Akka Privacy Policy
Lightbend Inc, d.b.a Akka
October 22, 2024
Introduction
In this policy, we describe in summary the personal information we collect and how we use it, share it, and protect it.
The details on how we handle your personal information are enumerated in the related policies.
Scope
This policy applies to all personally identifiable information (PII) collected by Akka, except for that information related to Employees, Contractors and Applicants, which are covered under their own policies.
Definitions
Please see the Policy Definitions document distributed with this policy for the definition of terms and abbreviations
Referenced Policies
1. Policy
1.1 Summary
- Akka respects privacy on all its websites and services.
- We collect information from you including identifiers, customer records, usage data, professional affiliations, and build profiles.
- No spam promise; we only send you operational, security, and transaction-related emails (unless you opt-in to our newsletter).
- We share data with affiliated service providers and resellers and also if we have your consent or during corporate transactions.
- We use cookies for session info and visitor identification.
- We take strong measures to protect your data from unauthorized access.
- Data is retained as necessary for its collected purpose.
- We comply with international standards and privacy regulations.
Akka, Inc. is committed to respecting your privacy on all of our websites and the products and services offered on these websites.
In this policy, we describe the personal information we collect and how we use it, share it, and protect it.
1.2 Categories Of Personal Information Collected
We collect the following types of personal information:
- Identifiers: Includes direct identifiers, such as name, alias user ID, username, account number or unique personal identifier; email address, phone number, address and other contact information; IP address and other online identifiers.
- Customer Records: Includes personal information, such as name, account name, user ID, contact information, education and employment information, payment information that individuals provide to us in order to purchase or obtain our products and services.
- Commercial Information: Includes records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.
- Audio, Video And Electronic Data: Includes audio, electronic, visual, thermal, olfactory, or similar information such as photographs and images (e.g., that you provide us) and call recordings (e.g., of customer support calls).
- Usage Data: Includes browsing history, clickstream data, search history, access logs and other usage data and information regarding an individual’s interaction with our websites, mobile apps and other services, and our marketing messages and online ads.
- Professional: Includes professional and employment-related information (such as current and former employer(s) and position(s), business contact information and professional memberships).
- Education: Information about an individual’s educational history (such as the schools attended, degrees you were awarded, and associated dates).
- Inferences: Includes inferences drawn from other personal information that we collect to create a profile reflecting an individual’s preferences, characteristics, predispositions, behavior, attitudes, abilities or aptitudes.
- Information You Provide To Akka: We collect personal data that you choose to provide to us when you are using our sites and services. Personal data may include your name, email address, state and country of residence, job title and company name. As part of the services, we may collect information about the courses you complete and any accreditations you receive. We may also collect personal data from your communications with us, including through email or forms on our sites, such as your phone number, and address. When engaging with our sales teams, we may collect your contact information, as well as information about your previous purchases and sales activity.
- Information Automatically Collected: Whenever you visit or interact with the sites, we automatically collect data about your visit. Such information includes your computer's Internet Protocol ("IP") address, device ID, device location information based on IP address, browser type, browser version, the pages you visit, the time and date of your visit, the time spent on those pages and other statistics.
1.3 No Spam Promise
We hate spam. You hate spam.
We don’t send promotional messages or bulk email messages to you unless you have explicitly opted-in to our newsletter.
We crafted this policy to quell the frustration with spam and to better comply with US Federal Law, the CAN-SPAM Act of 2003, California State Law SB186, and Directives 2000/31/EC and 2002/58/EC of the European Parliament and of the Council, among others.
You will only receive email by an email address provided during a sign-up registration procedure or an email address provided voluntarily when filling out a newsletter or contact form.
We will contact you via email for business correspondence intended to inform customers of service, billing or business related issues. Also, to comply with several international information security standards including NIST CSF and the EU CRA, we are required to provide security and operational notifications to you.
Receipt emails or messages referring to transactions executed on our sites are NOT considered spam, since they are meant to confirm the status of a transaction for customers.
1.4 Who We Share Your Personal Data With
We do not share your personal data other than:
- Affiliates, Service Providers And Processors: We engage third party companies, individuals and affiliated entities to facilitate our sites and services and to provide the sites and services on our behalf, to perform related services, to assist us in analyzing how our sites and services are used, and to provide data storage and other services. These third parties have access to your personal data only to perform specific tasks on our behalf and are obligated to not retain, disclose, sell or use your personal data for any other purpose.
- Resellers: We engage third party value added service providers and their affiliates to facilitate execution of business transactions. These third parties have access to data collected about you and your entity only to perform specific tasks on our behalf are obligated to not retain, disclose, sell or use your personal data for any other purpose.
- Third Parties In Case Of Legal Requirement: We may share your personal data with third parties if we are legally required to do so. This includes situations where we need to comply with legal processes, assist law enforcement in investigating fraud or legal violations, respond to claims against us, or protect the rights, property, or safety of Akka, our customers, or the public.
- Third Parties With Consent: We will also disclose information about you, including personal data, to any other third parties, where you have expressly consented or requested that we do so.
