Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is One Identity's privacy policy, which explains how the company collects and uses personal information from people who visit their website or use their identity and access management products. The most important thing to know is that One Identity shares your personal data, including contact details, usage behavior, and device information, with affiliates, business partners, and third-party vendors for purposes that include marketing and analytics, not just service delivery. If you are a California resident or an EU/EEA user, the policy describes specific rights you can exercise, including requesting deletion or correction of your data, by contacting privacy@oneidentity.com.
This document is One Identity's (formerly OneLogin's) privacy policy governing the collection, use, storage, and sharing of personal information from customers, website visitors, and users of One Identity products and services, with GDPR and various international frameworks cited as its legal basis. The policy states that One Identity collects personal data including contact information, usage data, device identifiers, and in some cases sensitive categories, and the terms authorize sharing this data with subsidiaries, affiliates, business partners, and third-party service providers for purposes including marketing, analytics, product improvement, and legal compliance. The policy includes a broad retention clause permitting data to be held 'as long as necessary' for business or legal purposes without specifying fixed retention periods, and asserts data transfers from the EU/EEA to the US and other jurisdictions under mechanisms such as Standard Contractual Clauses; the breadth of these assertions may be subject to evaluation under applicable data protection law. The policy engages GDPR (as a primary framework for EU/EEA users), CCPA/CPRA (for California residents), and references compliance with various country-specific laws; One Identity's dual role as both a data controller for website visitors and a data processor for enterprise customers creates distinct compliance obligations that the document partially addresses but does not fully delineate in all operational contexts.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trial1 important change detected
2 versions captured · Last updated: May 2026
Monitoring
OneLogin has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle California Resident Rights (CCPA/CPRA) and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.