RudderStack Privacy Policy

Last modified: April 3, 2025

PLEASE NOTE THAT WE WILL NEVER SELL YOUR PERSONAL INFORMATION OR DATA TO ANY THIRD PARTY.

I. Introduction

When you visit our website or use our services, you trust us with information (which we will sometimes refer to as data). We are committed to keeping that trust, and that starts with helping you to understand our privacy practices.

This privacy policy describes the types of information RudderStack, Inc. (“RudderStack”, "Company" or "We”) may collect from you, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy focuses on information that you may provide when you visit the website www.rudderstack.com (our "Website") or when you purchase the native customer data platform provided by RudderStack available on the Website (including any corresponding SDKs, APIs, documentation or software that may be made available by RudderStack (the “Platform”)). References to the Website in this privacy policy should be deemed to include the Platform.

Specifically, this policy applies to information we collect:

  • On the Website.
  • In email, text, and other electronic messages between you and this Website.
  • Through mobile and desktop applications you download from this Website, which provide dedicated non-browser-based interaction between you and this Website, including the Platform.

This policy does not apply to information collected by:

  • RudderStack offline or through any other means, including on any other website operated by Company or any third party; or
  • Any third party, including through any application or content that may link to or be accessible from or on the Website.
  • The Platform if purchased from Company via a separately executed agreement that incorporates a data processing agreement between you and the Company. If you are an end user of a RudderStack customer, this Privacy Notice does not apply to the services that our customers provide to their end users. Our customers have their own policies regarding the collection, use, and disclosure of the personal data of their end users. If you are an end user of one of our customers and want to learn about how that customer handles your personal data, we encourage you to read the customer’s privacy policy.

Please read this privacy policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your recourse is to not access or use our Website or our Platform. By accessing or using them, you agree to this privacy policy. This policy may change from time to time (see the Changes to Our Privacy Policy section). Your continued use after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

II. Children Under the Age of 16

Our Website is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this Website or on or through any of its features. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at privacy@rudderstack.com.

California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see Your California Privacy Rights for more information.

IIII. Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Website, including information:

  • By which you may be personally identified, such as name, postal address, e-mail address, telephone number, or any other identifier by which you may be contacted online or offline ("personal information");
  • That is about you but individually does not identify you; and/or
  • About your internet connection, the equipment you use to access our Website, and usage details.

We collect this information:

  • Directly from you when you provide it to us.
  • Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.

Information You Provide to Us.

The information we collect on or through our Website may include:

  • Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website, registering for online events, subscribing to our service, signing-up to receive a newsletter, completing surveys, or requesting further services. We may also ask you for information when you report a problem with our Website.
  • Records and copies of your correspondence (including email addresses) if you contact us.
  • Details of transactions you carry out through our Website and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website.
  • Your search queries on the Website.
  • In order to access and use the Platform you are required to register for an account with us. When you register for an account, you may provide personal information to us, including first and last name, company name, job title, work email address, country and/or state, phone number, and username and password.

Information We Collect Through Automatic Data Collection Technologies.

As you navigate through and interact with our Website, we may use automatic data collection technologies like cookies, web beacons, and similar technologies to collect certain information about your equipment, browsing actions, and patterns, including:

  • Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
  • Information about your computer and internet connection, including your IP address, operating system, and browser type.

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking) to make our ads more engaging and valuable to the website visitors.

The information we collect automatically is typically aggregated or statistical, and we use it to improve our Website and to deliver a better and more personalized service, including by enabling us to:

  • Understand how visitors engage with the Website by reporting on usage statistics that includes estimating our audience size and usage patterns.
  • Store information about your preferences, allowing us to customize and optimize our Website according to your individual interests and experience.
  • Speed up your searches.
  • Recognize you when you return to our Website.
  • Improve our advertising campaigns by measuring interactions with the ads we show.

We do not collect personal information automatically, but we may tie this information to personal information about you that we collect from other sources or you provide to us.

