Privacy Policy

Updated: September 2025

JupiterOne ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, products, or services.

Information we collect

When you interact with our services, we may collect various types of personal data, including but not limited to:

‍

  1. Personal Information: We may collect personally identifiable information, such as your name, email address, phone number, and other contact information.We may also collect other information that you provide through your interactions with us, for example if you request information about our product, interact with our sales team or contact customer support, complete a survey, provide feedback or post comments, register for an event, or take part in marketing activities. We may keep a record of your communications with us and other information you share during the course of the communications.
  2. Usage Data: We may collect information about how you interact with our website, products, or services, such as IP address, browser type, pages visited, and other usage data.
  3. Information we receive from other sources: We may obtain information about you from third party sources, including resellers, distributors, business partners, event sponsors, security and fraud detection services, social media platforms, and publicly available sources. Examples of information that we receive from third parties include marketing and sales information (such as name, email address, phone number and similar contact information), and purchase, support and other information about your interactions with our website and product. We may combine such information with the information we receive and collect from you.

Purpose of processing

We may use your information for the following purposes:

  • Providing our Websites and Products: In reliance on our legitimate interest, we process your personal information to operate and administer our websites, and to provide, operate, and maintain our products.To analyze and improve the performance of the website or services, enhance user experience, and ensure security.‍
  • Personalize User Experience: To personalize user experience, facilitate communication, and provide requested services.
  • Service Provision: To provide and maintain our services, process transactions, and fulfill your requests.
  • Sending Marketing Communication: To communicate with you regarding our products, services, updates, and support.To respond to your inquiries, comments, or requests. To send promotional emails, newsletters, or other communications.
  • Analytics: To analyze user behavior, improve our offerings, and enhance the user experience.To enhance existing user profiles, verify and update information, and enrich the understanding of user preferences and behaviors.
  • Security: To protect against unauthorized access, detect and prevent fraudulent activities.
  • Administering Events: We process your personal information to plan and host events or webinars for which you have registered or that you attend, including sending related communications to you, billing, registration and to connect you with other event attendees, to perform of our contract with you, or to the extent necessary for our legitimate interests in fulfilling your requests to attend any such events

We process your personal data based on one or more of the following legal grounds:

  • Consent: When you provide explicit consent for specific processing activities such as opting out of our marketing communications
  • Contractual Necessity: When processing is necessary for the performance of a contract with you.
  • Legal Obligations: When processing is required to comply with legal obligations.
  • Legitimate Interests: When processing is based on our legitimate interests and does not override your rights and freedoms.

Other purposes: We will process your personal information for other purposes about which we notify you in advance, or for which we receive your consent. In general, we collect and process personal information about you, as necessary to provide the products you use, operate our sites and business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests as described in this Privacy Policy and in our notices to you

Information Sharing

We do not sell, trade, or rent your personal information to third parties. However, we may share your information with trusted third parties who assist us in operating our website, conducting our business, or servicing you.

Cookies and Similar Technologies

We may use cookies and similar technologies to collect information and enhance your experience. Our website includes a cookie banner. You can disable cookies in your browser settings, but this may affect the functionality of our website.

Security

We implement reasonable security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. Our security safeguards are described in our Security Addendum.

Your Choices

You have the right to opt-out of receiving promotional communications, and you can update or delete your information by contacting us.

Changes to this Privacy Policy

We may modify or update this Privacy Policy from time to time to reflect the changes in our business and practices. Please review this page periodically.  Any changes to this Privacy Policy will be indicated by updating the 'Last Updated' date above.  For significant modifications, we will provide additional notice or obtain consent as required by applicable law.

Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@jupiterone.com.

‍

JupiterOne, Inc. - Data Privacy Framework Notice

JupiterOne, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. JupiterOne, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. JupiterOne, Inc. has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.

If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit the Data Privacy Framework (https://www.dataprivacyframework.gov/) website.

The Federal Trade Commission has jurisdiction over JupiterOne, Inc.’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

Complaints, Disputes, and Binding Arbitration

If you are located in the EU, UK, or Switzerland and wish to file a complaint or initiate a dispute under the Data Privacy Framework Principles, you may do so through our independent recourse mechanism, JAMS. For more information or to file a dispute, please visit the JAMS DPF Dispute Resolution (https://www.jamsadr.com/DPF-Dispute-Resolution) page.

Under certain conditions, individuals may invoke binding arbitration for complaints regarding JupiterOne’s compliance with the DPF that have not been resolved by other means. JupiterOne, Inc. is obligated to arbitrate claims and follow the terms set forth in Annex I of the DPF Principles.

Disclosures to Third Parties and Liability for Onward Transfers

JupiterOne, Inc. may disclose personal data to a limited number of third-party service providers that support operations such as cloud hosting, communication tools, human capital management, benefits platforms, and legal or compliance support. These service providers act on our behalf and are contractually required to process personal data only as necessary to provide the contracted services and in compliance with the DPF Principles.

JupiterOne, Inc. remains responsible and liable under the DPF Principles if third-party agents process personal information in a manner inconsistent with the DPF Principles, unless JupiterOne proves it is not responsible for the event giving rise to the damage.

Public Authority Disclosures

JupiterOne, Inc. may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Access Principle

Individuals in the EU, UK, and Switzerland have the right to access the personal data that JupiterOne, Inc. holds about them. Individuals may request to correct, amend, or delete personal data where it is inaccurate or processed in violation of the DPF Principles.

Choice Principle

Individuals have the right to opt out of the disclosure of their personal information to a third party or of its use for a purpose materially different from the purpose for which it was originally collected or subsequently authorized. For sensitive data, JupiterOne will obtain affirmative express consent (opt-in) before such data is disclosed to a third party or used for a purpose other than its original purpose or as subsequently authorized by the individual.

Human Resources Data

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, JupiterOne, Inc. commits to cooperate and comply with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF in the context of the employment relationship.

Contact Information for Inquiries or Complaints

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, JupiterOne, Inc. commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact JupiterOne, Inc. at:

privacy@jupiterone.com‍