Glean Privacy Statement
1. Applicability of This Privacy Statement
Glean Technologies, Inc. and its subsidiaries (collectively, “Glean,” “we,” “our,” or “us”) are committed to protecting your Personal Information and providing a positive experience when you visit our websites or when we engage with you during our normal course of business operations (“Business Operations”). This Privacy Statement (“Privacy Statement”) does not apply to your use of our products and services (collectively, “Solutions”).
This Privacy Statement applies to all Glean websites and Business Operations that link to or reference it. Additional notices provided at the time of data collection, or website-specific privacy statements, will control to the extent they conflict with this Privacy Statement. By using our websites, engaging with our Business Operations, or otherwise providing Personal Information to us, you agree to the terms below, which we may update from time to time.
2. Personal Information We Collect
- “Personal Information” means any information that can be used to identify an individual, and may include name, address, email address, phone number, login credentials, marketing preferences, and social media account information. Where we link other data to Personal Information, we treat that linked data as Personal Information.Information You Provide Directly.
- Information You Provide Directly. We collect Personal Information when you complete a web form, create an account, purchase a Solution, request customer support, apply for a position, register for a newsletter or certification, or otherwise contact us.Information Collected Automatically.
- Information Collected Automatically. We and our third-party partners use cookies, web beacons, web logs, and similar technologies to automatically collect your browser type, IP address, clickstream behavior, and related usage data. This information is used to better understand and improve the usability, performance, and effectiveness of the website and to help tailor content or offers for you. See Section 7 for more detail.Information from Third Parties.
- Information from Third Parties. We may receive Personal Information from trusted third-party sources, channel partners, resellers, and publicly available sources, and may combine this with information we collect directly to improve accuracy and completeness.Third-Party Information You Provide About Others.
- Third-Party Information You Provide About Others. If you provide us with a third party's Personal Information (such as for a referral), you represent that you have their permission to do so. Third parties may contact privacy@glean.com to unsubscribe from future communications at any time.
3. How We Use Personal Information
We use Personal Information to:
- Provide, maintain, and improve our customer support and Business Operations;
- Process orders and payment transactions;
- Create and manage accounts;
- Send service-related communications, including security alerts and administrative notices;
- Send marketing communications consistent with your preferences;
- Personalize your website experience;
- Manage job applications and transfers;
- Manage calendaring and meeting-related communications;
- Administer newsletter subscriptions and certification testing;
- Fulfill other legitimate business purposes permitted by applicable law, or to comply with legal obligations.
4. How We Share and Disclose Personal Information
We do not sell your Personal Information as “sell” is defined under applicable privacy laws. We may share it with third parties for the purposes of our Business Operations, such as in the following circumstances:
- Within Glean. We share Personal Information among our global subsidiaries for data processing and storage purposes.Service Providers and Vendors.
- Service Providers and Vendors. We share Personal Information with authorized third-party agents, contractors, and service providers who act on our behalf to support website hosting, data analysis, payment processing, order fulfillment, IT infrastructure, customer service, email delivery, marketing, and auditing.Channel Partners and Resellers.
- Channel Partners and Resellers. If you inquire about Solutions typically fulfilled through channel partners or resellers, we may share your information with those parties, who may also inform you about third-party products or services that may be of interest.Business Transactions.
- Business Transactions. In connection with a merger, acquisition, asset sale, consolidation, restructuring, or financing, we may disclose Personal Information to the relevant parties.Legal Requirements and Safety.
- Legal Requirements and Safety. We will disclose Personal Information to law enforcement, government authorities, or other third parties as required to comply with applicable law or legal process, meet national security requirements, or protect the rights, property, or safety of Glean, our partners, or others.With Your Consent.
- With Your Consent. We may share Personal Information in other ways when we notify you and obtain your consent.Aggregated or Anonymized Data.
- Aggregated or Anonymized Data. We may share data in a form that cannot reasonably be used to identify you.
To opt out of sharing for third-party marketing purposes, contact privacy@glean.com.
5. Retention of Personal Information
We retain Personal Information only as long as necessary to fulfill the legitimate business purposes for which it was collected, or as required to meet legal, accounting, reporting or other business obligations; resolve disputes; protect assets; and enforce agreements.
