Okta Privacy Policy

This document describes how Okta handles your personal information — what it collects, how long it keeps it, and who it shares it with, including event sponsors and third-party ad networks like Google that can track you across the web over time. If you are in California, you have the right to ask what data Okta holds about you, opt out of its sale, and not be penalized for exercising those rights. Your access to Okta's identity services is controlled by the organization that subscribes to Okta, not by Okta directly.

Okta's Privacy Policy establishes the terms under which Okta collects, uses, retains, and shares Personal Data, including Sensitive Personal Data, in connection with its identity cloud services and related activities. It allocates control over individual access to the Okta identity cloud to Okta's customers rather than to Okta itself, and retains Personal Data for periods consistent with the original purpose of collection or as required by legal obligations, dispute resolution, and agreement enforcement. The policy acknowledges that certain sharing of Personal Data may constitute a 'sale' under CCPA, recognizes corresponding opt-out and non-discrimination rights, and commits to updating the policy before using or disclosing Sensitive Personal Data for purposes other than legitimate business purposes. Cross-border transfers to countries lacking adequacy decisions, third-party advertising network tracking, and disclosure of event-attendee Personal Data to sponsors for commercial purposes are also established within the document.

As an individual, Okta retains your Personal Data for as long as consistent with why it was originally collected, with extensions possible for legal obligations, disputes, and enforcement. Okta contracts with third-party advertising networks, including Google, that may track your activity over time across Okta's websites, emails, and other sites. If you are a California resident, you can submit a request to know what Personal Data Okta collects, uses, discloses, shares, or sells about you, opt out of the sale of your Personal Data, and do so without risk of discriminatory treatment from Okta. Attending an Okta event may result in your contact details, content interests, and other activity data being shared with that event's sponsors for commercial purposes.