Glean policy evolution

“Glean has certified to the Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework (DPF) Principles, the UK Extension to the EU–U.S. Data Privacy Framework, and the Swiss–U.S. Data Privacy Framework, and is committed to all relevant framework Principles. Glean is a certified participant listed on the Data Privacy Framework website at www.dataprivacyframework.gov . To the extent any conflict exists between this Privacy Statement and the applicable Data Privacy Framework Principles, the relevant Principles shall govern. To learn more about the EU-U.S. Data Privacy Framework program, the UK extension, and the Swiss-US Data Privacy Framework, please visit www.dataprivacyframework.gov . Binding Arbitration. Under certain conditions, individuals may invoke binding arbitration for DPF compliance complaints not resolved by any of the other DPF mechanisms. For more information, see Annex I of the DPF Principles at https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction . FTC Jurisdiction. Glean is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. Onward Transfer Liability. Glean uses standard contractual clauses for onward transfers to third parties unless we can demonstrate we were not a party to the events giving rise to any damages.”

“We do not sell your Personal Information as “sell” is defined under applicable privacy laws. We may share it with third parties for the purposes of our Business Operations, such as in the following circumstances: ‍ ‍ Within Glean. We share Personal Information among our global subsidiaries for data processing and storage purposes. Service Providers and Vendors. Service Providers and Vendors. We share Personal Information with authorized third-party agents, contractors, and service providers who act on our behalf to support website hosting, data analysis, payment processing, order fulfillment, IT infrastructure, customer service, email delivery, marketing, and auditing. Channel Partners and Resellers. Channel Partners and Resellers. If you inquire about Solutions typically fulfilled through channel partners or resellers, we may share your information with those parties, who may also inform you about third-party products or services that may be of interest. Business Transactions. Business Transactions. In connection with a merger, acquisition, asset sale, consolidation, restructuring, or financing, we may disclose Personal Information to the relevant parties. Legal Requirements and Safety. Legal Requirements and Safety. We will disclose Personal Information to law enforcement, government authorities, or other third parties as required to comply with applicable law or legal process, meet national security requirements, or protect the rights, property, or safety of Glean, our partners, or others.”

“California residents have the following rights under the CCPA/CPRA: Right to Know: You have the right to request a copy of the specific pieces of Personal Information collected, used, and disclosed about you over the past 12 months, including the sources, purposes, and categories of third parties involved. Right to Delete: You have the right to request deletion of Personal Information we have collected, subject to certain exemptions (e.g., where required to detect security incidents, complete a transaction, or comply with a legal obligation). Right to Correct: You have the right to request correction of inaccurate Personal Information. Right to Opt Out of Sharing: You have the right to request to opt out of sharing of your Personal Information for cross-context behavioral advertising purposes. Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA right. California Shine-the-Light Law. California residents have the right to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their Personal Information (if any) for their direct marketing purposes in the prior calendar year, as well as the types of Personal Information disclosed to those parties. To exercise these rights, contact: privacy@glean.com , or write to Glean Technologies, Inc., Attn: Privacy Department, 634 2nd Street, San Francisco, CA 94107, USA. No Sale of Personal Information. Glean does not sell, and has not sold in the preceding 12 months, Personal Information as defined under the CCPA. Because Glean sells enterprise products to businesses rather than directly to consumers, we do not knowingly collect Personal Information from minors.”

“5. Indemnification . 5.1 Service Provider agrees, at its own expense, to indemnify, defend Customer and hold Customer harmless against any suit, claim, or proceeding brought against Customer alleging that the use of Services in accordance with this Agreement infringes any U.S. copyright, U.S. trademark or U.S. patent, provided that Customer (i) promptly notifies Service Provider in writing of any such suit, claim or proceeding, (ii) allows Service Provider, at Service Provider’s own expense, to direct the defense of such suit, claim or proceeding, (iii) gives Service Provider all information and assistance necessary to defend such suit, claim or proceeding, and (iv) does not enter into any settlement of any such suit, claim or proceeding without Service Provider’s written consent. The foregoing obligations do not apply with respect to the Services or portions or components thereof (x) not supplied by Service Provider, (y) made in whole or in part in accordance to Customer specifications, (z) combined with other products, processes or materials where the alleged infringement would not have occurred without such combination. This section states Service Provider’s entire liability and Customer’s exclusive remedy for infringement or misappropriation of intellectual property of a third party.”

