Okta collects a wide range of personal information including your name, contact details, employer, device identifiers, and how you interact with Okta's website, and uses this to build profiles about your interests.
This analysis describes what Auth0's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The breadth of data collected, spanning identifiers, behavioral signals, and inferred profiles, means Okta is building a fairly detailed picture of users who visit its websites or use its marketing properties, which is used for targeted advertising and product development.
Interpretive note: The exact categories of inferred profile data and the specific third-party advertising partners are not exhaustively enumerated in the visible policy text; the full scope requires review of the complete published document.
Provides comprehensive transparency about the scope and sources of data collection, including new category of inferred data derived from collected information.
View full change record →Your name, email, employer, device ID, browsing behavior on Okta sites, and inferred interest profiles may all be collected and used for marketing and analytics purposes, including by third-party advertising partners embedded in Okta's web properties.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"We collect personal data directly from you, automatically when you use our websites, products, and services, and from third parties. The personal data we collect includes: identifiers such as name, email address, phone number, company name, and job title; device and usage data such as IP address, browser type, operating system, pages visited, and clickstream data; professional information provided during account registration or event registration; and inferences drawn from this data to create profiles about your preferences and interests.Excerpt from Auth0's Privacy Policy
REGULATORY LANDSCAPE: The scope of data collection engages GDPR's data minimization principle (Article 5(1)(c)), purpose limitation, and the requirement for a valid legal basis for each processing activity.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The breadth of data collected, spanning identifiers, behavioral signals, and inferred profiles, means Okta is building a fairly detailed picture of users who visit its websites or use its marketing properties, which is used for targeted advertising and product development.
Your name, email, employer, device ID, browsing behavior on Okta sites, and inferred interest profiles may all be collected and used for marketing and analytics purposes, including by third-party advertising partners embedded in Okta's web properties.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Auth0.