Last updated July 29, 2021
Alteryx respects your right to privacy. This policy describes the privacy practices Alteryx employs in its collection, receipt, and use of Personally Identifiable Information (“personal information”). This Privacy Policy explains who we are, how we collect, share and use personal information about you, and how you can exercise your privacy rights.
If you have any questions or concerns about our use of your personal information, please contact us using the contact details provided at the bottom of this Privacy Policy.
Alteryx and its affiliated entities may be collectively referred to in this Privacy Policy as “Alteryx,” “we,” or “us.” Alteryx’s websites (“Website”) may contain links to third parties. When you navigate away from our Website to such third-party websites, our Privacy Policy no longer applies. This Privacy Policy also explains how we collect, use and share personal information when users access our Website, our data analytics software platform (“Platform”) or otherwise interact with us.
For California-resident users, we also set out in the section entitled CALIFORNIA RESIDENTS – CCPA specific disclosures about our collection and use of personal information because the California Consumer Privacy Act 2018 (CCPA) requires us to do that in a specific format, as well as the rights California residents have under the CCPA.
To make it easier to navigate this Privacy Policy, we have listed the subject headings below so you can go straight to them:
WHAT PERSONAL INFORMATION DO WE COLLECT AND WHY?
HOW WE USE YOUR PERSONAL INFORMATION
COOKIES AND OTHER SIMILAR TECHNOLOGIES
COLLECTION OF INFORMATION BY THIRD-PARTY SITES AND SPONSORS
HOW WE SECURE YOUR INFORMATION
HOW WE UPDATE OUR PRIVACY POLICY
AUGUST 7, 2024: NOTICE REGARDING ALTERYX’S USE OF GOOGLE WORKSPACE APIs
WHAT DOES ALTERYX DO?
Alteryx is a computer software company headquartered in Irvine, California but with group companies all around the world. Our end-to-end platform unifies the analytic experience, enabling organizations to break data barriers. The Alteryx Platform provides the analytic flexibility that business analysts, data scientists, and IT need to discover, prep, analyze, and operationalize analytic models through a collaborative and governed platform. We also provide our customers with access to certain syndicated data which they combine with their own data to understand their business or their customers better, and make better decisions.
For more information about Alteryx, please see our About Us section.
WHAT PERSONAL INFORMATION DO WE COLLECT AND WHY?
INFORMATION THAT YOU PROVIDE VOLUNTARILY
Certain parts of our Website and Platform may ask you to provide personal information voluntarily: for example, Alteryx may collect personal information when you register with Alteryx and/or use Alteryx products or services (for instance your user name and password when you register and subsequently log on as a user of the Platform) and/or to submit inquiries to us. You may be required to provide us with your real name, email address, phone number, job role, business address, and shipping address. For certain licensees, Alteryx may require additional information or other verification information. The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information. We also provide a Gallery hosted solution, (where workflows, analytic applications, and macros can be published and shared with anyone users to create tools, users can sign up and begin running workflows and applications that have been publicly shared or shared directly with them as well as publish their own workflows and apps privately or to share with others (“Gallery”). For users of our Gallery solution, we also host whatever data users choose to upload because we host Gallery in the cloud on our customers’ behalf. That data could contain personal data or personal information, if that is what users choose to upload into their Gallery apps and workflows
INFORMATION THAT WE COLLECT AUTOMATICALLY
Whenever you visit the Website or use the Platform, Alteryx collects certain information automatically from your device. In some countries, including countries in the European Economic Area and California, this information may be considered personal data or personal information under applicable data protection laws.
Specifically, the information we collect automatically includes information like server logs from your browser, including your IP address, device type, unique device identification numbers, browser type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with our Website and Platform, including the pages accessed and links clicked and information on how you use and interact with the Platform.
Collecting this information enables us to better understand the visitors who come to our Website and our Platform, where they come from, and what content on our Website and what functionality on our Platform is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Website and Platform to our visitors and users and to understand what other functionality and services may be of use to our corporate customers, and to better inform our marketing communications to them.
Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading “Cookies and similar tracking technology” below. When users log on and use our core Platform, Alteryx Designer, which is hosted on the infrastructure of our customer (typically the user’s employer), the Platform automatically communicates to us user name, email address and device IP address and information about how the users interacts with out Platform.
Some information may include usage data related to Alteryx software, and relates such information to the personal information you provide.
INFORMATION THAT WE OBTAIN FROM THIRD-PARTY SOURCES
From time to time, we may receive personal information about you from third party sources. The types of information we collect from third parties include and we use the information we receive from these third parties to make interactions with our Web sites easy and meaningful, and to maintain and improve the accuracy of the records we hold about you.