“We do not sell your Personal Information as “sell” is defined under applicable privacy laws. We may share it with third parties for the purposes of our Business Operations, such as in the following circumstances: ‍ ‍ Within Glean. We share Personal Information among our global subsidiaries for data processing and storage purposes. Service Providers and Vendors. Service Providers and Vendors. We share Personal Information with authorized third-party agents, contractors, and service providers who act on our behalf to support website hosting, data analysis, payment processing, order fulfillment, IT infrastructure, customer service, email delivery, marketing, and auditing. Channel Partners and Resellers. Channel Partners and Resellers. If you inquire about Solutions typically fulfilled through channel partners or resellers, we may share your information with those parties, who may also inform you about third-party products or services that may be of interest. Business Transactions. Business Transactions. In connection with a merger, acquisition, asset sale, consolidation, restructuring, or financing, we may disclose Personal Information to the relevant parties. Legal Requirements and Safety. Legal Requirements and Safety. We will disclose Personal Information to law enforcement, government authorities, or other third parties as required to comply with applicable law or legal process, meet national security requirements, or protect the rights, property, or safety of Glean, our partners, or others.”

“Glean has certified to the Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework (DPF) Principles, the UK Extension to the EU–U.S. Data Privacy Framework, and the Swiss–U.S. Data Privacy Framework, and is committed to all relevant framework Principles. Glean is a certified participant listed on the Data Privacy Framework website at www.dataprivacyframework.gov . To the extent any conflict exists between this Privacy Statement and the applicable Data Privacy Framework Principles, the relevant Principles shall govern. To learn more about the EU-U.S. Data Privacy Framework program, the UK extension, and the Swiss-US Data Privacy Framework, please visit www.dataprivacyframework.gov . Binding Arbitration. Under certain conditions, individuals may invoke binding arbitration for DPF compliance complaints not resolved by any of the other DPF mechanisms. For more information, see Annex I of the DPF Principles at https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction . FTC Jurisdiction. Glean is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. Onward Transfer Liability. Glean uses standard contractual clauses for onward transfers to third parties unless we can demonstrate we were not a party to the events giving rise to any damages.”

“5. Indemnification . 5.1 Service Provider agrees, at its own expense, to indemnify, defend Customer and hold Customer harmless against any suit, claim, or proceeding brought against Customer alleging that the use of Services in accordance with this Agreement infringes any U.S. copyright, U.S. trademark or U.S. patent, provided that Customer (i) promptly notifies Service Provider in writing of any such suit, claim or proceeding, (ii) allows Service Provider, at Service Provider’s own expense, to direct the defense of such suit, claim or proceeding, (iii) gives Service Provider all information and assistance necessary to defend such suit, claim or proceeding, and (iv) does not enter into any settlement of any such suit, claim or proceeding without Service Provider’s written consent. The foregoing obligations do not apply with respect to the Services or portions or components thereof (x) not supplied by Service Provider, (y) made in whole or in part in accordance to Customer specifications, (z) combined with other products, processes or materials where the alleged infringement would not have occurred without such combination. This section states Service Provider’s entire liability and Customer’s exclusive remedy for infringement or misappropriation of intellectual property of a third party.”

“California residents have the following rights under the CCPA/CPRA: Right to Know: You have the right to request a copy of the specific pieces of Personal Information collected, used, and disclosed about you over the past 12 months, including the sources, purposes, and categories of third parties involved. Right to Delete: You have the right to request deletion of Personal Information we have collected, subject to certain exemptions (e.g., where required to detect security incidents, complete a transaction, or comply with a legal obligation). Right to Correct: You have the right to request correction of inaccurate Personal Information. Right to Opt Out of Sharing: You have the right to request to opt out of sharing of your Personal Information for cross-context behavioral advertising purposes. Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA right. California Shine-the-Light Law. California residents have the right to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their Personal Information (if any) for their direct marketing purposes in the prior calendar year, as well as the types of Personal Information disclosed to those parties. To exercise these rights, contact: privacy@glean.com , or write to Glean Technologies, Inc., Attn: Privacy Department, 634 2nd Street, San Francisco, CA 94107, USA. No Sale of Personal Information. Glean does not sell, and has not sold in the preceding 12 months, Personal Information as defined under the CCPA. Because Glean sells enterprise products to businesses rather than directly to consumers, we do not knowingly collect Personal Information from minors.”