Table of Contents

Great Expectations Privacy Policy

Last Updated: March 2023

1. Introduction

Great Expectations Labs, Inc. and its affiliates (“Great Expectations,” “we,” “our,” and/or “us”) value the privacy of individuals who use our website, greatexpectations.io, and related services, paid products and tools, and our open source software (collectively, our “Services”). This privacy policy (the “Privacy Policy”) explains how we process personal information from or about individuals who use our Services (“Users,” “you,” and/or “yours”) on their devices. By using our Services, you agree to the processing and procedures this Privacy Policy describes.

Generally, your personal information belongs to you, and you have certain rights related to our processing of your personal information. However, your personal information does not include information which does not relate to an identified or identifiable individual or to personal information or data rendered anonymous in such a manner that the individual is not or no longer identifiable (“Anonymized Data”). We may use Anonymized Data for our own purposes in any manner and without attribution or compensation to any person.

This Privacy Policy applies to everybody who interacts with us online or otherwise. Because different portions of the Privacy Policy will apply differently to the various groups who interact with us, we have tried to clearly categorize the types of personal information we process and how we do so. If you have any questions about this Privacy Policy or how we handle your personal information, please email us at info@greatexpectations.io.

2. Personal Information We Process

We may process a variety of personal information from or about you or your devices from various sources, as described below.

If you do not provide your personal information when requested, you may not be able to use our Services if that personal information is necessary to provide you with our Services or if we are legally required to process it. Where required by applicable law, we indicate whether and why you must provide us with your personal information, as well as the consequences of failing to do so.

A. Personal Information You Provide to Us.

Registration and Profile Information. If you sign up for an account or register to use our Services, we ask you for your name, email address, username, password, and other personal information we may require or request.

Communications. If you contact us directly, we may receive additional personal information about you. For example, when you contact our Customer Support Team using our webform, chat, or Slack, we may receive your name, email address, company, job title, the contents of a message or attachments that you may send to us, and other personal information you choose to provide. If you subscribe to our newsletter, then we will process certain personal information from you, such as your email address. When we send you emails, we may track whether you open them to learn how to deliver a better customer experience and improve our Services.

Customer Data. Customers have control over the types and amounts of data and information processed using the Services. We process all data that customers configure, input, and use within the Services.

Careers. If you decide that you wish to apply for a job with us, you may submit your contact information and your resume online. We will process the personal information you choose to provide on your resume, such as your education and employment experience. You may also apply through other platforms. If you do so, we will process the personal information you make available to us on those platforms and may process information given to us by those platforms.

Payment Information. Payment information is only processed when your use of the Services is subject to the payment of a fee or other charge. Payment information is necessary for us to process your payments for the Services. Payment information may vary depending on the payment method you use but will include information such as:

  • Name;

  • Date of birth;

  • Certain credit card information is used to reference a credit card (Please note that we use a third-party provider to process credit card information and process payments. The third party's collection tool may be layered over our Services, so your credit card information may never hit our system at all.);

  • Address and postal code; and

  • Mobile phone number (if applicable). 

 Generally, our lawful basis for processing the personal information you provide us is (1) our contract with you; (2) your consent; or (3) our legitimate interest in improving our Services based on the payment information you provide us.

B. Personal Information We Process When You Use Our Services.

Location Information. When you use our Services, we may infer your more general location information (for example, your IP address may indicate your more general geographic region).

Device Information. We process personal information about the device and software you use to access our Services, including internet protocol (IP) address, web browser type, operating system version, and device identifiers.

Usage Information. To help us understand how you use our Services and to help us improve them, we automatically process personal information about your interactions with our Services, like the pages or other content you view, the searches you conduct, your comments, any content you post and the dates and times of your visits.

When you use our Great Expectations software, our software may process your IP address and event data generated by your use of the Great Expectations software. You can disable our processing of this personal information by modifying the software’s configuration file, as further described at https://docs.greatexpectations.io/docs/reference/learn/usage_statistics/.

Information from Cookies and Similar Technologies. We and third party partners process personal information using cookies, pixel tags, or similar technologies. Our third party partners, such as analytics and advertising partners, may use these technologies to process personal information about your online activities over time and across different services. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services.

Please review your web browser’s “Help” file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept cookies from the Services, you may not be able to utilize the features of the Services to their fullest potential.

Generally, our lawful basis for processing your personal information we process when you use our Services is (1) our contract with you; (2) our obligation to provide you with the Services; or (3) our legitimate interest in improving our Services based on the information we process.

C. Personal Information We Process from Third Parties.

Other third parties. We may process additional personal information about you, i.e. demographic data, from third parties such as data or marketing partners, and combine it with other personal information we have about you.

