Elastic Product Privacy Statement

Elastic Product Privacy Statement

Effective Date: September 7, 2026

This Product Privacy Statement (the "Product Privacy Statement" or "Statement") explains how Elastic N.V. and its subsidiaries ("Elastic," "we", "us" and "our") collect, use, and share information, including information relating to an identified or identifiable natural person ("personal data" or "personal information") from our customers or users ("you" and "your") when you use, or demo, Elastic's products such as Elastic Self-Managed Software, Elastic Cloud Services, Cloud Connect, or any other services maintained by Elastic for use by our customers or users, such as Support Services (together the "Products").

Scope and Responsibilities Information collected from the Products How we use Product Usage Data How we share Product Usage Data How we use cookies and data collection tools User privacy rights and choices Security International data transfers Data Privacy Framework California Privacy Rights Other information How to contact us

Scope and responsibilities This Statement applies to the information we collect in connection with your use of the Products and for which we determine the means and purposes of processing (i.e., as a "data controller").

This Product Privacy Statement does not cover:

• Personal data processed by Elastic according to our General Privacy Statement, such as personal data collected when you visit, interact with, or use any of our websites, social media pages, marketing, or sales communications or register for our products and services and you visit, interact with, or use any of our offices, events, sales, marketing, and other offline activities. Please see our General Privacy Statement for details on how this information is processed.
• **Personal data processed by Elastic according to our **Candidate Privacy Statement when an individual applies or is referred for a role with Elastic through our site or otherwise.
• Personal data processed by Elastic as a Processor. This Product Privacy Statement does not apply to personal data processed by Elastic in the role of a Processor or Service Provider (as applicable), for the purposes of the provision, delivery, operation, maintenance, and ongoing efficacy of Elastic's Products, which is subject to the terms of the applicable customer agreement.

Information collected from the Products When you use our Products, Elastic may collect information about how you are using the Products ("Product Usage Data"). The purpose of collecting Product Usage Data is not to identify individuals or otherwise to gather personal data, in accordance with the terms of the applicable agreement and subject to your deployment model and configuration settings. Elastic does not collect Product Usage Data from Products run in air-gapped environments (please see our documentation for more details on air-gapped environments).

Product Usage Data may include:

• Account data: Information collected when you create an account with us, such as the name, email address, username, company name, and company ID associated with your account
• Cluster data: Information about your Elasticsearch cluster, which may include statistics related to uptime, node count, node types, indices, shards, and segments
• Product performance data: Information about the performance of the Products, which may include metrics on the performance and scale of the Products and response times
• Products and system data: Information about the Products you are using and about the systems and related environment from which you access the Products, which may include Product type and version, deployment ID, license information, installed plug-ins, UUID, operating system, hardware version, MAC address, IP address, network connection type, browser type, device type, and third-party systems used in connection with the Products, including technical details such as software identifiers, attributes, and descriptors