Version comparison

Okta Privacy Policy

Okta · May 9, 2026 02:58 UTC vs July 3, 2026 01:14 UTC
Old version
May 9, 2026 02:58 UTC
e8ae84ec531788d38c995cfabed1f09624fef2c5b91a7644390588a101fb8d5e
CA-V-002368
New version
July 3, 2026 01:14 UTC
3d8e1144c1d0e70a3bacc7bfe32c2a336d84af4a8098e03c6ec43489f9b921a2
CA-V-004453
Share 𝕏 Share in Share
Change Summary
Okta's updated privacy policy (July 3, 2026) contains 263 modified sentences and makes two substantive clarifications. First, the policy now explicitly states that 'not Okta' controls whether customers provide you access to Okta's identity cloud service, clarifying the customer's role as the primary decision-maker. Second, the policy adds an example clarifying that processing related to obtaining Okta Certifications from the Learning Hub occurs in Okta's role as a processor on behalf of the customer. The majority of changes appear to be minor wording adjustments and formatting corrections. These updates clarify Okta's data controller and processor roles without materially expanding data collection, sharing, or retention authority.
low severity
3 Sentences added
2 Sentences removed
263 Sentences modified
373 Sentences before
374 Sentences after
Added
Removed
Modified
BeforeAfter
2This Okta Privacy Policy (“Privacy Policy”) details our privacy practices for the activities described in this Privacy Policy.2This Okta Privacy Policy ("Privacy Policy") details our privacy practices for the activities described in this Privacy Policy.
3Please take the time to read this Privacy Policy carefully in order to understand how we collect, share, and otherwise process information relating to individuals (“Personal Data”), and to learn about your rights and choices regarding our processing of your Personal Data.3Please take the time to read this Privacy Policy carefully in order to understand how we collect, share, and otherwise process information relating to individuals ("Personal Data"), and to learn about your rights and choices regarding our processing of your Personal Data.
5In this Privacy Policy, “Okta,” “we,” “our,” and “us” each mean Okta, Inc. and the applicable Okta affiliate(s) involved in the processing activity.5In this Privacy Policy, "Okta," "we," "our," and "us" each mean Okta, Inc. and the applicable Okta affiliate(s) involved in the processing activity.
8Any references to Customer Identity Cloud are inclusive of Auth0 by Okta.8Any references to Customer Identity Cloud are inclusive of Auth0 by Okta .
11Please note that this Privacy Policy does not apply to the extent that we process Personal Data in the role of a processor (or a comparable role such as a “service provider” in certain jurisdictions) on behalf of our customers, including where we offer to our customers various cloud products and services, through which our customers (and/or their affiliates) connect their own websites and applications to our hosted platform (including our Auth0 by Okta-branded services), sell or offer their own products and services, send electronic communications to other individuals, or otherwise collect, use, share or process Personal Data via our cloud products and services.11Please note that this Privacy Policy does not apply to the extent that we process Per sonal Data in the role of a processor (or a comparable role such as a "service provider" in certain jurisdictions) on behalf of our customers, including where we offer to our customers various cloud products and services, through which our customers (and/or their affiliates) connect their own websites and applications to our hosted platform (including our Auth0 by Okta-branded services), sell or offer their own products and services, send electronic communications to other individuals, or otherwise collect, use, share or process Personal Data via our cloud products and services .
12Each of our customers (each an “Okta customer”) controls whether they provide you with an account or other access to the Okta identity cloud service through their subscription, and if they provide you with such accounts or other access through their subscription.12Each of our customers (each an "Okta customer"), not Okta, controls whether they provide you with an account or other access to the Okta identity cloud service through their subscription, and if they provide you with such accounts or other access through their subscription.
15Use of this content by Okta is governed by agreements between Okta and the Okta customer.15Use of this content by Okta is governed by agreements between Okta and the Okta customer .
16For detailed privacy information applicable to situations where an Okta customer (and/or a customer affiliate) who uses Okta’s cloud products and services is the controller, please reach out to the respective Okta customer directly.16For detailed privacy information applicable to situations where an Okta customer (and/or a customer affiliate) who uses Okta's cloud products and services is the controller, please reach out to the respective Okta customer directly.
17We are not responsible for the privacy or data security practices of Okta’s customers, which may differ from those set forth in this Privacy Policy.17We are not responsible for the privacy or data security practices of Okta's customers, which may differ from those set forth in this Privacy Policy.
18If not stated otherwise either in this Privacy Policy or in a separate disclosure, we process such Personal Data in the role of a processor or service provider on behalf of Okta’s customer (and/or its affiliates), who is the responsible controller of the applicable Personal Data.18If not stated otherwise either in this Privacy Policy or in a separate disclosure, we process such Personal Data in the role of a processor or service provider on behalf of Okta's customer (and/or its affiliates), who is the responsible controller of the applicable Personal Data (such as when obtaining Okta Certifications from the Learning Hub) .
20Because we may only access a customer’s data upon instruction from that customer, if you wish to make your request directly to us, please provide to us the name of the Okta customer who submitted your Personal Data to us.20Because we may only access a customer's data upon instruction from that customer, if you wish to make your request directly to us, please provide to us the name of the Okta customer who submitted your Personal Data to us.
22Additional information and safeguards regarding Okta’s data protection obligations (including for international transfers) to our customers are set forth in our subscription agreement form and related documents, including our Trust & Compliance Documentation, all of which are available online at https://www.okta.com/agreements .22Additional information and safeguards regarding Okta's data protection obligations (including for international transfers) to our customers are set forth in our subscription agreement form and related documents, including our Trust & Compliance Documentation, all of which are available online at https://www.okta.com/agreements .
24Personal Data We Collect and Data Sources Covered Data Processing Activities This Privacy Policy applies to the processing of Personal Data that we collect in the following ways, as detailed in this section.24Personal Data We Collect and Data Sources Covered Data Processing Activities COVERED DATA PROCESSING ACTIVITIES This Privacy Policy applies to the processing of Personal Data that we collect in the following ways, as detailed in this section.
25We collect information about you when you provide it to us, when you interact with our products and services, websites and electronic systems, when you attend events and visit our offices, and when other sources provide it to us, as further described below.25We collect information about you when you provide it to us, when you interact with our products and services, websites and electronic systems, when you attend events and visit our offices, and when other sources provide it to us, as further described below .
26Information you provide to us Based on our current practices (and including our practices over the last 12 months), we collect the following categories of information about you: Contact and Professional Data.26INFORMATION YOU PROVIDE TO US Based on our current practices (and including our practices over the last 12 months), we collect the following categories of information about you : Contact and Professional Data.
27We collect contact and/or professional data about you in person, through communications, including communications from you or your colleagues, and through our websites.27We collect contact and/or professional data about you in person, through communications, including communications from you or your colleagues, and through our websites .
28For example, you provide your contact and professional information to us when you sign up to learn more about Okta’s products and services, download content, register for an event, and visit our offices.28For example, you provide your contact and professional information to us when you sign up to learn more about Okta's products and services, download content, register for an event, and visit our offices .
29If you attend an event, we may also receive contact and professional details about you when you choose to scan your attendee badge or by providing a business card or other method(s) whereby you share Personal Data with us.29If you attend an ev ent, we may also receive contact and professional details about you when you choose to scan your attendee badge or by providing a business card or other method(s) whereby you share Personal Data with us .
30Typically, contact data includes your name and contact methods, such as telephone number, email address, and office or other mailing address, and professional data includes details such as the organization you are affiliated with, your job title, and industry.30Typically, contact data includes your name and contact methods, such as telephone number, email address, and office or other mailing address, and professional data includes details such as the organization you are affiliated with, your job title, and industry .
32When you sign up for an account to try Okta, subscribe to any Okta service via Okta or another entity (such as a marketplace or authorized reseller), have the ability to submit a support request, or are designated an administrator of any part of the Okta Service, then certain information about you is provided to us (“Administrator Data”).32When you sign up for an account to try Okta, subscribe to any Okta service via Okta or another entity (such as a marketplace or authorized reseller), have the ability to submit a support request, or are designated an administrator of any part of the Okta Service, then certain information about you is provided to us ("Administrator Data") .
33Administrator Data usually includes your name, email address, phone number, address, billing information, business contact information, credentials information (including Okta training and credentials), subscription and service configurations you select, and other details you may provide to us about you or include in your profiles in Okta communities and other support portals.33Administrator Data usually includes your name, email address, phone number, address, billing information, business contact information, credentials information (including Okta training and credentials), subscription and service configurations you select, and other details you may provide to us about you or include in your profiles in Okta communities and other support portals .
34We may also receive any Personal Data you share via tooling used to provide support, e.g., videoconferencing or other communication methods you participate in.34We may also receive any Personal Data you share via tooling used to provide support, e.g., videoconferencing or other communication methods you participate in .
35Okta may receive Personal Data and Administrator Data in connection with an administrator's request for support for the Okta service.35Okta may receive Personal Data and Administrator Data in connection with an administrator's request for support for the Okta service .
37We may also collect various types of biographical, community, and support Personal Data from you via our help center and community support forums.37We may also collect various types of biographical, community, and support Personal Data from you via our help c enter and community support forums .
38For example, if you register for an online community that we host, we may ask you to provide a username, photo and/or biographical information, such as your occupation, organization name and areas of expertise.38For example, if you register for an online community that we host, we may ask you to provide a username, photo and/or biographical information, such as your occupation, organization name and areas of expertise .
39Additionally, you may provide Personal Data to us when you create user-generated content (for example, by posting in a forum), provide Okta with feedback, or when you participate in interactive features, trainings, online surveys, contests, promotions, sweepstakes, activities, or events.39Additionally, you may provide Personal Data to us when you create user-generated content (for example, by posting in a forum), provide Okta with feedback, or when you participate in interactive features, trainings, online surveys, contests, promotions, sweepstakes, activities, or events .
41We collect contact and professional information, including your resume with educational and work background, that you provide when you apply for a job with Okta.41We collect contact and professional information, including your resume with educational and work background, that you provide when y ou apply for a job with Okta .
42We may also collect sensitive information, like your Social Security Number or other government identifier, criminal history information, racial or ethnic origin, or other such Personal Data that you provide in connection with your job application.42We may also collect sensitive information, like your Social Security Number or other government identifier, criminal history information, racial or ethnic origin, or other such Personal Data that you provide in connection with your job application .