3. How We Use the Information We Process

We use the personal information we process:

  • To provide, maintain, improve, and enhance our Services;

  • To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide customer support;

  • For marketing purposes, such as developing and providing promotional and advertising materials that may be useful, relevant, valuable or otherwise of interest to you;

  • To personalize your experience on our Services such as presenting tailored content;

  • To anonymize personal information processed through the Services, which we may use for any lawful purpose;

  • To find and prevent fraud, and respond to trust and safety issues that may arise;

  • For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and

  • For other purposes for which we provide specific notice at the time the personal information is processed.

4. Lawful Basis for Processing

Many jurisdictions require that we disclose to you the lawful basis for our processing of your personal information. We do that throughout this Privacy Policy. In general, our lawful basis for processing your personal information includes, but is not limited to:

  • you have consented to the processing of your personal information;

  • we need your personal information to provide you with the Services as requested by you, or to respond to your queries;

  • we have a legal obligation to process your personal information; or

  • we, or a third party, have a legitimate interest in using your personal information (e.g., to improve our Services and for product development purposes).

By accessing or using any of the Services or by otherwise interacting with us online, you consent to our processing of your personal information as described in this Privacy Policy. If our processing of your personal information is based on your consent, you may withdraw your consent at any time, and we will cease processing your personal information. However, in some cases, this may result in your inability to receive partial or full access to the Services, and your withdrawal of consent does not limit our ability to use the Anonymized Data for use by us in connection with our legitimate business efforts in the future. In addition, your withdrawal of consent may not prevent us from processing personal information if we have processed such personal information pursuant to a different lawful basis or to preserve legal claims. For example, if you give your consent for us to process your personal information, but we are also required by law to keep your personal information, that separate “lawful basis” will still apply, even if you withdraw your consent.

When you enter into an agreement with us, either by accessing the Services, by executing an agreement in hard copy or by clicking “I Accept” or similar language online, we will process your personal information for the purposes of fulfilling the terms of our contract with you. In that case, our processing of your personal information is based on the contract, so your withdrawal of consent will only be effective after the purposes for processing your personal information have been fulfilled and after we no longer have a legal obligation to keep your personal information.

In all cases, we will comply with applicable law and we will cease processing your personal information after the legal right, obligation, or another lawful basis expires.

5. How We Share Personal Information

Affiliates. We may share any personal information we receive with our affiliates for any of the purposes described in this Privacy Policy.

Vendors and Service Providers. We may share any personal information we receive with vendors and service providers retained in connection with the provision of our Services.

User Content. Your name, username, and other profile information you provide will always be viewable and searchable by other users. The content you post to the Services will be displayed on the Services and viewable by other users by default. Although this content is public by default, below in the “Your Rights” section of this Privacy Policy, we describe the controls that you can use, along with other relevant settings associated with your account, to limit the sharing of certain personal information. We are not responsible for the other users’ use of available personal information, so you should carefully consider whether and what to post or how you identify yourself on the Services.

Marketing. We do not rent, sell, or share personal information about you with nonaffiliated companies for their direct marketing purposes, unless we have your permission.

Analytics Partners. We use analytics services such as Google Analytics to process certain analytics data. These services may also process personal information about your use of other websites, apps, and online resources. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/, and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Advertising Partners. We work with third party advertising partners to show you ads that we think may interest you. These advertising partners may set and access their own cookies, pixel tags and similar technologies on our Services and they may otherwise process or have access to personal information about you which they may process over time and across different online services. Some of our advertising partners are members of the Network Advertising Initiative (http://optout.networkadvertising.org/?c=1#!/) or the Digital Advertising Alliance (http://optout.aboutads.info/?c=2\&lang=EN). If you do not wish to receive personalized ads, please visit their opt-out pages to learn about how you may opt out of receiving web-based personalized ads from member companies. You can access any settings offered by your mobile operating system to limit ad tracking, or you can install the AppChoices mobile app to learn more about how you may opt out of personalized ads in mobile apps.

As Required By Law and Similar Disclosures. We may process your personal information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal processes, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. For the avoidance of doubt, the disclosure of your personal information may occur if you post any objectionable content on or through the Services.

Merger, Sale, or Other Asset Transfers. We may disclose and transfer your personal information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our business or assets.

Consent. We may also disclose personal information from or about you or your devices with your permission.

If we ever plan to process any of your personal information for any other purposes not identified above and we do not have a separate lawful basis for that new purpose for processing, we will only do so after obtaining your specific consent.

6. Your Rights

Under applicable data protection, privacy and other laws, you have certain rights related to your access and control of your personal information. Such rights may include the following:

  • The right to access, correct, update, or request deletion of your personal information.

  • The right to object to processing or restrict the processing of your personal information. Please note that if you exercise this right, it may limit or eliminate our ability to provide you the Services.

  • The right to request portability of your personal information.

  • The right to opt-out of marketing communications we send you. You can exercise this right by clicking the "Unsubscribe" or "Opt-Out" link found in these communications.

  • The right to not be subject to a decision based solely on automated processing, including profiling, which is known as Automatic Decision Making.

