Skip to content

The Agentic SOC, Delivered: Exabeam Accelerates AI-Powered Security Operations to Machine Speed — Read the News

Get a Demo

Privacy Policy-2026

TRUSTe

Exabeam Privacy Policy

Effective Date: 09/22/2026

California Notice at Collection: See the U.S. State Privacy Rights Notice At Collection section below for important information about your rights under California privacy law.

This Privacy Policy applies to LogRhythm, Inc. dba Exabeam and its affiliates (“Exabeam”, “we”, or “us”). This Privacy Policy describes how Exabeam collects, uses, shares, secures and otherwise processes personal information in the context of our digital and online properties or services that link to this Privacy Policy, as well as our marketing activities, live events and webinars, and other activities described in this Privacy Policy (collectively, the “Services”).

Exabeam provides a product portfolio of leading security information and event management (‘SIEM’) solutions and threat detection, investigation and response for the automated collection, processing, and analysis of security event data whether via the cloud or a self-hosted environment. This Privacy Policy does not apply to any personal information that we process on behalf of our business customers. Our processing of personal information on behalf of such customers may be governed by our agreements with such customers (including, where applicable, our ‘Data Processing Addendum’ Data Processing Addendum). If you have concerns regarding your personal information that we process on behalf of a business customer, please direct your concerns to that enterprise.

Our Services are designed for enterprise customers and their representatives. We do not offer products or services for use by individuals for their personal, family or household purposes. Accordingly, we treat all personal information we collect as pertaining to individuals in their capacities as representatives of the relevant enterprise and not their individual capacities.

You can download a printable copy of this Privacy Policy here.

European users. For more information about how we process the personal information of individuals located in the European Economic Area, United Kingdom, and Switzerland (collectively, “Europe”, and “European” should be understood accordingly), please see the Notice to European users section below.

Personal Information We Collect

Information you provide to us.

Personal information you may provide to us includes:

  • Contact data, such as your name, company name, street address, email address, or telephone number.
  • Company data, such as Employee User ID, office location, managers, and job titles.
  • Communications data based on our exchanges with you, including when you contact us through the Services or otherwise.
  • Marketing data, such as your preference for receiving our marketing communications and details about your engagement with them.
  • Call/video recordings, such as recordings of events and webinars.
  • Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Third-party sources.

We may combine personal information we receive from you with personal information of the kinds identified above that we obtain from other sources, such as:

  • Public sources, such as credit bureaus, government agencies, public records, publicly accessible social media profiles, and other publicly available sources.
  • Data providers, such as information services, data licensors/brokers, lead generators and cooperative databases.
  • Service providers that provide services on our behalf or help us operate the Services or our business.
  • Partners, such as joint marketing partners and co-sponsors of events or webinars.
  • Ad networks.
  • Data analytics providers.

Automatic data collection.

As is true of most websites, Exabeam, our service providers, and our business partners may automatically log information about you, your computer, and your interaction over time with the Services, our communications and other online services, such as:

  • License Usage Data is information that allows us to identify your account entitlements, such as license consumption, capacity, or type in our systems through an assigned license ID.
  • Device data, such as your computer’s operating system type and version, manufacturer and model, browser type, IP address, unique identifiers (including identifiers used for advertising purposes), general location information such as city, state or geographic area.
  • Online activity data, such as pages or screens you viewed, search history, how long you spent on a page or screen, the website you visited before browsing to the Services, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
  • Communication interaction data such as your interactions with our email, text or other communications (e.g., whether you open or forward emails). We may do this through the use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.

Some of our automatic data collection is facilitated by cookies and other technologies. For more information, see our Cookie Notice. We will also store a record of your preferences in respect to the use of these technologies in connection with the Services.

Tracking technologies.

We and our service providers collect and store information about users’ interactions with unaffiliated websites and applications that use our technologies. Some of this automatic collection is facilitated by the following technologies:

  • Cookies, which are small text files that websites store on user devices and that allow web servers to record users’ web browsing activities and remember their submissions, preferences, credentials, and login status as they navigate a site. Cookies used on our sites include both “session cookies” that are deleted when a web browser session ends, “persistent cookies” that remain longer, “first party” cookies that we place and “third party” cookies that our service providers and other third parties place.
  • Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data on your device outside of your browser in connection with specific applications.
  • Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed, clicked or forwarded.
  • Session-replay technologies, such as those provided by third parties that employ software code to record users’ interactions with the Services in a manner that allows us to watch video replays of those user sessions. The replays include users’ clicks, mobile app touches, mouse movements and scrolls during those sessions. These replays help us diagnose usability problems and identify areas for improvement. We configure these tools to mask sensitive input fields (such as passwords and payment information) and apply data minimization controls to limit collection to what is necessary for these purposes.