44We may receive contract details (like signatures) from you or your organization and use payment processing services to collect payment and billing information, which may contain Personal Data such as billing name, billing address and payment card details, in connection with some of our products and services.44We may receive contract details (like signatures) from you or your organization and use payment processing services to collect payment and billing information, which may contain Personal Data such as billing name, billing address and payment card details, in connection with some of our products and services .
46If you attend an Okta in-person or virtual event or agree to be recorded in a telephone or video meeting, we may record some or all of that event or meeting.46If you attend an Okta in-person or virtual event or agree to be recorded in a telephone or video meeting, we may record some or all of that event or meeting .
47For events, we may document the event in various ways, such as by taking photos at the event, interviewing you at the event, or recording your participation in a live question-and-answer or other interactive session.47For events, we may document the event in various ways, such as by taking photos at the event, interviewing you at the event, or recording your participation in a live question-and-answer or other interactive session .
48We use this information for business and marketing purposes to better inform the public about Okta, its events, and provide testimonials about our products and services, to the extent permitted by applicable law.48We use this information for business and marketing purposes to better inform the public about Okta, its events, and provide testimonials about our products and services, to the extent permitted by applicable law .
50If you use consumer products made available by Okta (“Okta Consumer Products”), then we may receive various types of information and content from you that you choose to share, including contact information (such as your first and last name, email address, and phone number), additional multi-factor authentication factor setup details, content you upload (such as identification or other documentation), and information regarding the websites and applications that you visit and use through Okta Consumer Products for authentication.50If you use consumer products made available by Okta ("Okta Consumer Products"), then we may receive various types of information and content from you that you choose to share, including contact information (such as your first and last name, email address, and phone number), additional multi-factor authentication factor setup details, content you upload (such as identification or other documentation), and information regarding the websites and applications that you visit and use through Okta Consumer Products for authentication .
51We also receive Ancillary Data, including device data, Usage Data, and metadata, as described below for the purposes described below.51We also receive Ancillary Data, including device data, Usage Data, and metadata, as described below for the purposes described below .
52Depending on your jurisdiction, if we collect sensitive data from you, we will do so by providing you with additional notice or confirming your consent upon collection, if required by applicable law.52Depending on your jurisdiction, if we collect sensitive data from you, we will do so by providing you with additional notice or confirming your consent upon collection, if required by applicable law .
53Personal Data We Collect From Other Sources In the course of doing business (and over the 12 months preceding the effective date of this Privacy Policy), we receive Personal Data and other information from other third parties for our business or commercial purposes.53PERSONAL DATA WE COLLECT FROM OTHER SOURCES In the course of doing business (and over the 12 months preceding the effective date of this Privacy Policy), we receive Personal Data and other information from other third parties for our business or commercial purposes .
54This information varies and typically falls into a few categories: Business contact information (such as name, job title, business email, phone number, and address), social profile (such as LinkedIn or XING) including other details about your organization for sales and marketing purposes, to better inform you about Okta products and services; Third-party platform usernames and identifying information; Details about you as a job candidate (which may include your name, resume, educational and work history, criminal history information, other Personal Data in order to confirm your identity, and feedback) as permitted under law; and Data used for security purposes to protect our products and services.54This information varies and typically falls into a few categories : Business contact information (such as name, job title, business email, phone number, and address), social profile (such as LinkedIn or XING) including other details about your organization for sales and marketing purposes, to better inform you about Okta products and services ; Third-party platform usernames and identifying information ; Details about you as a job candidate (which may include your name, resume, educationa l and work history, criminal history information, and feedback) as permitted under law ; and Data used for security purposes to protect our products and services .
55We receive business contact information that contains Personal Data for commercial purposes, including details about your organization from third parties for marketing and business intelligence, such as analyzing business opportunities, identifying and communicating with potential customers, and providing our audience with more relevant content and advertising.55We receive business contact information that contains Personal Data for commercial purposes, including details about your organization from third parties for marketing and business intelligence, such as analyzing business opportunities, identifying and communicating with potential customers, and providing our audience with more relevant content and advertising .
56Typically, and subject to applicable laws, we receive this information about you from a few sources, such as: (i) third-party marketing initiatives, such as events where we are a sponsor, or website forms hosted by third parties that may provide content about us; (ii) instances when you consent to having your attendee badge scanned at an event hosted by us or another entity; (iii) companies, such as information aggregators and similar entities, from whom we have licensed business contact information; (iv) referrals; or (v) resellers and channel partners, including those that offer joint marketing services.56Typically, and subject to applicable laws, we receive this information about you from a few sources, such as: (i) third-party marketing initiatives, such as events where we are a sponsor, or website forms hosted by third parties that may provide content about us ; (ii) instances when you consent to having your attendee badge scanned at an event hosted by us or another entity ; (iii) companies, such as information aggregators and similar entities, from whom we have licensed business contact information ; (iv) referrals ; or (v) resellers and channel partners, including those that offer joint marketing services .
57In some situations, we may combine such business contact information with other non-personal and Personal Data we possess or that you have provided to us.57In some situations, we may combine such business contact information with other non-perso nal and Personal Data we possess or that you have provided to us .
58For example, we may combine business contact details with details about your organization, such as its address or revenue range, and analyze this information for business opportunities or use this to send you tailored content.58For example, we may combine business contact details with details about your organization, such as its address or revenue range, and analyze this information for business opportunities or use this to send you tailored content .
59We also receive Personal Data to help with threat intelligence and to protect the safety and security of our service and our customers’ applications, such as breached website credentials from other entities.59We also receive Personal Data to help with threat intelligence and to protect the safety and security of our service and our customers' applications, such as breached website credentials from other entities .
60We use this Personal Data for various purposes, such as for security and fraud detection purposes and to enable our customers to configure the settings within the Okta products and services to notify their administrators and users if the data that they put into the Okta service is found within this data set.60We use this Personal Data for various purposes, such as for security and fraud detection purposes and to enable our customers to configure the settings within the Okta products and services to notify their administrators and users if the data that they put into the Okta service is found within this data set .
61We also receive information from third-party platforms for various business purposes such as organizational credit information, program management, or technical reasons.61We also receive information from third-party platforms for various business purposes such as organizational credit information, program management, or technical reasons .
62For example, we may receive credit information about an organization that includes the names of individuals.62For example, we may receive credit information about an organization that includes the names of individuals .
63If you participate in an open-source project or our bug bounty program, we may receive details about you, such as your username or pull requests, to help us manage your participation in the project or program and provide you with updates.63If you participate in an open-source project or our bug bounty program, we may receive details about you, such as your username or pull requests, to help us manage your participation in the project or program and provide you with updates .
64If you are a candidate applying for a job at Okta, subject to laws applicable in your jurisdiction, we may receive Personal Data about you from third parties for business purposes, such as to confirm your identity, perform background checks (educational, employment, criminal, and financial information), publicly-available sources (like social media accounts, including LinkedIn for identifying candidates), feedback about your application and from interviews, and other third parties that may provide feedback about your application.64If you are a candidate applying for a job at Okta, subject to laws applicable in your jurisdiction, we may receive Personal Data about you from third parties for business purposes, such as through background checks (educational, employment, criminal, and financial information), publicly-available sources (like social media accounts, including LinkedIn for identifying candidates), feedback about your application and from interviews, and other third parties that may provide feedback about your application .
65Okta treats references provided as part of a job application as confidential.65Okta treats references provided as part of a job application as confidential .
66For our professional services work, as a processor or service provider for our customers, Okta may also receive Personal Data about you to perform its obligations under its contract with a third party.66For ou r professiona l services work, as a processor or service provider for our customers, Okta may also receive Personal Data about you to perform its obligations under its contract with a third party .
67Okta partners may also share your business contact information with Okta as part of their recommendation to your organization to become an Okta customer.67Okta partners may also share your business contact information with Okta as part of their recommendation to your organization to become an Okta customer .
68If Okta is interested in partnering with, acquiring, investing in, or partners with, acquires, or invests in your employing or retaining organization, Okta may receive Personal Data about you through the (potential or completed) transaction for its business purposes.68If Okta is interested in partnering with, acquiring, investing in, or partners with, acquires, or invests in your employing or retaining organization, Okta may receive Personal Data about you through the (potential or completed) transaction for its business purposes .
69Device Data, Usage Data, Ancillary Data, Diagnostic Data, and Metadata We Collect Explanation of Device Data, Usage Data, Ancillary Data, Diagnostic Data, and Other Metadata and Technology Used Like most websites, applications, and software across the Internet, Okta collects certain Personal Data when you access and use our websites, applications, software, and products and services subject to laws applicable in your jurisdiction.69DEVICE DATA, USAGE DATA, ANCILLARY DATA, DIAGNOSTIC DATA, AND METADATA WE COLLECT EXPLANATION OF DEVICE DATA, USAGE DATA, ANCILLARY DATA, DIAGNOSTIC DATA, AND OTHER METADATA AND TECHNOLOGY USED Like most websites, applications, and software across the Internet, Okta collects certain Personal Data when you access and use our websites, applications, software, and products and services subject to laws applicable in your jurisdiction .
70This type of data collection allows us to better understand how individuals use and the performance of our websites, applications, and products and services and allows us to provide, fix, and improve our websites, applications, software, and products and services, and detect, investigate, and combat fraud, security incidents, and other deceptive or malicious behavior.70This type of data collection allows us to better understand how individuals use and the performance of our websites, applications, and products and services and allows us to provide, fix, and improve our websites, applications, software, and products and services, and detect, investigate, and combat fraud, security incidents, and other deceptive or malicious behavior .
71The data we collect can include the following: Device Data.71The data we collect can include the following : Device Data.
72We may collect certain information from and about your device, such as unique device identifiers, browser type, the operating system installed on your device, certain device configurations, and similar device or version information (“Device Data”).72We may collect certain information from and about your device, such as unique device identifiers, browser type, the operating system installed on your device, certain device configurations, and similar device or version information ("Device Data") .
