Privacy Notice

Last updated: April 9, 2025
Previous version: March 6, 2023

Your privacy is important to runZero, Inc. (“runZero”, “we” or “us”). We are committed to protecting the privacy of individuals who interact with us, such as our website visitors, customers, business partners, leads and prospects, recipients of marketing communications, end users and event attendees ("you" and "your"). This Privacy Notice explains how we may collect, use, store, disclose, and safeguard your personal information when you:

  • Visit, interact with or use any of our websites (such as https://www.runzero.com/), social media pages, public forums (such as our blogs), online advertisements, marketing, or sales communications.

  • Visit, interact with or use any of our offices, events, sales, marketing, and other offline activities.

  • Submit a job application to runZero.

  • Purchase and/or use runZero products and services or apply to become a runZero partner.

When we refer to any combination of the above, we use the term "Services".

This Privacy Notice does not apply to:

  • Websites, products, or services that display or link to different privacy statements or that are operated by companies other than runZero, or to business activities or practices of third parties, including our partners and resellers.

  • The instances when and to the extent we process personal information in the role of a processor on behalf of our business customers. For detailed privacy information about where a runZero customer who uses the services is the controller, please reach out to the respective business customer directly. We are not responsible for the privacy or data security practices of our customers, which may differ from those set forth in this Privacy Notice.

We recommend that you read this Privacy Notice in full to ensure you are completely informed about your personal information. However, if you only want to access a particular section of this Privacy Notice, then you can click on the relevant link above to jump to that section.

ABOUT US #

We are runZero, a cybersecurity company headquartered in Austin, Texas. We’re on a mission to make network asset discovery simple, fast, and secure for organizations of all sizes. We help businesses (our customers) understand what devices and assets exist on their networks. Our solutions are designed to enhance network security by offering real-time insights and detailed reports on network assets, helping businesses protect their critical infrastructure and data. You can find out more about our product and services here.

1. INFORMATION WE COLLECT #

The personal information we collect depends on the context of your interactions with runZero and the choices you make, the Services and features you use, your location, and applicable laws, but can include the following:

Information That You Provide #

When you use our products or services, subscribe to marketing or one of our newsletters, request a free trial or demo, create an account, fill out our forms, visit our offices, register for an event or webinar, complete a survey, post comments on our blogs, enroll in customer support, participate in a runZero promotion and/or otherwise communicate with us in any way, we ask you to provide certain personal information.

This personal information may include:

  • Account log-in credentials (such as your email or username and password when you sign-up for an account with us and the unique ID assigned to you in our systems).

  • Marketing data (such as your survey responses, promotions you enter, marketing and communication preferences and your subscription details).

  • Billing information (such as truncated credit or debit card details, payment method, transaction statements, your billing address, your delivery address or the delivery address of the intended recipient of your order, payments and orders to and from you).

  • Business contact information (such as your name, job title, organization, phone number, email address and country).

  • Communications data (such as your feedback on our Services and other communications with us and any queries you raise). If you ever communicate directly with us, we will maintain a record of those.

  • Troubleshooting and support data (which is data you provide, or we otherwise access in connection with support queries we receive from you. This may include, for example, contact or authentication data, the content of your chats and other communications with runZero, and the product or service you are using related to your help inquiry).

  • Applicant information if you apply for a job with runZero (such as your resume, desired pay, education and work history, whether you are over the age of 18, and visa status. You also may choose to provide your gender, ethnicity, veteran status, disability status, and links to your website, blog, portfolio, or LinkedIn profile).

  • Online content (which includes personal information disclosed by you on message boards, chat features, blogs and other services or platforms to which you are able to post information and materials, including third party services and platforms).

We may also record or monitor our telephone or other communications with you, to the extent permitted by applicable law.

Providing your data is optional, but it may be necessary for certain services, such as to access content (like demos or whitepapers), to activate or access our products or services, or to qualify your suitability as an authorized runZero partner. In such cases, if you do not provide your information, we may not be able to provide you with the requested Services.

Information We Collect Automatically #

We automatically collect certain device and usage information when you use or interact with our websites, emails we send you, or as a part of your use of our products and services.

