Privacy Policy

This Oblivious Network Privacy Policy (“Policy”) outlines the personal information that Oblivious Network, Inc. (“Oblivious Network”, “we”, “us” or “our”) gathers, how we use that personal information, and the options you have to access, correct, or delete such personal information.

Oblivious Network’s Promise

Our mission to help build a better internet is rooted in the importance we place on establishing trust with our customers, users, and the internet community globally. To earn and maintain that trust, we commit to communicating transparently, providing security, and protecting the privacy of data on our systems.

We keep your personal information personal and private. We will not sell or rent your personal information. We will only share or otherwise disclose your personal information as necessary to provide our Services or as otherwise described in this Policy, except in cases where we first provide you with notice and the opportunity to consent.

1. POLICY APPLICATION

This Policy applies to Oblivious Network’s collection, use, and disclosure of the personal information of the following categories of data subjects:

  • Website Visitors: Those who visit our Websites, including those who may opt to provide an email address or other contact information to receive communications from Oblivious Network, fill out a survey, or provide feedback. For the purposes of this Policy, “Websites” refer collectively to http://oblivious.network as well as any other websites Oblivious Network operates for its own behalf and that link to this Policy. For clarity, “Websites” does not include any sites owned or operated by our Customers, including where we serve as Registrar.

  • Customers: Individuals or entities who enter into a subscription agreement with Oblivious Network (or its authorized partner) and to whom Oblivious Network provides Services pursuant to such agreement. For purposes of this Policy, “Services” shall refer to all of the cloud-based solutions offered, marketed, or sold by Oblivious Network or its authorized partners that are designed to increase the performance, security, and availability of Internet properties, applications, devices, and networks, along with any software, software development kits, and application programming interfaces (“APIs”) made available in connection with the foregoing.

  • End Users: Those who (i) access or use our Customers’ domains, networks, websites, application programming interfaces, and applications, or (ii) Customers’ employees, agents, or contractors, who access or use Services.

This Policy also does not apply to our Customers’ domains, websites, APIs, applications, and networks, which may have their own terms and privacy policies. Our Customers are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, including those relating to the collection of personal information, in connection with the use of our Services by End Users with whom our Customers interact.

Oblivious Network’s Websites and Services are not intended for, nor designed to attract, individuals under the age of eighteen. Oblivious Network does not knowingly collect or share personal information from any person under the age of eighteen. To the extent we become aware that we have the personal information of a person under the age of eighteen, we will delete that information.

It is our Customers and their users who are responsible for the content transmitted across our network (e.g., images, written content, graphics, etc.).

2. INFORMATION WE COLLECT (Categories of Data Subjects)

Website Visitors

  • Name, email address, and other contact information: We ask for and—at your option—collect personal information from you when you submit web forms on our Websites, including opportunities to sign up for and agree to receive email communications from us. We may ask you to submit such personal information if you choose to use interactive features of the Websites, including participation in surveys, contests, promotions, sweepstakes, or studies, requesting customer support, submitting feedback, or otherwise communicating with us. We will send such communications in accordance with applicable law.

  • Log files: Just as when you visit and interact with most websites and services delivered via the Internet, when you visit our Websites, including the Oblivious Network Community Forum, we gather certain information and store it in log files. This information may include but is not limited to Internet Protocol (IP) addresses, system configuration information, URLs of referring pages, and locale and language preferences.

  • Cookies and other tracking technologies: We may use cookies and other information-gathering technologies for a variety of purposes, such as providing us with information about how you interact with our Websites and assisting us in our marketing efforts. Note that if you disable cookies entirely, Oblivious Network’s Websites may not function properly.

  • Material contributed in Interactive Areas: The Websites may offer publicly accessible blogs, community forums, comments sections, discussion forums, or other interactive features (“Interactive Areas”). If you choose to participate in any of these Interactive Areas, please be aware that any information that you post in an Interactive Area might be read, collected, and used by others who access it. If you wish to remove your personal information from any of our Interactive Areas, please see the Section 8, below.

