Your privacy is very important to us. We want you to know that your personal data at Oxylabs.io is processed fairly and lawfully. This Privacy policy is created to inform you about the purposes and conditions under which we process your personal data.
If you have any questions regarding this Policy or if you have any requests related to the processing of your personal data, you can contact us at privacy@oxylabs.io.
Data processing when you register and/ or use self-service functionalities
This section outlines how we handle personal data concerning registration, self-service functionality. The personal information collected through registration, self-service functionalities is used exclusively to create the account that gives you access to the Oxylabs.io dashboard and our services, facilitates your access to self-service features, manages your account preferences, and provides you with relevant information and updates about our products and services.
Data Collection and Processing
When you use our self-service functionality, we may collect and process the following personal information: name, surname, email address, contact details such as your phone number, address, company name, industry, credit card information (last four digits of your credit card number), your account credentials (username, encrypted password), usage data (such as access logs, activity history, preferences).
In the context of the self-service functionality, the processing of personal data is necessary to provide the requested services and to fulfill contractual obligations between you and Oxylabs, to initiate a payment or a series of payments on your behalf with our payment service providers for specified transactions (e.g., scheduled installments, subscription payments, or unscheduled top-ups). We rely on the performance of a contract as a legal basis for processing personal data (Article 6(1)(b) of GDPR) in this regard. We retain your personal information for as long as necessary to fulfill the purposes for which it was collected unless a longer retention period is required or permitted by law. If you wish to delete or amend your personal information, you may do so by contacting us directly.
We may save your payment method data for your future use by displaying it to you during the checkout process for future purchases. We rely on your consent as the legal basis for processing this personal data (Article 6(1)(a) of GDPR) in this regard. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
We may engage third-party service providers to facilitate various aspects of our services, therefore we may provide some of your personal data to the following categories of recipients: payment service providers (to the extent that is necessary to process payments and manage financial transactions related to our services) such as Stripe, servers, IT infrastructure, marketing, customer support, data analytics, risk tool/assessment, legal service providers.
When you invite additional users to join your self-service account, we collect and process their email addresses. The legal basis for processing this data is consent, which is obtained when you invite a user to join your self-service account. By sending an invitation, you confirm that you have obtained the necessary consent from the individual whose email address you are providing. The email addresses collected through the invitation process are used exclusively to grant access to the self-service account. They are not used for any other purposes. Individuals who have been invited to join a self-service account have the right to access, rectify, or delete their personal information, as well as withdraw their consent for data processing at any time by contacting us at privacy@oxylabs.io. We retain the email addresses provided through the invitation process for as long as necessary to fulfill the purpose for which they were collected. If an invitation is not accepted within a reasonable period, or if requested by the account owner, we will promptly delete the associated email address from our database.
By inviting new users to your account, you confirm your understanding that these users can view the Oxylabs products you are utilizing and access the functionalities of these products on your behalf.
Data processing when you contact us
You can contact us by sending an email to one of our specialized emails by sending a request to us via live chat platform or through social media.
If you contact us, we process your personal data for the purposes of responding to your inquiry and administering it. Your data is processed under the legal basis of your consent which is given to us by an active motion (contacting us is seen as a clear affirmative act establishing a consent to process your personal data).
We may also process personal data for the purpose of the performance of a contract and on the basis of our legitimate interest of making sure our customers are reputable and solvent.
Data processing when we contact you
Oxylabs.io may use your personal data to inform you about our services. Oxylabs may use the email address you voluntarily provided by filling out the waitlist form to inform you about new products developed and launched by Oxylabs. We rely on your consent as the legal basis to provide you with information on newly developed exclusive products.
In cases where applicable law permits us to contact you without a separate consent, we will contact you under the legal basis of our legitimate interests to make you an offer of our services.
Be sure that you can opt-out from any marketing related communication that we send you at any time by clicking an unsubscribe button in our emails or by contacting us at privacy@oxylabs.io.
We may contact our clients with the invitation to participate in the interview about their experience with our products. By accepting the invitation and participating in the interview, you consent to the processing of some of your personal data. The data collected from these interviews is used solely for internal business purposes to make informed decisions to improve our products and deliver better experiences for our users, including the following: (i) understand how our products are performing and identify specific areas where enhancements can be made based on real user experiences, (ii) guide the development of new features or products that better meet clients‘ needs, (iii) evaluate user satisfaction and address any issues or concerns to improve overall product quality.
