PRIVACY POLICY

Last Updated July 10, 2025

I. Overview; Scope

CData Software, Inc., together with all its subsidiaries and affiliates, ("CData", "we", "us", "our" or the "Company") is committed to protecting the privacy of individuals who visit the Company's public websites, individuals who register to use the CData Community or associated CData services, and individuals who register to attend the Company's corporate events. This Privacy Policy (the "Policy") describes CData's privacy practices in relation to the use of the Company's websites and the related applications, services, and programs offered by the Company, as well as individuals' choices regarding use, access, and correction of personal information.

This Policy applies to information practices of CData owned or controlled websites that link to this Policy, including without limitation www.cdata.com and https://community.cdata.com, as well as all international CData domains and subdomains (the "Sites"). Note that the Sites may contain links to third-party websites, and you should be aware that this Policy does not apply to those websites. Although CData uses great care to select content for our Sites, including links to websites of third parties, we disclaim any responsibility for content that is found on these other websites. We encourage you to review the privacy statements of the other websites to understand their information. Except for personal information collected via general sign-up and account provisioning for CData Offerings as expressly set forth in this Policy, this Policy does not apply to personal information collected via customer use of CData software or cloud services (the "CData Offerings"), even if access to the CData Offerings is linked to or associated with the cdata.com domain. Use of CData Offerings requires entering into a separate agreement with CData containing the terms required to become a customer (referred to below as a "Customer Agreement"), and the personal information shared with us through the CData Offerings, or derived from the CData Offerings, is governed by the terms of the applicable Customer Agreement. This Policy also does not apply to the privacy practices governing the relationship between CData customers and their end users when CData customers use CData Offerings to collect and process data. Rather, such usage is governed by our customers' privacy policies, over which we have no control.

This Policy provides information about how CData collects, uses, discloses and protects the personal information ("Personal Information") we gather when you: (i) create or access an account through any of the Sites or use the Services, including the CData Community, any applications, webinars or events that we make available via the Sites, from time to time; (ii) register to use a CData Offering; (iii) subscribe to or participate in any newsletter or promotion; (iv) submit inquiry forms, ask for a price quote, contact sales, schedule a call with a CData engineer, or download CData materials or reports; (v) register and/or attend webinars or in-person or virtual events; (vi) interact with a chat bot which may be available on some of our Sites; (vii) submit a form to become a reseller or distributor. The foregoing are referred to collectively as the "Services."

II. Collection of Personal Information

CData may collect various types of information from visitors to our Sites or from phone or email conversations, which are described in more detail below. In some instances, we may combine one type of information with another type of information and store it together in our records. In all cases, however, we strive to limit the amount of information we collect and store to that which is necessary to provide you with the relevant Services. Within our Sites, you may be asked to give us personal or organizational information to arrange for a transaction with CData or receive information about CData Offerings. We may collect this information through different methods, including (without limitation):

  • Registration Forms. We encourage all visitors to register with CData, although registration is not required except for access to our premium content areas. The registration forms require users to give us accurate contact information and references to help us better serve you. You will be given specific account information in connection with establishing an account with us and it is your responsibility to keep your account credentials confidential at all times.

  • Order Forms and Enrollment Forms. Our order forms securely collect visitor's contact information and payment information to use for order fulfillment and this information may be shared with our partners or resellers if that is necessary to fulfill your request. During the purchasing process, you may be given the opportunity to sign up for future e-mailings regarding our products, services, and promotions.

  • Registration Profile. You may also be given the option of registering a profile with us to store your name, purchase history, and billing information to make it easier for you to shop and purchase products/services from us in the future. You may change/cancel information relating to your profile online at any time.

  • Online forums and social networks. Any Personal Information that you choose to submit to one of our online forums, bulletin boards, blogs, recipe pages or social networks may be read, collected, or used by others who visit these community areas. You should carefully consider whether you wish to submit Personal Information to these forums or social networks and should tailor any content you submit appropriately.

  • Telephone conversations. With your consent, we may record telephone conversations between you and our sales and technical support representatives for training and quality control purposes. You will be notified at the beginning of any call that may be recorded and given the option to opt-out. Recorded calls will be stored securely and deleted when no longer required for the purpose they were recorded.

