Privacy Policy

DOTDATA, INC. Privacy Policy

EFFECTIVE DATE: May 1st, 2019

1. Introduction

dotData, Inc. (“dotData,” “we,” “us,” or “our”) values your privacy. This U.S. Website Privacy Notice (“Notice”) describes how we collect, use, disclose, and otherwise process personal information about visitors to our website https://dotdata.com/ (the “Site”), prospective customers, existing customer contacts, job applicants, and individuals who interact with us through demo requests, newsletters, events, or support inquiries.

Scope Limitations: This Notice is intended for U.S.-facing website and business-contact interactions. It does not cover (a) personal information that dotData processes on behalf of its customers as a service provider / processor (see Section 2.2 below), (b) personal information of dotData employees, which is addressed in a separate internal privacy notice, or (c) personal information governed by Japan’s Act on the Protection of Personal Information (APPI), which is addressed separately in the privacy policy available at https://jp.dotdata.com/.

By visiting the Site or interacting with us, you acknowledge that your personal information will be handled as described in this Notice. Your use of our Site is also subject to our Terms of Service.

2. Our Role: Controller vs. Processor

2.1 dotData as a Controller (“Business”)

This Notice applies to personal information that dotData collects and determines the purposes and means of processing in its own capacity—for example, website visitor data, marketing contacts, event attendees, support inquiries, and job applicants. Under applicable U.S. state privacy laws, dotData acts as the “controller” or “business” for this data.

2.2 dotData as a Processor (“Service Provider”)

When customers use dotData Cloud or other dotData products, they upload their own data to our platform and conduct their own analyses. dotData acts as a “processor” or “service provider” on behalf of the customer. dotData does not determine the purposes or means of processing customer-uploaded data and generally does not access or review its content.

The processing of customer-uploaded data is governed by the Data Processing Addendum (DPA) between dotData and the customer, available at https://dotdata.com/data-processing-addendum/. If you are an individual whose personal data has been uploaded to dotData’s platform by a dotData customer, please direct any privacy inquiries or rights requests to that customer.

3. Information We Collect

3.1 Information You Provide Directly

• Contact / Inquiry Information: name, email address, phone number, company name, and job title when you request a demo, contact us, subscribe to a newsletter, or register for an event.
• Job Applicant Information: application documents, resumes, and information shared during the recruitment process. For details on how we handle applicant data, see Section 9.7.

3.2 Information Collected Automatically

• Device and Browser Information: IP address, browser type and version, operating system, and device identifiers.
• Usage Information: pages visited, time spent on pages, referring URLs, and click patterns.
• Cookies and Similar Technologies: we use cookies, web beacons, and similar technologies to collect information about your browsing activities. See Section 6 for details.

3.3 Information from Third Parties

We may receive personal information about you from business partners when we co-host events or co-market products.

4. How We Use Personal Information

We use personal information for the following purposes:

• Service and Support: to respond to inquiries, provide customer support, and facilitate demo requests.
• Marketing and Communications: to send newsletters, promotional materials, event invitations, and information about our products and services. You may opt out of marketing emails at any time by using the unsubscribe link in each email or by contacting us.
• Analytics and Improvement: to understand how visitors use our Site, to improve our offerings, and for research and analytical purposes.
• Advertising and Campaign Measurement: where applicable, to support advertising and campaign measurement through cookies and similar technologies. See Section 6 for opt-out options.
• Security and Compliance: to protect against fraud and unauthorized access, to comply with legal obligations, and to enforce our terms and policies.
• Recruitment: to evaluate job applicants and manage the hiring process.

5. How We Share Personal Information

We may disclose personal information to the following categories of recipients:

• Affiliates: our corporate affiliates, including dotData’s Japan-based affiliate, for purposes consistent with this Notice.
• Service Providers: third-party vendors who perform services on our behalf, such as cloud hosting (Amazon Web Services), analytics, email delivery, and customer relationship management.
• Advertising Partners: third-party advertising and analytics platforms that use cookies and similar technologies on our Site to deliver interest-based advertisements. This may constitute “sharing” for purposes of targeted advertising under certain U.S. state privacy laws. See Section 6 for opt-out options.
• Business Partners and Sales Partners: when we co-host events or co-market products, or through authorized resellers who promote our offerings.
• Legal and Regulatory: when required by law, regulation, or legal process, or to protect the rights, property, or safety of dotData, our customers, or others.
• Business Transfers: in connection with a merger, acquisition, reorganization, or sale of assets.