In determining retention periods, we consider the nature and sensitivity of the information, the risk of unauthorized use or disclosure, whether purposes can be achieved through other means, and applicable legal requirements.
6. Security of Personal Information
We implement physical, administrative, and technical safeguards designed to protect your Personal Information from unauthorized access, use, or disclosure. We contractually require our suppliers to maintain equivalent protections. Notwithstanding these measures, no data transmission or storage system can be guaranteed to be fully secure.
7. Cookies and Web Technologies
We use cookies, embedded web links, web beacons, and similar technologies to collect standard information your browser sends, including browser type, IP address, and clickstream behavior, in order to improve usability, performance, and content relevance.
Our websites may include interactive widgets provided by third parties. Personal information collected through those widgets is governed by the privacy policies of the companies that created them.
Our websites do not currently recognize or respond to “Do Not Track” signals from browsers. If this changes, we will update this Privacy Statement accordingly.
8. Linked Websites and Third-Party Forums
Our websites may contain links to third-party websites and services outside our control. This Privacy Statement does not apply to those sites, and we encourage you to review their privacy policies.
If you participate in discussion forums, community pages, or chat rooms on Glean websites, be aware that information you share there may be publicly accessible and beyond our control. To request removal of Personal Information from a forum or blog, contact privacy@glean.com. In certain circumstances, removal may not be possible.
9. International Data Transfers
Glean is a global organization. Your Personal Information may be transferred to, and processed in, the United States or other jurisdictions where data protection laws may differ from those in your country of residence. By using our websites, where applicable law permits, you consent to such transfers.
- Legal Basis for Processing. For website and other Business Operations, we process your Personal Information on the basis of contract performance, legitimate interests, or your consent. Controller vs. Processor.
- Controller vs. Processor. When Glean acts as data controller (e.g., for website interactions or direct marketing), submit requests to privacy@glean.com. When Glean acts as data processor (e.g., for Solutions provided through your employer), the data controller is the customer organization.Identity Verification.
- Identity Verification. We may verify submitted information (which may include name, email, company, and country/state) before fulfilling any data subject request.
10. Your Privacy Rights
A. Rights: General Data Protection Regulation (GDPR) – EEA, UK, and Switzerland
For transfers from the European Economic Area (EEA), we rely on Standard Contractual Clauses approved by the European Commission to ensure equivalent protections. See also Section 11 regarding the EU–U.S. Data Privacy Framework.
If you are located in the EEA, UK, or Switzerland, you have the following additional rights under the GDPR and equivalent laws:
- The right to object to processing or request restriction of processing;
- The right to data portability;
- The right to withdraw consent at any time (without affecting the lawfulness of prior processing);
- The right to lodge a complaint with your local data protection authority.
To exercise these rights, contact: privacy@glean.com, or write to Glean Technologies, Inc., Attn: Privacy Department, 634 2nd Street, San Francisco, CA 94107, USA.
Glean cooperates with EU data protection authorities (DPAs), the UK ICO, and the Swiss Federal Data Protection and Information Commissioner regarding unresolved complaints relating to data transferred from those jurisdictions.
B. Rights: CCPA/California Privacy Rights Act (CPRA)–California
California residents have the following rights under the CCPA/CPRA:
- Right to Know: You have the right to request a copy of the specific pieces of Personal Information collected, used, and disclosed about you over the past 12 months, including the sources, purposes, and categories of third parties involved.
- Right to Delete: You have the right to request deletion of Personal Information we have collected, subject to certain exemptions (e.g., where required to detect security incidents, complete a transaction, or comply with a legal obligation).
- Right to Correct: You have the right to request correction of inaccurate Personal Information.
- Right to Opt Out of Sharing: You have the right to request to opt out of sharing of your Personal Information for cross-context behavioral advertising purposes.
- Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA right.
California Shine-the-Light Law. California residents have the right to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their Personal Information (if any) for their direct marketing purposes in the prior calendar year, as well as the types of Personal Information disclosed to those parties.
To exercise these rights, contact: privacy@glean.com, or write to Glean Technologies, Inc., Attn: Privacy Department, 634 2nd Street, San Francisco, CA 94107, USA.