HOW WE USE YOUR PERSONAL INFORMATION
We may use personal information to (a) fulfill your requests for products and services, (b) improve our products and services, (c) contact you to conduct research, (d) provide anonymous reporting for internal and external clients, and/or (e) offer products and/or services to you. Once you have registered or have purchased Alteryx products or services, we may send you certain communications relating to the Alteryx service that are considered part of your Alteryx account. You may opt out of receiving marketing communications from us upon a receipt of an email from us after you register on our Website or upon installation of software.
We do not rent or share personal information about you with third parties or nonaffiliated companies, except:
(a) to provide products or services you have requested;
(b) to our partners who may provide you with information regarding certain products and services in connection with your use of the Alteryx products or services, and who are under confidentiality obligations. These companies may use your personal information to help Alteryx communicate with you about offers from Alteryx and our marketing partners. However, these companies do not have any other independent right to use or share this information. If you do not want your name and contact information to be shared with any company or organization, you may notify us at any time by clicking here [email protected] ;
(c) in connection with the Syndicated Data Services described below; or
(d) to our vendors, who are contracted on our behalf to help manage or provide services in respect of our Website or Platform, IT systems, including data centre providers, online feedback platforms, enterprise resource planning providers, marketing platforms, customer relationship management platforms, support management platforms, data analytics providers and others.
Credit card information is used only for payment processing and fraud prevention. Credit card information and other sensitive personal information required to process a purchase is not used for any other purpose by our financial services providers or us.
We may disclose personal information in response to legal process in response to a court order or a subpoena. We also may disclose personal information in response to a law enforcement agency’s request or where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service or End User License Agreements (EULA) to verify or enforce compliance with the policies governing our products and applicable laws, or as otherwise required or permitted by law or consistent with legal requirements. In addition, we may transfer personal information about you if we are acquired by, sold to, or merged with another company.
SYNDICATED DATA SERVICES
Alteryx is an authorised reseller of certain datasets collected and made available by third party vendors, currently Experian, TomTom, Dun & Bradstreet, Digital Globe (now operated by Maxar) and the US Census. These datasets contain personal information relating to US residents only, relating to a wide number of categories including spending habits, buying and product preferences and attitudes, demographic category, ethnicity and racial origin, citizenship, age, marital status and family make-up, job type and neighborhood. As authorised resellers of these datasets, we make them available to our corporate customers in order to enhance the existing personal information they hold in relation to customers, prospective customers, users and other individuals. Our customers decide what data elements they want to use and for what purpose, but as a broad indication, common uses include:
- Using geospatial and satellite imagery, and retail spend data and data to plan retail site locations, understand service coverage areas and plan product delivery schedules
- Using demographic and behavioural data (including product preferences and buying intent data) to optimize and execute marketing and advertising campaigns online and offline
- Using credit worthiness information as one criterion amongst many to enhance customer decision-making about whether to
For more information on how our third party vendors collect and use personal information, and how to exercise your privacy and data protection rights, please see their privacy policies below:
Digital Globe (a division of Maxar)
ALTERYX COMMUNITY
We provide the Alteryx Community (smartling.alteryx.com/community) users can register and access a range of curated resources dedicated to the Platform and data analytics in general, including blogs, forums and chat where users share insights, collaborate with peers, and innovate solutions to complex analytical and data-science challenges, and share their experiences, in making the most of the Platform with each other and where our team posts content on training and other resources relating to the Platform. Any personal information you submit to the Alteryx Community may be read, collected, or used by other users who visit the Forum. Alteryx is not responsible for any use or disclosure of the personal information in your posts or during any other communication with other site users. You must evaluate, and bear the risk associated with, the accuracy, completeness, or usefulness of the Community. We do not pre-screen postings to the Community and reserve the right to remove any content posted.
We use users’ posts and contributions to the Community for our internal analytics purposes, to improve the quality and relevance of our Platform to our visitors and users and to understand what other functionality and services may be of use to our corporate customers, and to better inform our marketing communications to them.
COOKIES AND OTHER SIMILAR TECHNOLOGIES
We use cookies and similar tracking technology (collectively, “Cookies”) to collect and use personal information about you, including to serve interest-based advertising. For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie Notice.
INTERNET PROTOCOL ADDRESSES
An Internet protocol (“IP”) address is the unique number assigned to your server or Internet Service Provider (“ISP”). Alteryx may track such IP addresses for system administration, usage information, user authentication, analytics and product improvement, to report aggregate information, site tracking, to prevent our servers from being abused and for other purposes set out in this Privacy Policy.