For information on your advertising choices and options to opt-out, please see the “Your Choices” section of this Privacy Policy. See our Cookie Notice for more information on our use of cookies and other tracking technologies.

How We Use Your Personal Information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations.

We may use your personal information to:

  • provide and operate the Services;
  • process your requests, orders and transactions;
  • enable security features of the Services;
  • personalize the service, including remembering the devices from which you have previously logged in and remembering your selections and preferences as you navigate the Services;
  • establish and maintain your user profile on the Services;
  • communicate with you about the Services, including by sending Service-related announcements, updates, security alerts, user-to-user communications, and support and administrative messages;
  • communicate with you about events for which you register;
  • understand your needs and interests, and personalize your experience with the Service and our communications;
  • provide support for the Services, and respond to your requests, questions and feedback;
  • facilitate social features of the Service, such as by identifying and suggesting connections with other users of the Services and providing chat or messaging functionality;
  • to collect and share user testimonials; and
  • fraud prevention and security.

Research and development.

We may use your personal information for research and development purposes, including to develop, analyze and improve our products and services. As part of these activities, we may create aggregated, de-identified or other anonymous data from personal information. We may use this anonymous or de-identified data and share it with third parties for any lawful business purposes. We do not attempt to reidentify deidentified information derived from personal information, except for the purpose of testing whether our deidentification processes comply with applicable law.

Marketing and advertising.

We and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:

  • Direct marketing. We may send you direct marketing communications and may personalize these messages based on your needs and interests. You may opt-out of our marketing communications as described in the Opt-out of communications section.
  • Interest-based advertising. We and our third-party advertising partners may use cookies, pixels and other technologies to collect information about your interaction (including the data described in the Automatic Data Collection section above) with the Services, our communications and other third party online services over time, and use that information to serve online ads that they think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online properties. You can learn more about your choices for limiting interest-based advertising in the Your Choices section.
  • Events and promotions. We may use your personal information to administer promotions, communicate with you about events in which you participate, or contact or market to you after collecting your personal information at an event or webinar.

Compliance and protection.

We may use your personal information to:

  • comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, court orders, investigations or requests from government authorities;
  • protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
  • audit our internal processes for compliance with legal and contractual requirements or our internal policies;
  • enforce the terms and conditions that govern the Services; and
  • prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

In some cases, we may specifically ask for your consent to collect, use, or share your personal information for further purposes, if those purposes are not compatible with the initial purpose for which that personal information was collected.

Cookies and similar technologies.

In addition to the other uses included in this section, we may use the Tracking technologies described above for the following purposes:

  • Technical operation. To allow the technical operation of the Services, such as remembering selections as you navigate the site and remembering whether you are logged in.
  • Functionality. To enhance the performance and functionality of our services.
  • Analytics. To help us understand user activity on the Services, including the volume and demographics of users, which pages are most and least visited and how users move around the Services or interact with our emails.

Data sharing in the context of corporate transactions.

We may share certain personal information in the context of actual or prospective corporate transactions. For more information, see How we share your personal information, below.

How We Share Your Personal Information

We may share your personal information with the following parties, or as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection, as necessary to provide you with the Services and to operate our business.