The personal information we collect automatically includes:

  • Usage information such as your IP address, information about your activities on and interactions with our products and services (such as session duration, which features you use and for how long, common workflows and drop off points), product and service access metrics (such as log in and out times, records of successful and failed login attempts and other security related events) and performance metrics (such as daily active users). We also collect information about how you interact with our websites (for example, referring web page, pages visited, features used), emails, advertising, content, or other features (for example, when you open a marketing email or click on an embedded link, or if you watch videos on our site.

  • Device information such as your IP address (or proxy server), browser type and settings, device event information (such as systems activity, error reports (sometimes called "crash dumps") and hardware settings), operating system, network configurations and software versions, language preferences, device name, and request and referral URLs.

  • Log data, including performance information, crash logs, authentication logs, session data and aggregate or statistical information.

  • Location information to identify your approximate location (city or regional) based on IP address.

We may collect this information through our website or through other methods of web analysis, including with the help of technologies such as cookies, web beacons and clear gifs. For more information, see the "Cookies and Similar Tracking Technologies" section below.

In addition, in order to provide our company and network asset identification software and services, our software must collect information from network-connected equipment and transfer this information to the runZero for processing, analysis, and display within the product user interface. This information includes the type and quantities of equipment, DNS names, IP addresses, MAC addresses, and other information about the connected equipment, such as running services and installed software. The software also collects minimal information about the equipment on which it is installed; this includes the hostname, domain name, operating system, installed software, and service process environment, as well as hardware information, such as the processor model, memory, storage, and network interfaces. This information is used to enable functionality within the services and to assist with support requests. To the extent any of this information includes personal information, we generally process this information on behalf of our customers as a processor or service provider to provide and improve our services.

Information We Collect From Other Sources #

We may receive information about you from other sources (including third parties from whom we have purchased personal information) and combine that information with the information we collect. For example, we collect personal information from joint marketing partners, runZero partners (including distributors, resellers, and managed service providers), recruitment agencies, credit check agencies, lead generation providers, event sponsors, public databases, data providers, and social media platforms.

This information may include:

  • Mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), IP addresses, social media profiles, LinkedIn URLs, and custom profiles.

  • Resumes and background check information.

  • Order information, delivery, payment information, purchase or redemption information, customer support and enrolment information.

Children #

runZero does not knowingly collect personal information from children under the age of 16. If you are under the age of 16, please do not submit any personal information through the Services. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Notice by instructing their children never to provide personal information on the Services without their permission. If you have reason to believe that a child under the age of 16 has provided personal information to runZero through the Services, please contact us (using the details in the "Contact Us" section below or via the web form located at https://www.runzero.com/contact-us/, and we will endeavor to delete that information from our databases.

2. OUR USE OF YOUR PERSONAL INFORMATION #

We use personal information about you for a variety of purposes and on the legal bases described in this Privacy Notice or disclosed to you in our Services, including:

  • Managing user registrations: If you have registered for an account with us, we use your data to manage your user account to perform our contract with you according to applicable terms of service, or if we do not have a contract directly with you, in reliance on our legitimate interests in administering and managing your user account.

  • Providing the Services: We use data to provide our Services and to tailor our Services to your needs and preferences in reliance on our legitimate interests in operating and improving our internal operations, systems and Services, and to provide you with the content, products or services you access and request (e.g., to download content from our website).

  • Improving and developing the Services: We use data to analyze trends to identify future opportunities for the development, promotion, and improvement of our Services, in reliance on our legitimate interests in developing and improving our Services, or where required, with your consent. For example, we use data, often in a de-identified form, to develop new features, capabilities, or products, improve the user experience, assess capability requirements, and identify customer opportunities.

  • Securing the Services: We process data by tracking use of our websites and services for the purposes of maintaining the safety and security of our Services, including verifying accounts and activity, investigating suspicious activity, and enforcing our terms and policies, in reliance on our legitimate interest in promoting the safety and security of our Services, systems and applications and in protecting our rights and the rights of others.

  • Providing customer support: We use data to troubleshoot and diagnose service problems and provide other customer care and support services, including to help us provide, improve, and secure the quality of our products, services, and training, and to investigate security incidents in reliance on our legitimate interests. Call recording data may also be used to verify your requests and enable runZero to provide support services and investigate security incidents.

  • Providing the services through our partners: We may provide our authorized partners with your personal information to facilitate their provision and promotion of services to you (including any free trials) in reliance on our (and our partner's) legitimate interests in promoting and providing the services. Our website includes tools for looking up our authorized partners.

