This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Policy of WSO2 LLC, and its subsidiaries (collectively, “we,” “us,” or “our”) and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”). Any terms defined in the CCPA have the same meaning when used in this notice.
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:
Identifiers. This category includes information such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or account name. We collect Identifiers from you directly when you enter information into forms on our website or when you communicate with WSO2 employees, automatically when you visit our website, and, in some circumstances, from third parties. We use these Identifiers to supply our products and services to you, to comply with law, to improve our products and services, for recruitment, to communicate with you about our products and services, to analyze traffic to our website, for billing, and to enforce agreements with our customers.
We shared Identifiers with Service Providers, Partners & Resellers, and third parties to whom you or your agents authorize us to disclose your personal information in connection with the products or services we provide to you.
Financial Information. This category includes information such as a bank account number, credit card number, or debit card number. We collect Financial Information directly from you and use this information to provide services to you and our customers, and for billing.
We shared Financial Information with Service Providers and third parties to whom you or your agents authorize us to disclose your personal information in connection with the products or services we provide to you.
Professional Information. This category includes information such as your title and where you work. We collect Professional Information to provide services to you and our customers, to improve our products or services, for recruitment, to communicate with you about our products and services, to provide support to our customers, and to enforce agreements. Professional Information is collected directly from you and sometimes obtained from third parties.
We shared Professional Information with Service Providers, Partners & Resellers, and third parties to whom you or your agents authorize us to disclose your personal information in connection with the products or services we provide to you.
Internet or other similar network activity.This category includes information such as browsing history, information on how you interact with our website and services, location information, or device information. We collect this information for marketing, analytics, communicate with you about our products and services, and to provide customer support.
We shared Internet or similar network activity with Service Providers and third parties to whom you or your agents authorize us to disclose your personal information in connection with the products or services we provide to you.
We may retain your personal information for a period of time consistent with the original purpose of collection (see above) or as long as required to fulfill our legal obligations. We determine the appropriate retention period for personal information on the basis of the amount, nature, and sensitivity of the personal information being processed, the potential risk of harm from unauthorized use or disclosure of the personal information, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation).
After expiry of the applicable retention periods, your personal information will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of such data.
We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:
We disclose your personal information for a business purpose to the following categories of third parties
We may occasionally sell or share your personal information to our partners or resellers who help us to sell our products and services to customers. By “sell,” we mean to say that we sometimes share contact information of potential customers with our partners and resellers who may profit from selling or reselling our services to you. Our partners and resellers agree in writing to keep the information we share with them confidential. We do not sell or share the personal information of minors under 16 years of age without their affirmative authorization or, if 13 or under, the affirmative authorization of their parent or guardian. We do not have actual knowledge that we have sold or shared the personal information of any minor under 16 years of age. In the preceding twelve (12) months, we have sold and/or shared the following categories of personal information to partners and resellers:
In the preceding twelve (12) months, we have sold the following categories of personal information to partners and resellers:
The categories of personal information that we collect and disclose for a business purpose include “sensitive personal information” as defined under CCPA. We do not disclose sensitive personal information for any purpose not expressly permitted by CCPA.
The CCPA provides consumers with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you any or all of the following:
You have the right to request that we delete any of your personal information that we collect from you and retain, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service providers to:
You have the right under the CCPA to request to correct inaccurate personal information that you have provided to us.
We may occasionally sell or share your personal information with our partners and resellers. You have the right to direct us to not sell or share your personal information at any time (the “right to opt-out”). Consumers who opt-in to personal information sales or sharing may opt-out of future sales or sharing at any time.
Once you have made an opt-out request, we will wait at least twelve (12) months before we ask you to reauthorize personal information sales or sharing. However, you may opt back in to personal information sales or sharing at any time by visiting our website and sending us a message. We will only use personal information provided in an opt-out request to review and comply with the request.
To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting Do Not Sell or Share My Info and sending us a message.
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
To exercise the access, data portability, deletion and correction rights described above, you may submit a request to us through the request form. If you wish to opt-out, in addition to submitting the request form, you can use the optout box below and insert the email address and click submit.
Phone: 1-833-500-6629
Website: wso2.com/california-privacy
Address: 3080 Olcott Street, Suite C220, Santa Clara, CA 95054
If you want to opt out please insert your mail and submit:
If you have any other request please submit this form:
When you make a request, we will ask you to provide, at a minimum, your first name, last name, email address, and the type of request you are making. We require this information from you so that we can verify your identity or authority to make this request and confirm that the personal information relates to you. We cannot respond to your request if we are unable to verify your identity.
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
We will endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by email. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We reserve the right to amend this privacy notice at our discretion and at any time.
If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Phone: 1-833-500-6629
Website: wso2.com/contact
Address: 3080 Olcott Street, Suite C220, Santa Clara, CA 95054
Date last updated: June 29, 2023