When conducting interviews with our clients the following personal data may be processed: audio recordings (voice recordings) of the interview, capturing spoken responses and feedback; video recordings of the person‘s image during the interview; name, surname, email address, telephone number, and any contact information provided by the client; feedback, opinions, insights, and experiences regarding our products.
We rely on your consent as the legal basis for processing personal data (Article 6(1)(a) of GDPR) in regards to interviews. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal. The interview recordings and associated data will be retained for one (1) year from the date of the interview. After this period, the data will be securely deleted unless you withdraw your consent earlier, in which case the data will be deleted promptly.
Your data will be used solely for the purposes outlined above and will not be shared with third parties outside our organization unless legally required. We may engage third-party service providers (such as Google, for the Google Meet tool) to assist in conducting the interviews. When sharing data with third-party service providers, we ensure compliance with data protection requirements, including adherence to data transfer mechanisms approved by the EU, such as Standard Contractual Clauses.
For any inquiries or to exercise your data protection rights, please refer to the Section „Data subject’s rights“ of this Privacy Policy.
Data processing when you visit our website
When you visit our website, we process your data with the help of cookies and other similar technologies. Such data are collected on the basis of your consent.
Cookies are small text files (up to several KB) that your web browser places on your device when visiting our website. Every cookie falls within one of the following categories:
Essential cookies. Without these cookies we cannot provide many services that you need on the website. For example, essential cookies help remember your preferences as you move around the website.
Analytics cookies. These cookies track information about visits to the website so that we can make improvements and report our performance. For example: analyze visitor and user behavior to provide more relevant content or suggest certain activities.
Functionality cookies. These cookies are used to remember information you have entered or choices you make (such as your username, language or your region) on the website, so the next time you visit the website you will not have to set them again.
Targeting and advertising cookies. These third-party cookies are placed by third-party advertising platforms or networks to deliver ads and track ad performance. In some cases, these cookies enable advertising networks to deliver ads that may be relevant to you based upon your activities on our website and other websites (in such cases, ad serving might be based on automated decision-making).
In the table below, we present the main cookies used on our website:
| Cookie name | Description | Expiration date | Type | Category |
| PHPSESSID | The standard cookie is used to support the user session. | At the end of a browsing session | First party | Essential |
| __cfduid | The cookie is set by the CloudFlare service to identify trusted web traffic. It does not correspond to any user id in the web application, nor does the cookie store any personally identifiable information. | 1 year | Third party (CloudFlare) | Essential |
| __zlcmid | This cookie is managed by Zendesk, who provide the technology behind our 'live chat' system. The cookie allows you to continue a chat with us as you view different pages on our site, or if you come back to the site later. | 1 year | Third party (Zendesk) | Functionality |
| _ga | These cookies are part of Google Analytics and allow us to measure information about how visitors use our site. This includes identifying each unique user to our site and details of each page visited. _ga cookie is used to identify unique users across browsing sessions. | 2 years | Third party (Google Analytics) | Analytics |
| _gat | These cookies are part of Google Analytics and allow us to measure information about how visitors use our site. This includes identifying each unique user to our site and details of each page visited. _gat cookie is used to limit the number of requests that have to be made to doubleclick.net. | 10 minutes | Third party (Google Analytics) | Analytics |
| _gid | These cookies are part of Google Analytics and allow us to measure information about how visitors use our site. This includes identifying each unique user to our site and details of each page visited. _gid cookie is used to identify unique users across browsing sessions. | 24 hours | Third party (Google Analytics) | Analytics |
| _gac_UA-71220040-1 | Our site uses Google Tag Manager. This system allows us to manage tags we use on our site. This cookie works in conjunction with tag manager and is used to load web script and code into the webpages. Without it, our website may not work or display properly. | 1 minute | Third party (Google Tag Manager) | Essential |
| Doubleclick | Re-targeting, optimization, reporting and attribution of online adverts. | 2 years | Third party (Google Doubleclick) | Advertising |
| Google Adwords Conversion | Advertising pixel for prospecting and retargeting. | 540 days | Third party (Google Adwords) | Advertising |
| Advertising pixel for prospecting and retargeting. | 180 days | Third party (Linkedin) | Advertising | |
| Quora | Conversion tracking pixel. | 30 days | Third party (Quora) | Advertising |
| Drift | This cookie is managed by Drift, who provide the technology behind our 'live chat' system. This cookie allows you to continue a chat with us as you view different pages on our site, or if you come back to the site later. | 1 year | Third party (Drift) | Functionality |
| _hjIncludedInSample | Hotjar cookie. This session cookie is set to let Hotjar know whether that visitor is included in the sample which is used to generate funnels. | 1 year | Third party (Hotjar) | Functionality |
| AID | This cookie is used to link your activity across devices if you’ve previously signed in to your Google Account on another device. It helps to coordinate the ads you see across devices and measure conversion events. | 1 year | Third party (Google) | Advertising |
| _uetsid | This cookie is managed by Microsoft Bing Ads and is a tracking cookie. It allows us to engage with a user that has previously visited our website. | 30 minutes | Third party (Microsoft Bing Ads) | Advertising |
| hasoffers | We work with TUNE Inc. (“HasOffers”). This service uses cookies and pixel tags to determine when affiliates/ partner websites refer new customers to Oxylabs. | 1 year | Third party (TUNE) | Advertising |
You can control the use of cookies by changing your browser settings. Some browsers limit or delete cookies, so you may want to review your cookie settings and ads settings. For more information on how to remove cookies as well as other useful information related to the use of cookies, visit the website http://www.allaboutcookies.org.