  • Handling contacts and user requests: If you fill out a web form or request support, if you contact us by other means, including via a phone call, we use your data to perform our contract with you or if we do not have a contract directly with you, in reliance on our legitimate interests in fulfilling your requests and communicating with you.

  • Sending administrative communications: We may use your data to send you information related to services such as confirmations, invoices, expiration and renewal notices, technical notices, service updates and security feeds, security alerts, and support, onboarding, and administrative messages to perform our contract with you, or if we have not contracted directly with you, in reliance on our legitimate interests in administering our products and services.

  • Registering office visitors: We may process your personal information for security reasons, to register visitors to our offices and to manage non-disclosure agreements that visitors may be required to sign, to the extent such processing is necessary for our legitimate interest in protecting our offices and our confidential information against unauthorized access.

  • Managing events: We use data to plan and host events or webinars for which you have registered or that you attend, including sending related communications to you, to perform our contract with you or in reliance on our legitimate interests in administering and promoting the event.

  • Displaying advertising and relevant offers: We use data we collect through our interactions with you to conduct marketing research, advertise to you, provide personalized information about us on and off our websites, and to provide other personalized content based on your activities and interests to the extent it is necessary for our legitimate interest in advertising our Services, or where necessary, to the extent that you have provided your prior consent. For these purposes, we may link or combine information about you with other personal information we get from third parties, to help understand your needs and provide you with better and more personalized service or content. You can learn more about targeted ads and your ability to opt out of receiving interest-based ads at https://optout.aboutads.info and https://www.networkadvertising.org/choices.

  • Sending marketing communications: We use data we collect to send promotional communications, including product recommendations, and other non-transactional communications (e.g. marketing newsletters, telemarketing calls, SMS, or push notifications) about runZero and our selected partners according to your marketing preferences. This may include information about our products, promotions, or events as necessary for our legitimate interest in conducting direct marketing, or to the extent you have provided your prior consent. Please see the "Your Privacy Rights" section, below, to learn how you can control the processing of your personal information by runZero for marketing purposes.

  • Managing contests and promotions: If you register for a contest or a promotion, we process your personal information to perform our contract with you (for example, to process and deliver contest entries and rewards), or where required, your consent.

  • Complying with legal obligations: We process your personal information when cooperating with public and government authorities, courts or regulators in accordance with our legal obligations under applicable laws, to the extent this requires the processing or disclosure of personal information to protect our rights, or is necessary for our legitimate interest in protecting against misuse or abuse of our Services, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes, or to respond to lawful requests.

  • Processing job applications: We process your personal information if you apply for a job with runZero, to evaluate your application and make hiring decisions, communicate with you and inform you of current and future career opportunities (unless you tell us that you do not want us to keep your details for such purposes), manage and improve our recruiting and hiring processes, or to conduct reference and background checks where required or permitted by applicable local law. We perform this processing to the extent that it is necessary to comply with our legal obligations, for our legitimate interest in assessing the suitability of our candidates and managing our recruiting process, or, where required by applicable law, with your consent.

  • For our business or commercial purposes: We may use data for other legitimate business purposes in reliance on our legitimate interests, such as to update, expand, and analyze our records, identify new customers, data analysis, to protect, investigate, and deter against fraudulent, unauthorized, or illegal activity, developing new products, enhancing, improving or modifying our Services, identifying usage trends, determining the effectiveness of our promotional campaigns, free trials and operating and expanding our business activities.

3. OUR DISCLOSURE OF YOUR PERSONAL INFORMATION AND OTHER INFORMATION #

runZero will only disclose your personal information in accordance with the practices described in this Privacy Notice. We may disclose information about you to the following categories of recipients:

  • With our authorized partners in order to process your order or sales inquiry, manage your subscription or free trial, provide technical or customer support, advise of upcoming product or service subscription or trial expiry and renewal dates, or as otherwise notified to you when we collect your personal information.

  • third party service providers and business partners who provide services to us, including: sending out feedback surveys, event sponsors, providing customer support, marketing communications, and supporting our product improvement, benchmarking and research initiatives.

  • any competent law enforcement body, regulatory, government agency, court or other third party (such as our professional advisers) where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights or so a third party can defend theirs, or (iii) to protect your vital interests or those of any other person.

  • a buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice.

  • any other person with your consent to the disclosure (obtained separately from any contract between us).