IV. How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

  • To operate our Website and present its contents to you, and to analyze the use of the Website in order to improve the quality and design, user experience, and performance of our Website.
  • To schedule a demonstration of our Platform and to provide you with other information, products, or services that you request from us.
  • To serve you with marketing or promotional materials in accordance with your consent.
  • To provide you with customer support services.
  • To fulfill any other purpose for which you provide it.
  • To provide you with notices about your account and/or subscription, including expiration and renewal notices.
  • To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
  • To notify you about changes to our Website or any products or services we offer or provide.
  • To allow you to participate in interactive features on our Website.
  • To (i) enforce our agreements and policies, including our Terms of Service or Master Services Agreement, (ii) protecting or defending our legal rights; (iii) protecting your vital interests or the vital interests of another natural person; or (iv) complying with a legal obligation.
  • In any other way we may describe when you provide the information.
  • For any other purpose stated when collecting your personal information, in which case we will not collect or use additional categories of personal information for materially different, unrelated, or incompatible purposes without providing you notice and/or without your consent.

V. To Whom And For What Purpose We Disclose Your Information

We may disclose aggregated or statistical information, and information that does not identify any individual, without restriction. We may disclose personal information that we collect or you provide as described in this privacy policy to the following:

  • To our subsidiaries and affiliates.
  • To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
  • To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of RudderStack's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by RudderStack about our Website users is among the assets transferred.
  • To fulfill the purpose for which you provide such information.
  • For any other purpose disclosed by us when you provide the information.
  • To any person or entity with your consent.
  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
  • To enforce or apply our Terms of Service and other agreements, including for billing and collection purposes.
  • If we believe disclosure is necessary to protect the rights, property, or safety of RudderStack or third parties.

VI. Your Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

  • Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.
  • Targeted Advertising. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers' target-audience preferences, you can opt out by:
  • Marketing or promotional emails: If we have sent you a marketing or promotional email, you may unsubscribe to receive future emails via the unsubscribe link in that email. This does not apply to information provided to us as a result of a purchase, product service experience or other transactions. You cannot unsubscribe from non-promotional and transactional communications.
  • If we collected and processed your personal information with your consent, where required by law, you can withdraw your consent at any time by emailing privacy@rudderstack.com.
  • Where required by law, you may also instruct us to restrict the processing of your personal information
  • Depending on your country or state of residence, you may have the right to opt out of the sale of personal information, certain sharing of personal information with third party ad partners, and the right to limit the use or disclosure of sensitive personal information. We do not sell your personal information under any circumstances, and do not use or disclose sensitive personal information for purposes other than those permitted by the law.

We do not control third parties' collection or use of your information to serve interest-based advertising. However these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.

VII. Accessing, Correcting and Deleting Your Information; Your California Privacy Rights

You can review and change your personal information by logging into the Website and visiting your account profile page. You may also request a copy of your personal information that you have provided to us directly. We will provide your personal information in a commonly used electronic form.

If you are a California resident, you may request personal information we have about you. If you make this request, we will return to you:

  • The categories of personal information (as defined by the CCPA) we have collected about you.
  • The categories of sources from which we collect your personal information.
  • The business or commercial purpose for collecting or selling your personal information.
  • The categories of third parties with whom we share personal information.
  • The specific pieces of personal information we have collected about you.
  • A list of categories of personal information that we have sold, along with the category of any other company we sold it to. If we have not sold your personal information, we will inform you of that fact.
  • A list of categories of personal information that we have disclosed for a business purpose, along with the category of any other company we shared it with.

You may also request that we correct or delete any personal information that you have provided to us, although in some cases we cannot delete your personal information except by deleting your user account. In some cases, deletion may be accomplished through deidentification of the information. If you choose to delete your personal information, you may not be able to use certain functions that require your personal information to operate. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Please note to exercise the rights set forth above we may ask you to: (1) provide sufficient information to allow us to verify that you are the person about whom we have collected personal information, and (2) describe the request in sufficient detail to allow us to understand, evaluate, and respond to it. We may not respond to requests that do not meet these criteria.

We will not discriminate against you for exercising your rights under the applicable data privacy laws or regulations. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the applicable data privacy laws or regulations.

To exercise your data protection rights described above, please send a request to privacy@rudderstack.com.