  • Service Providers. Third parties who provide services on our behalf to help with our business activities (such as hosting, internet service providers, information technology, order fulfilment, customer support, email delivery, marketing, research and website/data analytics). We require our service providers to implement appropriate technical and organizational security measures and assess them through contractual obligations and due diligence processes. These companies are authorized to use your personal information only as necessary to provide these services to us, pursuant to written instructions. In such cases, these companies must abide by our data privacy and security requirements and are not allowed to use personal information they receive from us for any other purpose.
  • Advertising partners. Third-party advertising companies for the interest-based advertising purposes described above.
  • Within Our Corporate Family. Affiliated companies related by common ownership or control within Exabeam to carry out regular business activities, such as to provide, maintain and personalize our Services, to communicate with you, and to accomplish our legitimate business purposes, pursuant to contractual safeguards.
  • Event partners and co-sponsors. Third parties with whom we partner to host or with whom we co-sponsor events or webinars. This sharing of personal information may occur in connection with the administration of those events or webinars and/or in connection with the promotion or marketing of those third parties’ products or services that may be of interest to you.
  • Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.
  • Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
  • Corporate Transactions. If Exabeam is involved in a corporate event (e.g., merger, acquisition, or sale of all or a portion of its assets, investments in Exabeam, financing of Exabeam), we may disclose your information as part of the corporate event. For example, we may need to share certain personal information with prospective counterparties and their advisors. We may also disclose your personal information to an acquirer, successor, or assignee of us as part of any merger, acquisition, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets. In such an event, you will be notified via email and/or a prominent notice on our Website, of any change in ownership, uses of your personal information, and choices you may have regarding your personal information.

Your Choices

In this section, we describe the rights and choices available to all users. Users who are located in California and Europe can find additional information about their rights below.

  • Access or update your information. If you have registered for an account with us through the Services, you may review and update certain account information by logging into your account.
  • Opt-out of communications. You may sign-up to receive e-mail communications from us. If you would like to discontinue receiving this information, you may update your e-mail preferences by using the “Unsubscribe” link found in e-mails we send to you or by contacting us at [email protected]. If at any time you wish to no longer receive any marketing or sales correspondence from Exabeam, you may opt out of any/all future electronic communications by clicking here.
  • Cookies. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Services may not work properly. For information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit https://allaboutcookies.org.
  • Blocking images/clear gifs. Most browsers and devices allow you to configure your device to prevent images from loading, so the business hosting the image will not detect that you have viewed a page. To do this, follow the instructions in your particular browser or device settings.
  • Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit https://www.allaboutdnt.com.
  • Advertising choices. You may be able to limit use of your information for interest-based advertising through the following settings/options/tools:
    • Browser settings. Changing your internet web browser settings to block third-party cookies.
    • Privacy browsers/plug-ins. Using privacy browsers or ad-blocking browser plug-ins that let you block tracking technologies.
    • Platform settings. Certain platforms offer opt-out features that let you opt-out of use of your information for interest-based advertising. For example, you may be able to exercise that option for Google and Facebook, respectively, at the following websites:
    • Ad industry tools. Opting out of interest-based ads from companies that participate in the following industry opt-out programs:
    • Mobile settings. Using your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.

Website cookie and tracking preferences can also be set via Cookie Preferences. You will need to apply these opt-out settings on each device and browser from which you wish to limit the use of your information for interest-based advertising purposes.

  • Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.

Other sites and services

Our Services may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

International Transfers

We are headquartered in the United States and may use service providers that operate in other countries. To facilitate our operations, we may also transfer, store and process your personal information in jurisdictions other than where you live, including in the United States. Laws in these countries may differ from the laws applicable to your country of residence. For details on how we transfer the personal information of our European users, please see the Notice to European users section below.

Security

The security of your personal information is important to us. We have implemented commercially reasonable technical and organizational safeguards to appropriately protect your personal information against accidental, unauthorized, or unlawful access, use, loss, destruction or damage. We leverage security monitoring and analytics capabilities to detect unauthorized access, anomalous behaviour, and potential misuse of our systems. We maintain incident response procedures designed to detect, respond to, and notify affected parties of security incidents in accordance with applicable law. Still, no system can be guaranteed to be 100% secure. If you have any questions about the security of your personal information, you can contact us at [email protected].

Data retention

We may retain your personal information for the period necessary to fulfil the purposes outlined in this Privacy Policy, for as long as your account is active or as needed to provide you with our Services, comply with our legal obligations, resolve disputes and enforce our agreements, unless a longer retention period is required or permitted by law. When we no longer require the personal information we have collected about you, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Changes to This Privacy Policy

Exabeam reserves the right to change, modify, or update this Privacy Policy at any time. If we make any material changes, we will notify you by e-mail (sent to the e-mail address specified in your account) or by means of a notice on our Website prior to the change becoming effective. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledgement that the modified Privacy Policy applies to your interactions with the Services and our business. We encourage you to periodically review this page for the latest information on our privacy practices.

