This Privacy Notice explains how ExtraHop Networks, Inc. and its affiliates (collectively, "ExtraHop", "we", or "us") collect, use, disclose and otherwise process Personal Information that identifies or could be identifiable to you, and the choices we offer, including how to access, update, or delete your information. Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you.
Personal Information that may be collected when you visit, interact with or use any of our websites, social media pages, marketing or sales communications, evaluation or purchase of our products and services, implementation and use of our products and services, online or offline interactions, and other means offered and controlled by us. We may also collect information about you from other sources such as public databases, joint marketing partners, social media platforms, conference/event hosts, and partners when you interact with them.
The content that our customers and their end users upload, capture, or store in connection with our products and services. In those circumstances: (i) ExtraHop is processing such content on behalf of a customer and that customer is responsible for the collection and use of your data; (ii) the customer’s privacy notice will apply to the customer’s collection and use of such content; and (iii) you should refer to their privacy notice and direct any queries regarding your information to them.
ExtraHop collects Personal Information from you directly, through automated means, and from third parties, as each source is described more fully below.
We collect Personal Information when you voluntarily provide it to us (including to our service providers, partners, or other parties who collect it on our behalf). For example, we collect Personal Information when you evaluate, order, purchase, use, or request information about ExtraHop products and services, request or subscribe to marketing communications, complete surveys, provide such data in product feedback, or sign up for an ExtraHop event or webinar. We may also collect Personal Information from you when you attend one of our events, during phone calls with sales representatives, or when you contact customer support.
The Personal Information we collect from you may include:
We use technology that is integrated into our online assets such as cookies, web beacons, and embedded URLs to provide us with automated data collection when you use, access, or interact with our online assets. This information may include:
We automatically collect certain data relating to the performance and configuration of our products and services and our customers’ and end users’ consumption, use of, and interaction with the products and services. Such information may include:
We may also acquire data from other sources including affiliates, our partners, or others that we use to make our information better or more useful. For example, we may compare the geographic information acquired from commercial sources with the IP address collected by our automatic data collection tools to derive your general geographic area. Information may also be linked via a unique identifier, such as a cookie or account number. This information may include any of the information we collect from you directly or that is collected automatically via our online assets.
We may use information we collect about you, including any Personal Information, to:
We may store or process Personal Information in the United States and other countries.
If we disclose your information, we require the recipients (as appropriate) to comply with security standards, and privacy and confidentiality requirements. We may disclose information we collect about you in the following ways. ExtraHop remains responsible and liable under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework if third parties processing personal information on ExtraHop’s behalf do so in a manner inconsistent with the DPF Principles.
If you use our community/customer forums, you should be aware that any information, including Personal Information, you submit there can be read, collected, or used by other users of such forums. We are not responsible for other party’s use of any information you choose to submit in a forum.
Other than your ExtraHop account access credentials, we do not collect and you are discouraged from disclosing to us any Sensitive Personal Information. In the event Sensitive Personal Information is disclosed to us, we will not disclose such information to a non-agent third party or use such information for a purpose other than the purpose for which it was originally collected unless we have received your consent. We do not collect or process Sensitive Personal Information for the purpose of inferring characteristics about consumers.
A cookie is a small data file sent to your browser from a web server and stored on your hard drive. We use cookies to collect certain information about our website visitors, such as remembering preferences, facilitating navigation, displaying information more effectively, understanding usage patterns, collecting statistics regarding website usage, and providing us with other business and marketing information. We may also combine this information with other information we collect about you for various purposes, such as improving our websites, understanding campaign effectiveness, tailoring communications, and for other internal business purposes. If you do not want us to collect cookies on the ExtraHop website, you may set your browser to refuse cookies or to alert you when cookies are being sent; you may also indicate that by using our cookie management platform accessible through our cookie banner. If you do so, please note that some parts of our website may become unavailable or may not function properly.
A web beacon, also known as an Internet tag, is a small graphic image that may be included on our websites or emails. We may use web beacons or similar technologies for certain business purposes, such as tracking the number of visitors to our websites, monitoring how users navigate our websites, and counting how many emails were opened or articles or links were viewed.
We may work with online ad networks to place cookies on your computer and use similar technologies to understand your interests based on your online activities and tailor more relevant ads to you. If you do not wish to receive such tailored advertising, you can visit this page to opt out of most companies that engage in such advertising. Opting-out will not prevent you from seeing ads; the ads will not be delivered through these targeting methods. We also use cookies through Google Analytics or other similar services to compile reports and improve our site. The Google Analytics cookies do not identify you, but instead collect information in an anonymous form that will be transmitted to and stored by Google in accordance with its privacy practices. You can read more about Google Analytics' privacy practices here and control Google Ads here.
We only use your Personal Information in a lawful, transparent, and fair manner. Depending on the specific Personal Information concerned and the factual context, we rely on the following legal bases:
ExtraHop implements reasonable physical, administrative, and technical safeguards designed to protect your Personal Information from loss, misuse, unauthorized access or disclosure, alteration, and destruction. We also contractually require our service providers and other third parties we use to support the business to protect such information from loss, misuse, unauthorized access or disclosure, alteration, and destruction. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our products and services, you are responsible for keeping this password confidential.