73We use Device Data to identify the location of the device, which we use to provide necessary disclosures, obtain necessary consents, prevent access to our products and services as required by applicable law, and comply with any other requirements applicable to Okta, to detect, investigate, and combat fraud, security incidents, and other deceptive or malicious behavior, and to help us determine that users from one type of device use our websites, products and services in different ways than users of a different type of device, which in turn allows us to troubleshoot and investigate the performance of our products and services, improve our websites, products, and services, such as through optimizing the screen size of Okta mobile applications, or making sure that our customers’ users have a more efficient user experience.73We use Device Data to identify the location of the device, which we use to provide necessary disclosures, obtain necessary consents, prevent access to our products and services as required by applicable law, and comply with any other requirements applicable to Okta, to detect, investigate, and combat fraud, security incidents, and other deceptive or malicious behavior, and to help us determine that users from one type of device use our websites, products and services in different ways than users of a different type of device, which in turn allows us to troubleshoot and investigate the performance of our products and services, improve our websites, products, and services, such as through optimizing the screen size of Okta mobile applications, or making sure that our customers' users have a more efficient user experience .
74The Device Data we collect can include the following: Location Data.74The Device Data we collect can include the following : Location Data.
75We may collect information about your location when you use our websites, mobile applications, and products and services.75We may collect information about your location when you use our websites, mobile applications, and products and services .
76Your location can be determined with varying degrees of accuracy by your IP address and information about things near your device, such as Bluetooth-enabled devices.76Your location can be determined with varying degrees of accuracy by your IP address and information about things near your device, such as Bluetooth-enabled devices .
77The types of location data we collect and how long we store it depend in part on your device and settings.77The types of location data we collect and how long we store it depend in part on your device and settings .
78If we collect your precise geolocation data, we will do so only with your consent.78If we collect your precise geolocation data, we will do so only with your consent .
79Camera .79Came ra.
80When enabled, some of our services allow you to set up the services by using the camera on your device to scan a QR code.80When enabled, some of our services allow you to set up the services by using the camera on your device to scan a QR code .
82You can always change our access to your camera by turning off our access to your camera in your device’s settings menu.82You can always change our access to your camera by turning off our access to your camera in your device's settings menu .
83Touch ID and Face ID.83Touch ID and F ace ID.
84Some of our products and services may allow you to authenticate using Touch ID and Face ID for Apple devices and Face Unlock and Fingerprint Unlock for Android devices.84Some of our products and services may allow you to authenticate using Touch ID and Face ID for Apple devices and Face Unlock and Fingerprint Unlock for Android devices .
85If you authenticate using Touch ID, Face ID, Face Unlock or Fingerprint Unlock, we are only notified as to whether the authentication was successful and cannot access the Face ID, Touch ID, Face Unlock, or Fingerprint Unlock.85If you authenticate using Touch ID, Face ID, Face Unlock or Fingerprint Unlock, we are only notified as to whether the authentication was successful and cannot access the Face ID, Touch ID, Face Unlock, or Fingerprint Unlock .
86You can enable or disable Touch ID, Face ID, Face Unlock and Fingerprint Unlock at any time through your device’s settings menu.86You can enable or disable Touch ID, Face ID, Face Unlock and Fingerprint Unlock at any time through your device's settings menu .
88We may also collect data about your use of our websites, applications, and products and services, including data regarding service configurations and applications utilized in connection with the hosted Service, support data, operational data, log data, logs of your usage and click activities, logs about your login history, identity confirmation, and the performance results for the hosted Service (“Usage Data”).88We may also collect data about your use of our websites, applications, and products and services, including data regarding service configurations and applications utilized in connection with the hosted Service, support data, operational data, log data, logs of your usage and click activities, logs about your login history, identity confirmation, and the performance results for the hosted Service ("Usage Data") .
89Okta uses Usage Data to: (i) analyze usage trends, (ii) detect, investigate, and combat fraud and cyber-attacks; (iii) detect, investigate, and combat security incidents, and other such deceptive, fraudulent or malicious behavior against Okta or its customers, including taking measures to improve Okta’s overall security posture; (iv) improve service and product functionality; and (v) retain and/or employ another service provider or contractor.89Okta uses Usage Data to: (i) analyze usage trends, (ii) detect, investigate, and combat fraud and cyber-attacks; (iii) detect, investigate, and combat security incidents, and other such deceptive, fraudulent or malicious behavior against Okta or its customers, including taking measures to improve Okta's overall security posture; (iv) improve service and product functionality; and (v) retain and/or employ another service provider or contractor .
91We may also collect data about any problems you experience with our websites, applications, and products and services, including bug, error, and crash reports, which can include Device Data, location data, Usage Data, and user data at the time of the bug, error, and/or crash.91We may also collect data about any problems you experience with our websites, applications, and products and services, including bug, error, and crash reports, which can include Device Data, location data, Usage Data, and user data at the time of the bug, error, and/or crash .
93Some of our products and services may collect data about the applications that are installed on your device.93Some of our products and services may collect data about the applications that are installed on your device .
94Collectively, we refer to this data as “Ancillary Data”.94Collectively, we refer to this data as "Ancillary Data" .
95Some of the Ancillary Data, including Usage Data, that we receive is dependent on your consent or your organization’s policies and settings and what information it permits to be shared with Okta.95Some of the Ancillary Data, including Usage Data, that we receive is dependent on your consent or your organization's policies and settings and what information it permits to be shared with Okta .
96Okta uses Ancillary Data to improve security and to provide and improve its products and services to customers, including to better understand customer behavior in order to create new features and provide threat-related insights for our customers.96Okta uses Ancillary Data to improve security and to provide and improve its products and services to customers, including to better understand customer behavior in order to create new features and provide threat-related insights for our customers .
97Some of the products, services, features, and functionalities that collect and process Ancillary Data include: the Okta browser plugin; the Okta desktop and mobile applications (Okta Verify and Okta Mobile); and Okta Consumer Products.97Some of the products, services, features, and functionalities that collect and process Ancillary Data include: the Okta browser plugin; the Okta desktop and mobile applications (Okta Verify and Okta Mobile); and Okta Consumer Products .
98The Ancillary Data we collect may vary depending on the product, service, feature, or functionality but may include information such as, details about your login session, IP address, user-agent, and the web application name and website address, as well as other information that is not personal in nature.98The Ancillary Data we collect may vary depending on the product, service, feature, or functionality but may include information such as, details about your login session, IP address, user-agent, and the web application name and website address, as well as other information that is not personal in nature .
99In addition, as part of Ancillary Data, we may collect interaction data about your use of the product, service, feature, or functionality.99In addition, as part of Ancillary Data, we may collect interaction data about your use of t he product , service, feature, or functionality .
100We use the Ancillary Data collected for various purposes, including but not limited to for security purposes and to provide and improve products, services, features, and functionalities, such as to allow you to better manage your passwords for websites that you visit.100We use the Ancillary Data collected for various purposes, including but not limited to for security purposes and to provide and improve products, services, features, and functionalities, such as to allow you to better manage your passwords for websites that you visit .
102Some products and services may require, or may be enhanced by, your installation of on-premise software (e.g., agents, device management applications).102Some products and services may require, or may be enhanced by, your installation of on-premise software (e.g., agents, device management applications) .
103The on-premise software may collect data about the use and performance of the software, including IP address, username, and host name, which may be transmitted and used by Okta to provide customer support, to diagnose issues with the on-premise software and/or related products and services, to improve our products and services, and/or for the purposes identified in the applicable agreement(s) between Okta and the applicable customer.103The on-premise software may collect data about the use and performance of the software, including IP address, username, and host name, which may be transmitted and used by Okta to provide customer support, to diagnose issues with the on-premise software and/or related products and services, to improve our products and services, and/or for the purposes identified in the applicable agreement(s) between Okta and the applicable customer .
104For example, Okta Advanced Server Access (“ASA”) provides functionality for a customer to generate support bundles, which contain local log files generated by the local software running on the customer’s ASA servers, that the customer can provide to Okta to enable Okta to diagnose issues and provide support.104For example, Okta Advanced Server Access ("ASA") provides functionality for a customer to generate support bundles, which contain local log files generated by the local software running on the customer's ASA servers, that the customer can provide to Okta to enable Okta to diagnose issues and provide support .
106We may collect metadata about you, including technical data about your performance or use of our website, products and services.106We may collect metadata about you, including technical data about your performance or use of our website, products and services .
107One common technology we use to collect metadata that may be considered Personal Data is our use of cookies.107One common technology we use to collect metadata that may be considered Personal Data is our use of cookies .
108Cookies are small text files that are placed on your web browser and that help us recognize your browser or device as a unique visitor in different ways based on the type of cookie.108Cookies are small text files that are placed on your web browser and that help us recognize your browser or device as a unique visitor in different ways based on the type of cookie .
109The three main types of cookies are: Essential cookies.109The three main types of cookies are : Essential cookies.
110Essential cookies are required for website functionality and security.110Essential cookies are required for website functionality and security .
111For example, authentication, security, and session cookies may be required for our website or products to work.111For example, authentication, security, and session cookies may be required for our website or products to work .
113We use functional cookies to help enhance our websites’ performance, for market research, or other analytics or advertising that is not tied to a specific individual.113We use functional cookies to help enhance our websites' performance, for market research, or other analytics or advertising that is not tied to a specific individual .
114For example, we may use Google Analytics to help us track how many individuals visited our websites.114For example, we may use Google Analytics to help us track how many individuals visited our websites .
115We may also utilize HTML5 local storage cookies for the reasons described in this section.115We may also utilize HTML5 local storage cookies for the reasons described in this section .
116These types of cookies are different from browser cookies in the amount and type of data they store and how they store it.116These types of cookies are different from browser cookies in the amount and type of data they store and how they store it .
118We use targeting and advertising cookies to help us understand our marketing efforts and to reach potential customers across the web.118We use targeting and advertising cookies to help us understand our marketing efforts and to reach potential customers across the web .
119For example, we contract with third-party advertising networks (e.g., Google) that may track your activity over time and across different channels, including our websites, email activity, and other websites and applications that display advertisements.119For example, we contract with third-party advertising networks (e.g., Google) that may track your activity overtime and across different channels, including our websites, email activity, and other websites and applications that display advertisements .
