You can contact One Identity at privacy@oneidentity.com to request access to, correction of, or deletion of your personal data, and the company will respond within the legally required timeframe.
This analysis describes what OneLogin's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause operationalizes data subject rights under privacy regulations by designating a contact point (privacy@oneidentity.com) and establishing a compliance timeline tied to statutory requirements, which creates an administrative process for handling individual data requests.
The updated policy discloses that OneLogin may record calls with consent and use AI to analyze call transcripts, chat conversations, and sales emails for multiple purposes including follow-up task identification, call summarization, sales analytics, communication effectiveness analysis, and forecast modeling. Under the revised terms, recorded call audio and video may be reviewed for employee training, monitoring, and coaching purposes. The policy also states that OneLogin will save chat and call conversation data to inform future interactions. These practices apply when you communicate with OneLogin via phone calls, chat, email, text, or other teleconference solutions. You should review the updated disclosure to understand how your communication data will be processed and retained.
View change record →The updated policy removes explicit language describing how OneLogin uses AI to analyze customer communications. Previously, the policy stated that call audio and video would be recorded with consent and analyzed using AI to identify follow-up tasks, summarize calls, and conduct sales analytics; that chatbot conversations would be analyzed and saved; and that sales emails would be analyzed to determine communication efficacy and forecast next steps. These specific AI analysis practices are no longer described in the updated policy. The revised language also narrows one stated data use purpose, changing 'answers or services you have asked or licensed' to 'services you have purchased.' No consumer opt-out mechanisms or alternative disclosures are provided in the change text.
View change record →This provision with specific process details and response time commitment was removed and fragmented into separate provisions, potentially reducing clarity on how to exercise rights and response timelines.
View full change record →All users — not just EU or California residents — can contact privacy@oneidentity.com to exercise data rights, and One Identity is legally obligated to respond within applicable statutory deadlines (30 days under GDPR, 45 days under CCPA).
How other platforms handle this
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...
Monitoring
OneLogin has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you wish to exercise your rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal data, or to lodge a complaint, you may contact us at privacy@oneidentity.com. We will respond to your request within the timeframe required by applicable law.— Excerpt from OneLogin's OneLogin Privacy Policy
REGULATORY FRAMEWORK: GDPR Arts. 15-22 establish data subject rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and objection (Art. 21). UK GDPR mirrors these provisions. CCPA/CPRA §§1798.100-1798.125 establish equivalent California rights. GDPR Art. 77 grants rights to lodge complaints with DPAs. GDPR Art. 12 requires responses within one month (extendable to three).
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The clause operationalizes data subject rights under privacy regulations by designating a contact point (privacy@oneidentity.com) and establishing a compliance timeline tied to statutory requirements, which creates an administrative process for handling individual data requests.
All users — not just EU or California residents — can contact privacy@oneidentity.com to exercise data rights, and One Identity is legally obligated to respond within applicable statutory deadlines (30 days under GDPR, 45 days under CCPA).
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OneLogin.