Last Updated: Feb 14, 2024

Prior versions of this Additional California Privacy Disclosures are available here.

Scope of Disclosures

These Additional California Privacy Disclosures (the “CA Disclosures”) supplement the information contained in our Privacy Notice and apply solely to individual residents of the State of California (“consumers” or “you”).

These CA Disclosures provide additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California within the scope of the California Consumer Privacy Act of 2018, as amended and/or supplemented (“CCPA”). For a detailed description of how we collect, use, disclose, and otherwise process personal information in connection with our services, please see our Privacy Notice.

Unless otherwise expressly stated, all terms in these CA Disclosures have the same meaning as defined in our Privacy Notice or as otherwise defined in the CCPA.

Personal Information Disclosures

When we use the term “personal information” in these CA Disclosures, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include information that is made publicly available, that is deidentified or aggregated such that it can no longer reasonably be used to infer information about, or otherwise be linked to, you, or that is otherwise excluded from the CCPA’s scope.

These CA Disclosures also do not apply to information relating to our employees, contractors, applicants and other personnel. In addition, we often act as a “service provider,” as defined in the CCPA, processing personal information on behalf of our customers, and these CA Disclosures do not apply to the personal information processing we perform as a service provider.

Personal Information

As described in more detail in the Our Collection of Personal Information section in our Privacy Notice, we collect the following categories of personal information:

  • Identifiers, such as full name and IP address
  • California Customer Records (Cal. Civ. Code § 1798.80(e)), such as mailing address, email address, phone number and state and country of residence
  • Commercial Information, such as product or service interests and orders
  • Internet/Network Information, such as log file data (including operating system and browser type) and clickstream data (including your usage and activity on our web sites and online services)
  • Geolocation Data, such as your general geographic location based on your IP address or more precise location when accessing our services through a mobile device
  • Sensory Information, such as the sound of your voice from calls with us (where permitted by law).
  • Professional/Employment Information, such as your title, company name, professional background and the nature of your relationship with us
  • Other Personal Information, such as inquiries, requests or comments you choose to send us
  • Inferences, such as predictions about which services may be of interest to you and your employer

We collect this information directly from you, from your browser or device when you interact with our services, from your employer, from information providers and from other publicly available sources. For more information about the personal information we collect and how we collect it, please refer to the Our Collection of Personal Information section of our Privacy Notice.

We collect personal information from and about you for a variety of purposes. For example, we use personal information to communicate with customers about our services, to provide customers with our services, and to otherwise operate our business. For more information about our use of personal information, please refer to the Our Use of Personal Information section of our Privacy Notice.

Sensitive Information

The following personal information elements we collect may be classified as “sensitive” under certain privacy laws (“sensitive information”): precise geolocation data.

We use this sensitive information for the purposes set forth in the Our Use of Personal Information section of our Privacy Notice.

Deidentified Information

We may at times receive, or process personal information to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information expect as required or permitted by law.

Disclosure, Sale, and Sharing of Personal Information

As further described in the Our Disclosure of Personal Information section of the Privacy Notice, we may disclose all of the personal information identified above to third parties for business purposes. The categories of third parties to whom we disclose personal information for these purposes include our affiliates, businesses you represent, data analytics providers, marketing partners, service providers, and certain other third parties where you have provided your consent or direction, we are engaging in a business transaction or reorganization, or we are addressing our legal obligations and rights.

As is common practice among companies that operate online, we also allow certain third-party providers to use cookies and related technologies to collect Identifiers (such as IP address), Commercial Information (such as products sold or considered), Internet/Network Information (such as analytics data), and Inferences (generated from your interactions with us) directly through our websites and other online services for purposes of analyzing and optimizing our services, delivering ads, providing content and ads that are more relevant, measuring statistics and the success of ad campaigns, and detecting and reporting fraud. Some of these practices may constitute the sale of personal information or the use of personal information for the purpose of displaying advertisements that are selected based on personal information obtained or inferred over time from an individual’s activities across businesses or distinctly-branded websites, applications, or other services (otherwise known as “targeted advertising” or “cross-context behavioral advertising”). Subject to certain legal limitations and exceptions, you may be able to limit or opt-out of the sale of personal information or the sharing of personal information for purposes of targeted advertising (as described in the Your California Privacy Choices section below).

We do not otherwise sell personal information or share personal information for purposes of targeted advertising. We also do not sell the personal information of individuals we know to be less than 16 years of age or share such information for targeted advertising purposes. In addition, we do not sell sensitive information or share sensitive information for purposes of targeted advertising, nor use sensitive information for the purpose of inferring characteristics about a consumer in a manner that would require our offering of the right to limit the use of such information.

Retention of Personal Information

We retain personal information only for as long as is reasonably necessary to fulfil the purpose for which it was collected.  However, if necessary, we may retain personal information for longer periods of time, until set retention periods and deadlines expire, for instance where we are required to do so in accordance with legal, tax, or accounting requirements set by a legislature, regulator, or other government authority.

