As the Data Engine for IT and Security, Cribl has a mission to provide its customers with choice, control, and flexibility. Core to this mission is Cribl’s commitment to the data privacy of its users.
This Privacy Notice describes how Cribl, Inc. (“Cribl”, “we”, “our”, or “us”) collects, uses, shares or otherwise processes information relating to individuals as we operate our business, and provides you with information about your privacy rights.
How We Collect Information About You
How we collect personal data depends on your interactions with us. We may collect information directly from you when you visit our Sites, attend our Events, use our products and services (“Services”), or from our trusted third-party partners. Specifically, we may collect personal data when you:Visit our websites that display or link to this Privacy Notice ("Site(s)");
Visit our offices;
Communicate with us, such as through emails, phone calls, texts, or messaging platforms, including for customer support;
Use our Services where we act as a controller of your personal data, including when you create, register, or administer your account;
Register for or attend our events, webinars, programs, or trainings (“Events”);
Are employed by a customer of ours that has shared your information with us in our capacity as a controller (for example, during the contracting process);
Participate in the Cribl Community;
Participate in surveys or other similar research activities; or
Interact with our third-party partners (see below for more detail).
Information We Receive From Third Parties
In some circumstances, we may collect information from trusted third-party sources to assist us in operating our business. These sources may provide us with publicly available information that may contain personal data that you have published or that has been made available online. The way in which our partners collect this is detailed in their own privacy notices, available on their websites.We may also receive information about you via a third-party integration. Third-party integrations are software that integrate with our Services. Once enabled, the provider of a third-party integration may share certain information with Cribl. For example, if you choose to integrate with an identity management service, Cribl may store your username and password that you input to access the integration.
When a third-party integration is enabled, Cribl is authorized to access the shared information in accordance with any permission(s) granted by you. Examples include your use of the integration and successful account creation.
For clarity, this Privacy Notice does not apply to such third-party partners and integrations. You should check these third-party privacy settings and notices to understand what data may be disclosed to Cribl.
Cookies and Web Beacons
In addition, we may use technologies such as cookies to collect information about you in furtherance of the purposes described in this Privacy Notice. Some of these technologies are essential for the provision of the Services, such as account access and authentication; others assist with the performance and functionality of the Services, such as recognizing returning users or remembering preferences; and others enable us to analyze usage to improve the Services as well as troubleshoot issues.
See our Cookie Policy for more information and to adjust your settings.What Types of Information We Collect
The types of information we collect from you may include the following:Contact Information and Personal Details. Authorized user credentials, full name, employer, job title and related employment information, email address, physical address, and phone number.
Audio/Visual Information. This includes pictures and audio and video recordings (in accordance with applicable laws) that you provide in connection with your use of the Services.
Payment, Billing, and Shipping Information. Financial information in connection with billing including, without limitation, billing and shipping address, and purchase history.
Event Information. Information related to your attendance at Events, including contact information, session ratings, or other feedback you provide to us.
Online Identifiers and Interactions. Internet protocol address or location data when you access the Sites or Services.
Search Query Data and Feedback. The search text submitted by authorized users of the Services when using certain features of the Services and other user-submitted feedback.
Usage Data. Metrics, and other usage data derived from the operation of the Services, including the diagnostic bundle described in Cribl’s documentation (available at https://docs.cribl.io/).
Authentication and Access Information. Information that provides access to the Services, such as username and IP address, from third parties, which helps us offer features like identity management.
Third-Party Integrations Information. To the extent authorized by you, this may include username, password, and any other information shared by you.