We will retain and use your Personal Information as necessary to fulfill the purposes for which it was collected, comply with our business requirements and legal obligations, resolve disputes, protect our assets, and enforce our agreements. We will also take reasonable steps to delete your information if you request deletion of your information.
ExtraHop is a global organization and the information we collect from you, including Personal Information, may be transferred to and stored in a country other than the country in which the information was collected (including, but not limited to, servers and data centers located in the United States). To facilitate data transfers, we utilize recognized data transfer frameworks such as Standard Contractual Clauses and the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. ExtraHop has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. ExtraHop has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
In certain situations, we may be required to disclose Personal Information in response to lawful requests by public or government authorities, including to meet national security or law enforcement requirements. We will work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of your data that we cannot resolve with you directly. ExtraHop is subject to the investigatory and regulatory enforcement powers of the U.S. Federal Trade Commission.
In compliance with the Data Privacy Framework Principles, ExtraHop commits to resolve complaints about our collection or use of your Personal Information. Individuals from the European Union, United Kingdom, or Switzerland with inquiries or complaints regarding our Privacy Notice should first contact us using the methods described in the Contact section below. We will respond to complaints regarding the collection or use of your Personal Information within forty-five (45) days.
ExtraHop has further committed to refer unresolved Data Privacy Framework complaints to JAMS, an alternate dispute resolution service located in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you. If neither ExtraHop nor JAMS is able to resolve your inquiry, you have the right to invoke binding arbitration.
Our websites, products and services may link to third-party content. This Privacy Notice does not address, and we are not responsible for, the practices of any third parties. The inclusion of a link within our websites, products and services does not imply endorsement of the linked site or service by our affiliates or us. We encourage you to review the privacy policies and learn about the privacy practices of those companies whose websites you choose to visit.
ExtraHop does not direct its websites, products or services to children under the age of 16 and does not knowingly collect Personal Information from children under the age of 16 without appropriate parental or guardian consent. If you believe we may have collected Personal Information from someone under the applicable age of consent in your country without proper consent, please let us know using the methods described in the Contact section below, and we will take appropriate measures to investigate and address the issue.
You may contact us at any time to opt-out of: (a) direct marketing communications; (b) automated decision-making and/or profiling. If personal information will be used for a new purpose that is materially different than that for which it was originally collected or subsequently authorized, or will be disclosed to a third party other than as described in this Notice, ExtraHop will provide you with a choice as to whether to have your personal information so used or disclosed. If you choose not to provide certain information depending on the nature of your relationship with us, you may be unable to engage in certain activities or use certain websites, features, products, or services. Completing the “unsubscribe” option in a marketing email from ExtraHop is a form of opt-out and will prevent you from receiving future marketing emails directly from ExtraHop. Opt-out processes may take some time to complete, but we will work to meet your request as quickly as possible. In certain circumstances, you may still continue to receive administrative messages or other required communications that are part of certain products and services unless you stop using or cancel the product or service in accordance with its terms.
Depending on the applicable privacy laws, you may have certain rights relating to your Personal Information. These rights may include:
To exercise your rights under applicable data protection laws, you can contact us using the methods described in the Contact section below. When contacting us, please specify what Personal Information the request is concerning and which of the above rights you would like to exercise. ExtraHop will verify that the information you submit (which may include your first name, last name, email address, company, and country/state) matches our records before we fulfill the request. You may use an authorized agent to submit a consumer rights request on your behalf, however, ExtraHop will require the authorized agent to provide signed permission to submit the request on your behalf and may still contact you to confirm your identity and that this request was submitted with your permission. We will use commercially reasonable efforts to comply with your request. In certain circumstances, we may not be able to fulfill your request if we believe such request would violate any law or legal requirement or cause the information to be incorrect. Additionally, we may need to retain certain information for recordkeeping purposes, legal purposes and/or to complete any transactions that you began prior to your request.
ExtraHop will not discriminate against you if you exercise any of your rights under applicable privacy laws.
If we obtained your Personal Information from an ExtraHop Customer or third party acting on your behalf, you should directly contact such ExtraHop Customer or third party to whom you provided your information. We are not responsible for and have no control over the privacy and data security practices of ExtraHop Customers or other third parties, which may differ from those set forth in this Privacy Notice.
If you have any questions or concerns regarding this Privacy Policy, please contact us by email at privacy@extrahop.com
by phone at 1-877-333-9872 or write to the following address:
Attention: Legal Department
ExtraHop Networks, Inc.
520 Pike Street
Suite 1600
Seattle, WA 98101
United States
Individuals with disabilities who are unable to usefully access our Privacy Notice online may contact us to inquire how they can obtain a copy of our policy in another, more easily readable format.
We may modify this Privacy Notice at any time and will post any changes we make to the Privacy Notice on this page. You can determine when this Privacy Notice was last revised by referring to the last updated date at the bottom of this page under the Effective Date section.
This Privacy Notice was last updated on February 11th, 2025.