To determine the appropriate duration of the retention of personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, and whether we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.

Your California Privacy Choices

As a California resident, you may be able to exercise the following rights (subject to certain limitations at law):

The Right to KnowThe right to confirm whether we are processing personal information about you and to obtain certain personalized details about the personal information we have collected about you, including:

  • The categories of personal information collected;
  • The categories of sources of the personal information;
  • The purposes for which the personal information was collected;
  • The categories of personal information disclosed to third parties (if any) and the categories of recipients to whom this personal information was disclosed;
  • The categories of personal information shared for cross-context behavioral advertising purposes (or, “targeted advertising”) (if any), and the categories of recipients to whom the personal information was disclosed for those purposes; and
  • The categories of personal information sold (if any), and the categories of third parties to whom the personal information was sold.
The Right to Access & PortabilityThe right to obtain access to the personal information we have collected about you and, where required by law, the right to obtain a copy of the personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
The Right to CorrectionThe right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
The Right to Opt-Out of Targeted AdvertisingThe right to direct us not to share personal information for certain cross-context behavioral or targeted advertising purposes.
The Right to Opt-Out of SalesThe right to direct us not to sell personal information we have collected about you to third parties.
The Right to Request DeletionThe right to request the deletion of personal information that we have collected from you.

You also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, please note that if the exercise of these rights limits our ability to process personal information, we may no longer be able to engage with you in the same manner.

Submitting Privacy Requests

To Exercise the Right to Know, Access, Portability, Correction, or Deletion

To submit a request to exercise the right to know, access, portability, correction and/or deletion, please submit a request specifying the right you wish to exercise by:

  • Submitting this form via our website or
  • Calling us at 1-844-416-1812.

Before processing your request, we will need to verify your identity and confirm you are a resident of California. In order to verify your identity, we will generally either require the successful login to your account or the matching of sufficient information you provide us to the information we maintain about you in our systems. Although we try to limit the personal information collected in connection with a request to that personal information identified on our webform, certain requests may require us to obtain additional personal information from you. In certain circumstances, we may decline or limit a request particularly where we are unable to verify your identity or confirm you are a resident of California.

To Exercise Your Right to Opt Out of Personal Information Sales or Sharing for Targeted Advertising Purposes

To submit a request to exercise the right to opt out of personal information sales or sharing for targeted advertising purposes, please submit a request specifying the right you wish to exercise by:

  • For Non-Cookie-Based Opt-Outs:
    • Submitting this form via our website or
    • Calling us at 1-844-416-1812.
  • For Cookie-Based Opt-Outs: To exercise your right to opt-out as it relates to the use of cookies and related technologies that involve the sale of personal data or the use of personal data for targeted advertising purposes, please click the green cookie icon in the bottom left-hand corner of your screen and adjust your cookie preferences. Please note this opt-out tool is device and browser specific, so you will need to change your preferences on each device and browser you use to interact with the specific website you are visiting. In addition, you can also opt-out of cookie-based sales by businesses that participate in the Digital Advertising Alliance’s CCPA Opt-Out Tool by visiting www.privacyrights.info. Lastly, you may follow the other steps set forth in our Cookie Notice to further exercise control over cookies and related technologies.

Once you make an opt-out request, you may change your mind and opt back in at any time by contacting us at privacy@yugabyte.com.

Authorized Agents

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of either (i) valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identify in connection with the request.

Financial Incentives

We offer prospective customers free and open access to YugabyteDB and free offerings of our other products and services, including a free 30-day trial for the YugabyteDB Anywhere and a free version of YugabyteDB Managed. While prospective customers can download and run YugabyteDB without providing us with any personal information, prospective customers must provide their first and last name, company name and company email to a create an account and qualify for free offerings of YugabyteDB Anywhere and YugabyteDB Managed. Prospective customers providing an email address to take advantage of our free offerings will be automatically signed up to receive email updates from YugabyteDB. We consider the value of these free offerings to be reasonably related to the value of the personal information we receive and otherwise process in connection with these offerings, based on our reasonable but sole determination and taking into consideration the expenses related to facilitating the program or offering.

The terms applicable to these programs can be found here. You can request to opt in to our free offerings by following the instructions on our YugabyteDB download page, completing the YugabyteDB Anywhere free trial form available toward the bottom of the page here, creating a free YugabyteDB Managed account here, or by contacting our sales team here. You may withdraw from our free products and services at any time by contacting our sales team at sales@yugabyte.com. You may also opt out of receiving updates from YugabyteDB by following any available opt-out instructions in the communications you receive, or by contacting us at privacy@yugabyte.com. Please note we may continue to send users non-marketing communications even after they opt-out.

Updates to These CA Disclosures

We will update these CA Disclosures from time to time. When we make changes to these CA Disclosures, we will change the “Last Updated” date at the beginning of these CA Disclosures. If we make material changes to these CA Disclosures, we will notify you by email to your registered email address, by prominent posting on our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided in the notification.