Sale of Personal Information: dotData does not sell personal information for monetary consideration. However, our use of certain advertising cookies and similar technologies may be considered “sharing” for cross-context behavioral advertising or “targeted advertising” under certain U.S. state privacy laws. You can opt out of this activity through the mechanisms described in Section 6.

6. Cookies, Tracking Technologies, and Opt-Out

We use cookies and similar tracking technologies on our Site. These include:

• Necessary Cookies: essential for the operation of the Site.
• Analytics Cookies: help us understand how visitors interact with the Site (e.g., Google Analytics).
• Functional Cookies: enable enhanced functionality and personalization.
• Advertising Cookies: used by third-party platforms (e.g., Meta / Facebook Pixel) to support advertising measurement and campaign performance tracking. These cookies may enable interest-based advertising by such third parties.

Your Opt-Out Choices:

• Cookie Settings: you can manage your cookie preferences, including opting out of Analytics and Advertising cookies, through the “Cookie Settings” link available in the footer of our Site.
• Global Privacy Control (GPC): we recognize and honor the GPC browser signal. When we detect a GPC signal, we treat it as a valid request to opt out of the sharing of personal information for targeted advertising via cookies and similar technologies, as required by applicable state laws. To enable GPC, visit https://globalprivacycontrol.org/.

We do not respond to “Do Not Track” browser signals, as there is no industry-wide standard for this feature.

7. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The following table summarizes our retention practices by data category:

Data Category	Retention Criteria	Notes
Customer Account / Contract Contact Information	Duration of the account or contractual relationship, plus any required legal retention or hold period	Applies if you hold a dotData product account or trial
Marketing / Prospect Contacts	Until opt-out or unsubscribe, plus up to 2 years from last meaningful interaction	Suppression list maintained to honor opt-out
Support / Inquiry Data	Up to 3 years after resolution of the inquiry	May be retained longer if related to ongoing legal obligation
Cookie / Analytics Data	See cookie-specific durations in Cookie Settings; generally up to 13 months for analytics cookies	Subject to opt-out via Cookie Settings or GPC
Job Applicant Data	Up to 2 years from the conclusion of the recruitment process	Deleted earlier upon applicant request, subject to legal holds
dotData Cloud Customer-Uploaded Data (*)	Duration of the customer agreement; deleted within 60 days of account termination	(*) Included for transparency only. This data is outside the scope of this Notice and is governed by the DPA. The customer is the Controller.

Note: Specific retention periods may vary based on legal obligations, ongoing disputes, or legitimate business needs. Where required by applicable law, we will provide more specific information upon request.

8. Data Security

We implement commercially reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. For details about our security practices, please visit https://dotdata.com/security-at-dotdata/.

9. Your Privacy Rights Under U.S. State Laws

If you are a resident of a U.S. state with an applicable comprehensive privacy law, you may have certain rights with respect to the personal information we collect about you in our capacity as a controller / business. The specific rights available to you depend on your state of residence. This section describes the rights that are commonly available.

9.1 Rights You May Have

• Right to Know / Right to Access: the right to confirm whether we are processing your personal information, and to request disclosure of the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we have shared it.
• Right to Delete: the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: the right to request correction of inaccurate personal information.
• Right to Data Portability: the right to receive a copy of your personal information in a portable and, to the extent technically feasible, readily usable format.
• Right to Opt-Out: some state laws provide the right to opt out of certain processing activities, such as the sale or sharing of personal information, targeted advertising, or certain types of profiling. To the extent our use of advertising cookies constitutes such activity, you may opt out as described in Section 6.
• Right to Non-Discrimination: we will not discriminate against you for exercising your privacy rights.