Customers

  • Customer Account Information: When you register for an account, we collect contact information. Depending on subscription level, this contact information may include your Customer name, the email address(es) of your account administrator(s), telephone number, and addresses necessary to process payment and delivery of Services. In addition, when you use the Services, we collect information about how you configure your account and the Services (e.g., firewall settings for the domains you administer). We refer to all of this information collectively as “Customer Account Information” for the purposes of this Policy. Customer Account Information is required to enable your access to your Oblivious Network account and Services. By providing us with any personal information, you represent that you are the owner of such personal information or otherwise have the requisite consent to provide it to us. We also maintain logs of Administrative Users’ activity (e.g., actions taken to configure settings in Customers’ account).

  • Payment information: We do not require our Customers to have payment information on file with us unless they have a paid subscription to our Services. When you sign up for one of our paid Services, you must provide payment and billing information. The information you will need to submit depends on which payment method you choose. For example, if you pay with a credit card, we will collect your card information and billing address, although we do not store full credit card numbers or personal account numbers.

  • Crash Reports: When our Services encounter an unexpected error, you may be asked to submit a crash report, which may contain personal information. You will have an opportunity to review the content of the report prior to submitting the report to us.

End Users

  • Oblivious Network processes End Users’ interactions with Customer’s Internet Properties and the Services. This information is processed when End Users access or use our Customers’ domains, websites, APIs, applications, devices, end points, and networks that use one or more of our Services, and when End Users access or use Services. The information processed may include but is not limited to IP addresses, traffic routing data, system configuration information, and other information about traffic to and from Customers’ websites, devices, applications, and/or networks.

  • The End User data that we make available to our Customers via the Service dashboard or other online interface are specifically defined as “Customer Logs”.

Network Data. Oblivious Network collects and stores Network Data, which are models, observations, reports, analyses, statistics, databases and other information created, compiled, analyzed, generated or derived by Oblivious Network from server, network or traffic data generated by Oblivious Network in the course of providing the Service, including information required to help Oblivious Network identify, analyze, mitigate, prevent, and block malicious activities on Oblivious Network’s network. Examples of Network Data include service uptime and service availability metrics, request volumes, error rates, cache rates, origin and nature of malware, and IP threat scores.

3. HOW WE USE INFORMATION WE COLLECT

Oblivious Network only processes personal information in a way that is compatible with and relevant to the purpose for which it was collected or authorized. As a general matter, for the categories of data described in Section 2 above, we may use your personal information to:

  • Provide, operate, maintain, improve, and promote the Websites and Services for all users of the Websites and Services;
  • Enable you to access and use the Websites and Services;
  • Process and complete transactions, and send you related information, including purchase confirmations and invoices;
  • Send transactional messages, including responses to your comments, questions, and requests; provide customer service and support; and send you technical notices, updates, security alerts, and support and administrative messages;
  • Comply with legal obligations as well as to investigate and prevent fraudulent transactions, unauthorized access to the Services, and other illegal activities;
  • For other purposes for which we obtain your consent.

In addition, we may use the information we collect from Attendees, Websites Visitors, and Registrants, as well as Customer Account Information for the following purposes:

  • Send commercial communications, in accordance with your communication preferences, such as providing you with information about products and services, features, surveys, newsletters, offers, promotions, contests, and events about us and our partners; and send other news or information about us and our partners. See Section 9 below for information on managing your communication preferences.
  • Process and deliver contest or sweepstakes entries and rewards;
  • Monitor and analyze trends, usage, and activities in connection with the Websites and Services and for marketing or advertising purposes;
  • Personalize the Websites and Services, including by providing features or content that match your interests and preferences;
  • To register visitors to our offices and to manage non-disclosure agreements that visitors may be required to sign, to the extent such processing is necessary for our legitimate interest in protecting our offices and our confidential information against unauthorized access; and

Information from Third Party Services. We may combine information we collect as described in Section 2 above with personal information we obtain from third parties. For example, we may combine information entered on a Oblivious Network sales submission form with information we receive from a third-party sales intelligence platform vendor to enhance our ability to market our Services to Customers or potential Customers.

4. DATA AGGREGATION

Oblivious Network may aggregate data we acquire about our Customers, Administrators, and End Users. For example, we may assemble data to determine how Web crawlers index the Internet and whether they are engaged in malicious activity or to compile web traffic reports and statistics. Non-personally identifiable, aggregated data may be shared with third parties.