COLLECTION OF INFORMATION BY THIRD-PARTY SITES AND SPONSORS
Our Website contains links to other websites, including those of our partners and sponsors, whose information practices may be different from ours. Sometimes these third-party websites may conduct contests or sweepstakes that are promoted on our Website, and you may be directed away from our Website in order to participate in such contests or sweepstakes. In such case, you should consult these third-party websites’ privacy notices.
HOW WE SECURE YOUR INFORMATION
We have taken steps to assure that all information collected will remain secure and in its original form. As such, access to all personal information is strictly controlled. We have established appropriate physical, electronic, and managerial procedures in an effort to safeguard and help prevent unauthorized access, maintain data security, and correctly use the information we collect online.
To verify the security of your PC’s web connection at our Service, check the lower left corner of your browser window after accessing the server. If you see an unbroken or a closed lock, then SSL is active and the server is secure. You may also check by looking at the URL line of your browser. When accessing a secure server, the Website address will change from “http” to “https.”
INTERNATIONAL DATA TRANSFERS
Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.
Specifically, our Website and Gallery servers are located in the United States of America, and our group companies and third-party service providers and partners operate around the world, including but not limited to the United Kingdom, Germany, France, Australia, Singapore, Czech Republic, Japan, and Canada. This means that when we collect your personal information we may process it in any of these countries.
However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Policy, and transfers of personal information between our group companies, which require all group companies to protect personal information they process from the EEA in accordance with European Union data protection law.
DATA RETENTION
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
YOUR DATA PROTECTION RIGHTS
If you are in the European Economic Area you have the following data protection rights:
- If you wish to access, correct, update, or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below.
- In addition, you can object to processing of your personal information, ask us to restrict processing of your personal information, or request portability of your personal information. Again, you can exercise these rights by contacting us using the contact details provided under the “How to contact us” heading below.
- You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you.
- Similarly, if we have collected and processed your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
- You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
HOW WE UPDATE OUR PRIVACY POLICY
We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.
You can see when this Privacy Policy was last updated by checking the “last updated” date displayed at the top of this Privacy Policy.
HOW TO CONTACT US
If you have general privacy questions or concerns, please email Alteryx’s Data Privacy Officer at [email protected]. Written communication may also be sent to Alteryx, Inc., Attn: General Counsel, 17200 Laguna Canyon Road
Irvine, CA 92618 USA.
To exercise your data access rights under applicable law, you may submit an Alteryx Data Access Request to our data privacy team. You may also open a request using our automated response line:
Toll-Free Number: +1 888 914 9661 Pin: 407364
We will respond to all data access requests within the period of time set out by the applicable regulation.
APPENDIX
CALIFORNIA RESIDENTS – CCPA
This section contains disclosures required by the California Consumer Privacy Act (“CCPA”) and applies only to “personal information” of California residents that is subject to the CCPA.
We collect, use, share and sell the categories of personal information about California consumers as set out in the table below.
| CCPA category reference | Categories of Personal Information | Collected in the last 12 months: | Categories of sources from which information may be collected: | Business or commercial purposes for collection, use, and sharing: | May be disclosed for business purposes to the following categories of third parties: | May be sold to the following categories of third parties: |
| A. | Personal and online identifiers (such as first and last name, email address, or unique online identifiers) | Yes | From users direct, corporate customers and third party data vendors | Analytics and Platform and Website improvement, user authentication, security, provision of Platform and Website services, marketing, delivery of Syndicated Data Services | Service providers and Alteryx customers | Alteryx customers as part of Syndicated Data Services SYNDICATED DATA SERVICES. |
| B. | Categories of information described in Section 1798.80 of the California Civil Code (such as name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories) | No | N/A | N/A | N/A | N/A |
| C. Protected classification characteristics under California or federal law. | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | Yes | Third party data vendors | Used as part of our Syndicated Data Services SYNDICATED DATA SERVICES | Alteryx Customers | Sold to Alteryx customers as part of our Syndicated Data Services SYNDICATED DATA SERVICES. |
| D. Commercial information. | Commercial or transactions information (such as records of personal property or products or services purchased, obtained or considered) | Yes | Directly from users and from Alteryx customers | Analytics and Platform and Website improvement, user authentication, security, provision of Platform and Website services, marketing, delivery of SYNDICATED DATA SERVICES | All categories listed below. | All categories listed below. |
| E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | No | N/A | N/A | N/A | N/A |