We may also share aggregated or deidentified usage information with third parties to help us perform analysis and make improvements. Additionally, we may share anonymous usage information on an aggregate basis in the normal course of operating our business. For example, we may share information publicly to show trends in the use of our Services.

If you choose to post comments on any runZero community site or blog, be aware that other users of the blog or community site will see your name, website, and the content of your comments, and may interact with you in response to your comments.

For further information on the recipients of your personal information, please contact us (see the "Contact Us" section below).

4. COOKIES AND SIMILAR TRACKING TECHNOLOGIES #

We use common information gathering tools, such as tools for collecting usage data, cookies, web beacons and similar technologies to automatically collect information that may contain personal information from your computer or mobile device as you navigate our websites, our services or interact with emails we have sent as further described above.

For instance, our websites may set a cookie on your browser that allows you to access the Services without needing to remember and then enter a password more than once during a visit to the website, or to provide more relevant ads and search results. We may also collect information about your online activity, such as pages viewed and interactions with other users.

Third Party Tracking: We may allow third party service providers to use cookies or similar technologies to collect information about your browsing activities over time and across different websites following your use of the Services. For example, we use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies to help the website analyze how users use the Sites and enhance your experience when you use the Services. For more information on how Google, Inc. uses this data, go to https://www.google.com/policies/privacy/partners/. You can control the information collected by such tracking technologies or be alerted when cookies are sent by adjusting the settings on your Internet browser or devices, but such adjustments may affect or disable certain functionality of the Services.

For more information, see our Cookie Notice.

5. HOW WE STORE AND SECURE YOUR INFORMATION #

We use appropriate technical and organizational measures to protect the personal information that we collect and process about you. The measures are designed to provide a level of security appropriate to the risk of processing. Specific measures we use include (e.g. we only transmit personal information over secured communication channels using TLS; all systems used to provide the Services are password protected; all applications used to provide Services are built using security best practices; all applications used to provide Services run with limited rights and limited roles; we only store personal information using solutions that are encrypted at rest). Please keep in mind that no Internet or email transmission is ever fully secure or error free, so you should take special care in deciding what information you send to us.

6. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION? #

runZero will retain your personal information for only as long as necessary for the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law (such as for tax, accounting or other legal requirements). To determine the appropriate retention period, we consider the nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, and any applicable legal requirements.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. INTERNATIONAL DATA TRANSFERS #

Personal information we collect may be stored and processed in your region, in the United States, or in any other country where we or our affiliates, subsidiaries or service providers maintain facilities. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).

Specifically, runZero is headquartered in the United States and the Services are provided in the United States. Our third party service providers and partners operate both in the United States and Europe. This means that when we collect your personal information we will process it in any of these countries.

We take appropriate steps to ensure that your personal information is protected in accordance with applicable laws and this Privacy Notice. This includes, for example, implementing standard contractual clauses or another lawful transfer mechanisms approved by the European Commission and/or the United Kingdom or Swiss authorities (as applicable) between our group companies and with our service providers, and implementing additional safeguards where necessary.

8. YOUR PRIVACY RIGHTS #

Where we are acting as a controller, and depending on your location and subject to applicable law, you may have the following rights regarding the personal information we control about you:

  • You can access, correct, update, delete, and deactivate your personal information.

  • In addition, if you are a resident of or visitor from Europe, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.

  • You can opt out of receiving marketing emails from us at any time. For further information see the "Marketing Communications" section below.

  • If you are a resident of California, please see our "California Privacy Rights" section to learn about additional privacy rights under California law.

  • If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

  • You have the right to complain to a data protection authority about our collection and use of your personal information.

To exercise any of these rights, please contact us using the details set out in the "Contact Us" section below or via the web form located at https://www.runzero.com/contact-us/ specifying which right you are seeking to exercise. We will respond to all requests in accordance with applicable law. Please note that we may require additional information from you to allow us to confirm your identity and process your request.

If you are located in the USA, please see "Jurisdiction Specific Information – USA" to learn about additional privacy rights under state law.

Marketing Communications #

  • If you supply runZero with your postal address online, you may receive periodic mailings from us with information on new products and Services, or upcoming events.

  • If you supply us with your telephone number online, you may receive telephone calls from us with information regarding orders and/or requests you have placed online – such as a software demonstration request or general business inquiries.

  • If you supply us with your email address, then in accordance with your marketing choices, you may receive email messages for marketing purposes, such as providing information on new products and Services, or upcoming events. We may track when you open our email messages or click on the links contained within them.

