Privacy Policy

Introduction

EnvZero Inc. (“EnvZero”, “env0”, “we”, “us”, “our”), respects the privacy and data protection rights of our website visitors and app users.

This Privacy Notice (the "Notice") describes the personal information we have and the policies and procedures we use regarding personal information in each of the following contexts – 

  1. Through our websites www.env0.com, docs.env0.com, and other .env0.com domains (the “Websites”)
  2. Through our application based on proprietary technology and algorithms to manage environments on cloud infrastructure providers, such as AWS, Azure, and Google Cloud, as well as related services, as may be available to you through an on-premises agent and at app.env0.com (the “App”).

We are committed to complying with applicable data protection laws, including the EU and the UK General Data Protection Regulation (GDPR).

We occasionally change this Notice. We will post any change to this Notice on our Website and App a reasonable time in advance of the effective date of the change, and we will also make efforts to proactively notify you by email of the changes to the Notice if we have your email address.

Contact us

If you have any questions, comments or concerns regarding this Notice or our processing of your personal information, please contact us at [email protected]. 

What we collect and why

Scenario Purposes Categories of information processed
You register to our App (whether through third-party providers)
You otherwise sign into our App via Single Sign-on (SSO)		 Provide App users with the functionality of the App Name, account username, email address, language preference, profile picture, company affiliation, logo URL, company description, links to your projects and any other data you choose to provide directly to us to through the third-party providers
You pay us, whether through Stripe, the marketplace of other service providers, or through a purchase order Collect user payments Basic billing and payment information from the payment processors including your name and your billing address.
We do not receive your credit card number.
You contact us with an inquiry or provide us feedback through the Website or the via the App chat Develop our relationship with App users and Website visitors in general
Develop our business and sales
Provide technical support to App users
Develop and enhance the App and Websites		 Name, account username, email address, company affiliation, position, phone number, country, and content of inquiry or feedback
We send you marketing emails and newsletters
We call you to interest you in using our App		 Promoting and marketing EnvZero’s products and services Name, account username, user address, email address, and phone number
Our business relationship with App users Administer the business and professional relationship with App users
Facilitate technical support to App users 		Name, account username, email address, company affiliation, position, phone number, country, past communications, products, and services used
You ask to have a demo of EnvZero’s product Develop our relationship with prospective App users
Develop our business and sales		 Name, email address, company affiliation, position, phone number, country, information about demo sessions conducted
Our business relationship with vendors and service providers Administer the business relationship with vendors and service providers
Facilitate EnvZero’s use of vendors’ and service providers’ products and services		 Name, email address, company affiliation, position, phone number, country, email communications
Essential cookies on the Websites and App Facilitate Website or App features that the User specifically requested IP address, pages visited, Website and App functions used, fields completed in forms
Non-essential cookies on the Websites and App Analyze site usage to evaluate and improve its performance
Improve user experience
Inform and serve personalized ads more relevant to user interests		 IP address and location data based on it, pages visited, Website and App functions used, fields completed in forms, screen captures or recordings
Scenario
Purposes
Categories of information processed
  • You register to our App (whether through third party providers) 
  • You otherwise sign into our App via Single Sign-on (SSO)
Provide App users with the functionality of the App
Name, account username, email address, language preference, profile picture, company affiliation, logo URL, company description, links to your projects and any other data you choose to provide directly to us to through the third-party providers
You pay us, whether through Stripe, the marketplace of other service providers, or through a purchase order
Collect user payments
Basic billing and payment information from the payment processors including your name and your billing address. We do not receive your credit card number.
You contact us with an inquiry or provide us feedback through the Website or the via the App chat
  • Develop our relationship with App users and Website visitors in general
  • Develop our business and sales
  • Provide technical support to App users
  • Develop and enhance the App and Websites
Name, account username, email address, company affiliation, position, phone number, country, and content of inquiry or feedback
  • We send you marketing emails and newsletters
  • We call you to interest you in using our App
Promoting and marketing EnvZero’s products and services
Name, account username, user address, email address, and phone number
Our business relationship with App users
  • Administer the business and professional relationship with App users 
