StreamSets Privacy Policy

Updated: May 25, 2021

StreamSets, Inc. and its group companies (“StreamSets“, “we” or “us“) respect your privacy. This privacy notice (“Notice“) explains who we are, how we collect, use and share personal information about you, and how you can exercise your privacy rights.

This Notice applies (unless a different Notice is displayed) to the processing of personal information collected by us:

1. in the usual course of business, including through our websites (such as streamsets.com (and any of its sub-domains) or any other website which includes a link to this Notice is posted) (the “Website“), as well as in connection with our events, sales and marketing activities; and
2. when you use any of our products and services as an authorized end user (for example, as an employee of one of our customers who provided you with access to the services) (the “Services“) where we act as a controller of your personal information.

“You” may be a visitor to one of our websites, an end user of one or more of our Services.

---

We recommend that you read this Notice in full to ensure you are fully informed. However, to make it easier for you to review those parts of this Notice which apply to you, we have divided up the document into the following sections:

1. WHO WE ARE (applicable to everyone)
2. PRIVACY FOR THE WEBSITE (applicable to visitors to our Website)
3. PRIVACY FOR THE SERVICES (applicable to end users of the Services)
4. GENERAL INFORMATION (applicable to everyone)

1. WHO WE ARE
We are a technology company headquartered in the US providing a multi-cloud DataOps platform for modern data integration, helping enterprises to continuously flow big, streaming and traditional data to their data scientists and data-intensive applications. DataOps is the application of DevOps practices to data management and integration to reduce the cycle time of data analytics, with a focus on automation, collaboration and monitoring. We have offices in the Silicon Valley, Austin, London, Barcelona and Sydney and employees based all over the world. You can find out more about us here.

2. PRIVACY FOR THE WEBSITE
This section describes how we collect and use personal information in the usual course of business, including through our Website, as well as in connection with our events, sales and marketing activities.

2.1 What information do we collect?
Information that you provide voluntarily: Our Website offers various ways that individuals may contact us, such as through form submissions, email or phone, in order to inquire about our company and Services. For example, when creating an account, participating in a survey, making a purchase, expressing an interest in obtaining additional information about StreamSets or our Services, subscribing to marketing or otherwise contacting us, StreamSets collects personal information from you. We may also collect information from you in person at a tradeshow or event or via a phone call with one of our sales representatives. The personal information we collect may include:

• contact information (such as your name, address, telephone number and email address) as well as the nature of your communication;
• professional information (such as your company name, job title, company address);
• marketing information (such as your contact preferences, source/campaign); and
• any information you choose to provide to us when completing any ‘free text’ boxes in our forms (for example, for event sign-up or bot interaction).

Information we collect automatically: When using our Website, certain information is automatically collected by most browsers or through your device (such as your IP address, your operating system, your browser, device information, unique device identifiers, mobile network information, request information (speed, frequency) and information about how you interact with our Website and other websites). In some countries, including countries in the European Economic Area (“EEA”), this information is considered ‘personal data’ under data protection laws. Some of this information is collected using cookies and similar tracking technology.

Information we collect from other sources: In order to enhance our ability to provide relevant marketing, offers and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, data providers, social media platforms, as well as from other third parties. This information may include:

• mailing addresses, job titles, email addresses, phone numbers, intent data (or user behaviour data), IP addresses, social media profiles, LinkedIn URLs and custom profiles, for purposes of targeted advertising, delivering more relevant email content, event promotion and profiling; and
• updated delivery or payment information used to correct our records; purchase or redemption information; and customer support and enrollment information.

2.2 How do we use your information?
We use the information we collect or receive (alone or in combination):

• To respond to your inquiries and fulfill your requests, such as to send you requested materials and newsletters, as well as information and materials regarding our products and services.
• To send administrative information to you, for example, information regarding our Websites and changes to our terms, conditions, and policies.
• To send you marketing communications, including via email and SMS in compliance with applicable laws and in accordance with your preferences, that we believe may be of interest to you.
• To personalize your experience on our Websites and other websites by presenting products and offers tailored to you.
• For our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products, enhancing, improving or modifying our Websites and services, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities.
• As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

3. PRIVACY FOR THE SERVICES
This section applies to the personal information we collect and process about end users of our Services. When we refer to “end users” we mean any individual our customers have authorized to use and access the Services.
For certain personal information we collect and process through the Services, we act as a processor on behalf of our customers (your employer if you are an end user). When we are the processor, our customers and their end users that control what personal information we collect through the Services and how we use it. This section applies only to the personal information we collect and use for our own purposes (where we act as a controller) and does not cover any personal information we process on behalf on our customers.
In all cases, StreamSets is not responsible for the privacy or security practices of its customers, which may differ from those set out in this Notice.

