Details on how Bugsnag processes and stores your data.
Last updated: September 25, 2020
Bugsnag Inc. provides a software solution that monitors errors in web, mobile and server applications and programs under the direction of its Customers, to provide session, error and crash data. We know you care about how your Personal Information is used and shared and we take your privacy seriously.
This Policy applies to all Bugsnag’s operating divisions and affiliates, and any additional subsidiary or affiliate of Bugsnag that we may subsequently form. Bugsnag has put in place mechanisms to verify ongoing compliance with this Policy. Any Bugsnag employee who violates this Policy will be subject to disciplinary procedures.
The types of Personal Information we may collect (directly from you or from Third-Party sources) and our privacy practices depend on the nature of the relationship you have with Bugsnag and the requirements of applicable law. Some of the ways that Bugsnag may collect Personal Information include:
We endeavor to collect only that information which is relevant for the purposes of Processing. Below are the ways we collect Personal Information and how we use it.
Bugsnag collects Personal Information regarding its current, prospective, and former clients, customers, users, visitors, and guests (collectively “Individuals”).
Information You Provide Directly to Us. When you use the Services or engage in certain activities, such as registering for an account with Bugsnag, purchasing a Plan from Bugsnag, requesting Services or information, or contacting us directly through the “Contact Us” feature or by some other method, we may ask you to provide some or all of the following types of information:
Information from Other Sources. We may receive information about you from other sources, including through Third Party services and organizations to supplement information provided by you (for example, lead or data enrichment services). This supplemental information allows us to verify information that you have provided to Bugsnag and to enhance our ability to provide you with information about our business, products, and Services. Through cookies we place on your browser or device, we may also collect information about your online activity after you leave our Site. We use this information to improve the Site and customize your online experience.
Event Data Information. The Bugsnag Services monitor errors in web, mobile and server applications and programs under the direction of its Customers, to provide session, error and crash data (“Event Data”). We discuss this in more detail in Section 3.2.
No Sensitive Data or Sensitive Personal Information. Bugsnag does not collect Sensitive Data as defined under the laws of the European Union.
Each Bugsnag Customer provides Bugsnag with Event Data and in some cases this Event Data may include Personal Information of the individuals who use the Customer’s applications. Not all Customers provide Personal Information about their end users to Bugsnag. Customers can use the Services dashboard to control or block the use of end user Personal Information by the Services.
Bugsnag itself does not collect this end user Personal Information provided with Event Data and Bugsnag has no direct relationship with these individuals. For example, a Customer may direct Bugsnag to log certain software application’s end user information associated with Event Data, such as the end user’s device ID, email and name. Bugsnag is a data processor and follows the instructions of the Customer in these cases.
To find out more about how our Customers issue these instructions to us and handle this Personal Information you will need to review the privacy policies of each Customer. An individual who wants to correct, amend or delete inaccurate data should direct his or her request to Bugsnag’s Customer (the data controller). Separately, if our Customer requests that we remove Event Data from the Services then we will respond promptly to this request.
If you are a Customer then you are responsible for obtaining permission from your end users to share any data that may contain the end users’ Personal Information with the Bugsnag Platform.
We acquire, hold, use, and Process Personal Information about Individuals for a variety of business purposes, including:
To Provide Products, Services, or Information Requested. Bugsnag may use information about you to fulfill requests for products, Services, or information, including information about potential or future Services, including to:
Administrative Purposes. Bugsnag may use Personal Information about you for its administrative purposes, including to:
Marketing Bugsnag Products and Services. Bugsnag may use Personal Information to provide you with materials about offers, products, and Services that may be of interest, including new content or Services. Bugsnag may provide you with these materials by phone, postal mail, facsimile, or email, as permitted by applicable law. Such uses include:
You may contact us at any time to opt-out of the use of your Personal Information for marketing purposes, as further described in Section 5 below.
Research and Development. Bugsnag may use Personal Information to create non-identifiable information that we may use alone or in the aggregate with information obtained from other sources, in order to help us to optimally deliver our existing products and Services or develop new products and Services. For example, we use survey responses to help us better serve Individuals by learning more about their needs and the quality of the products and Services we provide. We also may share anonymous aggregate data for research and analysis purposes.
Direct Mail, Email and Outbound Telemarketing. Individuals who provide us with Personal Information, or whose Personal Information we obtain from Third-Parties, may receive periodic emails, newsletters, mailings, or phone calls from us with information on Bugsnag’s or our business partners’ products and services or upcoming special offers/events we believe may be of interest. We offer the option to decline these communications at no cost to the Individual by following the instructions in Section 5 below.