  • Facilitate technical support to App users 
Name, account username, email address, company affiliation, position, phone number, country, past communications, products, and services used
You ask to have a demo of EnvZero’s product 
  • Develop our relationship with prospective App users
  • Develop our business and sales
Name, email address, company affiliation, position, phone number, country, information about demo sessions conducted
Our business relationship with vendors and service providers
  • Administer the business relationship with vendors and service providers
  • Facilitate EnvZero’s use of vendors’ and service providers’ products and services
Name, email address, company affiliation, position, phone number, country, email communications
Essential cookies on the Websites and App
Facilitate Website or App features that the User specifically requested
IP address, pages visited, Website and App functions used, fields completed in forms
Non-essential cookies on the Websites and App
  • Analyze site usage to evaluate and improve its performance
  • Improve user experience
  • Inform and serve personalized ads more relevant to user interests
IP address and location data based on it, pages visited, Website and App functions used, fields completed in forms, screen captures or recordings
Scenario
  • You register to our App (whether through third party providers) 
  • You otherwise sign into our App via Single Sign-on (SSO)
Purposes
Provide App users with the functionality of the App
Categories of information processed
Name, account username, email address, language preference, profile picture, company affiliation, logo URL, company description, links to your projects and any other data you choose to provide directly to us to through the third-party providers
Scenario
You pay us, whether through Stripe, the marketplace of other service providers, or through a purchase order
Purposes
Collect user payments
Categories of information processed
Basic billing and payment information from the payment processors including your name and your billing address. We do not receive your credit card number.
Scenario
You contact us with an inquiry or provide us feedback through the Website or the via the App chat
Purposes
  • Develop our relationship with App users and Website visitors in general
  • Develop our business and sales
  • Provide technical support to App users
  • Develop and enhance the App and Websites
Categories of information processed
Name, account username, email address, company affiliation, position, phone number, country, and content of inquiry or feedback
Scenario
  • We send you marketing emails and newsletters
  • We call you to interest you in using our App
Purposes
Promoting and marketing EnvZero’s products and services
Categories of information processed
Name, account username, user address, email address, and phone number
Scenario
Our business relationship with App users
Purposes
  • Administer the business and professional relationship with App users 
  • Facilitate technical support to App users 
Categories of information processed
Name, account username, email address, company affiliation, position, phone number, country, past communications, products, and services used
Scenario
You ask to have a demo of EnvZero’s product 
Purposes
  • Develop our relationship with prospective App users
  • Develop our business and sales
Categories of information processed
Name, email address, company affiliation, position, phone number, country, information about demo sessions conducted
Scenario
Our business relationship with vendors and service providers
Purposes
  • Administer the business relationship with vendors and service providers
  • Facilitate EnvZero’s use of vendors’ and service providers’ products and services
Categories of information processed
Name, email address, company affiliation, position, phone number, country, email communications
Scenario
Essential cookies on the Websites and App
Purposes
Facilitate Website or App features that the User specifically requested
Categories of information processed
IP address, pages visited, Website and App functions used, fields completed in forms
Scenario
Non-essential cookies on the Websites and App
Purposes
  • Analyze site usage to evaluate and improve its performance
  • Improve user experience
  • Inform and serve personalized ads more relevant to user interests
Categories of information processed
IP address and location data based on it, pages visited, Website and App functions used, fields completed in forms, screen captures or recordings

Methods and sources for collecting your personal information

We collect personal information from several sources:

  • Directly from you when you provide it to us through our contact forms, email communications, when directly sign-in to the App via an SSO, or when you register to the App via third party providers that provide. You are not legally obligated to provide us your personal information in these cases, but if you do not, we will not be able to handle or respond to your inquiry, maintain our business contact with you, or fulfill your request to register, use and pay for the App, schedule a Demo with us, or receive our calls and materials for marketing and sales purposes.
  • From third party providers such as Google, GitHub, Microsoft, and BitBucket and Stripe, when you register through these providers to or use these providers to pay for the App.
  • Through the device you use to access our Websites and App, such as using cookies
  • From our staff who administer your Demo on EnvZero App
  • From our third party enrichment service providers via API call, which collect such data from publicly available sources.

