HaaS on SaaS

Jonathan Haas

I'm a product manager at Vanta with a passion for security and privacy. I write about SaaS, startups, and security.

Privacy

California Resident Notice at Collection

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (“CCPA”), requires us to provide some additional information to California residents. This Section only applies to you if you are a California resident, although please note that this information and the rights afforded herein are the same as offered to our other users in our main Privacy Policy. This Section does not apply to personal information we collect from our employees and job applicants in their capacity as employees and job applicants, as such information practices are described in separate policies.

The following chart details these activities:

Category of personal information

Purposes of use

Categories of Third Parties Information

Categories of Third Parties

Contact information (such as your full name, phone number, email address)

Provide the Services; Communicate with you; Analyze use of and improve the services; With your consent; Comply with law or defend our legal rights; Security/fraud prevention

Affiliated entities; Service providers; Entities for legal purposes

We do not share/sell

Customer service interaction information (including optional surveys and when you ask for help)

Provide the Services; Communicate with you; Analyze use of and improve the services; With your consent; Comply with law or defend our legal rights; Security/fraud prevention

Affiliated entities; Service providers; Entities for legal purposes

We do not share/sell

Product interaction information

Provide the Services; Communicate with you; Analyze use of and improve the services; With your consent; Comply with law or defend our legal rights; Security/fraud prevention

Affiliated entities; Service providers; Entities for legal purposes

We do not share/sell

Internet network and device information (such as mobile device information, IP address, and information about your interaction with the services)

Provide the Services; Analyze use of and improve the services; With your consent; Comply with law or defend our legal rights; Security/fraud prevention

Affiliated entities; Service providers; Entities for legal purposes;

We do not share/sell

Login information (such as your username and password)

Provide the Services; Comply with law or defend our legal rights; Security/fraud prevention; Comply with law or defend our legal rights

Affiliated entities; Service providers; Entities for legal purposes

We do not share/sell

Professional or employment information (such as the name and address of the company you work for and your title)

Provide the Services; Communicate with you; Analyze use of and improve the services; With your consent; Comply with law or defend our legal rights; Security/fraud prevention

Affiliated entities; Service providers; Entities for legal purposes;

We do not share/sell

Other information (any other information you choose to provide directly to us, including optional profile photos)

Provide the Services; Communicate with you; Analyze use of and improve the services; With your consent; Comply with law or defend our legal rights; Security/fraud prevention

Affiliated entities; Service providers; Entities for legal purposes;

We do not sell/share

For more information about each category of personal information, purpose of use, and third parties to which we disclose personal information, please see the “What we collect and why,” and “When we access or disclose you information” sections of our Privacy Policy.

Your Choices Regarding “Sharing” and “Selling”: You have the right to opt out of our sale/sharing of your personal information for purposes of online analytics and advertising. Currently, we do not sell or share your data as defined by the CCPA and we have not done so over the past 12 months from the effective date of this Privacy Policy.

Other CCPA Rights. If we ever offer any financial incentives in exchange for your personal information, we will provide you with appropriate information about such incentives.

The CCPA also allows you to limit the use or disclosure of your “sensitive personal information” (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for business purposes for which you cannot opt out under the CCPA.

Please see the “Your rights with respect to your information” section of our Policy above for information about the additional rights you have with respect to your personal information under California law and how to exercise them.

Retention of Your Personal Information. Please see the “Retention Of Your Information” section belowof our Privacy Policy for more information.

Shine the Light Disclosure

The California “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we disclose certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We currently do not disclose your personal information to third parties for their own direct marketing purposes.