Rubrik Privacy Policy

California Notice at Collection: If you are a California resident, see the California Privacy Rights Statement section below for important information about your rights under California law. If you are located in the European Economic Area, UK, or Switzerland, please also see the Supplemental European Privacy Statement below.

Your privacy is important to Rubrik, Inc., 3495 Deer Creek Road, Palo Alto CA, 94304, its affiliates, including Rubrik International, Inc., and any newly acquired companies (“Rubrik”, “we” or “us”).

In this Privacy Policy, we provide information about how we process personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including, as applicable, our websites, applications, social media pages, chatbots, marketing activities, live events, visiting our facilities, and other activities described in this Privacy Policy) (collectively, the “Online Services”).

We provide a cybersecurity monitoring solution to our business customers. We also offer advanced machine learning and AI products and services as part of our integrated platform. Our cybersecurity, identity security, and machine learning offerings, and the data processing associated with them, are covered by this Privacy Policy. Our use of information that we process on behalf of our business customers may be governed by our agreements with such customers. If you have questions or concerns regarding your personal information that we process on behalf of a business customer (including to exercise any rights you may have with respect to such information), please direct your concerns to that business customer.

Our websites, products and services are designed and intended for businesses and their representatives. We do not offer products or services for use by individuals for their personal, family or household purposes. Accordingly, we treat all personal information we collect as pertaining to individuals in their capacities as representatives of the relevant business and not their individual capacities.

If we process personal information about you in connection with employment recruiting, candidate sourcing, job applications, interviews, assessments, or potential employment opportunities at Rubrik, our Rubrik Employment Candidate Global Privacy Notice applies to that processing instead of this Privacy Policy. This includes personal information collected or used to identify, contact, evaluate, or communicate with potential candidates for employment opportunities.

The Rubrik Privacy Policy is available in multiple languages. In the event of any inconsistency, the English version of the Rubrik Privacy Policy shall prevail and be treated as the authoritative and most current version. You can download a printable copy of the English version of the Privacy Policy here.

What Personal Information Do We Collect?

We collect various categories of personal information to provide you with the Online Services, as follows:

• Contact and Request Information: We collect personal information that allows us to be in contact with you (such as name, email address, phone number and address) and other personal information that you voluntarily provide to us when you contact or interact with us via our Online Services or chat features with a question, register for an event, comment or request in relation to our products and services.

• Account Information: If you create an account on one of our Online Services, we collect your company, user identifier and password. We also collect information about your usage of our Online Services in association with your account, namely, your account preferences, which features of the Online Services you use and for how long, and any requests or orders made via your account.

• Website Information and Mobile Information: When you access our websites, we automatically collect your computer or other device’s internet protocol (IP) address and other technical information about your computer or other device and website usage, namely, your browser type and version, internet service provider domain, time zone setting, referring/exit pages, operating system, date/time stamps and/or clickstream data. We also use cookies and other tracking technologies, including chat technologies, on our websites; for more information, please see the Cookies and Other Technologies Information section below. We may link any of the information noted here to information that you directly submit while on our website or information we receive from third parties which would in turn allow individuals and their website actions to be personally identifiable and stored within our customer relationship database to help provide personalized services and help with sales planning, forecasting and outreach.

• Public Information about You: If you have identified yourself to us as a user of our Online Services, expressed interest in our products or services, or may have an interest in our products or services, we may collect personal information from publicly available sources, such as social media, public directories etc. We also use third-party search, data enrichment and prospecting information providers to find business contact information about current or potential business customers who may be interested in our services [e.g. LinkedIn Sales Navigator, ZoomInfo, Lusha, 6Sense].

• Audiovisual Information about You: Photographs, and images/footage captured/recorded on CCTV or other audio, video and related security/monitoring systems or captured during marketing/public filming events/sessions (including recording of virtual or live workshops or other events/sessions).

• Marketing Information: Includes your contact and professional details provided through marketing forms and events; your preferences for receiving our marketing communications; details about your engagement with those communications and our advertising, including opens, clicks, content accessed, and events attended; identifiers used to deliver and measure marketing, including email address, cookie and advertising identifiers, and campaign attribution data; and segments, scores, and other inferences we derive from this information.

• Product Usage Data: Information about how you interact with and configure our machine learning products, including API Usage, model deployment details and feature utilization.

• Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

We may also provide public bulletin boards or forums on our Online Services. Please note that any personal information you post via these bulletin boards or forums may be accessible to the public. This information can be seen, collected, and used by others, including being cached, copied, screen captured, or stored elsewhere by others (e.g., search engines), and we are not responsible for any such use of this information.

How Do We Use Your Personal Information?