120They may use this tracking information to understand and predict your interests, to display an advertisement for Okta on another website (e.g., Google inventory including Google Display Network, RLSA, YouTube and Performance Max), or email you with a marketing communication for an Okta product.120They may use this tracking information to understand and predict your interests, to display an advertisement for Okta on another website (e.g., Google inventory including Google Display Network, RLSA, YouTube and Performance Max), or email you with a marketing communication for an Okta product .
122A second common technology we use to collect metadata that may be considered Personal Data is beacon technology.122A second common technology we use to collect metadata that may be considered Personal Data is beacon technology .
123We may also use web tracking technologies (i.e., cookies, pixels, session replay, chatbots, etc.) to communicate with you to enhance the function of the website and our services.123We use beacons in our websites and in email communications to you .
124We also use beacons in our websites and in email communications to you.124Beacons provide us with information about your activity and help us to improve our business operations and strategy, such as by understanding our email communications' functionality and improving our websites and content .
125Beacons provide us with information about your activity and help us to improve our business operations and strategy, such as by understanding our email communications’ functionality and improving our websites and content.125For example, if you click on a marketing email we send to you about a new product or service, the beacon will provide signals to us that you and your organization may be interested in learning more .
126For example, if you click on a marketing email we send to you about a new product or service, the beacon will provide signals to us that you and your organization may be interested in learning more.126If you would like to manage your email subscriptions with us, please visit the section below on Your Information Choices . .
127If you would like to manage your email subscriptions with us, please visit the section below on Your Information Choices .—Removed
129How We Use Personal Data How we use the Personal Data that we collect depends in part on how you choose to communicate with us, how you use our websites and interact with us, and any preferences you have communicated to us.128How We Use Personal Data How we use the Personal Data that we collect depends in part on how you choose to communicate with us, how you use our websites and interact with us, and any preferences you have communicated to us .
130In general, we use your Personal Data as is necessary to run our business and carry out our day-to-day activities.129In general, we use your Personal Data as is necessary to run our business and carry out our day-to-day activities .
131In addition to the uses identified elsewhere in this Privacy Policy, we may use your Personal Data to accomplish the following tasks (and we have done so during the 12 months preceding the effective date of this Privacy Policy): For the purpose of communicating with you about our products and services and facilitate other interaction.130In addition to the uses identified elsewhere in this Privacy Policy, we may use your Personal Data to accomplish the following tasks (and we have done so during the 12 months preceding the effective date of this Privacy Policy) : For the purpose of communicating with you about our products and services and to facilitate other interaction.
132We may use your Personal Data, such as contact data, Ancillary Data, and metadata, to send you transactional communications, notices, updates, security alerts, and administrative messages regarding our products and services that may be useful to you and your organization.131We may use your Personal Data, such as contact data, Ancillary Data, and metadata, to send you transactional communications, notices, updates, security alerts, and administrative messages regarding our products and services that may be useful to you and your organization .
133We will respond to your questions, provide tailored communications based on your activity and interactions with us, and help you use our products and services effectively.132We will respond to your questions, provide tailored communications based on your activity and interactions with us, and help you use our products and services effectively .
134We also use Administrator Data to communicate with you for various purposes, including to provide you with account updates (about your subscription, settings, security, billing, feature and product updates, technical issues, certifications, and other similar content).133We also use Administrator Data to communicate with you for various purposes, including to provide you with account updates (about your subscription, settings, security, billing, feature and product updates, technical issues, certifications, and other similar content) .
135You cannot unsubscribe from non-promotional and transactional communications.134You cannot unsubscribe from non-promotional and transactional communications .
136For promotional communications, you may manage your communication preferences via your administrator settings, Okta communities, or our subscription center (linked in the Your Information Choices section below).135For promotional communications, you may manage your communication preferences via your administrator settings, Okta communities, or our subscription center (linked in the Your Information Choices section below) .
137In some situations, we may also share Administrator Data with authorized partners in order to provide you with information relevant to your purchase of Okta or other entities’ tools that may connect to Okta to meet your technical or organizational needs.136In some situations, we may also share Administrator Data w ith authorized partners in order to provide you with information relevant to your purchase of Okta or other entities' tools that may connect to Okta to meet your technical or organizational needs .
138If you choose to subscribe to alerts, then we will also use your Administrator Data to send you trust alerts, including via SMS (“Okta Alerts”).137If you choose to subscribe to alerts, then we will also use your Administrator Data to send you trust alerts, including via SMS ("Okta Alerts") .
139Phone numbers collected as a part of Okta Alerts SMS subscriptions will not be used for marketing purposes and only shared with service providers as required to carry out the alerts or as otherwise required under applicable law.138Phone numbers collected as a part o f Okta Alerts SMS subscriptions will not be used for marketing purposes and only shared with service providers as required to carry out the alerts or as otherwise required under applicable law .
140In some instances, the phone number you use to sign up for Okta Alerts may be the same phone number we use for marketing purposes based on your consent or receipt through a different channel.139In some instances, the phone number you use to sign up for Okta Alerts may be the same phone number we use for marketing purposes based on your consent or receipt through a different channel .
141For the purpose of supporting safety, security, and manage operations.140For the purpose of supporting safety, security, and to manage operations.
142We use Personal Data, such as contact data, Ancillary Data and other metadata, about you and your use of our products, services, and offices to verify accounts and activity, monitor suspicious or fraudulent activity, assist our customers in their monitoring of suspicious or fraudulent activity, and identify violations of policies regarding the use of our products and services.141We use Personal Data, such as contact data, Ancillary Data and other metadata, about yo u and your use of our products, services, and offices to verify accounts and activity, monitor suspicious or fraudulent activity, assist our customers in their monitoring of suspicious or fraudulent activity, and identify violations of policies regarding the use of our products and services .
143We may also combine Ancillary Data with other data we receive for safety, security, and to manage our business operations.142We may also combine Ancillary Data with other data we receive for safety, security, and to manage our business operations .
144We also process Personal Data, such as contact data and health data, for security and operations management reasons, such as to register visitors to our offices and carry out related safety measures (including through using our Atmosphere application), including to manage non-disclosure agreements that visitors may be required to sign.143We also process Personal Data, such as contact data and health data, for security and operations management reasons, such as to register visitors to our offices and carry out related safety measures (including through using our Atmosphere application), including to manage non-disclosure agreements that visitors may be required to sign .
145We also use Administrator Data to provide our customers with the Okta service, complete transactions, provide support and other service to the customer account, detect and prevent fraud, for audit and compliance purposes, and to comply with applicable law.144We also use Administrator Data to provide our customers with the Okta service, complete transactions, provide support and other service to the customer account, detect and prevent fraud, for audit and compliance purposes, and to comply with applicable law .
146Okta physically and electronically monitors its offices with access monitoring software and tools, and has on-premise surveillance cameras in order to prevent unauthorized access to our offices and to protect employees, authorized visitors, and our property.145Okta physically and electronically monitors its offices with access monitoring software and tools, and has on-premise surveillance cameras in order to prevent unauthorized access to our offices and to protect employees, authorized visitors, and our property .
148We use your Personal Data, such as contact data, Ancillary Data, and other metadata about how you use the products and services to send promotional communications that may be of specific interest to you and your organization, including by email and by displaying Okta marketing communications on other organizations’ websites and applications, as well as on third-party platforms like Facebook, Twitter, and Google subject to laws applicable in your jurisdiction.147We use your Personal Data, such as contact data, Ancillary Data, and other metadata about how you use the products and services to send promotional communications that may be of specific interest to you and your organization, including by email and by displaying Okta marketing communications on other organizations' websites and applications, as well as on third-party platforms like Facebook, Twitter, and Google subject to laws applicable in your jurisdiction .
149These communications are aimed at encouraging engagement and maximizing the benefits that you and your organization can gain from Okta’s products and services, including information about new products and features, survey requests, newsletters, and events that we think may be of interest to you and your organization.148These communications are aimed at encouraging engagement and maximizing the benefits that you and your organization can gain from Okta's products and services, including information about new products and features, survey requests, newsletters, and events that we think may be of interest to you and your organization .
151We use Personal Data to analyze and predict results (such as those arising from our sales and marketing efforts and product usage and consumption), improve the performance of our websites, products and services and customer support, identify potential customers, opportunities, and potential new product areas, ascertain trends, improve our websites’ functionality, improve our security, and provide us with general business intelligence, including through the use of automated means such as machine learning technology.150We use Personal Data to analyze and predict results (such as those arising from our sales and marketing efforts and product usage and consumption), improve the performance of our websites, products and services and customer support, identify potential customers, opportunities, and potential new product areas, ascertain trends, improve our websites' functionality, improve our security, and provide us with general business intelligence, including through the use of automated means such as machine learning technology .
152Subject to the laws applicable in your jurisdiction, we may also combine the metadata and usage information collected from our websites with other information to help further the purposes described in the previous sentence.151Subject to the laws applicable in your jurisdiction, we may also combine the metadata and usage information collected from our websites with other information to help further the purposes described in the previous sentence .
154Okta may occasionally run contests or other special promotions or make available opportunities or other tokens of appreciation for customers, and if you register for these, we may process your Personal Data, such as contact information, biographical information, and contract-related data to perform our contract with you.153Okta may occasionally run contests or other special promotions or make available opportunities or other tokens of appreciation for customers, and if you register for these, we may process your Personal Data, such as contact information, biographical information, and contract-related data to perform our contract with you .
155Okta may also use the Personal Data, such as contact data, collected in these contests, promotions, and for customer appreciation as well as to send you gifts or prizes and promotional material about Okta and our partners.154Okta may also use the Personal Data, such as contact data, collected in these contests, promotions, and for customer appreciation as well as to send you gifts or prizes and promotional material about Okta and our partners .
157We process Personal Data, such as contact information, contract-related data, financial information, biographical information, and payment information to process payments to the extent that doing so is necessary to complete a transaction and perform our contract with you or your organization.156We process Personal Data, such as contact information, contract-related data, financial information, biographical information, and payment information to process payments to the extent that doing so is necessary to complete a transaction and perform our contract with you or your organization .
159We process your Personal Data, such as contact, job applicant, and biographical data, to assess your application and to evaluate and improve our recruitment system, our application tracking and recruitment activities.158We process your Personal Data, such as contact, job applicant, and biographical data, to assess your application and to evaluate and improve our recruitment system, our application tracking and recruitment activities .