Opting Out: You have the right to opt-out of marketing communications from us at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you, or by emailing us at the email address set forth in the section entitled “Contact Us” below with the word UNSUBSCRIBE in the subject field of your email. Please note this opt-out will not apply to non-promotional emails, such as those about your account, transactions, servicing, or runZero’s ongoing business relations.

You can also opt out of receiving calls to your phone number at any time by requesting to opt-out during any call you receive from us or contacting us as set out in the “Contact Us” section below or via the web form located at https://www.runzero.com/contact-us/ specifying you would like to opt-out of calls.

To opt-out of other forms of marketing (such as postal marketing or telemarketing), please contact us using the contact details under the “Contact Us” section below or via the web form located at https://www.runzero.com/contact-us/.

Please note that by opting in to allow runZero and its event sponsors/industry partners to receive your contact information through an event in accordance with this Privacy Notice, you will be subject to each event sponsor/industry partner’s communications and privacy policy and must opt-out with them directly.

9. JURISDICTION SPECIFIC INFORMATION #

USA #

California Privacy Rights #

Notice at Collection #

California provides additional rights to California residents under the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act (“CPRA”) and implementing regulations (collectively referred to as "CCPA"). This section addresses those additional rights and only applies to California residents.

Additionally, we acknowledge that you may have rights under California law in connection with the personal information we process on behalf of our customers. If personal information about you has been processed by us as a service provider on behalf of a customer and you wish to exercise any rights you have with such personal information, please inquire with our customer directly. If you wish to make your request directly to us, please provide the name of our customer on whose behalf we processed your personal information. We will refer your request to that customer and will support them to the extent required by applicable law in responding to your request.

  • Collection. We have collected the following categories of personal information (as that term is defined in the CCPA) in the past 12 months:
    • Identifiers, including your name, postal address, email address, and online identifiers (such as IP address).

    • Consumer records, including your phone number, billing address, and credit or debit card information.

    • Commercial or transactions information, including records of products or services purchased, obtained, or considered.

    • Internet activity, including browsing your history, search history, and interactions with a website, email, application, or advertisement.

    • Non-precise geolocation data, including your location derived from an IP address.

    • Precise location data

    • Professional, employment or education-related information.

    • Inferences drawn from any of the information identified in this section.

  • Sales and Shares. RunZero does not sell personal information as the term “sell” is traditionally understood. However, some of our disclosures of your personal information may be considered a “sale” or a “share” as those terms are defined by the CCPA. A “sale” is broadly defined under the CPRA to include a disclosure for something of value, and a “share” is broadly defined under the CPRA to include a disclosure for cross-context behavioral advertising. We collect, sell, or share the following categories of personal information for commercial purposes: identifiers, characteristics, commercial or transactions information, internet activity, non-precise geolocation data, and inferences drawn. The categories of third parties to whom we sell or share your personal information include, where applicable, vendors and other parties involved in cross-context behavioral advertising. For details about your rights regarding sales and shares, please see the “Do Not Sell or Share My Personal Information” section below. RunZero does not knowingly sell or share the personal information of minors under 16 years old who are California residents.

  • Sensitive Personal Information. Some of the personal information we collect may be considered sensitive personal information (as described in the CCPA), for example. For further details of the sensitive personal information we collect (if any) and how we obtain this information, please review the section entitled “Information We Collect” above. We collect, use, and disclose sensitive personal information only for the permissible business purposes for sensitive personal information under the CCPA or without the purpose of inferring characteristics about consumers. Further, we do not “sell” or “share” your sensitive personal information as those terms are defined by the CCPA.

  • Data Retention. We retain each category of personal information, including sensitive personal information, for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

Requests #

  • Right to Know, Correct, and Delete.
    • Know. You have the right to know certain details about our data practices. In particular, you may request the following from us:

  • The categories of personal information we have collected about you.

  • The categories of sources from which the personal information was collected.

  • The categories of personal information about you that we disclosed for a business purpose or sold or shared.

  • The categories of third parties to whom the personal information was disclosed for a business purpose or sold or shared.

  • The business or commercial purpose for collecting or selling or sharing the personal information.

  • The specific pieces of personal information we have collected about you.

  • Correct. You have the right to correct inaccurate personal information we maintain about you.

  • Delete. You have the right to delete personal information that we have collected about you.