How to contact us

U.S. State Privacy Rights Notice At Collection

Except as otherwise provided, this section applies to residents of California, and other states to the extent they have privacy laws applicable to us that grant their residents the rights described below (collectively the “State Privacy Laws”). This State Privacy Rights Notice At Collection is part of our full Privacy Policy. This section describes how we collect, use, and share for the purposes of targeted advertising Personal Information of residents of these states and their rights with respect to that Personal Information. Please note that not all rights listed below may be afforded to all users and that if your state does not afford you these rights, you may not be able to exercise these rights. In addition, we may not be able to process your access, correction or deletion request if you do not provide us with sufficient detail to allow us to confirm your identity and understand and respond to your request.

For purposes of this section, the term “Personal Information” means information that relates to an identified or identifiable natural person, or that is reasonably capable of being used to identify, contact, or precisely locate a natural person, household, or a particular computing system or device. In some cases, we may provide a different privacy notice to certain categories of California residents, such as job applicants, in which case that notice will apply instead of this section. We do not attempt to reidentify deidentified information derived from personal information, except for the purpose of testing whether our deidentification processes comply with applicable law.

Your privacy rights.

You may request to exercise the rights listed below. We will respond to your request in accordance with applicable law. We may decline to honor your request where an exception applies.

  • Right to know / Information. You can request the following information about how we have collected and used your Personal Information during the past 12 months:
    • The categories of Personal Information that we have collected.
    • The categories of sources from which we collected Personal Information.
    • The business or commercial purpose for collecting, selling, and/or sharing Personal Information for targeted advertising purposes.
    • The categories of Personal Information that we sold or shared for targeted advertising purposes, and the categories of third parties to whom this information was sold or shared, categorized by the type of Personal Information for each type of third party.
    • The categories of Personal Information that disclosed for business purposes and the types of entities to whom this information was disclosed
    • The specific third parties to which we have disclosed Personal Information.
  • Access. You can request a copy or representative summary of the Personal Information that we have collected about you.
  • Correction. You can ask us to correct inaccurate Personal Information that we have collected about you.
  • Deletion. You can ask us to delete the Personal Information that we have collected from or about you.
  • Revoke consent. You may have the right to revoke your consent to our processing of your Personal Information.
  • Opt-out.
    • Opt-out of certain “sharing” for targeted advertising purposes. We may process Personal Information for targeted advertising purposes. You can opt-out of the sharing of your Personal Information for targeted advertising purposes and any other processing deemed a “sale” under the CCPA.
    • Opt-out of sale of your Personal Information. We sell Personal Information by processing Personal Information for targeted advertising purposes. You can opt out of our sale of your Personal Information.
    • Automated decision making. We do not use your Personal Information to engage in automated processing or profiling Personal Information to evaluate, analyze, or predict personal aspects related to your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements to make a decision that produces legal or similarly significant effects.
  • Sensitive Personal Information. We do not collect or process Sensitive Personal Information.
  • Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.
  • Appeal. You can appeal our denial of any request validly submitted.

Exercising your right to information/know, access, correction, deletion, and appeal. You may submit requests via email to [email protected] or 1-844-813-2112. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

Exercising your right to opt-out of/revoke your consent to the “sale” or “sharing” of your Personal Information for targeted advertising purposes. You can submit requests to opt-out of targeted advertising and other sales of Personal Information here: [LINK], via email to [email protected], or by broadcasting the Global Privacy Control signal. For more information about how to use the Global Privacy Control, please visit https://globalprivacycontrol.org. These signals set your opt-out preferences only for the particular browser or device you are using and any consumer profile that we associate with that browser or device unless you are logged into your account, in which case we will honor the signal with respect to that browser or device and your account, including your offline consumer profile associated with that account. If you wish to set your opt-out preferences for offline uses of your personal information, please click here or call us at 1-866-384-0713. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

Verification of Identity; Authorized agents. We may need to verify your identity in order to process your information/know, access, appeal, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity and protect against fraudulent requests, we may require government identification, a declaration under penalty of perjury, or other information, where permitted by law. If you make a request to delete, we may ask you to confirm your request before we delete your Personal Information. Your authorized agent may make a request on your behalf upon our verification of the agent’s identity and our receipt of a copy of a valid power of attorney given to your authorized agent. Depending on the kind of request you have made, we may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your State Privacy Law rights on your behalf, the information we request to verify your identity, or confirmation that you have given the authorized agent permission to submit the request.