Sharing your personal information

We will not share your information with third parties, except in the events listed below or when you provide us your explicit and informed consent. We do not sell your personal information to third parties.

Scenario
Purposes
Examples of third parties involved
We will share your personal information with our service providers who assist us with the internal operations of our business, the Websites, and the App. These companies are authorized to use your personal information in this context only as necessary to provide these services to us and not for their own promotional purposes.
Operating the Websites, our App, and our business
EnvZero Ltd., Google, GitHub, Microsoft, AWS, BitBucket, Stripe, and Hubspot.
If you abused your rights to use the App and the Websites or violated any applicable law while doing business with us.
Responding to, handling, and mitigating suspected violations of law in connection with our business.
Competent authorities, legal counsels, and advisors.
If a judicial, governmental, or regulatory authority requires us to disclose your information.
Complying with a binding request from a competent authority.
Competent authorities.
If the operation of the App, the Websites or our business is organized within a different framework, or through another legal structure or entity (such as due to a merger or acquisition).
Enabling a structural change in the operation of the Websites and our business.
The target entity of the merger or acquisition, legal counsels, and advisors.
Third party cookies
Marketing, tracking digital activity and performance, embedding videos on the Website and App, interaction with social media platforms, contact enrichment, product usage dashboard, and analytics.
‍
These are further described in our Cookie consent banner, available here.
As further described in our Cookie consent banner, available here.
Scenario
We will share your personal information with our service providers who assist us with the internal operations of our business, the Websites, and the App. These companies are authorized to use your personal information in this context only as necessary to provide these services to us and not for their own promotional purposes.
Purposes
Operating the Websites, our App, and our business
Examples of third parties involved
EnvZero Ltd., Google, GitHub, Microsoft, AWS, BitBucket, Stripe, and Hubspot.
Scenario
If you abused your rights to use the App and the Websites or violated any applicable law while doing business with us.
Purposes
Responding to, handling, and mitigating suspected violations of law in connection with our business.
Examples of third parties involved
Competent authorities, legal counsels, and advisors.
Scenario
If a judicial, governmental, or regulatory authority requires us to disclose your information.
Purposes
Complying with a binding request from a competent authority.
Examples of third parties involved
Competent authorities.
Scenario
If the operation of the App, the Websites or our business is organized within a different framework, or through another legal structure or entity (such as due to a merger or acquisition).
Purposes
Enabling a structural change in the operation of the Websites and our business.
Examples of third parties involved
The target entity of the merger or acquisition, legal counsels, and advisors.
Scenario
Third party cookies
Purposes
Marketing, tracking digital activity and performance, embedding videos on the Website and App, interaction with social media platforms, contact enrichment, product usage dashboard, and analytics.
‍
These are further described in our Cookie consent banner, available here.
Examples of third parties involved
As further described in our Cookie consent banner, available here.

Data retention and security

We retain your information for the duration we need it to operate the App, the Websites, and our business, and interact with Website and App users, and thereafter as needed for record-keeping matters.

We will retain your information for the duration needed to support our ordinary business activities operating the App, the Websites and interacting with existing and potential Website and App users. Thereafter, we will still retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish, and defend legal claims and enforce our agreements. 

We implement measures to secure your information

We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of information. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure your personal information, there is no guarantee that it will be immune from information security risks.

Additional information for individuals in the EU or UK 

Controller

EnvZero Inc. is the controller of the personal data described in this Notice. Our address is: 530 Lawrence Expressway, Sunnyvale, California 94085, United States.