160We also use your Personal Data to communicate with you regarding your application or opportunities at Okta that appear over time that we believe may be of interest to you.159We also use your Personal Data to communicate with you regarding your application or opportunities at Okta that appear over time that we believe may be of interest to you .
161We also use your Personal Data to send you new hire and employee experience information.160We also use your Personal Data to send you new hire and employee experience information .
162We may verify your information, including through confidential reference checks and, where allowed, background checks.161We may verify your information, including through confidential reference checks and, where allowed, background checks .
164Where required by law or where we believe it is necessary to protect our legal rights, interests, or the interests of others, we may use your Personal Data in connection with the management of our business, including but not limited to, for operational purposes and workflow automation, business intelligence (such as to understand subscription consumption and free trial product usage), website and product improvement, legal claims, compliance, regulatory, and audit functions, protecting against misuse or abuse of our products and services, and protecting personal property or safety.163Where required by law or where we believe it is necessary to protect our legal rights, interests, or the interests of others, we may use your Personal Data in connection with the management of our business, including but not limited to, for operational purposes and workflow automation, business intelligence (such as to understand subscription consumption and free trial product usage), website and product improvement, legal claims, compliance, regulatory, and audit functions, protecting against misuse or abuse of our products and services, and protecting personal property or safety .
165For example, we may review compliance with applicable usage terms in our customer contracts, assess capacity requirements for our products, websites, and offices, improve your user experience, respond to requests by you for support or for contact, or identify customer opportunities.164For example, we may r eview compliance with applicable usage terms in our customer contracts, assess capacity requirements for our products, websites, and offices, improve your user experience, respond to requests by you for support or for contact, or identify customer opportunities .
166If you sign up to participate in specific programs, such as the Okta Ideas forum or other product feedback programs, we may analyze Ancillary Data, including Usage Data, related to your use of our products and Service, along with the data you choose to provide to us through Okta Ideas, to provide you with a better customer experience.165If you sign up to participate in specific programs, such as the Okta Ideas forum or other product feedback programs, we may analyze Ancillary Data, including Usage Data, related to your use of our products and Service, along with the data you choose to provide to us through Okta Ideas, to provide you with a better customer experience .
167Furthermore, we use Administrator Data to provide technical support as described in our documentation and help center, and to improve our products, services, and processes related to providing such support.166Furthermore, we use Administrator Data to provide technical support as described in our documentation and help center, and to improve our products, services, and processes related to providing such support .
169We may use your Personal Data if you have given us consent to do so for a specific purpose not listed above.168We may use your Personal Data if you have given us consent to do so for a specific purpose not listed above .
170For example, we may publish testimonials or featured customer stories to promote our products and services or record phone calls for quality and training purposes, with your permission.169For example, we may publish testimonials or featured customer stories to promote our products and services or record and use artificial intelligence to analyze phone calls for quality and training purposes, with your permission where required by applicable law .
171If we process your Personal Data for a purpose other than those set out above, we may provide you with a notice and obtain your consent prior to such processing, where required by us under applicable law in your jurisdiction.170If we process your Personal Data for a purpose other than those set out above, we may provide you with a notice and obtain your consent prior to such processing, where required by us under applicable law in your jurisdiction .
172Legal Bases for Processing Personal Data (for United Kingdom and European Economic Area and other relevant jurisdictions) If you are an individual in the United Kingdom, the European Economic Area (EEA), or of another relevant jurisdiction, we collect and process information about you only where we have a legal basis or bases for doing so under applicable laws.171LEGAL BASES FOR PROCESSING PERSONAL DATA (FOR UNITED KINGDOM AND EUROPEAN ECONOMIC AREA AND OTHER RELEVANT JURISDICTIONS) If you are an individual in the United Kingdom, the European Economic Area (EEA), or of another relevant jurisdiction, we collect and process information about you only where we have a legal basis or bases for doing so under applicable laws.
173The legal bases depend on the products and services that your organization has purchased from Okta, or the Okta Consumer Products that you are using, as applicable, how such products and services are used, and how you choose to interact and communicate with Okta’s websites, systems, and whether you attend Okta events.172The legal bases depend on the products and services that your organization has purchased from Okta, or the Okta Consumer Products that you are using, as applicable, how such products and services are used, and how you choose to interact and communicate with Okta's websites, systems, and whether you attend Okta events.
174This means we collect and use your Personal Data only where: We need it to operate and provide you with our products and services, provide customer support and personalized features, and to protect the safety and security of our products and services; It satisfies a legitimate interest of Okta’s (which is not overridden by your data protection interests and rights), such as for research and development, to provide information to you about our products and services that we believe you and your organization may find useful, and to protect our legal rights and interests; You give us consent to do so for a specific purpose; or We need to comply with a legal obligation.173This means we collect and use your Personal Data only where: We need it to operate and provide you with our products and services, provide customer support and personalized features, and to protect the safety and security of our products and services ; It satisfies a legitimate interest of Okta's (which is not overridden by your data protection interests and rights), such as for research and development, to provide information to you about our products and services that we believe you and your organization may find useful, and to protect our legal rights and interests ; You give us consent to do so for a specific purpose ; or We need to comply with a legal obligation .
175If you have consented to our use of Personal Data about you for a specific purpose, you have the right to change your mind at any time, subject to contractual and legal restrictions, and reasonable prior written notice.174If you have c onsented to our use of Personal Data about you for a specific purpose, you have the right to change your mind a t any time, subject to contractual and legal restrictions, and reasonable prior written notice .
176This will not affect any processing that has already taken place.175This will not affect any processing that has already taken place .
177Where we are using your Personal Data because we or another entity (for example, your employer) have a legitimate interest to do so, you have the right to object to that use; however, in some cases, this may mean that you no longer use our products and services.176Where we are using your Personal Data because we or another entity (for example, your employer) have a legitimate interest to do so, you have the right to object to that use ; however, in some cases, this may mean that you no longer use our products and services .
178In the event that we de-identify any Personal Data for further use, we commit to maintain and use the information in de-identified form and will not attempt to re-identify the information, except for the purpose of determining if our de-identification processes satisfy applicable legal requirements.177In the event that we de-identify any Personal Data for further use, we commit to maintain and use the information in de-identified form and will not attempt to re-identify the information, except for the purpose of determining if our de-identification processes satisfy applicable legal requirements .
180Personal Data Disclosed by Okta and Data You Choose to Disclose to Other Entities Personal Data Disclosed by Okta In the course of doing business (and over the 12 months preceding the effective date of this Privacy Policy), Okta may disclose Personal Data as described below.179Personal Data Disclosed by Okta and Data You Choose to Disclose to Other Entities Personal Data Disclosed by Okta PERSONAL DATA DISCLOSED BY OKTA In the course of doing business (and over the 12 months preceding the effective date of this Privacy Policy), Okta may disclose Personal Data as described below.
182For all categories of information that we collect, we disclose Personal Data to our service providers for various business purposes, including, but not limited to, auditing interactions with users, debugging our websites, products and services, security purposes, internal research and gleaning insights through machine learning, short-term uses such as credit verification, payment processing, IT services, quality control and safety, gift fulfillment, in-person and virtual event management, as well as to perform other services on our behalf.181For all categories of information that we collect, we disclose Personal Data to our service providers for various business purposes, including, but not limited to, auditing interactions with users, debugging our websites, products and services, security purposes, internal research and gleaning insights through machine learning, short-term uses such as credit verification, payment processing, IT services, quality control and safety, gift fulfillment, in-person and virtual event management, as well as to perform other services on our behalf .
183For example, we may use service providers to help us proctor and score Okta certification exams, or host our customer relationship management system.182For example, we may use service providers to help us proctor and score Okta certification exams, or host our customer relationship management system .
185If you choose to register for or attend a virtual or in-person event or webinar that we host (such as our Oktane customer conference), enter a contest or raffle with us and a sponsor, or download content (such as a whitepaper) from our website, then we may disclose your contact information, content interest information or other activity data, and any other information, including Personal Data, collected in the course of these activities for commercial purposes to those sponsors.184If you choose to register for or attend a virtual or in-person event or webinar that we host (such as our Oktane customer conference), enter a contest or raffle with us and a sponsor, or download content (such as a whitepaper) from our website, then we may disclose your contact information, content interest information or other activity data, and any other information, including Personal Data, collected in the course of these activities for commercial purposes to those sponsors .
186In many cases, you intentionally disclose your details by providing your information to these sponsors through consent via a registration form or by scanning your badge at the applicable sponsor’s booth.185In many cases, you intentionally disclose your details by providing your information to these sponsors through consent via a registration form or by scanning your badge at the applicable sponsor's booth .
187Virtual events hosted by third party platforms may also collect additional data from you when you visit their sites.186Virtual events hosted by third party platforms may also collect additional data from you when you visit their sites .
188The treatment of this information is subject to each of these other entities’ respective privacy statements.187The treatment of this information is subject to each of these other entities' respective privacy statements .
190We may disclose your Personal Data, such as contact information, business details, and content interest and activity details, to our partners and resellers for business purposes, such as to carry out our business or for joint marketing efforts to reach our customers and prospective customers, subject to laws applicable in your jurisdiction.189We may disclose your Personal Data, such as contact information, business details, and content interest and activity details, to our partners and resellers for business purposes, such as to carry out our business or for joint marketing efforts to reach our customers and prospective customers, subject to laws applicable in your jurisdiction .
191In many cases, you intentionally disclose your details by providing your information to these sponsors through consent via a registration form.190In many cases, you intentionally disclose your details by providing your information to these sponsors through consent via a registration form .
194For all categories of data we collect, we disclose your Personal Data for business purposes to protect our customers and users, to secure our physical and intellectual property, and to prevent or investigate security or fraudulent attempts against our users through our platform.193For all categories of data we collect, we disclose your Personal Data for business purposes to protect our customers and users, to secure our physical and intellectual property, and to prevent or investigate security or fraudulent attempts against our users through our platform .
196For all categories of data we collect, we may disclose Personal Data to comply with applicable law or to respond to valid legal requests, such as a subpoena, from law enforcement or other authorities.195For all categories of data we collect, we may disclose Personal Data to comply with applicable law or to respond to valid legal requests, such as a subpoena, from law enforcement or other authorities .