3.1 What information do we collect?
Information you provide to us: You or your organizations administrator may provide certain personal information to us through the Services – for example, when you create a StreamSets account to access and use the Services, when you consult with customer support or send us an email or communicate with us in any way in connection with the Services (for example, to make a support request). The personal information we collect may include:

• Business contact information (such as your name, job title, organization, address and email address).
• Account log-in credentials (such as your username and password).
• Troubleshooting and support data (which is data you provide when you contact StreamSets for help, such as the products you use, and other details that help us provide support. For example, contact or authentication data, the content of your chats and other communications with StreamSets, data about the condition of your device, and the products you use related to your help inquiry).
• Payment information (including your credit card numbers and associated identifiers, billing address and background information, but only where you pay for the Services).

If you ever communicate directly with us, we will maintain a record of those communications and responses.

Information we collect automatically: In connection with your organization’s deployment of certain StreamSets Services, we may automatically collect certain data relating to the performance and configuration of the Services, and our customer’s and their end-user’s consumption of and interaction and use of such Services (for example, we may know who the most active end users are, which pages of the Services are visited and which links are clicked or features are used) (we call this “Usage Data”).

Usage Data is generally technical information obtained from software or systems hosting the Services, devices accessing the software or systems and/or log files generated during the use of the Services. The information collected as Usage Data does not include any of the customer’s pipeline data processed through the Services and does not generally specifically identify any end user (for example, by reference to their name).

We (or our third party service providers) use cookies and other tracking technologies to collect some of this information. See Section 3.3 (Cookies) for more information.

We use Usage Data to maintain the security of our Services, to provide necessary functionality, as well as to improve performance of the Services, to assess and improve customer and user experience of the Services, to review compliance with applicable usage terms, to identify future opportunities for development of the Services and to assess capacity requirements.

If you are using StreamSets Data Collector or StreamSets Transformer, the customer administrator can disable collection of Usage Data from the Services via by going to the Settings menu, choosing Usage Data, and setting the option to share usage data to off. Further, if you are using these products, the customer administrator can disable our collection of Usage Data from the Services via the administrator settings or prevent this information from being shared with us by blocking transmission at the local network level.

If you are using StreamSets DataOps Platform, our customers can disable collection of certain Usage Data from the Services by going to the Settings menu in the Services, our customers can disable collection of certain Usage Data from the Services by going to User Settings in Control Hub and setting the option to Share Usage Data to off.

3.2 How do we use your information?

• Provide and facilitate delivery of Services. For example, for the creation or administration of your StreamSets account, to communicate with you, and to provide you with customer support or other services you request, such as product updates, product patches and fixes and similar communications and sending other administrative and account related communications.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us.
• To manage the customer account, including for billing purposes as well as for our customer relationship management.
• To prevent potentially illegal activities. To respond to legal requests or prevent fraud, we may need to disclose any information or data we hold about you. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.
• To improve our Services and develop new products and features,, such as enhancing or modifying our products and Services.
• To support our marketing and sales programs, including measuring the success of our marketing initiatives and to inform sales conversations.
• To provide us with customer and end user insights such as identifying usage trends and and analysing customer and end user interactions with our Services in order to provide improved user experience.
• As part of our efforts to keep the Service safe and secure (for example, to help monitor, prevent and detect fraud, enhance security, monitor and verify identity or access, and combat spam or other malware or security risks).
• To comply with and enforce applicable legal and regulatory requirements (such as anti-money laundering and fraud prevention).

3.3 Cookies
Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie. As is common to many online services, our Services may make use of the following third party cookies to collect certain Usage Data directly from end-user browsers for the purposes described in this Notice (see the Section “Information we collect automatically” above for further information).

• Google Analytics: Further information on how Google collects and uses this data can be found at https://www.google.com/policies/privacy/partners/. You can opt-out of all Google supported analytics within the Services by visiting https://tools.google.com/dlpage/gaoptout/.
• Pendo: For further information about the cookies used by Pendo can be found at: https://www.pendo.io/cookiepolicy/.
• FullStory: We use FullStory to provide a better user experience for you and collect data used to diagnose end user issues. It records and captures an end user’s session so that we can monitor user actions to simplify or enhance your experience using the product and to improve the quality of our products. You can opt-out of Fullstory support analytics within the Services by visiting https://www.fullstory.com/optout/. Further information about the cookies used by Fullstory can be found at: https://www.fullstory.com/legal/terms-and-conditions/.
• Mixpanel: We use Mixpanel to understand your usage of our products to improve them and monitor the effectiveness of our marketing programs. You can opt-out of Mixpanel analytics within the Services by visiting www.mixpanel.com/optout. Further information about the cookies used by Mixpanel can be found at www.mixpanel.com/terms/.
• Appzi.io: We use Appzi to collect user feedback and suggestions. Further information about the cookies used by Appzi can be found at:  https://www.appzi.com/privacy/.