Disclosure of data
We may share your data with the following third parties: CRM software providers, business development service providers, email and email tracking service providers, online live chat service providers, customer support service providers, web hosting companies, data analysis service providers, payment services firms and other service providers. In all cases your data is disclosed only to the extent necessary for the provision of their services. In case you interact with our service providers directly, please refer to the respective provider's terms and privacy policy to understand what personal information it collects and stores.
We may disclose personal data to state, governmental, law enforcement institutions, courts, and regulatory authorities when legally required, such as to support investigations or respond to official requests, including subpoenas. Such disclosures may occur to comply with statutory obligations and legitimate law enforcement demands or to protect our rights and interests, as well as the safety of our company, employees, clients, or the public.
Your personal information may be transferred to and maintained on computers located outside of your state, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. Be assured that we take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy policy.
If you are based in the European Economic Area (EEA). Most of our service providers are based in EEA and US. Many of those that are incorporated in US are members of EU – US Privacy Framework Program and are publicly committed to comply with mandatory EU privacy standards. In other cases where necessary, we make sure that our US and non-US based partners would comply with EU privacy standards by entering into agreements with standard data protection clauses adopted by the European Commission.
Data retention
Oxylabs.io stores communication related personal data up to 5 years from our last contact with you. Your data may be stored for a longer period of time, if it is necessary to defend ourselves against claims, demands or actions and exercise our rights or under other statutory grounds.
Data subject’s rights
If you would like to edit your information or delete it, you can email us at privacy@oxylabs.io.
With respect to your personal data you have the following additional rights granted by the General Data Protection Regulation (GDPR):
to get familiar with your personal data and how it is processed;
to demand restricting the processing of your personal data when personal data is processed without complying with legal requirements or when there is another legal basis;
to demand to transfer your personal data to another data controller or provide it directly to you in a convenient format (applicable to that personal data that you submitted and that is processed by automated means on the basis of your consent);
to object to processing of your personal data, if it is processed on the basis of a legitimate interest, unless there are legitimate reasons for such processing or for the purpose of making, pursuing or defending legal claims;
in cases where your personal data is processed on a separate consent basis, you have the right at any time to withdraw your consent to processing of your personal data;
if you think that your data is processed unlawfully or your rights in connection with data processing are violated, you have a right to contact a relevant data protection authority of your habitual residence, place of work or of an alleged infringement and file a complaint. We recommend to always contact us (privacy@oxylabs.io) before submitting a formal complaint in order to find a right solution to a problem.
Social media
Based on our legitimate interests to be visible on the market, we might use social media features, so that it would be easier for you to share the information. Please note that these social media widgets may collect some information, such as IP addresses, even if you are not a member of that particular social media platform.
Information of children
We do not knowingly collect personal information from children under the age of 13 or any other age that requires a consent or authorization for data processing from the holder of parental responsibility. If you are a parent or guardian and you are aware that your children have provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent when it is necessary, we take steps to remove that information from our servers.
Policy updates
This Privacy policy will remain in effect until a new policy supersedes it. We may choose to update this policy at our discretion, so you should check this page periodically as the terms may change from time to time. Your continued use of our website and / or services will constitute your acknowledgment of the policy in its current version and your understanding of the terms of the policy.
The Privacy policy was last updated on October 14, 2024.