VIII. Your Data Protection Rights Under The GDPR

If you are a resident of the European Economic Area, you have certain data protection rights. RudderStack aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data (as defined below). If you wish to be informed about what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

  • The right to access, update, or delete Personal Data: Whenever possible, you can access, update, or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
  • The right of rectification: You have the right to have your Personal Data rectified if that data is inaccurate or incomplete.
  • The right to object: You have the right to object to our processing of your Personal Data.
  • The right of restriction: You have the right to request that we restrict the processing of your Personal Data.
  • The right to data portability: You have the right to be provided with a copy of Personal Data in a structured, machine-readable, and commonly used format.
  • The right to withdraw consent: You also have the right to withdraw your consent at any time RudderStack relied on your consent to process your Personal Data.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more data, please contact your local data protection authority in the European Economic Area. For contact details of your local Data Protection Authority, please see here.

For this section, we use the terms “Personal Data” and “processing” as they are defined in the GDPR, but “Personal Data” generally means data that can be used to individually identify a person, and “processing” generally covers actions that can be performed in connection with data such as collection, use, storage and disclosure. RudderStack may act as either a Data Processor or Data Controller (as defined by the GDPR). In general, RudderStack will be the controller of your Personal Data processed in connection with the Website. Note that we may also process Personal Data of our customers’ end users or employees in connection with our provision of the Platform to customers, in which cases we are the processor of Personal Data. If we are acting as the Data Processor of your Personal Data rather than the Data Controller, please contact the Data Controller first to address your rights with respect to such data.

If there are any conflicts between this section and any other provision of this Privacy Policy, the policy or portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following applies to you, please contact us at privacy@rudderstack.com.

IX. Legal Basis for Processing Personal Data Under The GDPR

If you are from the European Economic Area (“EEA”), RudderStack’s legal basis for collecting and using the personal data described in this Privacy Policy depends on the Personal Data (as defined by the GDPR) we collect and the specific context in which we collect it.

RudderStack may process your Personal Data because:

  • We need to perform obligations in a contract with you.
  • You have given us permission to do so.
  • The processing is in our legitimate interests and it is not overridden by your rights.
  • To comply with the law

Contractual Necessity: We process the following categories of Personal Data as a matter of “contractual necessity”, meaning that we need to process the data to perform under our Terms of Service or other contract with you, which enables us to provide you with the Services. When we process data due to contractual necessity, failure to provide such Personal Data will result in your inability to use some or all portions of the Services that require such data.

  • First and last name
  • Email address
  • Telephone number
  • Transaction data (e.g. transaction amount, date and time such transaction occurred)
  • Log data (e.g. access times, and software data)

Consent: In some cases, we may process Personal Data based on the consent you expressly grant to us at the time we collect such data. When we process Personal Data based on your consent, it will be expressly indicated to you at the point and time of collection.

Legitimate Interest: We process the following categories of Personal Data when we believe it furthers the legitimate interest of us or third parties.

  • First and last name
  • Email address
  • Telephone number
  • IP address
  • Web browser data
  • Page view statistics
  • Browsing history
  • Usage data
  • Transaction data (e.g. transaction amount, date and time such transaction occurred)
  • Log data (e.g. access times, and software data)

Examples of these legitimate interests include:

  • Operation and improvement of our business, products and services
  • Marketing of our products and services
  • Provision of customer support
  • Protection from fraud or security threats
  • Compliance with legal obligations

Other Processing Grounds: From time to time we may also need to process Personal Data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest.

X. Data Retention

Personal information that RudderStack collects and processes for the purposes identified in this Privacy Policy are not kept by RudderStack for longer than is necessary for the specific purpose identified in this Privacy Policy, unless required to comply with our legal obligations (for example, if we are required to retain your personal information to comply with applicable laws or regulations), resolve disputes, and enforce our legal agreements and policies. When we no longer have a legitimate business need to retain your personal information, we will either delete or anonymize it.

XI. International Transfers

Your personal information may be processed outside your jurisdiction, and in countries that are not subject to an adequacy decision by the European Commission or your local legislature and/or regulator, and that may not provide for the same level of data protection as your jurisdiction, such as the European Economic Area.

We are based in the United States and the information we collect is governed by U.S. law. By accessing or using our Website or otherwise providing information to us, you consent to the processing and transfer of information in and to the United States and other countries, where you might not have the same rights and protections as you do under local law.

XII. Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Any payment transactions will be encrypted using SSL technology.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Data security in connection with the Platform is described here.

XIII. Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users' personal information, we will notify you through a notice on the Website home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes.

XIV. Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at privacy@rudderstack.com. To register a data privacy complaint or concern, please visit https://www.jamsadr.com/submit/.