Anonymous and Aggregated Information Use. Bugsnag may use Personal Information to create anonymized and aggregated information, such as de-identified demographic information, de-identified location information, information about the computer or device from which you access Bugsnag’s Services, or other analyses we create. Anonymized and aggregated information is used for a variety of functions, including the measurement of visitors’ interest in and use of various portions or features of the Services. Anonymized or aggregated information is not Personal Information.
Our uses of such Technologies fall into the following general categories:
If you would like to opt-out of the Technologies we employ on our Sites, Services, applications, or tools, you may do so by blocking, deleting, or disabling them as your browser or device permits.
We Use Vendors and Service Providers. We may share any information we receive with vendors and service providers. The types of service providers to whom we entrust Personal Information include service providers for: (i) provision of IT and related services; (ii) provision of information and services you have requested; (iii) payment processing; (iv) customer service activities; and (v) in connection with the provision of the Site. Bugsnag has executed appropriate contracts with the service providers that prohibit them from using or sharing Personal Information except as necessary to perform the contracted services on our behalf or to comply with applicable legal requirements.
Business Partners. Bugsnag may share Personal Information with our business partners, and affiliates for our and our affiliates’ internal business purposes or to provide you with a product or Service that you have requested. Bugsnag may also provide Personal Information to business partners with whom we may jointly offer products or services, or whose products or services we believe may be of interest to you. In such cases, our business partner’s name will appear, along with Bugsnag. Bugsnag requires our affiliates and business partners to agree in writing to maintain the confidentiality and security of Personal Information they maintain on our behalf and not to use it for any purpose other than the purpose for which Bugsnag provided them.
Marketing – Interest-Based Advertising and Third Party Marketing. Through our Services, Bugsnag may allow Third-Party advertising partners to set tracking tools (e.g., cookies) to collect information regarding your activities (e.g., your IP address, page(s) visited, time of day). We may also share such de-identified information as well as selected Personal Information (such as demographic information and past purchase history) we have collected with Third-Party advertising partners. These advertising partners may use this information (and similar information collected from other websites) for purposes of delivering targeted advertisements to you when you visit non-Bugsnag related websites within their networks. This practice is commonly referred to as “interest-based advertising” or “online behavioral advertising. We may allow access to other data collected by the Site to facilitate transmittal of information that may be useful, relevant, valuable or otherwise of interest to you. If you prefer that we do not share your Personal Information with Third-Party advertising partners, you may opt-out of such sharing at no cost by following the instructions in Section 5 below.
Disclosures to Protect Us or Others (e.g., as Required by Law and Similar Disclosures). We may access, preserve, and disclose your Personal Information, other account information, and content if we believe doing so is required or appropriate to: (i) comply with law enforcement or national security requests and legal process, such as a court order or subpoena; (ii) respond to your requests; (iii) protect yours’, ours’ or others’ rights, property, or safety; (iv) to enforce Bugsnag policies or contracts; (v) to collect amounts owed to Bugsnag; (vi) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation or prosecution of suspected or actual illegal activity; or (vii) if we, in good faith, believe that disclosure is otherwise necessary or advisable.
In addition, from time to time, server logs may be reviewed for security purposes – e.g., to detect unauthorized activity on the Services. In such cases, server log data containing IP addresses may be shared with law enforcement bodies in order that they may identify users in connection with their investigation of the unauthorized activities.
Law Enforcement. Your Personal Information may also be accessible to law enforcement or other authorities pursuant to a lawful request.
We have implemented safeguards to ensure an adequate level of data protection where Personal Information of residents of the EEA is transferred to countries outside the EEA, such as standard contractual clauses for the transfer of Personal Information as approved by the European Commission (Art. 46 GDPR). As applicable, Bugsnag relies upon standard contract clauses, the European Commission’s adequacy decisions about certain countries, and your consent for these data transfers. Please note that although the Court of Justice of the European Union has invalidated the EU-US Privacy Shield Framework as a mechanism for transfers of Personal Information between the EU and US in Case C-311/18, Bugsnag remains committed to complying with the Privacy Shield Principles.
When we receive formal written complaints regarding the transfer of your Personal Information we respond by contacting the person who made the complaint. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve complaints we cannot resolve directly with you.
You have the right to opt-out of certain uses and disclosures of your Personal Information. Where you have consented to Bugsnag’s Processing of your Personal Information or Sensitive Personal Information, you may withdraw that consent at any time and opt-out to further Processing by contacting us at firstname.lastname@example.org.