Personal information that we collect, use and disclose. We have summarized the Personal Information we collect and may disclose, sell to or share with third parties by reference below to both the categories of Personal Information defined in the “Personal information we collect” section of this Privacy Policy above and the categories of Personal Information specified state law. This table describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below. See our full Privacy Policy for descriptions of each entry in this table.

Personal Information (“PI”) we collectCCPA statutory categoryBusiness/commercial purpose for PI collectionCategories of third parties to whom we “disclose” PI for a business purposeCategories of third parties with whom we “share” PI for cross-context behavioral advertising purposes
Contact dataIdentifiers
Customer records		Service delivery and operations
Direct marketing
Interest-based advertising
Events and promotions
Compliance and protection
Analytics
Corporate transactions		Within our corporate family
Service providers
Advertising partners
Professional advisors
Event partners & co-sponsors
Authorities
Business transferees
Company dataIdentifiers
Commercial information
Customer records		Service delivery and operations
Research and development
Direct marketing
Interest-based advertising
Events and promotions
Compliance and protection
Analytics
Corporate transactions
Communication dataCommercial information
Internet activity		Service delivery and operations
Research and development
Direct marketing
Interest-based advertising
Events and promotions
Compliance and protection
Analytics
Corporate transactions
Marketing dataCommercial information
Internet activity
Inferences		Service delivery and operations
Direct marketing
Interest-based advertising
Events and promotions
Compliance and protection
Analytics
Corporate transactions		Ad partners
Call/video dataAudio/video/visual dataService delivery and operations
Research and development
Direct marketing
Interest-based advertising
Compliance and protection
Analytics
Corporate transactions
License Usage DataIdentifiers
Commercial information
Customer records
Internet activity		Service delivery and operations
Direct marketing
Interest-based advertising
Compliance and protection
Analytics
Corporate transactions
Device DataIdentifiers
Geolocation data
Internet activity		Service delivery
Research and development
Direct marketing
Interest-based advertising
Compliance and protection
Analytics
Corporate transactions
Communication interaction dataCommercial information
Internet activity		Service delivery
Research and development
Direct marketing
Interest-based advertising
Compliance and protection
Analytics
Corporate transactions
Online activity dataCommercial information
Internet activity		Service delivery
Research and development
Direct marketing
Interest-based advertising
Compliance and protection
Analytics
Corporate transactions
Tracking technology dataIdentifiers
Internet activity		Service delivery and operations
Research and development
Direct marketing
Interest-based advertising
Compliance and protection
Analytics
Corporate transactions		Ad partners
Inferences derived from the aboveInferencesService delivery
Research and development
Direct marketing
Interest-based advertising
Compliance and protection
Analytics
Corporate transactions		Ad partners
Other Sensitive Personal InformationN/AN/ANone

Consumers under 18. We do not have actual knowledge that we have collected, sold, or shared the Personal Information of residents who are under 18 years of age.

Retention Period for Personal Information. We generally retain Personal Information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. To determine the appropriate retention period for Personal Information, we may consider factors such as the length of time we have an ongoing relationship with you and provide services to you; the amount, nature, and sensitivity of the Personal Information; the potential risk of harm from unauthorized use or disclosure of your Personal Information; the purposes for which we process your Personal Information and whether we can achieve those purposes through other means; whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); whether retention is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation or regulatory investigations; and applicable legal requirements. For example, we will retain your Personal Information for as long as you have an account with us or keep using our services, and the length of time thereafter during which we may have a legitimate need to reference your Personal Information to address issues that may arise. When we no longer require the Personal Information we have collected about you, we may either delete it or de-identify it.

Contact Us. If you have questions or concerns about our privacy policies or information practices, please contact us using the contact details set forth in the How to contact us section, above.

Notice to European users

The information provided in this “Notice to European users” section applies only to individuals in the European Economic Area, the United Kingdom, and Switzerland (i.e., “Europe” as defined at the top of this Privacy Policy).