We use your personal information to access, analyze, deliver, manage and optimize our products and services, to administer your choices, for understanding or analyzing website traffic, for personalizing your website and advertising experiences where applicable and to provide Online Services. In particular, we may use:

• Personal information collected to access, deliver and manage the services you have licensed or subscribed to, including setting up user and admin accounts, providing engineering and business customer support and managing features and functionality of other auxiliary or third party services.

• Contact and request information to respond to your comments, questions and requests, and provide you with any product documentation or whitepapers you request. As permitted by applicable law, including with your consent where required, we may use your contact information to provide you with advertisements, marketing communications, promotional offers and updates on new services and benefits.

• Contact information to administer or invite you to live events, webinars, conduct sales planning and outreach that we legitimately believe you would be interested in, or to grant you access to a physical office or facility. This information is stored within our business customer relationship marketing databases. In addition, we may use contact information or other information obtained from publicly available sources or databases and third-party data verification and enrichment providers such as ZoomInfo and Lusha to verify, cleanse, or update your contact information to ensure its accuracy.

• Website information and mobile information to monitor the performance of our websites and mobile applications, analyze trends, usage and activities in connection with advertising and marketing activities, and ensure our website and mobile applications are technologically compatible with users. This includes use of email marketing platforms, marketing automation platforms, product analytics platforms, machine learning as well as analytics and measurement tools and services like Adobe Analytics, Google Analytics, MailChimp, Marketo, Meta, Mixpanel, ZoomInfo, 6Sense or other similar technology or platforms.

• Session replay services provided by third-party providers help us understand how users interact with our website by creating a replay of your session. We use this data to identify and fix technical issues, analyze and improve site usability, and optimize our website's performance. Any sensitive data, such as passwords or payment information, is automatically masked and is not captured by these services.

• Account information to manage your Online Services, account or portal that you have signed up to, communicate with you in relation to your account, personalize our Online Services for you, including pre-filling forms where available if you are in our business customer relationship marketing database and have consented (where applicable) to cookies, provide you with customer service, product updates and warranty information, and monitor the performance of our Online Services.

• We may also use website information, contact information, mobile information, predictive analytics and information stored in our customer relationship management database for targeted advertising purposes where permitted by applicable law.

• We use third-party advertising partners such as 6Sense, Influ2, Meta and Instagram, Microsoft, X (formerly Twitter), Google and LinkedIn who may use cookies and other technologies to collect website information and mobile information and other information to serve online ads about Rubrik that we think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate behavioral or targeted advertising to those or similar users on these or other online platforms.

• We may send you targeted email messages which may include the use of web beacons so that we can understand if the message was successfully delivered, opened or shared. When clicking on links in an email, we may record that activity within our email management software, analytics platforms and customer relationship marketing databases so that we can understand the performance of these emails as applicable by law. We may use this information to predict the likelihood of your continued interest in our products and services, as well as to personalize your website experience, or to show you more relevant advertisements. For more information, please see the Cookies and Other Technologies Information section below.

• Public information including but not limited to, your social media handles or social media activity such as likes or comments if you engage with any of Rubrik’s social media content. We may combine this with other personal information we may have about you to personalize our Online Services for you and identify products and services that we believe may be of interest to you or your business.

• Audiovisual information about you in connection with operating and managing any facilities or business operations, and hosting or managing any events that we may sponsor or be a participant.

• Marketing and analytics information about you to understand your potential interest in our services and to send you personalized direct marketing communications based on your needs and interests.

• Recorded information may be used, including recording phone calls (in accordance with applicable laws) for training, quality assurance and administrative purposes. If required by applicable law, we will give you the option to object to a call being recorded.

• Generative AI (GenAI) models and chatbots to: (i) enhance or improve certain products and services, such as automated content generation, personalized recommendations, code development or review, quality assurance, and customer support. This includes leveraging Rubrik’s integrated machine learning technologies to drive innovation within our offerings. When you provide feedback or interact with our chatbot, we may also use the transcripts and feedback received to improve our services and processes that utilize these models. This includes the use of AI-assisted tools to generate follow-up emails based on chat interactions or behavioral signals, which may allow continued correspondence through email threads between you and our AI-assisted communication services, and (ii) to support internal productivity and enhance the quality and efficiency of our services and communications. These tools may assist with tasks such as content generation, summarization, translation, marketing automation, communications, data analysis and enrichment including for sales and marketing purposes.

  • These GenAI models are designed to generate outputs based on user inputs and relevant source documents. Specifically, data submitted by customers for processing through Rubrik’s AI/ML models is handled in accordance with the terms of our agreements with those customers. We ensure that all data used in feedback processes is handled in accordance with our privacy policies and applicable regulations.

