purposes for which we process your personal data and information as to how we determine applicable retention periods;
  • information about the categories of recipients with whom we may share your personal data; and
  • a copy of the personal data we hold about you.
• Right of portability. You have the right, in certain circumstances, to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person.
• Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to erasure. You have the right, in some circumstances, to require us to erase your personal data without undue delay if the continued processing of that personal data is not justified.
• Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal data if the continued processing of the personal data in this way is not justified, such as where the accuracy of the personal data is contested by you.
• Right to withdraw consent. If you have provided consent for the processing of your personal data, you have the right to withdraw your consent. If you withdraw your consent, this will not affect the lawfulness of our use of your personal data before your withdrawal.

You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.

You also have the right to lodge a complaint to your local data protection authority. Information about how to contact your local data protection authority is available here.

If you wish to exercise one of these rights, please contact us using the contact details at the end of these EU Disclosures.

Due to the confidential nature of data processing we may ask you to provide proof of identity when exercising the above rights. This can be done by providing a scanned copy of a valid identity document or a signed photocopy of a valid identity document.

Our Site uses cookies and similar technologies such as pixels and Local Storage Objects (LSOs) like HTML5 (together “cookies”) to distinguish you from other users of our Site. This helps us to provide you with a good experience when you browse our Site and also allows us to monitor and analyze how you use and interact with our Site so that we can continue to improve our Site. It also helps us and our advertising partners to determine products and services that may be of interest to you, in order to serve you targeted advertisements.

We use the following types of cookies:

• Strictly necessary cookies. These are cookies that are required for the operation of our Site. They include, for example, cookies that enable you to log into secure areas of our Site or make use of e-billing services.
• Analytical/performance cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our Site when they are using it. This helps us to improve the way our Site works, for example, by ensuring that users are finding what they are looking for easily.
• Functionality cookies. These are used to recognize you when you return to our Site. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
• Targeting cookies. These cookies record your visit to our Site, the pages you have visited and the links you have followed. We will use this information to make our Site and the marketing messages we send to you more relevant to your interests. We may also share this information with third parties who provide a service to us for this purpose.
• Third party cookies. Please be aware that advertisers and other third parties may use their own cookies tags when you click on an advertisement or link on our Site. These third parties are responsible for setting out their own cookie and privacy policies.

The Services is not directed at persons under 16. We do not knowingly collect or solicit personal data from any persons under the age of 16. In the event that we learn that we have inadvertently collected personal data from a child under age 13, we will delete that information as quickly as possible. If you believe that we might have any information from a child under 13, please contact us using the details at the end of these EU Disclosures.

We may update these EU Disclosures from time to time and so you should review this page periodically. When we change these EU Disclosures in a material way, we will update the "Effective Date" above. Changes to these EU Disclosures are effective when they are posted on this page.

Please contact privacy@xata.io if you have any questions, comments and requests regarding these EU Disclosures.