.svg)
Gnowbe Group Ltd. (“Gnowbe,” “we,” or “us”) respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy explains the types of information we collect from you, how we use and share that information, and your rights regarding it. This Privacy Policy applies when you access our website (www.gnowbe.com), our mobile applications, or any other online products, services, or applications offered by Gnowbe (collectively, the “Service”), or when you otherwise interact with us.
We primarily host and process data in the United States, but we adhere to applicable privacy regulations, including the General Data Protection Regulation (GDPR) for EU/EEA users, the UK GDPR, and other relevant data protection laws.
We may update this Privacy Policy from time to time. When we make changes, we will revise the “Last Updated” date at the top. In some cases, we may provide additional notice (e.g., posting a statement on our homepage or sending you an email). We encourage you to review this Privacy Policy whenever you access or use the Service so that you remain informed about our information practices. Your continued use of the Service after any changes constitute your acceptance of the updated policy.
We collect information you provide directly to us, for example when you:
Types of Information
Important: Do not provide us with any special category data (e.g., health, racial or ethnic origin, political opinions, religious beliefs, union membership, sexual orientation). If you do so, we disclaim all liability for such information. If we inadvertently receive special category data, we may delete or anonymize it to the extent feasible.
When you use the Service, we automatically collect certain information, including:
We use cookies, web beacons (tracking pixels), and other technologies to:
You can manage or disable cookies in your browser settings, but doing so may affect the functionality of the Service. For more details, see Section 10.3 (Cookies).
We may receive information about you from third-party sources and combine it with the information we collect directly. For example, if you create or log in to your Gnowbe account through a social network (e.g., Facebook, LinkedIn), we may have access to certain profile information authorized by that platform’s terms.
We may use your information for the following purposes:
If you are located in the European Economic Area (EEA) or the United Kingdom, we only process your personal data when we have a valid legal basis, including:
We strive to remain in compliance with GDPR and other relevant data protection regulations, ensuring that your data is handled lawfully, fairly, and transparently.
We do not share your personal information with third parties except in the limited circumstances described below or with your consent.
We may share your information with third parties who provide services on our behalf (collectively, “Vendors”). These Vendors require access to your information to perform their tasks (e.g., data hosting, customer support, analytics). They are contractually obligated not to disclose or use it for other purposes.
If you use collaboration or sharing features (e.g., sharing content via social media), the information you provide may be shared with others who have access to those features, including:
We may enable integrations with third-party applications or services at your request. If you choose to connect these, your information (e.g., username, email) may be shared to facilitate the integration. This Privacy Policy does not govern those third-party applications; we recommend reviewing their policies before connecting.
We may disclose your information if we believe it is reasonably necessary to:
We may share or transfer your information in connection with (or during negotiations of) any merger, sale of company assets, financing, or acquisition of all or part of our business by another company.
We may share aggregated or de-identified data that does not directly identify you with third parties for analytics, research, marketing, or other legitimate purposes.
As mentioned, we primarily host and process data in the United States. When you use our Service or provide information to us, your information may be transferred to or processed in the US or in other countries that may not provide the same level of data protection as your home jurisdiction.
We rely on valid data transfer mechanisms, such as:
We take appropriate measures to ensure that your personal data receives an adequate level of protection and that any international transfer complies with GDPR and other relevant laws.
If you are in the EU/EEA or the UK, you have the right (subject to certain exceptions) to:
To exercise these rights, please contact us at support@gnowbe.com. We will respond within applicable statutory timelines.
We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law or our legitimate business needs. When you deactivate your account or request deletion, we will take reasonable steps to delete or anonymize your personal data in accordance with legal obligations. However, we may retain archived copies for a limited period to comply with legal requirements, resolve disputes, and enforce our agreements.
We are committed to keeping your data safe. No data transmission or storage system is 100% secure, but we take reasonable measures to protect your information from loss, theft, misuse, and unauthorized access or disclosure. These measures include:
You are responsible for keeping your account credentials confidential and for notifying us immediately of any suspected unauthorized use. Always log out and close your browser after your session.
You may update, correct, or delete certain account information at any time by logging into your account. If you wish to deactivate your account, please contact us. We may retain certain information as required by law or for legitimate business purposes (see Section 8).
You may opt out of receiving promotional or newsletter emails by following the unsubscribe instructions in the email or by contacting us at support@gnowbe.com. We may still send you non-promotional emails (e.g., account or security notifications).
Most web browsers accept cookies by default. You can usually modify your browser settings to remove or reject cookies or prompt you before accepting them. If you choose to disable cookies, some features of the Service may become unavailable or not function properly.
Persons under 16 (or a higher minimum age as required by the laws in your jurisdiction) are not permitted to create accounts unless their parent or legal guardian has provided verifiable consent. If we learn that we have collected personal information from a child without proper consent, we will take steps to delete that information as quickly as possible. If you believe your child has provided personal information to us without your consent, please contact us at support@gnowbe.com.
To support our operations, we may engage third-party companies (“Subprocessors”) to process personal data on our behalf. These include, for example:
We will update this list periodically. Each Subprocessor is vetted and contractually obligated to process personal data only as necessary to provide services to Gnowbe, in compliance with GDPR and other applicable privacy regulations.
For data transferred from the EU/EEA, UK, or Switzerland, we remain responsible under applicable data protection laws if our third-party vendors process personal information in a manner inconsistent with legal requirements or our contractual obligations, unless we prove that we are not responsible for the event giving rise to the damage.
If you have any questions or complaints about our handling of your personal data, please contact us first at support@gnowbe.com. We will do our best to resolve the issue. If you are located in the EU/EEA or the UK and believe your complaint has not been adequately resolved, you have the right to contact your local supervisory authority.
Our Service may contain links to websites or services operated by third parties. This Privacy Policy does not apply to those websites. We encourage you to read the privacy policies of such third parties to understand their data practices.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please email us at: