Grafana Labs Privacy Policy

Grafana Labs

# Privacy Policy
United States Supplement

### United States Supplement

#### California, Colorado and Virginia
To the extent we store and use deidentified personal data, we will not try to reidentify the information, except to test our deidentification methods. If we share deidentified data we will obligate the recipient not to try to reidentify the data.

#### California
Some laws require us to disclose whether the following categories of personal data are collected, shared with third parties for a “business purpose” or transferred for “valuable consideration.” The table below indicates the categories of personal information we collect and transfer in a variety of contexts. We do not “sell” your personal information for money. Because our services are not intended for children, we have no actual knowledge that we share for targeted advertising any personal information of individuals who are under 16 years of age.

**Category of Personal Information**

**Category of Recipients**

**Disclosures for a Business Purpose**

**Sharing for Targeted Advertising**

**Identifiers** – this may include things like name, alias, postal address, unique personal identifier, online identifier, email address, or account name.

Affiliates or subsidiaries

Data analytics providers

Internet service providers

Joint marketing partners

Operating systems and platforms

Other Service Providers

Payment processors and financial institutions

Professional services organizations (e.g. auditors and law firms)

Social networks

Advertising networks.

Yes

Yes

**Government Issued Identification** – this may include things like social security number, driver’s license number, or state issued identification number.

Other Service Providers

Professional services organizations (e.g. auditors and law firms).

Yes

Not shared

**Financial Information** – this may include bank account number, credit card number, debit card number, and other financial information.

Affiliates or subsidiaries

Other Service Providers

Payment processors and financial institutions

Professional services organizations (e.g. auditors and law firms).

Yes

Not shared

**Commercial information** – this may include information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Affiliates or subsidiaries

Data analytics providers

Joint marketing partners

Other Service Providers

Payment processors and financial institutions

Social networks

Advertising networks.

Yes

Yes

**Internet or other electronic network activity information** – this may include browsing history, search history, and information regarding an individual’s interaction with an internet website, app, or ad.

Affiliates or subsidiaries

Data analytics providers

Internet service providers

Joint marketing partners

Operating systems and platforms

Other Service Providers

Social networks

Advertising networks.

Yes

Yes

**Inferences drawn from any of the information listed above**

Affiliates or subsidiaries

Data analytics providers

Internet service providers

Joint marketing partners

Other Service Providers

Social networks

Advertising networks.

Yes

Yes

- **Sensitive Information Disclosure. **We collect the following categories of sensitive personal information (as defined under relevant laws): account log-in in combination with any required security or access code, password, or credentials allowing access to an account. We collect this information to process transactions, comply with laws, manage our business, or provide services. Note that we do not use such information for any purposes that are not identified within Cal. Civ. Code § 1798.121. We do not “sell” or “share” sensitive personal information for cross-context behavioral advertising.

- **California Shine The Light. **If you would like more information on the categories of personal data (if any) we share with third parties or affiliates for those parties to use for direct marketing, submit a written request as described below.

- **De-Identification. **When we de-identify personal information for CCPA anonymization purposes, we commit to maintain and use the personal information that we de-identify (or have received in de-identified form) in de-identified form and will not attempt to re-identify it.

## Table of Contents