EFFECTIVE DATE: May 1st, 2019
dotData, Inc. (“dotData,” “we,” “us,” or “our”) values your privacy. This U.S. Website Privacy Notice (“Notice”) describes how we collect, use, disclose, and otherwise process personal information about visitors to our website https://dotdata.com/ (the “Site”), prospective customers, existing customer contacts, job applicants, and individuals who interact with us through demo requests, newsletters, events, or support inquiries.
Scope Limitations: This Notice is intended for U.S.-facing website and business-contact interactions. It does not cover (a) personal information that dotData processes on behalf of its customers as a service provider / processor (see Section 2.2 below), (b) personal information of dotData employees, which is addressed in a separate internal privacy notice, or (c) personal information governed by Japan’s Act on the Protection of Personal Information (APPI), which is addressed separately in the privacy policy available at https://jp.dotdata.com/.
By visiting the Site or interacting with us, you acknowledge that your personal information will be handled as described in this Notice. Your use of our Site is also subject to our Terms of Service.
This Notice applies to personal information that dotData collects and determines the purposes and means of processing in its own capacity—for example, website visitor data, marketing contacts, event attendees, support inquiries, and job applicants. Under applicable U.S. state privacy laws, dotData acts as the “controller” or “business” for this data.
When customers use dotData Cloud or other dotData products, they upload their own data to our platform and conduct their own analyses. dotData acts as a “processor” or “service provider” on behalf of the customer. dotData does not determine the purposes or means of processing customer-uploaded data and generally does not access or review its content.
The processing of customer-uploaded data is governed by the Data Processing Addendum (DPA) between dotData and the customer, available at https://dotdata.com/data-processing-addendum/. If you are an individual whose personal data has been uploaded to dotData’s platform by a dotData customer, please direct any privacy inquiries or rights requests to that customer.
We may receive personal information about you from business partners when we co-host events or co-market products.
We use personal information for the following purposes:
We may disclose personal information to the following categories of recipients:
Sale of Personal Information: dotData does not sell personal information for monetary consideration. However, our use of certain advertising cookies and similar technologies may be considered “sharing” for cross-context behavioral advertising or “targeted advertising” under certain U.S. state privacy laws. You can opt out of this activity through the mechanisms described in Section 6.
We use cookies and similar tracking technologies on our Site. These include:
Your Opt-Out Choices:
We do not respond to “Do Not Track” browser signals, as there is no industry-wide standard for this feature.
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The following table summarizes our retention practices by data category:
| Data Category | Retention Criteria | Notes |
|---|---|---|
| Customer Account / Contract Contact Information | Duration of the account or contractual relationship, plus any required legal retention or hold period | Applies if you hold a dotData product account or trial |
| Marketing / Prospect Contacts | Until opt-out or unsubscribe, plus up to 2 years from last meaningful interaction | Suppression list maintained to honor opt-out |
| Support / Inquiry Data | Up to 3 years after resolution of the inquiry | May be retained longer if related to ongoing legal obligation |
| Cookie / Analytics Data | See cookie-specific durations in Cookie Settings; generally up to 13 months for analytics cookies | Subject to opt-out via Cookie Settings or GPC |
| Job Applicant Data | Up to 2 years from the conclusion of the recruitment process | Deleted earlier upon applicant request, subject to legal holds |
| dotData Cloud Customer-Uploaded Data (*) | Duration of the customer agreement; deleted within 60 days of account termination | (*) Included for transparency only. This data is outside the scope of this Notice and is governed by the DPA. The customer is the Controller. |
Note: Specific retention periods may vary based on legal obligations, ongoing disputes, or legitimate business needs. Where required by applicable law, we will provide more specific information upon request.
We implement commercially reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. For details about our security practices, please visit https://dotdata.com/security-at-dotdata/.
If you are a resident of a U.S. state with an applicable comprehensive privacy law, you may have certain rights with respect to the personal information we collect about you in our capacity as a controller / business. The specific rights available to you depend on your state of residence. This section describes the rights that are commonly available.
To submit a verifiable request, you may:
We will verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf; we may require you to verify your identity directly with us and confirm the agent’s authorization in writing.
We will respond within the timeframe required by applicable law (generally 45 days, extendable by an additional 45 days where reasonably necessary with notice to you). If we are unable to fulfill your request, we will inform you of the reason.
If we decline your request in whole or in part, you have the right to appeal our decision. To submit an appeal, email us at privacy@dotdata.com with the subject line “Privacy Rights Appeal.” We will respond to your appeal within the timeframe required by applicable law (generally 60 days). If your appeal is denied, we will provide you with information on how to contact your state’s Attorney General to submit a complaint.
In addition to the rights described above, California residents are entitled to the following disclosures under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
Categories of Personal Information Collected:
Categories of Sources: directly from you; automatically through your use of the Site; from business partners (e.g., event co-hosts).
Business or Commercial Purposes for Collection: as described in Section 4.
Categories of Third Parties: as described in Section 5.
Sale and Sharing: dotData does not “sell” personal information for monetary consideration. Our use of advertising cookies and similar technologies may constitute “sharing” for cross-context behavioral advertising under the CCPA/CPRA. You may opt out of this sharing via our Cookie Settings or by enabling the Global Privacy Control (GPC) signal in your browser.
Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes that would give rise to a right to limit under the CCPA/CPRA.
Retention: See Section 7 for category-specific retention periods.
Notice at Collection: This Section 9.4 serves as our notice at collection for California residents. In addition, short-form privacy notices are provided at or before the point of collection on our Site (e.g., on demo request forms, contact forms, and newsletter sign-up forms).
Residents of other states with comprehensive privacy laws have the rights described in Sections 9.1–9.3, to the extent provided by their state’s law. In particular:
As new state privacy laws take effect or existing laws are amended, we will update this Notice to reflect any additional rights or requirements. For information about the rights available under your state’s law, please contact us at privacy@dotdata.com.
We do not offer financial incentives or price or service differences in exchange for the retention or sale of personal information.
If you apply for a position with dotData, we collect application documents, resumes, and information shared during the recruitment process. This information is used solely for evaluating your candidacy and managing the hiring process. We retain applicant data for up to 2 years after the conclusion of the recruitment process, unless you request earlier deletion. Applicants have the same rights described in Section 9.1 to the extent applicable under their state’s law. A more detailed applicant privacy notice may be provided during the application process.
Our Site and Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe that we may have collected information from a child under 16, please contact us at privacy@dotdata.com.
dotData is headquartered in the United States. Your personal information may be transferred to and processed in the United States and other countries where our affiliates and service providers operate. We take appropriate measures to ensure that your personal information remains protected in accordance with this Notice and applicable law.
Our Site may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
We may update this Notice from time to time. When we make material changes, we will update the “Last Updated” date at the top and, where required by law, provide additional notice.
If you have questions, concerns, or complaints about this Notice or our privacy practices, please contact us:
dotData, Inc.
1730 S El Camino Real Suite 200, San Mateo, CA 94402
Email: privacy@dotdata.com
Phone: +1-415-301-5600
If you are not satisfied with our response, you may have the right to lodge a complaint with your state’s Attorney General or other applicable regulatory authority.