198For all categories of data we collect, we disclose Personal Data to our affiliates and subsidiaries for business purposes, including any service providers and agents that work on our behalf.197For all categories of data we collect, we disclose Personal Data to our affiliates and subsidiaries for business purposes, including any service providers and agents that work on our behalf .
199For example, we may disclose your Personal Data to support service providers with whom we have in place agreements to protect your Personal Data.198For example, we may disclose your Personal Data to support service providers with whom we have in place agreements to protect your Personal Data .
200We may also disclose your information as required for us to carry out a corporate transaction, such as a merger or sale of assets of all or part of our company.199We may also disclose your information as required for us to carry out a corporate transaction, such as a merger or sale of assets of all or part of our company .
201We will also disclose your Personal Data to our professional service providers (for example, our auditors, insurance providers, financial service providers, and legal advisors) as needed for us to run our business.200We will also disclose your Personal Data to our professional service providers (for example, our auditors, insurance providers, financial service providers, and legal advisors) as needed for us to run our business .
203We disclose Ancillary Data, such as metadata (for example, unique identifiers and Usage Data), collected through our platform with analytics service providers for our business purposes, such as to provide a better user experience and improve our products and services.202We disclose Ancillary Data, such as metadata (for example, unique identifiers and Usage Data), collected through our platform with analytics service providers for our business purposes, such as to provide a better user experience and improve our products and services .
205We share your Personal Data, such as metadata, location, device type, behavior information such as pages visited or viewed, time spent, specific actions taken (e.g. during form submission, clicking on a button, downloads) and contact data, with third-party advertising and marketing providers, to allow us to better reach our customers and prospective customers, and to sell our products and services, to the extent permitted by laws applicable in your jurisdiction.204We share your Personal Data, such as metadata, location, device type, behavior information such as pages v isited or viewed, time spent, specific actions taken (e.g. during form submission, clicking on a button, downloads) and contact data, with third-party advertising and marketing providers, to allow us to better reach our customers and prospective customers, and to sell our products and services, to the extent permitted by laws applicable in your jurisdiction .
206In some circumstances, we may ask you to consent to directly disclosing your Personal Data with these third parties prior to sharing your Personal Data, such as via a consent banner on our website.205In some circumstances, we may ask you to consent to directly disclosing your Personal Data with these third parties prior to sharing your Personal Data, such as via a consent banner on our website .
207For details on your choices with respect this sharing or disclosure, please see Your Information Choices below.206For details on your choices with respect to this sharing or disclosure, please see Your Information Choices below .
208For specific details on these companies’ privacy practices, please visit their privacy policies.207For specific details on these companies' privacy practices, please visit their privacy policies .
210We disclose anonymized or aggregated usage data or security threat information with third parties or the public.209We disclose anonymized or aggregated usage data or security threat information with third parties or the public .
211For example, this may include disclosing trends regarding organizations’ use of Okta’s products and services to customers and prospective customers in our “Businesses at Work” report.210For example, this may include disclosing trends regarding organizations' use of Okta's products and services to customers and prospective customers in our "Businesses at Work" report .
212The data disclosed in this category is not Personal Data.211The data disclosed in this category is not Personal Data .
214We make available various community forums and self-help support materials, as well as blogs and other means for you to post information on our websites.213We make available various community forums and self-he lp support materials, as well as blogs and other means for you to post information on our websites .
215This information you post is publicly-available information that you choose to disclose and it may be read, collected, and processed by others that visit these websites.214This information you post is publicly-available information that you choose to disclose and it may be read, collected, and processed by others that visit these websites .
216Except for username (which may be your real name) and the details that you choose to include in your profile, the categories of data disclosed in these circumstances will depend on what information you choose to provide.215Except for username (which may be your real name) and the details that you choose to include in your profile, the categories of data disclosed in these circumstances will depend on what information you choose to provide .
218When you apply for a job at Okta, we disclose your Personal Data, including applicant data, biographical information, and other Personal Data we possess to our affiliate companies for business reasons, such as human resource management and internal reporting; our service providers for business reasons, such as the recruitment platform, to verify references and to manage background checks; and law enforcement or government authorities, or as otherwise necessary to comply with law or as needed for the recruitment and human resources process.217When you apply for a job at Okta, we disclose your Personal Data, including applicant d ata, biogra phical information, and other Personal Data we possess to our affiliate companies for business reasons, such as human resource management and internal reporting; our service providers for business reasons, such as the recruitment platform, to verify references and to manage background checks; and law enforcement or government authorities, or as otherwise necessary to comply with law or as needed for the recruitment and human resources process .
219Okta Social Media Outlets Okta’s websites may use social media features, such as the Facebook “like” button, the Instagram “heart” button, Twitter sharing features, and other similar widgets (“Social Media Features”).218OKTA SOCIAL MEDIA OUTLETS Okta's websites may use social media features, such as the Facebook "like" button, the Instagram "heart" button, Twitter sharing features, and other similar widgets ("Social Media Features").
225Products and Services Available Through Other Channels If you visit the Unity Technologies Asset Store to access an Okta product or service, as part of provisioning assets through the Asset Store, Unity Technologies will collect personal data as described in its Privacy Policy.224PRODUCTS AND SERVICES AVAILABLE THROUGH OTHER CHANNELS If you visit the Unity Technologies Asset Store to access an Okta product or service, as part of provisioning assets through the Asset Store, Unity Technologies will collect personal data as described in its Privacy Policy.
229We maintain a comprehensive, written information security program that contains industry-standard administrative, technical, and physical safeguards designed to prevent the loss or theft and unauthorized access, use, disclosure or alteration of Personal Data.228We maintai n a comprehensive, written information security program that contains industry-standard administrative, technical, and physical safeguards designed to prevent the loss or theft and unauthorized access, use, disclosure or alteration of Personal Data .
230However, no security system is perfect, and due to the inherent nature of the Internet, we cannot guarantee that data, including Personal Data, is absolutely safe from intrusion or other unauthorized access by others.229However, no security system is perfect, and due to the inherent nature of the Internet, we cannot guarantee that data, including Personal Data, is absolutely safe from intrusion or other unauthorized access by others .
231You are responsible for protecting your password(s) and other authentication factors, as well as maintaining the security of your devices.230You are responsible for protecting your password(s) and other authentication factors, as well as maintaining the security of your devices .
241Okta’s Adherence to the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework Okta complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.240OKTA'S ADHERENCE TO THE EU-U.S. DATA PRIVACY FRAMEWORK, THE UK EXTENSION TO THE EU-U.S. DATA PRIVACY FRAMEWORK, AND THE SWISS-U.S. DATA PRIVACY FRAMEWORK Okta complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
246In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Okta commits to resolve complaints about our collection or use of your personal data transferred to the U.S. pursuant to the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.245In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Okta commits to resolve complaints about our collection or use of your personal data transferred to the U.S. pursuant to the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF .
247EU, UK and Swiss individuals with inquiries or complaints should contact Okta at privacy@okta.com.246EU, UK and Swiss individuals with inquiries or complaints should contact Okta at privacy@okta.com .
249The services of the Data Privacy Framework Services are provided at no cost to you.248The services of the Data Privacy Framework Services are provided at no cost to you .
251Individuals located in the EEA, UK or in Switzerland with DPF Principles-related inquiries or complaints may email or write to us, using the contact information described in the “ How to Contact Okta ” section below.250Individuals located in the EEA, UK or in Switzerland with DPF Principles-related inquiries or complaints may email or write to us, using the contact information described in the "How to Contact Okta" section below .
252Okta is responsible for the processing of personal data it receives under the DPF and subsequently transfers to a third party acting as an agent on its behalf.251Okta is responsible for the processing of personal data it receives under the DPF and subsequently transfers to a third party acting as an agent on its behalf .
253Okta complies with the DPF Principles for all onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions.252Okta complies with the DPF Principles for all onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions .
254The Federal Trade Commission has jurisdiction over Okta’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.253The Federal Trade Commission has jurisdiction over Okta's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF .
255The Okta U.S. entities and U.S. subsidiaries that are adhering to the DPF Principles are: Spera Cybersecurity, Inc.254The Okta U.S. entities and U.S. subsidiaries that are adhering to the DPF Principles are : Spera Cybersecurity, Inc .
256Auth0 International LLC Auth0, LLC Okta International LLC VIII.255Auth0 International LLC .
257Children Okta’s websites are not directed at children.256Auth0, LLC .
257Okta International LLC .
258VIII.
259Children Okta's websites are not directed at children.
259If you are a parent or guardian and believe that your child has provided us with Personal Data without your consent, please contact us by using the information in the “How to Contact Us” section, below, and we will take steps to delete such Personal Data from our systems.261If you are a parent or guardian and believe that your child has provided us with Personal Data without your consent, please contact us by using the information in the "How to Contact Us" section, below, and we will take steps to delete such Personal Data from our systems .
262We will retain your Personal Data for a period of time that is consistent with the original purpose of the data collection, or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.264We will retain your Personal Data for a period of time that is consistent with the original purpose of the data collection, or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements .
265Your Information Choices Your Privacy Choices In the above sections, we describe how we may collect, use and share your Personal Data for providing relevant content and advertising.267Your Information Choices Your Privacy Choices In the above sections, we describe how we may collect, use and share your Personal Data for providing relevant content and advertising .
266Below, we describe how you may unsubscribe, opt out, or otherwise modify settings related to our processing of your Personal Data.268Below, we describe how you may unsubscribe, opt out, or otherwise modify settings related to our processing of your Personal Data .
268If you wish to withdraw from direct email marketing communications from Okta, you may click the “unsubscribe” button included in our emails or: Visit our Subscription Center .270If you wish to withdraw from direct email marketing communications from Okta, you may click the "unsubscribe" button included in our emails or visit our Subscription Center .
269Please note, you cannot unsubscribe from critical transactional emails that are related to our provision of our online Service (such as those related to security and your Okta account).271Please note, you cannot unsubscribe from critical transactional emails that are related to our provision of our online Service (such as those related to security and your Okta account) .
272Direct Marketing – Phone or Postal Mailings.274Direct Marketing - Phone or Postal Mailings.
275To opt-out of analytics on our websites, you may adjust your cookie preferences as described below.277To opt-out of analytics on our websites, you may adjust your cookie preferences as described below .
