Privacy policy — Mattermost

Cited by

Facts read from this source

• Effective date Report an error

  “Effective Date: December 30, 2024”

• Entity name Report an error

  “This Mattermost, Inc. (“Mattermost” or “we” or “us” or “our”) privacy policy”

• Selfhosted telemetry Report an error

  “Mattermost collects limited information related to end users, such as service and usage data like error and diagnostics information, security alerts, log file reports, and other data associated with device identifiers, unless the Customer opts out of this information collection.”

• Telemetry exclusions Report an error

  “We refer to this information as “telemetry data,” and it does not include any message contents or end user personal identifiers (but may include device identifiers or Internet Protocol (IP) address).”

• Customer controls selfhosted Report an error

  “With self-hosted products, the Customer (defined below) that purchases the Mattermost product also controls the processing of end user data.”

• Processor role Report an error

  “In these cases, Mattermost acts as a data processor (or service provider) within the meaning of applicable privacy laws, and the processing of Customer Data is governed by any data processing agreement between Mattermost and the Customer in addition to this Privacy Policy.”

• Dpf certified Report an error

  “Mattermost complies with the EU–U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss–U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce (collectively, the “Frameworks”).”

• Transfer mechanism Report an error

  “we will take steps to ensure the personal information is protected (e.g., by implementing approved Standard Contractual Clauses or relying on other data transfer mechanisms as available under applicable laws)”

• International transfers Report an error

  “the personal information we collect may be transferred or accessed in various countries, including the United States of America”

• Retention period Report an error

  “We retain the personal information we collect for as long as we need to provide our Sites and/or Services, or as required to comply with our legal obligations. After such time, we will delete, de-identify, or aggregate this information within 60 days, unless otherwise required by law.”

• Customizable retention Report an error

  “Depending on the Services plan, Customers may be able to customize their retention settings for end user information such that they are different than Mattermost’s standard data retention practices.”

• No sale Report an error

  “We do not sell, trade, or otherwise transfer the information described above to unaffiliated third parties for monetary consideration.”

• No advertising in services Report an error

  “Our Services do not collect, use, or share information for advertising.”

• GDPR legal bases Report an error

  “We will normally collect personal information only where we need the personal information to perform a contract (e.g. to provide our Services), where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, or where we have your consent.”

• Analytics tools Report an error

  “We use Google Analytics and other third-party services to improve the performance of the Sites and for analytics and marketing purposes.”

• Gpc optout Report an error

  “Our Sites recognize GPC signals as a way to opt out of sharing personal information for interest-based advertising purposes, as well as to opt out of “sales” under state laws.”

• EU privacy rights Report an error

  “Individuals in the EU, EEA, or the UK may have certain rights with respect to personal information processed through the Sites and Services.”

• Dpf dispute resolution Report an error

  “Mattermost commits to refer unresolved complaints concerning our handling of non-human resources personal information received in reliance on the Frameworks to TRUSTe, an alternative dispute resolution provider based in the United States.”

• Minors Report an error

  “We do not knowingly sell, share, or process for interest-based advertising the personal information of minors under 16 years of age.”

• Hpns data Report an error

  “Customers may choose to enable information collection about end users that includes, but is not limited to usernames, full names, channel names and message preview snippets”

• Selfhosted contact Report an error

  “you can contact us at privacy@mattermost.com”

• Related documents Report an error

  “Data Processing Addendum Subprocessor Hosted Push Notification Terms”

Scores citing this record

• The Compliance Counsel Encryption & access control
• The Compliance Counsel Retention, discovery & co-determination
• The Compliance Counsel Deployment & data custody
• The Compliance Counsel European sovereignty
• The Compliance Counsel Encryption & access control
• The Compliance Counsel Retention, discovery & co-determination
• The Compliance Counsel Deployment & data custody
• The Compliance Counsel European sovereignty
• The Compliance Counsel Retention, discovery & co-determination
• The Compliance Counsel Deployment & data custody
• The Compliance Counsel European sovereignty
• The Platform Engineer Encryption & access control
• The Platform Engineer Retention, discovery & co-determination
• The Platform Engineer Deployment & data custody
• The Platform Engineer European sovereignty
• The Platform Engineer Encryption & access control
• The Platform Engineer Retention, discovery & co-determination
• The Platform Engineer Deployment & data custody
• The Platform Engineer European sovereignty
• The Platform Engineer Encryption & access control
• The Platform Engineer Retention, discovery & co-determination
• The Platform Engineer European sovereignty
• The Security Officer Encryption & access control
• The Security Officer Retention, discovery & co-determination
• The Security Officer Deployment & data custody
• The Security Officer European sovereignty
• The Security Officer Retention, discovery & co-determination
• The Security Officer Deployment & data custody
• The Security Officer European sovereignty
• The Security Officer Encryption & access control
• The Security Officer Retention, discovery & co-determination
• The Security Officer European sovereignty
• The Skeptic Retention, discovery & co-determination
• The Skeptic Deployment & data custody
• The Skeptic European sovereignty
• The Skeptic Encryption & access control
• The Skeptic Retention, discovery & co-determination
• The Skeptic Deployment & data custody
• The Skeptic European sovereignty
• The Skeptic Retention, discovery & co-determination
• The Skeptic Deployment & data custody
• The Skeptic European sovereignty
• The Team Lead Encryption & access control
• The Team Lead Retention, discovery & co-determination
• The Team Lead Deployment & data custody
• The Team Lead European sovereignty
• The Team Lead Encryption & access control
• The Team Lead Retention, discovery & co-determination
• The Team Lead Deployment & data custody
• The Team Lead European sovereignty
• The Team Lead Retention, discovery & co-determination
• The Team Lead Deployment & data custody
• The Team Lead European sovereignty
• The Works Council Advocate Encryption & access control
• The Works Council Advocate Retention, discovery & co-determination
• The Works Council Advocate Deployment & data custody
• The Works Council Advocate European sovereignty
• The Works Council Advocate Encryption & access control
• The Works Council Advocate Retention, discovery & co-determination
• The Works Council Advocate Deployment & data custody
• The Works Council Advocate European sovereignty
• The Works Council Advocate Encryption & access control
• The Works Council Advocate Retention, discovery & co-determination
• The Works Council Advocate European sovereignty