How We Use Information We Collect
We may use your personal data to operate our business and deliver the Services to you, including to:Provide, maintain, and improve our Services and Sites;
Provide customer service and support;
Enforce our terms and conditions or protect our customers, business, partners, and users;
Send you Cribl-related information, including confirmations, account verification, invoices, technical notices, updates, security alerts, and support messages;
Maintain your account;
Enhance security, monitor and verify identity or service access, combat fraud, spam, malware or other network and/or information security risks;
Detect bugs, report errors and perform activities to maintain the quality or safety of our Services;
Conduct research and development;
Gain insights and perform analytics into how the Services are used and how they might be improved;
Understand your preferences and make recommendations to you so we may enhance your experience with the Sites and Services;
Communicate with you for marketing purposes, including sending you tailored online advertising and contacting you about promotions and upcoming Events (in accordance with your marketing and cookie preferences);
Register you and communicate with you regarding your selected Events;
Link or combine your personal data with information we receive from third parties to help understand your needs and provide you with better service;
Measure your engagement with advertisements on the Sites;
Maintain legal and regulatory compliance; and
Process your information for other legitimate business purposes, such as protecting Cribl’s confidential and proprietary information.
How We Share Your Information
We may share your personal data with third parties for specific purposes, including:With affiliates and subsidiaries to provide you with aspects of the Services, such as customer support;
With third parties that perform services on our behalf, such as i) data storage, hosting, customer support, and payment processing, or ii) helping us with marketing and email campaigns;
With third parties who enable certain features or functionalities of the Services that you’ve requested (for example, via a third-party integration);
In connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or to another company;
As necessary to comply with applicable law, including governmental and law enforcement requests, and otherwise to protect the rights, privacy, safety, or property of you, us, or others;
In an aggregated, anonymized, or de-identified form, which cannot reasonably be used to identify you;
With others for any legitimate business purpose that does not conflict with this Privacy Notice.
How We Secure Your Information
We implement physical, administrative, and technical safeguards designed to protect your personal data from unauthorized access, use, or disclosure. We also contractually require that our service providers protect such information from unauthorized access, use, and disclosure. In addition, we limit access to personal data to those employees, agents, contractors, and other third parties that have a legitimate business need for such access. For more information about our security practices, please visit the Trust Center at https://trust.cribl.io/home.How Long We Retain Your Information
We will retain your personal data as needed to fulfill the purposes for which it was collected, and as necessary to comply with our business requirements, legal obligations, resolve disputes, protect our assets, and enforce our agreements. When we have no ongoing legitimate business need to process your personal data, we will either delete it, anonymize it, or securely store your personal data and isolate it from any further processing until deletion is possible.Controlling Your Information
Our marketing emails permit you to "opt-out" of or “unsubscribe” from receiving further marketing emails. Certain jurisdictions, for example the EEA (defined below) and California, also provide their residents with certain privacy rights under applicable law. Please see below for more information on your privacy rights by region.
You may contact us to exercise your rights using the contact details in the section titled “Contact Us” below. We will respond to such requests in accordance with the requirements of applicable data protection laws. Please note that to fulfill your request, we may need you to provide certain information to verify your identity. When you or your authorized agent contacts us in connection with your personal data under applicable local law, we may ask you to validate your identity before fulfilling your request. Authorized agents may also be required to provide a copy of the consumer’s signed permission authorizing the agent to submit requests on the consumer’s behalf.
These choices do not apply to service notifications or other required communications that are considered part of the Services, which you may receive periodically unless you stop using or cancel your rights to access the Services in accordance with their terms and conditions. Moreover, these rights may be limited or denied in some circumstances. For example, we may retain your personal data where required or permitted by applicable law. In such situations, we will implement appropriate measures to prevent any further processing or use of your personal data.International Data Transfers
Your personal data may be transferred to, and processed in, countries other than the country in which you reside, such as to our affiliates or third-party partners, for the purposes described in this Privacy Notice. When required by law, we will ensure that we rely on an appropriate legal mechanism for the transfer, such as your consent, standard contractual clauses (or their equivalent), or adequacy decisions. If you require further information about our international transfers of personal data, please contact us using the contact details in the section titled “Contact Us” below.Lawful Basis for Processing (EEA, UK, and Switzerland Residents)
If you are from the European Economic Area (“EEA”), we are the controller of the personal data we hold about you in connection with your use of the Services. Our legal basis for collecting and using the personal data described above will depend on the information concerned and the specific context in which we collect it.However, we will normally collect personal data from you only where we have your consent to do so, where we need the personal data to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal data from you.