WE MAINTAIN TELEPHONE “DO-NOT-CALL” AND “DO-NOT-MAIL” LISTS AS MANDATED BY LAW. WE PROCESS REQUESTS TO BE PLACED ON DO-NOT-MAIL, DO-NOT-PHONE AND DO-NOT-CONTACT LISTS WITHIN 60 DAYS AFTER RECEIPT, OR SUCH SHORTER TIME AS MAY BE REQUIRED BY LAW
Bugsnag may occasionally send you push notifications through our mobile applications with information that may be of interest to you. You may at any time opt-out from receiving these types of communications by changing the settings on your mobile device. Bugsnag may also collect location-based information if you use our mobile applications. You may opt-out of this collection by changing the settings on your mobile device.
Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
As noted above, you may stop or restrict the placement of cookies on your computer or remove them from your browser by adjusting your web browser preferences. Please note that cookie-based opt-outs are not effective on mobile applications. However, on many mobile devices, application users may opt-out of certain mobile ads via their device settings.
The online advertising industry also provides websites from which you may opt-out of receiving targeted ads from our data partners and our other advertising partners that participate in self-regulatory programs. You can access these, and also learn more about targeted advertising and consumer choice and privacy, at www.networkadvertising.org/managing/opt_out.asp, or http://www.youronlinechoices.eu/ and www.aboutads.info/choices/.
Although Bugsnag makes good faith efforts to provide Individuals with access to their Personal Information, there may be circumstances in which Bugsnag is unable to provide access, including but not limited to: where the information contains legal privilege, would compromise others’ privacy or other legitimate rights, where the burden or expense of providing access would be disproportionate to the risks to the Individual’s privacy in the case in question or where it is commercially proprietary. If Bugsnag determines that access should be restricted in any particular instance, we will provide you with an explanation of why that determination has been made and a contact point for any further inquiries. To protect your privacy, Bugsnag will take commercially reasonable steps to verify your identity before granting access to or making any changes to your Personal Information.
By using the Site or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Site. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on the Site or sending an e-mail to you. You may have a legal right to receive this notice in writing.
The Services are not directed to children under 13 (and in certain jurisdictions in the EU under the age of 16) years of age, and Bugsnag does not knowingly collect Personally Identifiable Information from children under 13 (and in certain jurisdictions in the EU under the age of 16) years of age. If you are under the age of 18, you must have your parent’s permission to access the Services. Bugsnag urges parents to instruct their children never to give out their real names, addresses, or phone numbers, without parental permission, when online. If you learn that your child has provided us with Personal Information without your consent, you may alert us at email@example.com. If we learn that we have collected any Personal Information from children under 13 (and in certain jurisdictions in the EU under the age of 16), we will promptly take steps to delete such information and terminate the child’s account.
By email: firstname.lastname@example.org
By mail: Bugsnag, Attn: Legal, 110 Sutter Street, Suite 1000, San Francisco, CA 94104 USA
By phone: +1-888-966-1697
We prefer email.
Bugsnag supports the exercise of your data protection rights in accordance with applicable data protection laws. Specifically, if you are located in the EEA or are a California resident (or otherwise have these rights under applicable data protection law):
You can request to know, access, correct, update or delete your personal information by contacting us using the contact details provided under the “How to contact us” heading, and we will fulfill your request in accordance with applicable data protection laws. We may need to verify your identity in order to action your request, including by asking for you to provide a government issued Identification Document. Once we have verified you, we will respond and comply with your specific requests.
You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please contact us using the contact details provided under “How to contact us.”
California residents have the following rights:
You are entitled to request certain information regarding our disclosure of personal information to Third Parties for their direct marketing purposes. If you are a California resident and would like to request this information then please submit a request to Bugsnag as described under “How to contact us”.
You have the right to opt-out of the sale of your personal information, described in the Section “Opt-Out Right (Right to Restrict Processing).” If you wish to opt-out from the sale of your personal information, you can do so by contacting us using the “How to contact us” information.
You have the right not to receive discriminatory treatment for the exercise of your privacy rights under California law.
If you are located in the EEA, you may also have the following rights:
You can object to the processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by contacting us using the contact details provided under the “How to contact us” heading.
If we have collected and process your personal information on the basis of your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
If you would like to exercise any of your rights or have questions about our privacy practices, you can contact us using the details provided under “How to contact us.” We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
The following capitalized terms shall have the meanings herein as set forth below.