The Personal Information collected by CData in this regard may include, but is not necessarily limited to:

  • Contact information (such as your name, title, e-mail address, postal address, and telephone number);
  • Transactional information, including delivery details, and billing and delivery address where applicable;
  • User preferences;
  • IP address;
  • Financial/credit card and payment information (please see the "Third Party Payment Processor" subsection for more information);
  • Demographic information and geographic or geo-location information; and
  • Additional information as needed for our business and customer service purposes.
  • Where applicable, if you choose to access, or log in to, any CData Site using your Google, Facebook, Yahoo, or other accounts accepted by the applicable CData Site, the third-party site may share with us certain of your Personal Information according to the authorizations you have given to that third-party site.

Sensitive Information - We ask that you not send or otherwise share with us any sensitive Personal Information, which includes but is not limited to your government-issued ID numbers (e.g. Social Security Number or driver's license number), racial or ethnic information, political or religious opinions, or your health information ("Sensitive Information"). Notwithstanding the above, if we ever need to handle Sensitive Personal Information about you, we will ask your consent to do so. Once given, such consent may be withdrawn at any time. We will not handle any Sensitive Personal Information that we are not permitted by you to handle, or that you have not provided us with.

Purpose and Legal Bases for Collection of Personal Data

Informed Consent to Data Collection and Processing - CData will rely on current and prospective customers to determine what information they would like to receive about our products, services and partners and will inform all visitors to our Sites of their rights regarding information collection and tracking and provide the ability for an individual to amend their selections in the future.

Legitimate interest to Data Collection and Processing - To the extent permitted by the applicable law we may rely on legitimate interest or the so called "soft opt-in" to process personal data for some operations such as improving our business and marketing practices or sending communications to current customers who subscribed for services or prospective who enroll for free trials, demo to provide information about the product of interest or similar for a limited period of time where the option to object against such processing, i.e. to opt out is always available. We may also rely on legitimate interest to ensure network, information security, and business performance improvement.

III. Technical Information

Cookies & Analytics - Please review our Cookie Policy to learn more about our use of cookies.

Do Not Track Signals - Without a common industry or legal standard for interpreting Do Not Track (DNT) signals, the Sites do not respond to browser DNT signals. We will continue to monitor further development of a DNT standard by the privacy community and industry.

IV. How CData Uses and Shares Information

CData does not sell, lease or rent the Personal Information you share with us to third parties. However, the Personal Information you provide may be used by us or shared with third parties for any of the following purposes (and please note that not all of the uses listed below may be relevant to you): With your consent (when required), we may use and share the Personal Information we collect to: provide, support and improve the Services; deliver correspondence, communications, or services, such as newsletters, events, training, or software that you request or purchase; process orders; confirm licensing compliance; solicit your feedback; and inform you about the Company and the products and services of our distributors, resellers and promotional partners.

CData Offering-specific data collection and usage information is available in the applicable terms of service or end user license agreement and product documentation. Some CData Offerings support connections to third parties which require you to adhere to their policies. Specifically, your use of any CData Offerings which use and transfer information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Also, we may use your Personal Information as described below.

We may, from time to time, share Personal Information and other information with other companies who may provide you information about the products and services they offer. We may analyze your Personal Information and other information in aggregate form which does not identify you personally. We may share this aggregate data with our affiliates, agents, advertisers, manufacturers, business partners, and to current and prospective business partners and to other third-parties for other lawful purposes.

We may share, disclose, or provide your Personal Information to third parties: (i) when attempting to collect a payment or debt; (ii) when required to combat fraud or to protect our interests; (iii) to enforce our Privacy Policy, our Terms of Use, or any terms of service or end user license agreement of CData; (iv) when required to do so by law or in response to legal process or lawful requests, including from law enforcement or government agencies; (v) within and among our affiliates and subsidiaries; or (vi) as part of a merger, sale of our business or assets, or dissolution.

We may employ other companies and individuals to perform functions on our behalf. Examples may include providing hosting and network services, information technology support, and customer service. These other companies will have access to the Personal Information we collect only as necessary to perform their functions and to the extent permitted by law.

CData may retain, aggregate, use, and resell any non-personal information (including other information) collected in connection with any use of the Sites or our products and services both during your use of the same and after such use has ended.

From time to time, we may conduct surveys regarding the Site or other products or services. The information you provide is used collectively for analytical and/or research purposes. You will not receive unsolicited communications as a result of your participation in a survey if you notify us not to contact you.