Your Privacy Rights (EEA)
You have the following rights in respect of your personal data that we hold: (i) right of access; (ii) right of portability; (iii) right to rectification; (iv) right to erasure; (v) right to restriction; (vi) right to withdraw consent; and (vii) right to object.Where applicable, if you wish to submit a complaint to a data protection authority about our collection and use of your personal data, you can find contact details for data protection authorities in the EEA available here, in the United Kingdom here, and in Switzerland here.
Privacy Disclosures for California
The California Consumer Privacy Act, as amended, (“CCPA”) requires businesses to provide additional disclosures of California consumer rights relating to the sharing of, access to, and deletion of personal data that is collected. We may share personal data with third parties or allow them to collect personal data as described in this Privacy Notice. We may share or disclose personal data as described in the section above titled “How We Share Your Information.”Cribl does not sell the personal data of California consumers for monetary consideration and does not discriminate in response to privacy rights requests. Further, we do not collect or process “sensitive” data or protected characteristics under applicable law to infer individual characteristics.
California Privacy Rights
You may have privacy rights regarding your personal data, such as:The right to access and request a copy of your personal data;
The right to correct, update, or delete your personal data;
You may request that we disclose what personal data we collect, including the categories of personal data, the categories of sources from which the personal data is collected, the business or commercial purpose for collecting, selling, or sharing personal data, and the categories of third parties to whom we disclose personal data;
The right to opt out of the sale or sharing of personal data to third parties (see below for more detail).
If you or your authorized agent would like to exercise your privacy rights, please contact us using the contact details in the section titled “Contact Us” below. We may need to verify your identity and place of residence before completing your rights request.
14.1 Sales and Sharing of Personal Information (Targeted Advertising)
If you are a California resident, you have the right to opt out of the sale or sharing of your personal data for cross-context behavioral advertising as defined under the CCPA. You can exercise this right by following the steps below:For opting out in relation to identifiers associated with your browser, such as IP address and other information cookies use to identify you, go to the footer of our website, www.cribl.io, and select “Cookie Settings”. From there, toggle the setting for the “Sale or Sharing of personal data” to adjust your preferences. You can also opt out by enabling Global Privacy Control (“GPC”) on your browser. To learn more about GPC, please visit http://globalprivacycontrol.org.
For opting out in relation to email address, please submit a request using this form.
To manage the use of targeting and advertising cookies on our Site, click the “Manage Cookie Settings” link in the footer of the page or consult your individual browser settings for cookies.
Cribl Community
Please note, if you participate in the Cribl Community or other discussion forum on the Sites, the information you provide there (i.e., your public profile) will be made broadly available to others in the community, and could be used to contact you, send you unsolicited messages, or for purposes over which neither you or Cribl have control. Cribl will not be responsible if you disclose personal data in your posts, through our public services, or during any other communication with other Site users. Please be thoughtful of what you disclose and post.Children's Privacy
We do not knowingly collect personal data from children without appropriate parental or guardian consent. Specifically, in California, we do not sell or share the personal data of consumers we know to be less than 16 years of age. If you believe that we may have collected personal data from someone under the applicable age of consent in your state or country without proper consent, please let us know using the methods described in the ”Contact Us” section below, and we will take appropriate measures to investigate and address the issue promptly.Changes to this Privacy Notice
Cribl may modify or update this Privacy Notice from time to time to reflect changes in our business and practices, so please review this page periodically. If such changes are material, we will change the “Last Updated” date above and provide you with additional notice (such as adding a statement to the main website page or sending you an email notification).You acknowledge that your continued use of our Sites and the Subscription Services or attendance at our Events after we publish or send a notice about our changes to this Privacy Notice means that the collection, use, and sharing of your personal data is subject to the updated Privacy Notice, as of the stated effective date.
Contact Us
If you have any questions about this Privacy Notice or our privacy practices, or wish to exercise applicable rights regarding your data, please contact us by email at privacy@cribl.io or by mail at 22 4th Street, #1300, San Francisco, CA, 94103.