These rights are subject to certain exceptions and also apply to sensitive personal information. To exercise any of these rights, California consumers should submit a request using the detailed provided in the "Contact Us" section below or via the web form located at https://www.runzero.com/contact-us/. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 business days. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your requests to know, correct, or delete.

  • Do Not Sell or Share My Personal Information.

To the extent that using third party cookies and other tracking technologies to serve retargeted or interest-based advertising constitutes a “sale” or “share” of personal information under the CCPA, you may opt-out of such “sales” or “shares” by visiting our cookie consent platform at the button below and opting out of any third party advertising cookies, by visiting the “Do Not Sell or Share My Personal Information” page , or by turning on a recognized opt-out preference signal in your browser or extension such as Global Privacy Control. When you submit an opt-out through any method, the opt-out will only apply to sales and shares from the specific browser from which you sent the signal because the connection between your browser identifier and other personal information we have about you is not known to us. If you want the opt-out to apply to information we have about you in our systems, such as your email address, please also submit using the details in the "Contact Us" section below or via the web form located at https://www.runzero.com/contact-us/ (specifying the right you wish to exercise).

  • Shine The Light Customer Rights
    Consumers in the State of California may request a list of categorized third parties and in some cases affiliates to whom we may have disclosed their personal information specifically for those third parties’ and/or affiliates’ own marketing purposes, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to request this information, please submit a written request to the email or address provided in the section entitled “Contact Us” below or via the web form located at https://www.runzero.com/contact-us/. Requests must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and zip code. Please note that any response to requests made by means other than through the provided e-mail address or mail address may be seriously delayed.

Authorized Agent #

You may also designate an authorized agent to submit such requests on your behalf. Requests must be submitted through the designated methods listed above. Except for opt-out requests, we will require written proof of the agent’s permission to do so and may verify your identity directly.

Right to Non-Discrimination #

You have the right not to receive discriminatory treatment by us for the exercise of any of your rights.

Nevada Privacy Rights #

Nevada law (NRS 603A.340) requires each business to establish a designated request address where Nevada consumers may submit requests directing the business not to sell certain kinds of personal information that the business has collected or will collect about the consumer. A sale under Nevada law is the exchange of personal information for monetary consideration by the business to a third party for the third party to license or sell the personal information to other third parties. If you are a Nevada consumer and wish to submit a request relating to our compliance with Nevada law, please submit a request using the contact details provided in the "Contact Us" section below or via the web form located at https://www.runzero.com/contact-us/.

Colorado, Connecticut, Montana, Oregon, Texas, Utah, Virginia, Delaware, Iowa, New Hampshire, and New Jersey Privacy Rights

Data Practices #

This section applies to residents of certain U.S. states which also have an applicable data privacy law currently in effect, including but not limited to: Colorado, Connecticut, Utah, Virginia, Oregon, Texas, Montana, Delaware, Iowa, New Hampshire, and New Jersey. Terms used below have the meaning ascribed to them in the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Oregon Consumer Privacy Act (“OCPA”), the Texas Data Privacy and Security Act (“TDSPA”), the Montana Consumer Data Privacy Act (“MCDPA”), the Delaware Personal Data Privacy Act ("DPDPA"), the Iowa Consumer Data Protection Act ("ICDPA"), the New Hampshire Data Privacy Act ("NHDPA"), and the New Jersey Privacy Act ("NJPA"), as applicable. Information regarding the collection, use, disclosure, and retention of your personal information are set out in the main Privacy Notice above.

Some of our disclosures of personal data may be considered a “sale” under applicable law, which is often defined to include a disclosure for something of value. We also may process your personal data for purposes of targeted advertising. We do not process personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

Some of the personal data we collect may be considered sensitive personal data under applicable law. We collect sensitive personal data with your consent.

Requests #

You have the following rights under applicable law:

  • Confirm. To confirm whether or not we are processing your personal data.

  • Access. To access your personal data.

  • Correct. To correct inaccuracies in your personal data.

  • Delete. To delete your personal data.

  • Obtain. To obtain a copy of your personal data that you previously provided to us in a portable and readily usable format.