277To opt-out of Marketo’s tracking technology, click here .279To opt-out of Marketo's tracking technology, click here .
280To manage the use of relevant advertising and other non-essential cookies, please see details below: We use OneTrust as a service provider to help you manage cookies.282To manage the use of relevant advertising and other non-essential cookies, please see details below : We use OneTrust as a service provider to help you manage cookies .
281Click the following Cookies Settings OneTrust preference center or the Auth0 by Okta Cookie Settings to opt-out of relevant advertising and other non-essential cookies.283Click the following Cookies Settings OneTrust preference center or the Auth0 by Okta Cookie Settings to opt-out of relevant advertising and other non-essential cookies .
282(You may need to adjust your browser or cookie settings to access if you have already made a choice to accept cookies.) You may also adjust your web browser settings to opt-out of non-essential cookies.284(You may need to adjust your browser or cookie settings to access if you have already made a choice to accept cookies .) You may also adjust your web browser settings to opt-out of non-essential cookies .
283Please understand that blocking or deleting non-essential cookies may affect our websites’ functionality.285Please understand that blocking or deleting non-essential cookies may affect our websites' functionality .
284If you came to our websites from personalized advertising, then you may further opt out of interest-based advertising from our advertising vendors through the Digital Advertising Alliance by using the following, applicable link(s): (i) USA ; (ii) Europe ; (iii) Canada ; and (iv) Other regions .286If you came to our websites from personalized advertising, then you may further opt out of interest-based advertising from our advertising vendors through the Digital Advertising Alliance by using the following, applicable link(s): (i) USA; (ii) Europe; (iii) Canada; and (iv) Other regions .
286Alternatively, you can opt out of a third-party vendor's use of cookies by visiting the Network Advertising Initiative opt-out page or control the use of device identifiers by using their device’s settings.288Alternatively, you can opt out of a third-party vendor's use of cookies by visiting the Network Advertising Initiative opt-out page or control the use of device identifiers by using their device's settings .
288Note that any choice with regards to cookie-based advertising only applies to the web browser through which you exercise that choice.290Note that any choice with regards to cookie-based advertising only applies to the web browser through which you exercise that choice .
289You will continue to see advertising, including potentially from Okta, even if you opt-out of personalized advertising.291You will continue to see advertising, including potentially from Okta, even if you opt-out of personalized advertising .
290Your Privacy Rights Depending on your jurisdiction, you may have certain rights with respect to your Personal Data that we process in our capacity as a data controller, subject to applicable law: Right to Access.292YOUR PRIVACY RIGHTS Depending on your jurisdiction, you may have certain rights with respect to your Personal Data that we process in our capacity as a data controller, subject to applicable law: Right to Access.
291You have the right to access your Personal Data held by us.293You have the right to access your Personal Data held by us .
293You have the right to rectify inaccurate Personal Data and, taking into account the purpose of processing, to ensure it is complete.295You have the right to rectify inaccurate Personal Data and, taking into account the purpose of processing, to ensure it is complete .
294Right to Erasure (or “Right to be Forgotten”).296Right to Erasure (or "Right to be Forgotten").
295You have the right to have your Personal Data erased or deleted.297You have the right to have your Personal Data erased or deleted .
297You have the right to restrict our processing of your Personal Data.299You have the right to restrict our processing of your Personal Data .
299You have the right to transfer your Personal Data, when possible.301You have the right to transfer your Personal Data, when possible .
301You have the right to object to the processing of your Personal Data that is carried out on the basis of legitimate interests, such as direct marketing.303You have the right to object to the processing of your Personal Data that is carried out on the basis of legitimate interests, such as direct marketing .
303You may also have the right to opt-out of the sharing of your Personal Data with third parties for targeted advertising purposes on third-party sites.305You may also have the right to opt-out of the sharing of your Personal Data with third parties for targeted advertising purposes on third-party sites .
304As described in Section III above, Okta may use targeted or advertising cookies for our marketing efforts and to reach potential customers across the web.306As described in Section III above, Okta may use targeted or advertising cookies for our marketing efforts and to reach potential customers across the web .
305Depending on your jurisdiction (for example, if you are a California resident), you have the right to opt-out of the sale or sharing of your Personal Data by us as a business.307Depending on your jurisdiction (for example, if you are a California resident), you have the right to opt-out of the sale or sharing of your Personal Data by us as a business .
306Okta shares Personal Data as further described below in Section XI, which may be considered a “sale” of Personal Data under the California Consumer Privacy Act.308Okta shares Personal Data as further described below in Section XI, which may be considered a "sale" of Personal Data under the California Consumer Privacy Act .
307You may opt out by clicking the “ Your Privacy Choices ” link at the bottom of our website and selecting your preferences on that page.309You may opt out by clicking the "Your Privacy Choices" link at the bottom of our website and selecting your preferences on that page .
309You have the right not to be subject to automated decision-making, including profiling, which produces legal effects.311You have the right not to be subject to automated decision-making, including profiling, which produces legal effects .
310Okta does not currently engage in the foregoing on our websites or in our products and services.312Okta does not currently engage in the foregoing on our websites or in our products and services .
312You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights as described above.314You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights as described above .
313If you would like to make a request and exercise your rights described above or have questions or concerns, please complete our online form or reach out to us using the contact information below.315If you would like to make a request and exercise your rights described above or have questions or concerns, please complete our online form or reach out to us using the contact information below .
314You also have the right to lodge a complaint with your relevant supervisory authority.316You also have the right to lodge a complaint with your relevant supervisory authority .
316Information for California Residents / Your California Privacy Rights Under the California Consumer Privacy Act of 2018 (“CCPA”), California residents have certain rights to understand and request that we disclose details about how we handle your Personal Data.318Information for California Residents / Your California Privacy Rights Under the California Consumer Privacy Act of 2018 ("CCPA"), California residents have certain rights to understand and request that we disclose details about how we handle your Personal Data .
317If you would like to learn about our process for verifying requests, including the details that you must provide to us to verify your request, click here .319If you would like to learn about our process for verifying requests, including the details that you must provide to us to verify you r request, click here .
318To learn more about how we collect, use, disclose, and share your Personal Data, please see below.320To learn more about how we collect, use, disclose, and share your Personal Data, please see below .
319Categories of Personal Data Collected In the preceding 12 months, we have collected the following categories of Personal Data about California consumers.321CATEGORIES OF PERSONAL DATA COLLECTED In the preceding 12 months, we have collected the following categories of Personal Data about California consumers.
322The Personal Data categories are: identifiers, such as name, email address, address, and phone number; categories of Personal Data described in subdivision (e) of Section 1798.80, such as address, telephone number, employment, and employment history; commercial information, such as records of products or services purchased and other transactional data; Internet or other network or device activity details, such as technical data about your use of our website, products and services; geolocation data, such as your approximate location based on IP address; audio, electronic, or visual data, such as part of a photo or recording for an Okta in-person or virtual event; professional or employment-related information, such as your employer and job role; education information and details such as education history, certifications and qualifications; any other information you provide to Okta in connection with a job application, such as information contained in a cover letter, information disclosed in an interview, or other information you volunteer during the application process; and any information gathered via web tracking technologies on our websites to communicate with you to enhance the function of the website and our services (i.e., cookies, chatbots, session replay, etc.); and inferences drawn from any of the above information.324The Personal Data categories are : identifiers, such as name, email address, address, and phone number ; categories of Personal Data described in subdivision (e) of Section 1798.80, such as address, telephone number, employment, and employment history ; commercial information, such as records of products or services purchased and other transactional data ; Internet or other network or device activity details, such as technical data about your use of our website, products and services ; geoloca tion data, such as your approximate location based on IP address ; audio, electronic, or visual data, such as part of a photo or recording for an Okta in-person or virtual event ; professional or employment-related information, such as your employer and job role ; education information and details such as education history, certifications and qualifications ; any other information you provide to Okta in connection with a job application, such as information contained in a cover letter, information disclosed in an interview, or other information you volunteer during the application process ; and inferences drawn from any of the above information .
323We may retain this Personal Data for as long as is needed for the purpose(s) for which it was collected and no longer than is relevant and reasonably necessary.325We may retain this Personal Data for as long as is needed for the purpose(s) for which it was collected and no longer than is relevant and reasonably necessary .
324Our retention periods vary based on business, legal and regulatory needs.326Our retention periods vary based on business, legal and regulatory needs .
325We securely retain records of data requests for at least 24 months as required under the CCPA.327We securely retain records of data requests for at least 24 months as required under the C CPA .
326For further information on our retention criteria see Section IX above.328For further information on our retention criteria see Section IX above .
327Business and Commercial Purposes for Collection; Disclosures for a Business Purpose We may collect all of the above categories of Personal Data to run our business and carry out our day-to-day activities, as described above in Section IV.329BUSINESS AND COMMERCIAL PURPOSES FOR COLLECTION; DISCLOSURES FOR A BUSINESS PURPOSE We may collect all of the above categories of Personal Data to run our business and carry out our day-to-day activities, as described above in Section IV.
328We have disclosed each of these categories of Personal Data with our service providers for various business purposes, as described above in Section V, in the preceding 12 months.330We have disclosed each of these categories of Personal Data with our service providers for various business purposes, as described above in Section V. in the preceding 12 months.
329We collect and process Personal Data related to job applicants to recruit and hire, assess and evaluate a job applicant’s skills and qualifications, comply with legal obligations, and send information about positions at Okta that may be of interest to individuals.331We collect and process Personal Data related to job applicants to recruit and hire, assess and evaluate a job applicant's skills and qualifications, comply with legal obligations, and send information about positions at Okta that may be of interest to individuals.
330Categories of Personal Data Sold or Shared for Cross-Context Behavioral Advertising In the preceding 12 months, we have disclosed the above categories of Personal Data to third-party advertising partners, such as in connection with our use of tracking technologies for cross-context behavioral advertising or by providing lists of email addresses for potential customers, so that we can reach you across the web with advertisements for our products and services.332CATEGORIES OF PERSONAL DATA SOLD OR SHARED FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING In the preceding 12 months, we have disclosed the above categories of Personal Data to third-party advertising partners, such as in connection with our use of tracking technologies for cross-context behavioral advertising or by providing lists of email addresses for potential customers, so that we can reach you across the web with advertisements for our products and services.
