Research and Development

Oracle Research and Development Privacy Policy

1. INTRODUCTION

This Oracle Research and Development Privacy Policy (also referred to as the “Privacy Policy”) informs individuals (“you”) about the collection and use (collectively referred to as “processing” or “process”) of your personal information in connection with Oracle’s research and development (“R&D”) activities, including artificial intelligence and machine learning (“AI/ML”) activities, in order to analyze, develop, and improve Oracle products and services, and for security and compliance purposes. This Privacy Policy also explains your privacy rights in relation to these processing activities.

This Privacy Policy was last updated on August 28, 2026. However, the Privacy Policy can change over time, for example to comply with legal requirements or to meet changing business needs. The most up-to-date version can be found on this site. In case there is an important change that we want to highlight to you, we will also inform you in another appropriate way (for example, via a pop-up notice or statement of changes on our website).

As used in this Privacy Policy, ‘personal information’ means information that relates to an identified individual or to an identifiable individual. For more detail about the types of information about you that Oracle may process, please refer to section 4 below.

Categories of personal information

Find out what categories of personal information Oracle processes.

Data use

Find out how Oracle uses personal information.

Sources

Find out how Oracle obtains your personal information.

Disclosing

Find out how Oracle discloses personal information within Oracle and with third parties.

Rights

Exercise your privacy rights (opt-out, deletion, correction, or access) by filling out our inquiry form.

Contact

Contact the Global Data Protection Officer with any questions or concerns.

2. SCOPE

This Privacy Policy applies to Oracle’s processing of personal information for the activities specified in this Privacy Policy. Oracle may obtain personal information from the following sources:

• An Oracle NetSuite customer solely when agreed to by contract with that customer to use their data (“NetSuite Data”);

• Third party sources such as data providers, business partners, vendors, and other related sources (“Third Party Data”).

3. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL INFORMATION?

Oracle America, Inc., having its registered address at 2300 Oracle Way, Austin, TX, 78741, USA, is responsible for processing your personal information in scope of this Privacy Policy.

For personal information sourced in the EU/EEA, Oracle America, Inc.’s EU representative is Oracle EMEA Limited, having its registered address at East Point Business Park, Fairview, Dublin 3, Ireland.

For personal information sourced in the UK, Oracle America, Inc.’s UK representative is Oracle Corporation UK Ltd, having its registered address at Oracle Parkway, Thames Valley Park (TVP), Reading, Berkshire, RG6 1RA, UK.

4. WHICH CATEGORIES AND SPECIFIC PIECES OF PERSONAL INFORMATION DO WE PROCESS?

In cases where processing of personal information is not central to the R&D activities described in Section 5, Oracle will seek to minimize the use of personal information in the relevant datasets. Where appropriate and technically and commercially feasible, Oracle may apply data minimization and privacy-enhancing techniques such as limiting data fields, aggregation, masking, pseudonymization, de-identification, differential privacy, or similar methods.