- Third Parties In Case Of A Corporate Transaction: In addition, your personal data may be disclosed as part of any merger, sale, reorganization, transfer of Akka's assets or businesses, acquisition, bankruptcy, or similar event.
1.5 Cookie Policy
We use so-called “Cookies” and other similar technical means to track repeat visits to our sites and services in order to maintain session information, identify repeat visitors, and for other purposes relating to the delivery of our services.
See our Terms of Use for details.
1.6 Security
In order to protect your personal data we have implemented reasonable, commercially acceptable security procedures and practices appropriate to the nature of the personal data we store, in order to protect it from unauthorized access, destruction, use, modification or disclosure. Your personal data is contained behind secured networks and is only accessible by a limited number of people, who have special access rights and are required to keep the personal data confidential. Please see our Trust Center for information about our Information Security standards and policies. We require all third-parties with whom we share your data for processing to have equivalent security measures to our own.
1.7 Purpose and Legal Basis for Processing
We use personal information for various business purposes, including providing and improving our services, marketing, to provide customer support, and compliance with legal obligations.
1.8 Retention
We will retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
1.9 Effective Date and Updates
This policy is affective as of August 1st, 2024. We may update this policy from time-to-time, and you are welcome to subscribe on our Trust Center to be informed of such updates.
1.10 Contact and Request
We are Akka (Lightbend, Inc. d.b.a Akka), located at 580 California, #1231, San Francisco, CA 94104.
You can contact us via email at security@akka.io or by phone at +1 877 989-7372, or our website at https://www.akka.io to make requests about your personal information or any other privacy matters.
2. Supported Frameworks
Below is the required language for the privacy regulations and standards we comply with
2.1 EU And UK General Data Protection Regulation
Identity And Contact Details Of The Data Controller
Our Data Protection Officer for the EU can be reached at privacy_eu@akka.io.
Our Data Protection Officer for the UK can be reached at privacy_uk@akka.io.
For the UK, any complaints or for further information, you can contact the Information Commissioner's Office (ICO) in the UK at the ICO Official Website, the Helpline 0303 123 1113 or the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
You may find corresponding contact information for each of the EU member states at the European Data Protection Board Members Website
Description Of Data Subjects' Rights
You have the following rights regarding your personal data:
- The right to determine if we are holding any personal data relating to you (right to be informed).
- The right to access your data and request a copy (right of access).
- The right to rectify any inaccurate or incomplete data (right to rectification).
- The right to request the erasure of your data (right to erasure).
- The right to restrict the processing of your data.
- The right to data portability.
- The right to object to the processing of your data.
- The right to object to automated decision-making relating to your data, including profiling.
- The right to withdraw consent at any time.
Information On Data Transfers
Your data may be transferred to third countries outside the EU or UK. We ensure that appropriate safeguards are in place, such as standard contractual clauses, to protect your data.
Right To Lodge A Complaint
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority in your country (as listed above).
Automated Decision-Making And Profiling
We do not use automated decision-making or profiling that produces legal effects or that significantly affects you.
Source Of Data
If we have not collected data directly from you, we obtained it from publicly available sources. The categories of personal data we collect include those enumerated above in 1.2. You must provide your content by explicit actions, either by registering on our website, or accepting a question asking for your consent to cookies and other such tracking, before we will collect data. You may withdraw such consent at any time by contacting us at privacy@akka.io, or using unsubscribe links in communications or on our website, which we will honor immediately.
2.2 California Consumer Privacy Act
Rights Under CCPA
You have the right to know what personal information we collect, use, disclose, and sell. You also have the right to request the deletion of your personal information, opt-out of the sale of your personal information, and not be discriminated against for exercising these rights.
Methods For Submitting Requests
You can submit requests to know or delete your personal information by contacting us as listed above in 1.10.
Do Not Sell My Personal Information Link
If you wish to opt-out of the sale of your personal information, please email us at privacy@akka.io or use the “Do Not Sell My Personal Information” link on our website.
2.3 Canada's Anti-Spam Legislation
Consent For Communications
We obtain explicit consent before sending any commercial electronic messages. By subscribing to our newsletter or other services, you agree to receive promotional content from Akka. You can withdraw your consent at any time by using the unsubscribe link provided in our communications or by contacting us as detailed in 1.10.
Unsubscribe Mechanism
To unsubscribe from our newsletter, click the unsubscribe link at the bottom of any of our messages. Your request will be processed immediately, and you will no longer receive newsletter emails from us.
2.4 EU-US Data Privacy Framework
We comply with the EU-US Data Privacy Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. We have certified our adherence to the Privacy Framework Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement, and Liability.
In compliance with the EU-US Data Privacy Framework, we are committed to resolving complaints about your privacy and our collection or use of your personal data. EU individuals with inquiries or complaints regarding our Privacy Policy should first contact us as described in 1.10.
Our compliance with the EU-US Data Privacy Framework is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).
We may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
We remain liable under the EU-US Data Privacy Framework Principles if our third-party service providers process your personal information in a manner inconsistent with the Principles, unless we can prove that we are not responsible for the event giving rise to the damage.
If you have any questions or concerns about this Privacy Policy or our data handling practices, you can contact us as listed in 1.10.