5. INFORMATION SHARING

We work with other companies who provide us with services that help run our business and the Oblivious Network Service (“Service Providers”). These companies provide services to help us deliver customer support, process credit card payments, manage and contact our existing Customers and Administrators as well as sales leads, provide marketing support, and otherwise operate and improve our Services. These Service Providers may only process personal information pursuant to our instructions and in compliance both with this Privacy Policy, the contracts we have in place with such Service Providers, and other applicable confidentiality, data protection, and security measures and regulations.

Specifically, we do not permit our Service Providers to sell any personal information we share with them or to use any personal information we share with them for their own marketing purposes or for any purpose other than in connection with the services they provide to us.

In addition to sharing with Service Providers as described above, we also may share your information with others in the following circumstances:

  • Within the Oblivious Network Group (defined for the purposes of this Policy as Oblivious Network, Inc. (United States);
  • With our resellers and other sales partners who may help us distribute the Services to Customers;
  • In the event of a merger, sale, change in control, or reorganization of all or part of our business;
  • When we are required to disclose personal information to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims.
  • Where we have a good-faith belief sharing is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Website Terms of Use, Self-Serve Subscription Agreement, and/or Enterprise Subscription Terms of Service; or as otherwise required to comply with our legal obligations; or
  • As you may otherwise consent from time to time.

Additional Information on Sharing

Marketing & Advertising Partners. Our marketing and advertising partners may collect or receive personal information about you and/or collect certain information about your interactions with our Websites, or your email communications with Oblivious Network, including through the use of cookies, beacons, and similar technologies, in order to gain insights that may help us market and advertise our services to you.

In addition, we may also provide these marketing and advertising partners with your email address or other limited account information. You may opt out of such sharing by emailing us at william+privacy AT oblivious.network

These partners’ use of your information will be based on their own privacy policies. We share this personal information for our business purposes.

6. INTERNATIONAL INFORMATION TRANSFERS

Oblivious Network is a U.S. based, global company. We primarily store your information in the United States. To facilitate our global operations, we may transfer and access such information from around the world, including from other countries in which the Oblivious Network Group has operations for the purposes described in this Policy.

Whenever a Oblivious Network company transfers personal information originating from one country to another Oblivious Network group company or a third party service provider or partner in a different country, we will implement appropriate safeguards, consistent with the laws of the territory from which the data is exported. If you have any questions about or need further information concerning the safeguards Oblivious Network has in place to protect your personal information, please contact us at william+privacy AT oblivious.network

7. COMMUNICATION PREFERENCES

Oblivious Network will send you commercial communications based on the communication preferences in your account settings. Oblivious Network also will send you service-related communications. You may manage your receipt of commercial communications by clicking on the “unsubscribe” link located on the bottom of such emails, through your account settings if you have a Oblivious Network account, or you may send a request to william AT oblivious.network

8. DATA SECURITY, DATA INTEGRITY AND ACCESS

We take all reasonable steps to protect information we receive from you from accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access. We have put in place appropriate physical, technical and administrative measures to safeguard and secure your information, and we make use of privacy-enhancing technologies such as encryption. If you have any questions about the security of your personal information, you can contact us at william AT oblivious.network

9. DATA RETENTION

We store your personal information for a period of time that is consistent with the business purposes set forth in Section 3 of this policy or as long as needed to fulfill and comply with legal obligations. The criteria we used to determine how long we store your personal information will vary depending on several different factors. We typically consider the following when determining data retention:

  • The purpose for collecting the personal information in the first place. For example, if you have an active account with us, we need to keep your contact information during the entirety of that time in order to provide you with support or contact you regarding your account;
  • The volume, nature, and sensitivity of the personal information we are processing;
  • The potential risk of harm from unauthorized use or disclosure of the personal information;
  • Whether we can achieve the purposes for processing with less data or through other means
  • Legal requirements that may apply to the data, such as applicable statutes of limitation or contractual obligations.

When the data retention period expires for a given type of data, we will delete or destroy it. If, for technical reasons, we are unable to do so, we will implement appropriate security measures to prevent any further use of such data.

10. NOTIFICATION OF CHANGES

If we make changes to this Policy that we will post the updated Policy on this website noting the effective date of any changes.

11. BUSINESS TRANSACTIONS

We may assign or transfer this Policy, as well as information covered by this Policy, in the event of a merger, sale, change in control, or reorganization of all or part of our business.