  • The right to submit a complaint to any applicable regulatory authority about our processing activities.

  • The right to opt-out of us sharing (as defined in the CPRA) your personal information, including for direct marketing purposes, is subject to certain legal exceptions.

We may use additional processes to verify your identity before we reveal or delete any of your personal information, including two-factor or two-step authentication measures to ensure we can identify you.

This list may not include all of your rights under applicable laws. If you believe you have additional rights, please contact us using the methods in this Privacy Policy.

Further, although we currently do not process personal information without consent, if we at any time in the future process personal information without your express consent, you may opt-out or withdraw consent at any time.

Please note that exercising any of the above rights may limit or eliminate our ability to provide you the Services. If so, we may terminate the Services due to such requests.

We will try to comply with your request(s) as soon as reasonably practicable. Upon receipt of your written request, we will provide you with a copy of your information, although in certain limited circumstances we may not be able to make all relevant information available to you, such as where that information also pertains to another user. In such circumstances we will provide reasons for the denial to you upon request.

Please also note that if you do opt-out of receiving marketing-related emails from us, we may still send you messages for administrative or other purposes directly relating to your use of the Services, and you cannot opt-out from receiving those messages while continuing to use the Services.

Do Not Track. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.

To exercise any of these rights, or if you have any questions about our processing of your Data, please contact us at info@greatexpectations.io or at (800) 423-0619.

 A.  Privacy for EU/UK Residents

The Regulation (EU) 2016/679 (General Data Protection Regulation) made effective in Europe on May 25, 2018 (“GDPR”) requires that we clearly describe to data subjects the data we process and how we process that data. This Privacy Policy does that and if you have any questions for us regarding our data processing, please contact us at info@greatexpectations.io. 

We are based in the United States. By accessing or using the Services or otherwise providing information to us, you understand that your information will be subject to transfer and processing in and to the U.S.

We have appointed a data processing officer to help us ensure that we comply with applicable European data privacy laws.  That data processing officer can be reached at info@greatexpectations.io.

Pursuant to the GDPR, residents of the European Economic Area ("EEA") have the right to obtain our confirmation of whether we maintain personal information relating to them in the United States. If you are a resident of the EEA, upon request from you, we will provide you with access to the personal information that we hold about you. Please contact us if you have any questions.

Further, if you are a resident of the United Kingdom ("UK"), to the extent the GDPR as incorporated into UK law pursuant to s.3 of the European Union (Withdrawal Act) 2018 (as amended, the "UK GDPR") is different than the GDPR, we will follow all supplemental requirements under the UK GDPR and you have all rights as a UK citizen under the UK GDPR.

When applicable, we enter into appropriate and approved transfer mechanisms (as defined in the GDPR and UK GDPR) to accommodate transfers of personal information leaving the EEA or UK to the United States.

B.  Privacy for California Residents

California adopted the California Consumer Privacy Act (“CCPA”), which took effect at the beginning of 2020 and has now adopted the California Privacy Rights Act ("CPRA"), which fully takes effect on January 1, 2023 . We comply with the requirements of the CCPA and CPRA to the extent they apply to us. 

If you are a California resident, you may request to exercise your rights for any personal information we have processed in the 12 months prior to your request. Such request covers any categories, sources, purposes, and, if applicable, third parties to whom we share the personal information. Further, you can exercise any of your rights free of discrimination, for example, we cannot increase the price of the Services or decrease the quality of the Services because you exercise your rights.

For more information, please direct your questions to us at info@greatexpectations.io or you can call our toll-free number at (800) 423-0619.

7. Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third party services or any personal information you disclose to these third parties. We encourage you to read their privacy policies before providing any personal information to them.

8. Security

We make reasonable efforts to protect your personal information by using physical and electronic safeguards designed to improve the security of the personal information we maintain. However, as our Services are hosted electronically, we can make no guarantees as to the security or privacy of your personal information.

9. Data Retention

We take measures to delete your personal information or keep it as Anonymized Data when this information is no longer necessary for the purposes for which we process it, unless we are required by law to process this information for a longer period. When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and the relevant statute of limitations. All retained information remains subject to this Privacy Policy. In most situations, we will delete your personal information and customer account within sixty (60) days of account termination. Further we will delete personal information upon receipt of a written request by email to info@greatexpectations.io.

10. Children's Privacy

We do not knowingly process personal information from children under 16 years of age, and no part of our Services are directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, then you may alert us at info@greatexpectations.io.

11. Update Your Information

You can update your account and profile information through your profile settings, or contact us to delete your account.

12. Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we process personal information previously processed from you through the Services, we will attempt to notify you through the Services, by email, or other means.

13. Contact Information

If you have any questions, comments, or concerns about our processing activities, please email us at info@greatexpectations.io or call us at (800) 423-0619.

©2024 Great Expectations. All Rights Reserved.