Personal information. References to “personal information” in this Privacy Policy should be understood to include a reference to “personal data” (as defined in the GDPR)—i.e., information about individuals from which they are either directly identified or can be identified.

Controller. Exabeam is the controller of your personal information covered by this Privacy Policy for the purposes of the “GDPR” (i.e., the General Data Protection Regulation 2016/679 (“EU GDPR”) and the EU GDPR as it forms part of UK law (“UK GDPR”). In addition, depending on where you are based, the following LogRhythm, Inc. dba Exabeam entities will also be a controller of your personal information:

  • If you are in the United Kingdom: LogRhythm Ltd
  • If you are in Germany: LogRhythm Germany GmbH
  • If you are in the Netherlands: LogRhythm B.V.
  • If you are in Ireland: LogRhythm Ireland Limited

Legal basis for processing. We use your personal information for the purposes listed below. In respect of each of the purposes for which we use your personal information, the GDPR requires us to ensure that we have a “legal basis” for that use. Our legal basis for processing your personal information described in this Privacy Policy are listed below.

  • Where we need to perform a contract, we are about to enter into or have entered into with you (“Contractual Necessity”).
  • Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (“Legitimate Interests”). More detail about the specific legitimate interests pursued in respect of each purpose we use your personal information for is set out in the table below.
  • Where we need to comply with a legal or regulatory obligation (“Compliance with Law”).
  • Where we have your specific consent to carry out the processing for the purpose in question (“Consent”).
PurposeCategory(ies) of personal information involvedWhy do we do thisOur legal basis for this use of data
Operate websiteContact data
Company data
Communications data
Device data		To maintain, administer and improve the Website
To better understand your needs and interests, and personalize your experience with the Website		Contractual Necessity
Legitimate Interests
We have a legitimate interest in providing you a good service, with updates on our Website and related offers where you have purchased or shown interest in our Offerings
Service deliveryCompany data
License Usage Data
Usage Data		To respond to your Offerings-related requests, questions and feedback and to support and deliver our Offerings (including to perform data analysis and audits; identify, understand, and anticipate performance issues and the factors that affect them; update our Offerings; identify product security issues; monitor the health, performance, and security of our Offerings; recommend enhancements; and provide guidance to assist with optimization of our Offerings).Contractual Necessity
Legitimate Interests
We have a legitimate interest in delivering a good and effective service.
TroubleshootingContact data
Company data
License Usage Data
Usage Data
Device data
Online activity data
Communication interaction data		To track issues that might be occurring in relation to our Services and associated systems, including providing support and maintenance for the Website
To manage and communicate with you regarding your relationship with us, if you have one, including by sending you service announcements, technical notices, updates, security alerts, and support and administrative messages (including in relation to our Offerings)		Legitimate Interests
It is in our legitimate interests that we can monitor and ensure the proper operation of our Services and associated systems
MarketingCompany data
Device data
Online activity data
Communication interaction data		To form a view on what we think you may want or need, or what may be of interest to you. You will have the ability to opt out of such communications. If you have consented to receive marketing communications from our third-party partners, you may withdraw your consent by contacting those partners directly
Sharing your personal information with third parties such as event co-sponsors.		Where consent is required under applicable law:
Consent
Where consent is not required under applicable law:
Legitimate Interests
We have a legitimate interest in marketing our Services to relevant individuals
Events and WebinarsAny and all data types relevant in the circumstancesRegistering you for events and webinars and enabling your participation or attendance at these events and webinars (including communicating with you about the event or webinar for which you have signed up).
Sharing a list of prospective attendees for an event or webinar with an organization with which we have partnered for or co-sponsor the event or webinar.
Sharing a list of names of attendees for an in-person event with appropriate site security to ensure that only registered attendees attend the event.
Recording the event or webinar. If an event or webinar is being recorded we will notify you in advance.
Publishing the recording of the event or webinar (either on our website or a third-party platform (such as YouTube).		Contract.
Legitimate Interests. It is in our legitimate interests to record and publish events and webinars that we (co-)host, and to ensure that only registered attendees attend such events and webinars, and that those events are effectively secured.
It is in our event partner organizations’ legitimate interests to receive a list of prospective attendees to gauge interest in the event/webinar.
Product improvement, research and developmentAny and all types relevant in the circumstancesWe may use your personal information for research and development purposes, including to analyze and improve our Services (including to benchmark KPIs; improve and develop new features and functionality of our Offerings and/or new products or services; and better understand how our users configure our Offerings) and our business, including creation of aggregated, de-identified or other anonymous dataLegitimate Interests
We have a legitimate interest in analyzing and improving our Services and our business.
Compliance, fraud prevention and safetyAny and all types relevant in the circumstancesTo keep our Services and associated systems operational and secure
To enforce the terms and conditions that govern the Services		Compliance with Law
Legitimate Interests
Where Compliance with Law is not applicable, we have a legitimate interest in ensuring the ongoing security and proper operation of our Services, website and associated systems
Compliance with lawAny and all types relevant in the circumstancesWe may process your personal information (including sharing it with competent authorities or regulators) where necessary to comply with a legal or regulatory requirementCompliance with Law