  • We do not make fully automated decisions (whether using GenAI models or otherwise) that have legal or similarly significant effects on individuals. Where automated tools assist in processing or analysis, a human review element is retained for decisions that may significantly affect you.

• We also use your personal information as necessary to comply with our legal and contractual obligations and to protect our legal interests, such as in the event of a complaint or dispute.

• We may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you. We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Online Services and promote our business. We will not attempt to re-identify any such data, except as permitted by law.

• We also perform statistical analyses of the users of our Online Services to improve the content, design and navigation of the Online Services and our other products and services. In these cases, we use aggregate or statistical data that cannot reasonably be used to identify you in most cases.  When you engage with an email or other technology (such as chat features on our site), fill in a form, attend an event we host or sponsor, we may store and combine this information — including with behavioral data, enriched data, and information from third-party providers — in our analytics or customer relationship management systems to better understand your interests, assess your potential interest in our products and services, and to provide you with the most relevant communications, including for sales prospecting and lead scoring purposes.

Additionally, in some cases, we may specifically ask for your consent to collect, use, or share your personal information, such as when required by law.

Where might your Personal Information Be Transferred?

As a global organization with offices and operations throughout the world, personal information we collect may be transferred or be accessible internationally to other Rubrik entities and affiliates and/or our service providers. Your personal information will be stored and processed using secure systems, including cloud-based and on-premise IT infrastructure operated by Rubrik and/or our service providers. Any such transfers throughout Rubrik’s global business take place in accordance with applicable data privacy laws, Rubrik’s Binding Corporate Rules (“BCR”), the European Commission’s Standard Contractual Clauses (“SCC”) (with our service providers), or such other legally recognized transfer mechanism as may apply. Our BCR reflect the standards contained in European data privacy laws and means that all our group entities which have signed up to our BCR have to comply with the same internal rules.  For more information or to download a copy see BCR.

What Personal Information Do We Disclose?

Rubrik may disclose your personal information to the following third parties, and as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection:

• To Rubrik’s service providers, who act on Rubrik’s behalf and instructions to fulfill product orders, deliver services, provide IT, website or webinar hosting and customer support (including online chat functionality and data enrichment or cleansing providers) and security services, and fulfill the other purposes set forth above.

• To other Rubrik-owned business entities for the purposes of coordinating our global enterprise’s provision and development of products and services.

• To third-party advertising partners, for the targeted advertising practices, described below.

• To business and marketing partners, such as third parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services, or whose products or services may be of interest to you.

• As required by applicable law, including, without limitation, in response to any government or regulatory agency request, to cooperate with law enforcement investigations, or upon receipt of any court order.

• To professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.

• To business transferees (e.g., a prospective or actual purchaser or seller in the context of a merger, acquisition or other reorganization or sale of Rubrik’s business or assets). Rubrik’s practice is to seek reasonable protection for information in these types of transactions.

• To courts and public authorities to protect you, Rubrik or third parties from harm, including fraud or instances where somebody’s physical safety is at risk.

Service providers acting on Rubrik’s behalf shall be obliged to adhere to confidentiality requirements no less protective than those set forth herein and will only receive access to your personal information as necessary to perform their functions.

Sources of Personal Information

If Rubrik does not obtain your personal information directly from you, Rubrik may obtain it from the following sources: publicly available sources (such as public websites, public authorities, the internet, social media, or registers), Rubrik’s employees or consultants or employers of our consultants, Rubrik’s affiliates and partners, subsidiaries or newly acquired entities, public authorities, educational institutions, suppliers and vendors, including any third-party data providers, and when you visit any Rubrik offices.

Rubrik may also receive your business contact data from event partners where Rubrik is sponsoring or attending an event or at events Rubrik sponsors or attends. The information we receive differs by event partner and is based on their agreements with you when you register to attend their event. Rubrik uses this business contact data as per contractual agreement with the event partner, or as required by applicable data protection laws.

We may also combine personal information collected directly from you or through your use of our Online Services — including behavioral and cookie data — with information obtained from third-party data providers to supplement, verify, or enrich your profile for marketing and sales purposes.

Your Choices

In this section, we describe the rights and choices available to all users. Users who are located in California and Europe can find additional information about their rights below.

Access or update your information. If you have registered for an account with us through the Online Services, you may review and update certain account information by logging into the account or by contacting us.

Opt-out of communications. If you no longer wish to receive marketing-related communications, you may opt-out of receiving these emails by clicking “Unsubscribe” found in emails we send you. Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails.

Advertising choices. You may control or limit use of some of your personal information for targeted advertising by clicking the Rubrik link in the Cookie Policy to access your cookie settings or by changing your settings on each advertising platform, device, or browser.

Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information that we identify as required or mandatory, we may not be able to provide those services.