Also, as you browse our Sites, our web servers collect non-personal information about your visit for the operation and improvement of the Services, to track Site trends and statistics, and to prevent license abuse of CData Offerings. Via server logs, we monitor statistics such as the number of visitors to our Sites, which pages on the Sites that people visit most often and from which domains visitors come to the Sites. While we gather this type of information, none of it is associated with you as an individual. We use these statistics to improve our Sites, monitor their performance, and to make it easier for you and other visitors to use them.

V. Events

From time to time, we are organizing events and other similar activities which may be photographed as it might be indicated at the venue with an appropriate signage. Some of the most prominent photos may be posted on our corporate profiles on the social networks and/or corporate intranet portal to enhance visibility and the inspiring outcomes of the event. You are always entitled to request erasure of the photo and/or the post. However, we are not able to control whether the attendees take or post photos or videos in a personal context and take no responsibility for such actions.

VI. Communications on the Sites

Any Personal Information or other content that you choose to submit in any forum on the Sites, such as the CData Community, may be read, collected, or used by others who visit these forums, and may be used to send you unsolicited messages. We are not responsible for the Personal Information or other content that you choose to submit in these forums.

Any content or Personal Information you publish on the Sites may also appear in search engine results (such as Google, Yahoo!, and Bing), in the cache of those search engines, in feeds, and on third-party sites pursuant to cobranding agreements. We have no control over updating and/or removal of such content or Personal Information, which is the sole responsibility of the search engines, third-party sites, and RSS web feed resources. You agree and acknowledge that we are not liable for the information published in search results or by any third-party site that carries any content or Personal Information you publish on the Sites. We strongly discourage your posting any content or Personal Information that you do not want others to see or use.

We do not and cannot review all communications and materials posted to or created by users that visit the Sites or use the Services. However, we reserve the right to block or remove communications, content, Personal Information, or other submissions to the Sites, for any reason, in our sole and absolute discretion.

VII. Security

CData employs industry standard security measures to ensure the security of information. However, the security of information transmitted through the Internet can never be guaranteed. CData is not responsible for any interception or interruption of any communications through the internet or for changes to or losses of information. Users of our Sites are responsible for maintaining the security of any password, user ID, or other form of authentication involved in obtaining access to password protected or secure areas of any of our Sites. To protect you and your information, CData may suspend your use of the Sites, without notice, pending an investigation, if any breach of security is suspected. Access to and use of password protected and/or secure area of any Site is restricted to authorized users only. Unauthorized access to such areas is prohibited and may lead to criminal prosecution.

We have put in place physical, electronic, and managerial procedures designed to help prevent unauthorized access, to maintain data security, and to use correctly the Information we collect via the Sites and Services. These safeguards vary based on the sensitivity of the information that we collect and store. We also use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information.

VIII. Service Providers

We use third parties to assist us providing you with a variety of services while using the CData Sites and Services. When you subscribe to receive any of these services, we will share your Personal Information only as necessary with the third-party solely for the purpose of providing that service.

These companies may use your information to help CData communicate with you about offers from CData and our partners. These companies do not have any independent right to share this information. We will obtain your initial consent prior to sharing your personal information. If you would like to opt out of having your information shared with these third parties in the future, you may Contact Us, but please note that opting out may preclude you from licensing certain products due to our point of sale processes.

Third Party Payment Processors

We use third-party service providers ("Payment Processors") to manage credit card processing. Under our agreement with service providers, they are not permitted to store, retain, or use your Personal Information or your billing information except for the sole purpose of credit card processing on our behalf. In certain cases, we may have access to the last four digits of your credit card number, its expiration date, and the billing address, which we will use solely to assist us in providing the product or service you purchased. In addition, we and our service providers may use any information processed pursuant to this section at an aggregate level for internal business analyses and fraud prevention.

IX. Commitment to Children's Online Privacy

CData Sites and Services are not directed at children. CData does not knowingly accept online Personal Information from children under the age of 18. If you are under 18 or otherwise would be required to have parent or guardian consent to share information with CData, you should not share any information about yourself. If we become aware that we have collected personal information from a child, we will promptly delete the information from our records. If you believe that a child under the age of 18 may have provided us with personal information, please contact us as it is indicated below.

If you are customer who is covered by any of the children and/or student privacy laws and you believe that the usage of some of our products may result in processing or disclosure of children or student data to us, you must notify us in writing prior to starting your subscription and to obtain the parental consents to the extent required by the applicable laws.