| F. Internet or other similar network activity. | Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. | Yes | Directly from users and from third party data vendors | Analytics and Platform and Website improvement, user authentication, security, provision of Platform and Website services, marketing, delivery of Syndicated Data Services | Service providers and Alteryx customers | Sold to Alteryx customers as part of our Syndicated Data Services SYNDICATED DATA SERVICES |
| G. Geolocation data. | Physical location or movements. | Yes | Directly from users and from third party data vendors. | Analytics and Platform and Website improvemen, user authentication, security, provision of Platform and Website services, marketing, delivery of Syndicated Data Services | Service providers and Alteryx customers | Sold to Alteryx customers as part of our SYNDICATED DATA SERVICES |
| H. Sensory data. | Audio, electronic, visual, thermal, olfactory, or similar information. | No | N/A | N/A | N/A | N/A |
| I. Professional or employment-related information. | Current or past job history or performance evaluations. | Yes | Alteryx customers | Analytics and Platform and Website improvement, user authentication, security, provision of Platform and Website services, marketing, delivery of Syndicated Data Services | Alteryx customers | Sold to Alteryx customers as part of our Syndicated Data Services SYNDICATED DATA SERVICES |
| J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99). | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | No | N/A | N/A | N/A | N/A |
| K. Inferences drawn from other personal information. | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Yes | Directly from users, from vendors of analytics services and from third party data vendors | Analytics and Platform and Website improvement, marketing and delivery of Syndicated Data Services | Service providers and Alteryx customers | Sold to Alteryx customers as part of our Syndicated Data Services SYNDICATED DATA SERVICES. |
Business and commercial purposes
The business and commercial purposes set out above are described in more detail in the section entitled “HOW WE USE YOUR PERSONAL INFORMATION”
Categories of Sources – Syndicated Data Services
In connection with our Syndicated Data Services we collect personal information from third party data vendors, including Experian, Digital Globe (a division of Maxar), US Census and Dun & Bradstreet, and we sell personal information (as defined under CCPA) to Alteryx customers.
For more detail on our Syndicated Data Services, see here SYNDICATED DATA SERVICES and for more information on how California residents exercise rights they have under CCPA, including how to exercise the right to prevent further sales of your personal information, see the following resources of our third party vendors:
Exercising your CCPA rights
Requests for Deletion, Right to Know, and Do Not Sell.Subject to certain exceptions, California consumers have the right to make the following requests, at no charge:
Deletion: the right to request deletion of the personal information that we have collected about you, subject to certain exemptions (such as where the information is used by us to detect security incidents, debugging or to comply with a legal obligation).
Right to Know: the right to request (not more often than twice a year) that we disclose certain information about how we have handled your personal information in the prior 12 months, including the:
- categories of personal information collected
- specific pieces of personal information collected
- categories of sources of personal information
- the purposes for which we use the personal information
- categories of third parties with whom we have shared your personal information
- categories of personal information that we have disclosed or sold to a third party
Do Not Sell: the right to request, absent an exception, that we stop selling your personal information (“opt-out”) except where you later provide authorization for us to do so. We will wait at least 12 months before asking you to opt back into the sale of your personal information.
Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. However, many features of our Site and Services will not function without your personal information. Unless permitted by the CCPA, we will not deny you products or services, charge you a different price, or provide a different level or quality of products or services just because you exercised your rights under the CCPA.
Submitting Requests. You can exercise your CCPA rights by submitting an Alteryx Data Access Request to our data privacy team. You may also open a request using our automated response line:
- Toll-Free Number: +1 888 914 9661 Pin: 407364
We will respond to all CCPA requests within the period of time set out by the regulation.
Verification. When you submit your request, we will take steps to verify your identity. We will seek to match the information in your request to the personal information we maintain about you. We will only complete your request where we are satisfied that we have verified your identity to a reasonably degree of certainty.
Authorized Agents. To the extent the CCPA allows California consumers to designate an authorized agent to exercise their rights under the CCPA, you must provide a signed authorization directing such agent to act on your behalf as part of your access request.
Your California Privacy Rights under California’s Shine-the-Light Law
Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year pertaining to any relevant third-party sharing in the prior calendar year. If you are a current California resident, you may make an Alteryx Data Access Request by attesting to the fact that you are a California resident and providing a current California address in the Request Details section of the form.
AUGUST 7, 2024: NOTICE REGARDING ALTERYX’S USE OF GOOGLE WORKSPACE APIs
Alteryx does not use Google Workspace APIs to develop, improve, or train generalized AI and/or Machine Learning models.
The use of information Alteryx receives from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.