WSO2 Cloud Services - Privacy Policy

At WSO2, we recognize that privacy is important. This privacy policy applies to the site and services offered by WSO2 at This document provides comprehensive details on how we collect, use, share, and secure the personal information you provide. “You” or “Your” means the person visiting the WSO2 site or using any services on it. “We” “us” and “our” means WSO2 Inc., or if you are within the U.K/EU/EEA or Switzerland, WSO2 (UK) Limited.


When you register on our site, sign up for a trial or a service or download a product we ask that you submit some or all of the following information:

  • Your name
  • Email address
  • Phone number
  • Country
  • State
  • Your payment details ( if you are paying for a service)

You may, however, visit our site anonymously, without providing any of the above information. However certain services on our site - such as paid services like WSO2 Cloud may require that these details be entered on a mandatory basis. The site may also ask for your credit card details in order to process a payment for the event or service you’re signing up for. This is because these details are essential for us to be able to provide you with such services.

We also collect certain standard information that your browser sends to every website you visit, such as your IP address, browser type and language, access times, and referring website addresses.


The information we collect from you may be used in one of the following ways:

  • To perform the services requested (for instance if you’ve filled in a contact us form asking to speak to an account manager, we use your information to get in touch with you).
  • To personalize your experience (your information helps us to better respond to your individual needs by sending you targeted information that may be relevant to you).
  • To improve our website (we continually strive to improve our website offerings based on the type of content our users click on or download).
  • To improve customer service (your information helps us to more effectively respond to your customer service requests and support needs).
  • To conduct analysis on how effective our marketing campaigns are, how our products and services are used or downloaded, and to track lead generation for our sales process.
  • To process transactions - your information, whether public or private, will not be sold, exchanged, transferred or given to any other entity for any reason whatsoever without your consent, other than for the sole purpose of delivering the purchased service requested by you.
  • To create your online profile which we create for every user who registers on our site or for a service.
  • To send marketing material, event invitations, and updates - if you indicate that you are interested in certain areas or subjects when you give us your contact details, we will send you marketing material and/or event and workshop invitations related to those areas. The email address you provide may also be used to send you important updates related to the site or the services you use.
  • To administer a contest, survey or other site features.
  • We track and analyze your actions on our website such as navigation, number of visits, downloads, and search items to gain a better understanding of our visitors and their movements through the site. Please see our cookie policy on how we use and store cookies.


We do not sell, trade or otherwise share your information with outside parties. However, we do share your information with our subsidiaries, affiliates, service providers, and partners who assist us in operating our website, conducting our business or servicing you.

Your information may sometimes be visible to our service providers who help us run our website and services. They are only authorized to use information that is strictly relevant for them to perform their tasks, if applicable, and we ensure that they are under obligations of confidentiality and security to us so that your data is secure. Currently we use Amazon Web Services and Google as third party service providers. Their websites contain information on how each of these service-providers secures your data. If you reside in the EU/UK then special considerations will apply to you under the GDPR. Please do visit for further information on AWS and for further information on Google.

Where payments are required to be made on our website, we use a third party service provider to manage credit card processing. This provider is not permitted to store, retain or use billing information other than for the limited purpose of credit card processing on behalf of WSO2.

We may share your data with our subsidiaries or affiliates within our corporate group. WSO2’s parent company is WSO2 Inc. and is located in the United States of America. Our affiliates are WSO2 UK Limited (located in the United Kingdom), WSO2 Lanka (Private) Limited (located in Sri Lanka) and WSO2 Brasil Tecnologia E Software Ltda (located in Brazil). We share information within this group because these entities also carry out support, marketing, account management, and technical operations for WSO2 that are relevant to the provision of the website and services.

We may also release your information when we believe release is appropriate to comply with the law, enforce our privacy policy or protect ours or others’ rights, property or safety.


We will only collect and process personal data about you where we have lawful bases. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you), and legitimate interests (such as to protect you, us, or others from security threats, comply with laws that apply to us and to enable or administer our business through consolidated reporting, customer service etc.)

Where we rely on your consent to process personal data, you have the right to withdraw or decline your consent at any time and where we rely on legitimate interests, you have the right to object. If you have any questions about the lawful bases upon which we collect and use your personal data or wish to withdraw consent or object, please contact our Data Protection Officer at [email protected]


We implement security safeguards designed to protect your data, such as HTTPS. We encrypt all data at rest and all data at transition.We regularly monitor our systems for possible vulnerabilities and attacks and conduct testing. However, we cannot warrant the security of any information that you send us. There is no guarantee that data may not be accessed, disclosed, altered or destroyed by breach of any of our physical, technical or managerial safeguards.


We may retain your information for a period of time consistent with the original purpose of collection. For instance, we may retain your information during the time in which you have an account to use our website or services. We also may retain your information during the period of time needed for WSO2 to pursue our legitimate business interests, conduct audits, comply with our legal obligations, resolve disputes, and enforce our agreements. At the end of these periods, we ensure that your data is deleted securely using industry standard methodology.

WSO2 acknowledges your right to access your data. If information pertaining to you as an individual has been submitted to us then you have the right to access, correct or edit your data. When you submit your information on our website you will receive an email with your website login credentials. You can use these credentials to login to the user portal on our website and then review and edit the information we have about you at any time. If you are an existing user of site or our services please go to and follow the steps. If you wish, we can provide all the personal information on our records to you or to someone you nominate in a portable format as well. Our contact details are provided at the bottom of the page or you can reach out to us as [email protected]. All you have to do is to request, and we are happy to help.

You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).

You may also choose to delete your data from our website at any time you choose, and unsubscribe from any WSO2 mailing lists you are on. You can delete your information by requesting us to do us on your account. You can unsubscribe from our emails by clicking on the unsubscribe link which is at the bottom of every marketing email we send. You can also contact us on the email address(es) provided at the bottom of this notice, if you would like us to do any of the above on your behalf. Please note that deleting your data may affect the provision of some services.

We may retain your personal data even after you have ceased using our services or sent us a request to unsubscribe or delete your data, only if reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, conduct analysis or fulfill your request to "unsubscribe" from further messages from us.


At our discretion, we may include or offer third party products or services on our site. These third party sites have separate and independent privacy policies. We have no responsibility or liability for the content and activities of these linked sites. We encourage you to review the privacy statements of those websites to understand how your data is secured by them. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.


This privacy policy applies only to information collected through our website and not to information collected offline.

Please also visit our Terms of Use section relating to use, disclaimers, indemnities, and limitations of liability governing the use of our site and services at


We reserve the right to amend this privacy policy at any time. We will not send individual email notifications on the updates. Any amendments will be posted on this page. You are therefore encouraged to visit this page periodically.

By using our site, you consent to our privacy policy and any revisions thereto. If you do not agree with our privacy policy or any changes we make to it, you may delete your profile.


For further information about our privacy policy or any concerns or complaints, please contact our Data Protection Officer at [email protected].

For EU/EEA/Switzerland residents:

If you are located within the European Union, the European Economic Area or Switzerland, WSO2 UK Limited will be the controller of your personal data provided to, or collected by or for, or processed in connection with our services.

If you have any issues with regard to your data security on our website, then in addition to informing us, you also have the right to write directly to the independent data protection monitoring organization in your country. Within the UK, this is the Information Commissioner's Office (ICO). The ICO is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. Please do email our data protection officer at [email protected] if you have any issues, concerns or questions regarding your personal data and we are happy to help.

Effective May 22, 2018