Cookies are not the only way we recognize or track end-users. We may use other, similar technologies from time to time to collect certain Usage Data for the purposes described in this Notice. For example, to better understand how our Services are being used and improve user experience by tracking how you interact with the Services and where you click. We use UserFlow in the StreamSets DataOps Platform to provide a better user on-boarding experience. Further information about how UserFlow collects and uses this data can be found at:  https://userflow.com/policies/privacy.

4. GENERAL INFORMATION

4.1 What information do we collect?
We do not sell or share your personal information with third parties except as outlined below. We may disclose your personal information to the following categories of recipients:

• Service providers. In order to provide these services to you, it is necessary for us to disclose your information to contracted third parties and service provider partners who perform certain functions of our Services on our behalf. Examples include payment providers (to authorize, record, settle and clear payment card transactions); cloud hosting providers (to provide data storage and processing services); communications providers (to process new queries and to manage our emails); and analytics companies to perform analysis on the Website and Services.
• StreamSets affiliates. StreamSets is headquartered in San Francisco and has offices in Silicon Valley, Austin, London, Barcelona and Sydney, and employees based all over the world. We may share information with our parent companies, subsidiaries and/or affiliates for use and processing purposes described in this Notice.
• Compliance with laws. We may disclose information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or other legal process (including in response to public authorities to meet national security or law enforcement requirements).
• Vital interests and legal rights. We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service, this Notice or any other terms, or as evidence in litigation in which StreamSets may be involved.
• Business transfers. We may share or transfer information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Notice.
• Consent. We may share your information with any other person with your consent to the disclosure.

4.2 International Data Transfers
The StreamSets Websites are hosted in the United States. Our Services are provided from the United States or Europe (Germany). If you are using the Websites or Services from outside the United States, please be aware that your information may be transferred to, stored, and processed by StreamSets in our facilities and by those third parties with whom we may share your personal information, in the United States and other locations where we have offices or where customers deploy the Services. These countries may have data protection laws that are different to the laws of your country. However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Notice.

4.3 Legal basis for processing personal information (EEA visitors and end users only)
If you are resident in or a visitor from the EEA, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. In most cases we use personal information: where we need it to perform a contract with you; where the processing is in our legitimate business interests; or, where required by applicable law, we have your consent to do so. In some cases, we may have a legal obligation to collect personal information from you. Typically, our legitimate interests include: (i) providing, improving and personalizing our Website and Services; (ii) managing our relationship with you; and (iii) conducting our marketing activities. If you have questions or need further information about the legal basis we rely on to collect and use your personal information, please contact us using the contact details provided under the “Contact Us” section 4.10 of this Notice. The data controller of your personal information is StreamSets, Inc.

4.4 Your data protection rights:
Where we are acting as a controller, and depending on your location and subject to applicable law, you may have the following rights with regard to the personal information we control about you:

• You can access, correct, update, delete, and deactivate your personal information through the Website by signing in to your account and editing your information as desired. You can also contact us at feedback@streamsets.com.
• In addition, if you are a resident of or visitor from the EEA, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. To exercise these rights email feedback@streamsets.com.
• You can opt out of receiving marketing emails from us by clicking the “unsubscribe” link in the email, by emailing feedback@streamsets.com. If you choose to no longer receive marketing information, we may still communicate with you regarding such things as your security updates, product functionality, responses to service requests, or other transactional, non-marketing purposes.
• If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
• You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. Contact details for data protection authorities in EEA are available here.

4.5 How do we keep your personal information secure?
We are committed to security and privacy and maintaining appropriate physical, technical and administrative standards to protect the personal information that we collect. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so you should take care in deciding what information you send us in this way.

4.6 How long do we keep your personal information?
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to comply with applicable legal, tax or accounting requirements, to enforce our agreements or comply with our legal obligations). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such data. If this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

4.7 Third-Party Websites and Apps:
This Notice only applies to the StreamSets Website and Services. Any access to and use of any linked websites or services is not governed by this Notice, but instead is governed by the privacy policies of those third parties. We are not responsible for the information practices of such third parties.

4.8 Children’s information
You must have reached the age of majority to register as a member of or be permitted use of the Website or Service. Any information we receive from people we believe to be under this age will be purged from our database. We do not knowingly collect personal information from children under the age of 13 or have any reasonable grounds to believe that children under the age of 13 are accessing our Website or using our Service. If you believe that a child under 13 may have provided us personal information, please contact us at feedback@streamsets.com.

4.9 Changes to this Notice
StreamSets will review and update this Notice periodically and will note the date of its most recent revision above. If we make material changes to this Notice, we will notify you either by prominently posting a notice of such changes prior to implementing the changes or by directly sending you a notification. We encourage you to review this Notice frequently to be informed of how StreamSets is protecting your information.

4.10 Contact us
If you have any questions or suggestions regarding our Notice, feel free to contact us at feedback@streamsets.com or in writing at:
StreamSets
150 Spear St, Suite 300
San Francisco, CA 94105
USA