Third-Party Websites

Our Online Services may include links to third-party applications, products, services, or websites. If you access those links, you will leave our Online Services. Rubrik does not control these third-party sites or their privacy practices, which may differ from Rubrik’s practices. The Rubrik Privacy Policy does not cover the personal information you choose to provide to or that is collected by these third-parties. You are encouraged to review the privacy documentation of any third-party site you interact with before you allow them to collect and use your personal information.

Rubrik may also provide social media features, such as Facebook, LinkedIn, Vimeo, YouTube or X (formerly Twitter) buttons that enable you to share information with your social networks to interact with Rubrik on various social media websites.

Your use of these features may result in the collection or sharing of information about you depending on each specific social media website and may include collecting your IP address, which page you are visiting on our site, and a cookie to enable the feature to function properly. Social media features or any embedded widgets such as video and podcast players are hosted by a third-party provider (such as Youtube, Vimeo or Spotify). Your interactions with these social media features, e.g., any videos you watch, or podcasts you listen to, are governed by the privacy policy of the third-party providing it. They may collect data about your viewing or listening history on and off Rubrik’s website, especially if you have an existing account with that third-party provider or have not cleared certain pixels or cookies before coming to our website. In those cases, they may be able to identify you directly and combine this data with other information or data they have collected from you during your interactions with that third party.

Persons under the Age of 13

We do not knowingly collect, sell or share personal information from minors under the age of 13. If we learn that we have collected the personal information of a minor under 13 years old, we will comply with applicable legal requirements to delete the information.

Cookies and Other Technologies

Rubrik and our partners (e.g., marketing partners, analytics, advertising, or service providers) use various tracking technologies such as cookies, web beacons, pixels, tags and scripts alone or in conjunction with cookies to analyze trends on our Online Services, administer our Online Services, and to gather firmographic and demographic information about our user base as a whole or for advertising. This includes technologies utilized across all Rubrik Online Services. We receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis in most cases. If you provide personal information on our website and accept cookies, Rubrik may combine this data in our customer relationship management or analytics systems.

Please see our Rubrik Cookie Policy for more details including, information about your choices with respect to advertising and social media cookies and for access to our cookie consent manager. We respond to the Global Privacy Control signal.

Where you are a recognized user, our chat technology may access profile data associated with cookies set by our marketing platforms, including information sourced from our customer relationship management systems, to personalize your chat experience.

We also use chat technologies that employ cookies and software code to operate the chat features that you can use to communicate with us through the Online Services. The specific third-party providers may vary across different Rubrik Online Services. These providers access and use information about web pages visited on our website, your IP address, your general geographic information (e.g., city, state), and other personal information you share through online chats only for the purposes described in this Privacy Policy.

Targeted Advertising Practices

We may rely on third-party service providers to serve and manage our advertising on other sites. These service providers may use technologies such as cookies and other non-cookie technology to gather information about your activities on our websites and other sites in order to provide you with advertising based upon your browsing activities, interests or other information we may provide them. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out by clicking here (or if located in the European Union click here). Please note this does not opt you out of being served ads. You may continue to see more generic ads. You may also opt out directly through the advertising platform(s) we use by visiting their respective ad preference or settings pages.

Protection of Personal Information

Rubrik takes a number of precautions — including administrative, technical, and physical measures — designed to safeguard your personal information against loss, theft, and misuse, as well as against unauthorized access, disclosure, alteration, and destruction. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

Retention of Personal Information

We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Access to Personal Information

As described above, you can help ensure that your contact information and preferences are accurate, complete, and up to date by contacting us using the information below. For other personal information, to the extent required by applicable data protection law, we make good faith efforts to provide you with access so you can request that we correct the data if it is inaccurate or delete the data if Rubrik is not required to retain it by law or for legitimate business purposes. We will respond to your request within 30 days or sooner where required by law. As permitted by applicable law, we may decline to process requests where the data is required to be retained by law, required for legitimate business purposes, or jeopardizes the privacy of others.

Privacy Policy Updates

Rubrik may update its Privacy Policy from time to time to reflect changes to our information practices. When we change the policy in a material way, we will provide you with notice as required by applicable law, including notifying you by updating the date of this Privacy Policy and posting it on the Online Services or other appropriate means. We encourage you to periodically review this page for the latest information on our privacy practices.

Contacting Us

We value your opinions. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

If you have any general questions or comments for Rubrik, please contact us at:

Rubrik, Inc.
3495 Deer Creek Road
Palo Alto, California 94304
USA

Or via email at privacy@rubrik.com or via webform.

You can also contact our Data Privacy Officers by emailing dpo@rubrik.com or via letter, clearly marked for the attention of the Data Privacy Officer, at 3495 Deer Creek Road, Palo Alto, CA 94304.