No Sale of Personal Information. Glean does not sell, and has not sold in the preceding 12 months, Personal Information as defined under the CCPA. Because Glean sells enterprise products to businesses rather than directly to consumers, we do not knowingly collect Personal Information from minors.
Categories of Personal Information Collected and Disclosed (Past 12 Months):
| Category | Shared With |
|---|---|
| Identifiers (name, email, IP address, etc.) | Corporate affiliates; service providers |
| California Customer Records (Cal. Civ. Code § 1798.80(e)) — primarily employment-related | Corporate affiliates; service providers |
| Protected classification characteristics — employment-related only | Corporate affiliates; service providers |
| Commercial information (purchase records, etc.) | Corporate affiliates |
| Internet or network activity (browsing/search history, etc.) | Vendors; service providers |
| Professional or employment-related information | Corporate affiliates; service providers |
| Inferences drawn from the above | Corporate affiliates; service providers |
To submit a request, email privacy@glean.com. Authorized agents may submit requests on behalf of a California resident with written permission signed by the resident, or a power of attorney under Probate Code sections 4121–4130. We may verify the agent's authority and may contact the resident directly to confirm the request.
C. Rights: General Data Protection Law (LGPD)–Brazil
If you are located in Brazil, you have certain rights under the Lei Geral de Proteção de Dados (LGPD). Subject to certain limits, you have the right to obtain the following in relation to your Personal Information:
- Confirmation of the existence of processing;
- Access to the data;
- Correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data, in non-compliance with Brazilian law;
- Data portability to another service or product provider, upon express request, in accordance with Brazilian law, subject to commercial and industrial secrets;
- Deletion of Personal Information processed with the your consent, except where data retention is necessary in order to comply with legal, contractual and regulatory obligations; to safeguard and exercise rights, including in judicial, administrative, and arbitration proceedings; or as otherwise required by applicable law;
- Information about the public and private entities with whom Glean has shared data;
- Information about the possibility of not providing consent and the consequences of denial;
- Withdrawal of consent through a free and facilitated procedure, with ratification of the processing carried out before the deletion request;
- Review of decisions made solely based on automated processing of personal data that affect your interests, including decisions aimed at defining your personal, professional, consumption, and credit profile or aspects of your personality; and
- Information about the criteria and procedures used for automated decisionmaking, subject to commercial and industrial secrets.
To exercise these rights, contact: privacy@glean.com, or write to Glean Technologies, Inc., Attn: Privacy Department, 634 2nd Street, San Francisco, CA 94107, USA.
11. EU–U.S. Data Privacy Framework
Glean has certified to the Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework (DPF) Principles, the UK Extension to the EU–U.S. Data Privacy Framework, and the Swiss–U.S. Data Privacy Framework, and is committed to all relevant framework Principles. Glean is a certified participant listed on the Data Privacy Framework website at www.dataprivacyframework.gov.
To the extent any conflict exists between this Privacy Statement and the applicable Data Privacy Framework Principles, the relevant Principles shall govern. To learn more about the EU-U.S. Data Privacy Framework program, the UK extension, and the Swiss-US Data Privacy Framework, please visit www.dataprivacyframework.gov.
Binding Arbitration. Under certain conditions, individuals may invoke binding arbitration for DPF compliance complaints not resolved by any of the other DPF mechanisms. For more information, see Annex I of the DPF Principles at https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.
FTC Jurisdiction. Glean is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
Onward Transfer Liability. Glean uses standard contractual clauses for onward transfers to third parties unless we can demonstrate we were not a party to the events giving rise to any damages.
12. Contact Us and How to Submit Requests
For questions, corrections, or privacy requests of any kind:
Email: privacy@glean.com
Mail: Glean Technologies, Inc., Attn: Privacy Department, 634 2nd Street, San Francisco, CA, 94107, United States
Data Protection Officer: Michael Moore, Legal Department
We value your privacy. We will acknowledge and respond to requests within 30 days or as otherwise required by applicable law.
13. Updates to This Privacy Statement
We may update this Privacy Statement from time to time. Continued use of our websites after changes are posted constitutes acceptance of the revised Privacy Statement. We recommend reviewing this page periodically to stay informed of any updates.