9.2 How to Exercise Your Rights

To submit a verifiable request, you may:

• Email us at: privacy@dotdata.com
• Submit a request through our online form at: https://dotdata.com/privacy-request/

We will verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf; we may require you to verify your identity directly with us and confirm the agent’s authorization in writing.

We will respond within the timeframe required by applicable law (generally 45 days, extendable by an additional 45 days where reasonably necessary with notice to you). If we are unable to fulfill your request, we will inform you of the reason.

9.3 Right to Appeal

If we decline your request in whole or in part, you have the right to appeal our decision. To submit an appeal, email us at privacy@dotdata.com with the subject line “Privacy Rights Appeal.” We will respond to your appeal within the timeframe required by applicable law (generally 60 days). If your appeal is denied, we will provide you with information on how to contact your state’s Attorney General to submit a complaint.

9.4 California-Specific Disclosures (CCPA/CPRA)

In addition to the rights described above, California residents are entitled to the following disclosures under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

Categories of Personal Information Collected:

• Identifiers (name, email address, IP address, device identifiers)
• Internet or electronic network activity information (browsing history, interactions with the Site)
• Professional or employment-related information (company name, job title)

Categories of Sources: directly from you; automatically through your use of the Site; from business partners (e.g., event co-hosts).

Business or Commercial Purposes for Collection: as described in Section 4.

Categories of Third Parties: as described in Section 5.

Sale and Sharing: dotData does not “sell” personal information for monetary consideration. Our use of advertising cookies and similar technologies may constitute “sharing” for cross-context behavioral advertising under the CCPA/CPRA. You may opt out of this sharing via our Cookie Settings or by enabling the Global Privacy Control (GPC) signal in your browser.

Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes that would give rise to a right to limit under the CCPA/CPRA.

Retention: See Section 7 for category-specific retention periods.

Notice at Collection: This Section 9.4 serves as our notice at collection for California residents. In addition, short-form privacy notices are provided at or before the point of collection on our Site (e.g., on demo request forms, contact forms, and newsletter sign-up forms).

9.5 Other State-Specific Information

Residents of other states with comprehensive privacy laws have the rights described in Sections 9.1–9.3, to the extent provided by their state’s law. In particular:

• Appeal: If your rights request is denied, you may appeal as described in Section 9.3. If the appeal is denied, you may file a complaint with your state’s Attorney General.
• Opt-Out of Targeted Advertising: You may opt out via our Cookie Settings or by enabling GPC, as described in Section 6.
• Sensitive Data: To the extent we process sensitive personal information where consent is required by applicable state law, we will obtain such consent prior to processing.

As new state privacy laws take effect or existing laws are amended, we will update this Notice to reflect any additional rights or requirements. For information about the rights available under your state’s law, please contact us at privacy@dotdata.com.

9.6 Financial Incentives

We do not offer financial incentives or price or service differences in exchange for the retention or sale of personal information.

9.7 Job Applicants

If you apply for a position with dotData, we collect application documents, resumes, and information shared during the recruitment process. This information is used solely for evaluating your candidacy and managing the hiring process. We retain applicant data for up to 2 years after the conclusion of the recruitment process, unless you request earlier deletion. Applicants have the same rights described in Section 9.1 to the extent applicable under their state’s law. A more detailed applicant privacy notice may be provided during the application process.

10. Children’s Privacy

Our Site and Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe that we may have collected information from a child under 16, please contact us at privacy@dotdata.com.

11. International Data Transfers

dotData is headquartered in the United States. Your personal information may be transferred to and processed in the United States and other countries where our affiliates and service providers operate. We take appropriate measures to ensure that your personal information remains protected in accordance with this Notice and applicable law.

12. Third-Party Links

Our Site may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Notice

We may update this Notice from time to time. When we make material changes, we will update the “Last Updated” date at the top and, where required by law, provide additional notice.

14. Contact Us

If you have questions, concerns, or complaints about this Notice or our privacy practices, please contact us:

dotData, Inc.
1730 S El Camino Real Suite 200, San Mateo, CA 94402
Email: privacy@dotdata.com
Phone: +1-415-301-5600

If you are not satisfied with our response, you may have the right to lodge a complaint with your state’s Attorney General or other applicable regulatory authority.