Use for new purposes. We may use your personal information for reasons not described in this Privacy Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.

Other information.

  • No Sensitive Personal Information. We ask that you not provide us with any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, information related to sex life or sexual orientation, trade union membership, or information pertaining to criminal convictions) on or through the services, or otherwise to us. If you provide us with any sensitive personal information to us when you use the services, you must consent to our processing and use of such sensitive personal information in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal information, you must not submit such sensitive personal information through our services.
  • No automated decision-making and profiling. As part of our Services, we do not engage in automated decision-making and/or profiling which produces legal or similarly significant effects.

Your rights

European data protection legislation gives you certain rights regarding your personal information in certain circumstances. If you are located within Europe, you may ask us to exercise the following additional rights in relation to the personal information that we hold about you:

  • Access. Provide you with information about our processing of your personal information and give you access to your personal information.
  • Correct. Update or correct inaccuracies in your personal information.
  • Delete. Delete your personal information where there is no good reason for us continuing to process it – you also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
  • Transfer. Transfer you (or a third party of your choice) a machine-readable copy of personal information you provided to us.
  • Restrict. Restrict the processing of your personal information.
  • Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal information.
  • Opt-out. Stop sending you direct marketing communications. You may continue to receive service-related and other non-marketing emails.
  • Consent withdrawal. Where we rely on your consent and/or explicit consent to process your personal information you may withdraw that consent at any time.

Exercising These Rights. You may submit these requests by email to [email protected]. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.

Your Right to Lodge a Complaint with your Supervisory Authority. If you would like to submit a complaint about our use of your personal information or our response to your requests regarding your personal information, you may submit a complaint to the data protection regulator in your jurisdiction.

  • For users in the European Economic Area – the contact information for the data protection regulator in your place of residence can be found here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
  • For users in the UK – the contact information for the UK data protection regulator is below:

The Information Commissioner’s Office
Water Lane, Wycliffe House
Wilmslow – Cheshire SK9 5AF
Tel. +44 303 123 1113
Website: https://ico.org.uk/make-a-complaint/

Data transfers outside Europe. We may share your personal information with third parties who may be based outside Europe. In such circumstances, those parties’ processing of your personal information will involve a transfer of your personal information outside of Europe where privacy laws may not be as protective as those in your country. We endeavour to ensure that people to whom we provide your personal information hold it subject to the standards required by European data protection legislation. So, whenever we transfer your personal information outside Europe, we try to ensure a similar degree of protection is afforded to it by making sure that we implement appropriate safeguards to protect your personal information in accordance with European data protection legislation. For further information in relation to the appropriate safeguards that we rely on, or to obtain a copy of the safeguard we have used, please contact us at [email protected].

EU-U.S. Data Privacy Framework with UK Extension and Swiss-U.S. Data Privacy Framework

Exabeam complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Exabeam has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) under the UK Extension to the EU-U.S. DPF. Exabeam has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) regarding the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Exabeam is responsible for the processing of personal data it receives, under the DPF, and subsequently transfers to a third party acting as an agent on its behalf. Exabeam complies with the DPF Principles for all onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions.

The Federal Trade Commission has jurisdiction over Exabeam’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain situations, Exabeam may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Exabeam commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. These dispute resolution services are provided at no cost to you.

For complaints regarding DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found on the official DPF website.

LAST UPDATED

This Privacy Policy was last updated on September 22, 2026.

Legal Resources