X. Notice to California Residents

If you are a resident of the State of California, please refer to our California Resident Privacy Notice

XI. Notices to Persons Outside the U.S.

If you are located in the EEA or the UK, you may submit a request relating to your own personal data collected by CData (including without limitation, a request to access and/or delete your personal data) by visiting our Data Subject Access Request Page.

If you are a resident of Brazil, Personal information, as described in this Policy, is collected, stored, used and/or processed in accordance with Brazilian Law No. 13,709/2018, as amended (LGPD). LGPD gives you certain rights to request information about our processing of your personal data and the right to ask that we delete your personal data. To exercise your rights, please visit our Data Subject Access Request Page.

You also have the right to lodge a complaint with the competent data protection supervisory authority in your country. If you believe we have processed your personal information in a manner which infringes your privacy rights, we encourage you initially to contact us as specified "Contact Us" section below or by submitting request via our Data Subject Access Request Page.

We are a corporation with operations worldwide and have developed global data practices designed to assure your Personal Information is appropriately protected. Please note that your Personal Information may be transferred, accessed and stored globally as necessary for the uses stated above in accordance with this Policy. For residents of the European Union ("EU") In particular, please note that CData is a US-headquartered company and therefore information covered by this Policy will be hosted and stored in the United States, which does not have similar data protection laws to the EU. By providing us with Personal Information via the Sites or the Services, you agree to that information being stored and processed in the United States.

Because CData is headquartered in the United States, we may have a need to transfer information collected from our non-U.S. customers to the U.S. We may also have a need to transfer our customer information (regardless of where you live) to other countries or places in which we or our agents/contractors maintain offices or facilities.

Where we transfer personal information from the EU or the UK to the US, or other countries without a current EU adequacy decision, we rely on the European Commission approved Standard Contractual Clauses for the Transfer of Personal Data to processors located outside the EEA ("SCCs") as the legal basis for those transfers. The SCCs are incorporated into CData's Data Processing Addendum, which customers and partners are encouraged to execute and return to CData in accordance with the instructions in that document.

XII. Accessing, Correcting, and Updating Your Personal Information

CData may retain your information for a period consistent with the original purpose of collection. For instance, we may retain your information during the time in which you have an account to use our Sites or Services and for a reasonable period of time afterward. We also may retain your information during the period needed for CData to pursue our legitimate business interests, conduct audits, comply with our legal obligations, resolve disputes, and enforce our agreements.

Our Sites provide users with the opportunity to control what communications they receive from us. You can go to the CData Preference Center at any time to change your communication preferences, including unsubscribing to the various communication offerings at any time. However, some non-marketing communications are not subject to general opt-out, such as communications related to product download, sales transactions, software updates and other support related information, patches and fixes, conferences, or events for which you have registered, and disclosures to comply with legal requirements. If you are receiving communications from one of our partners, you should follow the partner's process for opting out of communications from them.

You may request us to review, correct, delete or otherwise modify any of the personal information that you have previously provided to us through the Sites. If you have registered for an account with CData, you may generally update your user settings, profile, organization's settings, or event registration by logging into the applicable Site or Service with your username and password and editing your settings or profile. To update your billing information, discontinue your account, and/or request return or deletion of your Personal Information associated with your account, please contact your account representative or the customer service team for the applicable Service. For other requests to access, correct, modify or delete your Personal Information, please review the "Contact Us" section below. Requests to access, change, or delete your information will be addressed within a reasonable timeframe. If you are an employee of a CData customer, you may also wish to contact your company's system administrator for assistance in correcting or updating your information.

XIII. Changes to This Policy

CData will occasionally update this Policy. When we do, we will post a prominent notice in this section of this Policy notifying users when it is updated. For material changes (i.e., substantially new practices you wouldn't expect from us or that we didn't previously tell you about), we may decide to give you notice via email, in which case you will have a choice as to whether or not we use your Personal Information in this different manner. We reserve the right to make changes to our practices and this Policy at any time, provided that we follow the procedures above.

If CData goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, your personal information collected through our Sites may be among the assets transferred. A prominent notice will appear on our Site(s) for 30 days after any such change in ownership or control of your personal information.

This Policy revises and supersedes all previous privacy policies.

XIV. Contact Us

If you have comments or questions about this Policy, you may contact us by mail e-mail ([email protected]) or by regular mail at:

CData Data Protection Officer

101 Europa Drive, Ste 110

Chapel Hill, NC 27517

USA