331This may be considered “sharing” or a “sale” under the CCPA.333This may be considered "sharing" or a "sale" under the CCPA.
334Categories of Personal Data Sold or Shared for Job Applicants Okta has not sold or shared any Personal Data relating to job applicants, in the 12 months preceding the effective date of this Privacy Policy.336CATEGORIES OF PERSONAL DATA SOLD OR SHARED FOR JOB APPLICANTS Okta has not sold or shared any Personal Data relating to job applicants, in the 12 months preceding the effective date of this Privacy Policy.
335Sensitive Personal Data In addition to the categories of Personal Data listed above, we may collect certain categories of Sensitive Personal Data from you as that term is defined under CCPA, if you choose to provide it.337SENSITIVE PERSONAL DATA In addition to the categories of Personal Data listed above, we may collect certain categories of Sensitive Personal Data from you as that term is defined under CCPA, if you choose to provide it.
336In the preceding 12 months, we may have collected the following categories of Sensitive Personal Data from California consumers: Social Security Number, driver’s license, state identification card, or passport number; account log-In, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; contents of your email and text messages, unless we are the intended recipient of the communication; biometric information for the purpose of unique identification; health information; and sex life or sexual orientation information.338In the preceding 12 months, we may have collected the following categories of Sensitive Personal Data from California consumers: Social Security Number, driver's license, state ide ntification card, or passport num ber ; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account ; precise geolocation ; racial or ethnic origin, religious or philos ophical beliefs, or union member ship ; contents of your email and text messages, unless we are the intended recipient of the communication ; biometric information for the purpose of unique identification ; health information ; and sex life or sexual orientation information .
337Categories of Sensitive Personal Data Disclosed In the preceding 12 months Okta has not sold or shared any Sensitive Personal Data; however, we may have disclosed your Sensitive Personal Data to service providers for business purposes as further described in Section V above and as set forth below.339CATEGORIES OF SENSITIVE PERSONAL DATA DISCLOSED In the preceding 12 months Okta has not sold or shared any Sensitive Personal Data; however, we may have disclosed your Sensitive Personal Data to service providers for business purposes as further described in Section V above and as set forth below.
338Business Purposes For Which Sensitive Personal Data will be Used or Disclosed We may collect the categories of Sensitive Personal Data listed for processing job applications and the purposes as further described in Section IV above, and to further our legitimate business purposes as outlined under the CCPA: performing services, including maintaining or servicing accounts; detection and prevention of security incidents; protecting against malicious, deceptive, fraudulent or illegal actions and prosecuting those responsible; auditing related to consumer interactions; short-term, transient use; quality and safety maintenance or verification; to enhance the function of the website and our services (i.e., cookies, chatbots, session replay, etc.); internal research for technological development; and debugging to identify and repair functionality.340BUSINESS PURPOSES FOR WHICH SENSITIVE PERSONAL DATA WILL BE USED OR DISCLOSED We may collect the categories of Sensitive Personal Data listed for processing job applications and the purposes as further described in Section IV above, and to further our legitimate business purposes as outlined under the CCPA : performing services, including maintaining or servicing accounts ; detection and prevention of security incidents ; protecting against malicious, deceptive, fraudulent or illegal actions and prosecuting those responsible ; auditing related to consumer interactions ; short-term, transient use ; quality and safety maintenance or verification ; internal research for technological development ; and debugging to identify and repair functionality .
339Your Rights The CCPA gives you certain rights regarding the Personal Data we collect about you: Right to Know About Personal Data Collected, Disclosed, or Sold.341YOUR RIGHTS The CCPA gives you certain rights regarding the Personal Data we collect about you: Right to Know About Personal Data Collected, Disclosed, or Sold.
340You have the right to request to know what Personal Data we collect, use, disclose, share and sell about you.342You have the right to request to know what Personal Data we collect, use, disclose, share and sell about you .
342You have the right to request the deletion of your Personal Data collected or maintained by us as a business.344You have the right to request the deletion of your Personal Data collected or maintained by us as a business .
344You have the right to opt-out of the sale of your Personal Data by us as a business.346You have the right to opt-out of the sale of your Personal Data by us as a business .
345Okta shares Personal Data as described above, which may be considered a “sale” of Personal Data under the CCPA.347Okta shares Personal Data as described above, which may be considered a "sale" of Personal Data under the CCPA .
346You may opt out by clicking here “ Your Privacy Choices ” link at the bottom of our website and selecting your preferences on that page.348You may opt out by clicking here "Your Privacy Choices" link at the bottom of our website and selecting your preferences on that page .
347You may also opt out by broadcasting an opt-out preference signal like the Global Privacy Control (GPC), but please note that this signal will be linked to your browser only.349You may also opt out by broadcasting an opt-out preference signal like the Global Privacy Control (GPC), but please note that this signal will be linked to your browser only .
350In some instances, we may use or disclose your Sensitive Personal Data for the legitimate business purposes as outlined under the CCPA, and for any other purposes as set forth in Section IV, above.352In some instances, we may use or disclose your Sensitive Personal Data for the legitimate business purposes as outlined under the CCPA, and for any other purposes as set forth in Section IV, above .
351If we ever use or disclose your Sensitive Personal Data for a reason other than the legitimate business purposes as outlined under the CCPA and for any other purposes other than those described in Section IV, we will update this Privacy Policy and provide you with instructions to limit the use and disclosure of your Sensitive Personal Data.353If we ever use or disclose your Sensitive Personal Data for a reason other than the legitimate business purposes as outlined under the CCPA and for any other purposes other than those described in Section IV, we will update this Privacy Policy and provide you with instructions to limit the use and disclosure of your Sensitive Personal Data .
353You have the right to request the correction of your Personal Data if it is inaccurate and you may submit a request as further described below.355You have the right to request the correction of your Personal Data if it is inaccurate and you may submit a request as further described below .
355You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.357You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA .
357You may designate an authorized agent to make a request under the CCPA on your behalf.359You may designate an authorized agent to make a request under the CCPA on your behalf .
358We may require the agent to demonstrate proof of their authorization by providing us with a signed permission from you or a copy of your power-of-attorney document granting that right.360We may require the agent to demonstrate proof of their authorization by providing us with a signed permission from you or a copy of your power-of-attorney document granting that right .
359In the case of the former, we may still request that you verify your own identity as described above or directly confirm that you have provided such permission.361In the case of the former, we may still request that you verify your own identity as described above or directly confirm that you have provided such permission .
361We do not provide any financial incentives tied to the collection, sale, or deletion of your Personal Data.363We do not provide any financial incentives tied to the collection, sale, or deletion of your Personal Data .
362If you would like to make a request and exercise your rights described above, please complete our online form , or contact us via the telephone number listed in the section below.364If you would like to make a request and exercise your rights described above, please complete our online form, or contact us via the telephone number listed in the section below .
364How to Contact Okta If you would like to contact us with questions or concerns about our privacy policies and practices, you may contact us via any of the following methods: Online Form: Click here .366How to Contact Okta If you would like to contact us with questions or concerns about our privacy policies and practices, you may contact us via any of the following methods : Online Form: Click here .
365Email: privacy@okta.com Toll-free Number (USA): 888-655-1161 Mailing Address: Okta, Inc.367Email: privacy@okta.com Toll-free Number (USA): 888-655-1161 Mailing Address : Okta, Inc.
366(including its subsidiary, Auth0, LLC) ATTN: Okta Data Protection Officer (Okta Privacy Team) 100 First Street, Floor 6 San Francisco, CA 94105 USA Okta UK Limited ATTN: Okta Data Protection Officer (Okta Privacy Team) 20 Farringdon Road ECIM 3HE United Kingdom Okta Japan K.K. ATTN: Okta Data Protection Officer (Okta Privacy Team) 45F, Shibuya Scramble Square 2-24-12 Shibuya Shibuya-ku, Tokyo, Japan, 150-6139 A representative director for Okta in Japan is Takashi Watanabe.368(including its subsidiary, Auth0 LLC), ATTN: Okta Data Protection Officer (Okta Privacy Team), 100 First Street, Floor 6, San Francisco, CA 94105, USA Okta UK Limited, ATTN: Okta Data Protection Officer (Okta Privacy Team), 20 Farringdon Road, EC1M 3HE, United Kingdom Okta Japan K.K., ATTN: Okta Data Protection Officer (Okta Privacy Team), 45F, Shibuya Scramble Square, 2-24-12 Shibuya, Shibuya-ku, Tokyo, Japan, 150-6139 (A representative director for Okta in Japan is Takashi Watanabe.) ACCESSIBILITY If you are not able to access our form, you may request that a copy be provided to you in an alternative format by calling 888-655-1161 (USA toll-free) or by emailing privacy@okta.com.
367Accessibility If you are not able to access our form, you may request that a copy be provided to you in an alternative format by calling 888-655-1161 (USA toll-free) or by emailing privacy@okta.com .—Removed
369Changes to the Policy This Privacy Policy may be updated from time to time, to reflect changes in our practices, technologies, additional factors, and to be consistent with applicable data protection and privacy laws and principles, and other legal requirements.370Changes to the Policy This Privacy Policy may be updated from time to time, to reflect changes in our practices, technologies, additional factors, and to be consistent with applicable data protection and privacy laws and principles, and other legal requirements .
370If we do make updates, we will update the “effective date” at the top of this Privacy Policy webpage.371If we do make updates, we will update the "effective date" at the top of this Privacy Policy webpage .
371If we make a materially significant update, we may provide you with notice prior to the update taking effect, such as by posting a conspicuous notice on our website or by contacting you using the email address you provided.372If we make a materially significant update, we may provide you with notice prior to the update taking effect, such as by posting a conspicuous notice on our website or by contacting you using the email address you provided .
372For the September, 2025 archived Privacy Policy, please visit https://www.okta.com/legal/privacy-policy/2025-03-archived/ .373For the January 01, 2024 archived Privacy Policy, please visit https://www.okta.com/privacy-policy/2024-01-archived/ .
Stay ahead of the changes

Watch this before it changes again

Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.

Monitor Okta + up to 20 platforms — $4.99/mo → Get the research letter, free