If you are an Oregon resident, you also have the right to:

  • Confirm the categories of personal data we have processed; and

  • Receive a list of the specific third parties to which we have disclosed personal data

To exercise any of these rights, please submit a request using the details in the "Contact Us" section below or via the web form located at https://www.runzero.com/contact-us/. Please note these rights are subject to exceptions. We will respond to your request within 45 days. We may require specific information from you to help us confirm your identity and process your request. If we cannot verify your identity, we may deny your request in accordance with applicable law. If personal data about you has been processed by us as a processor on behalf of a customer and you wish to exercise any rights you have with such personal data, please inquire with our customer directly. If you wish to make your request directly to us, please provide the name of our customer on whose behalf we processed your personal data. We will refer your request to that customer and will support them to the extent required by applicable law in responding to your request.

Sales and Targeted Advertising #

To the extent that using third party cookies and other tracking technologies to serve retargeted or interest-based advertising constitutes a “sale” under certain applicable US state data privacy laws, you have the right to opt-out of us "selling" your personal data or processing your personal data for purposes of targeted advertising. To exercise this right, please submit a request using the details in the "Contact Us" section below or via the web form located at https://www.runzero.com/contact-us/ or turn on a recognized opt-out preference signal, such as Global Privacy Control. When you submit an opt-out, the opt-out will only apply to the specific browser from which you sent the signal because the connection between your browser identifier and other personal information we have about you is not known to us. If you want the opt-out to apply to information we have about you in our systems, such as your email address, please also submit a request using the details in the "Contact Us" section below or via the web form located at https://www.runzero.com/contact-us/ (specifying the right you wish to exercise).

You have the right to revoke consent previously given to us for the processing of your personal data. To revoke consent, write us using the details in the "Contact Us" section below section below or via the web form located at https://www.runzero.com/contact-us/ (specifying the consent you wish to withdraw). If you withdraw consent, you may not be able to receive certain services related to that consent.

Right to Non-Discrimination #

You have the right not to be discriminated against for exercising any of your rights.

Authorized Agents #

You can designate an authorized agent to submit requests on your behalf. Requests must be submitted through the designated methods listed above. Except for opt-out requests, we will require written proof of the agent’s permission to do so and may verify your identity directly.

Right to Appeal #

If we refuse to take action on your request, you may appeal our decision within a reasonable period of time by contacting us at privacy@runZero.com and specifying you wish to appeal. Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

European Economic Area, Switzerland, and United Kingdom

For the purpose of this Privacy Notice, “Europe” means the European Economic Area (“EEA“), Switzerland, and the United Kingdom.

Controller: If you are located in Europe, the data controller responsible for the collection and processing of your personal information is runZero, Inc.

Legal basis: When we process your personal information, we will only do so in the following situations:

  • We need to use your personal information to perform our responsibilities under our contract with you (e.g., providing the services you request where we have a direct contract with you).

  • We have a legitimate interest in processing your personal information. For example, to provide, secure, and improve our Services, in communicating with you about changes to our products and services, and in informing you about new services or products.

  • We have your consent to do so.

  • We need to process your personal information to comply with our legal obligations.

For further information, please review the "Our Use of Your Personal Information" section above. If you are located in Europe, and you are not satisfied with how we have collected and processed your personal information, you may also complain to a data protection authority. Contact details for data protection authorities in the European Economic Area are available here and contact details for the UK information Commissioner's Office are available here.

9. CHANGES TO THIS PRIVACY POLICY #

Please review this Privacy Notice periodically, and especially before you provide any personal information. The Services and our business may change from time to time. As a result, at times it may be necessary for runZero to make changes to this Privacy Notice. runZero reserves the right to update or modify this Privacy Notice. When we update our Privacy Notice, we take appropriate measures to inform you, consistent with the significance of the changes we make. If the changes are material, we will notify you or offer you choice if and to the extent this is required by applicable data protection laws. This Privacy Notice was last updated on the date indicated above. Your continued use of the Services after any changes or revisions to this Privacy Notice shall indicate your agreement with the terms of such revised Privacy Notice.

10. CONTACT US #

Please feel free to contact us if you have any questions about runZero’s Privacy Notice or the information practices of the Services. You may contact us via email using the address privacy@runzero.com or via the web form located at https://www.runzero.com/contact-us/.

If you have any concerns or questions about the information provided in this Privacy Notice, those in other jurisdictions can also get in touch with us using the following details:

Country

Local Representative

By Email

EEA

EU Representative

runzero@lionheartsquared.eu

UK

UK Representative

runzero@lionheartsquared.co.uk


Discover the new era of exposure management!