International data transfers

To facilitate processing your information within the companies in our corporate group and by our service providers, we will transfer your information to countries such as the United States and Israel. We do so under the terms of a data transfer agreement which contain standard data protection contract clauses with adequate safeguards determined by the EU Commission and UK Information Commissioner’s Office.

Legal basis for processing your personal data‍

Purpose or Scenario
Legal Basis
  • Responding to your inquiry
  • Providing you a demo of our Platform
Legitimate interests in developing potential leads and responding to business inquiries, developing, and enhancing the App and Websites
  • Sending you marketing emails and newsletters
  • Calling you for marketing purposes
Consent, where the data subject subscribes or otherwise requests to receive calls and marketing materials and sales.
  • Administering the business and professional services relationship with App users 
  • Facilitating the provision of support to App users
  • Allowing App users to register and pay
Legitimate interests in administering and performing the contractual obligations with, and provision of the App to, Users.
  • Administering the business relationship with vendors and service providers
  • Facilitating EnvZero’s use of vendors and service provider’s products and services
Legitimate interests in administering contractual obligations with vendors
Cookies that facilitate a Website or an App feature that the user specifically requested
Legitimate interests in administering contractual obligations with vendors
Cookies that analyze Website and App usage to evaluate and improve its performance, improve user experience on the site, inform and serve personalized ads more relevant to user interests
Consent
Responding to, handling, and mitigating suspected violations of law in connection with our business
Legitimate interests in defending and enforcing against violations and breaches that are harmful to our business
Complying with a binding request from a competent authority
Legitimate interests in complying with mandatory legal requirements imposed on us
Enabling a structural change in the operation of the Websites, the App, and our business
Legitimate interests in our business continuity

Data subject rights

If you are in the EU or the UK, you have the following rights under the GDPR:

Right to Access and receive a copy of your personal information that we process.

Right to Rectify inaccurate personal information we have concerning you and to have incomplete personal information completed.

Right to easily and at any time withdraw your consent to us processing your personal data to email you our newsletters or marketing materials, or to the use of non-essential cookies on our Websites and App. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Right to Data Portability, that is, to receive the candidate personal information that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another person or entity. Where technically feasible, you have the right to have your candidate personal information transmitted directly from us to the person or entity you designate. 

Right to Object to our processing of your candidate personal information based on our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or if we need to process such candidate personal information for the establishment, exercise, or defense of legal claims. 

Right to Restrict us from processing your candidate personal information (except for storing it): (a) if you contest the accuracy of the candidate personal information (in which case the restriction applies only for a period enabling us to determine the accuracy of the candidate personal information); (b) if the processing is unlawful and you prefer to restrict the processing of the candidate personal information rather than requiring the deletion of such data by us; (c) if we no longer need the candidate personal information for the purposes outlined in this Notice, but you require the candidate personal information to establish, exercise or defend legal claims; or (d) if you object to our processing based on our legitimate interest (in which case the restriction applies only for the period enabling us to determine whether our legitimate grounds for processing override yours).

Right to be Forgotten. Under certain circumstances, such as when you object to our processing of your candidate personal information based on our legitimate interest and there are no overriding legitimate grounds for the processing, you have the right to ask us to erase your candidate personal information. However, notwithstanding such request, we may still process your candidate personal information if it is necessary to comply with our legal obligations, or for the establishment, exercise, or defense of legal claims. If you wish to exercise any of these rights, please contact us through the channels listed in this Notice.

When you contact us, we reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with information that you have asked for, we will explain the reason.

Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in the Member State of your residence, place of work or place of alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here.

If you are in the UK, you can lodge a complaint to the Information Commissioner’s Office (ICO) pursuant to the instructions provided here.

Additional information for individuals in California

Disclosures to third parties

California Civil Code Section 1798.83 (and other, similar state statutes) permits our customers who are California residents (or residents of states with similar legislation) to request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. To make such a request, please send an email to [email protected]. Please note that we are only required to respond to one request per customer each year.

Updated 19 January 2023