Automattic Privacy Policy changes — 20240501_rev01

40

#### _Information You Provide to Us_

41

42

It's probably no surprise that we collect information that you provide to us directly. Here are some examples:

43

44

- **Basic account information:** We ask for basic information from you in order to set up your account. For example, we require individuals who sign up for a WordPress.com account to provide an email address and password, along with a username or name - and that's it. You may provide us with more information - like your address and other information you want to share - but we don't require that information to create a WordPress.com account.

45

- **Public profile information:** If you have an account with us, we collect the information that you provide for your public profile. For example, if you have a WordPress.com account, your username is part of that public profile, along with any other information you put into your public profile, like a photo or an "About Me" description. Your public profile information is just that - public - so please keep that in mind when deciding what information you would like to include.

46

- **Payment and contact information:** There are various ways in which you may provide us payment information and associated contact information. For example, if you buy something from us or earn revenue through your site, we'll collect information to process those payments and contact you. If you buy something from us - a subscription to a WordPress.com plan, a premium theme, a [custom domain](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/), some Longreads swag - or if you pay fees to a person or business through their WordPress.com site (for example via the Payments feature or the Pay with PayPal block), you'll provide additional personal and payment information like your name, credit card information, and contact information. We also keep a record of the purchases you've made. If you use our Ecommerce Services (including [Store on WordPress.com,](https://en.support.wordpress.com/store/) Woo Shipping, Woo Tax, and WooPayments), you'll have to create a WordPress.com account or connect an existing account and, for some Services, provide your site URL. You may also provide us with financial details to set up a payments integration, like the email address for your Stripe or PayPal account or your bank account information. Additionally, if you use [WooPay](https://woo.app/) to make purchases on other sites, we will store the contact information and payment information you provide to that service. And if you participate in a revenue sharing opportunity for your site, like [WordAds](https://wordads.co/), you'll provide some additional information - for example, a tax ID or other identifier so we can process payments to you.

46

- **Payment and contact information:** There are various ways in which you may provide us payment information and associated contact information. For example, if you buy something from us or earn revenue through your site, we'll collect information to process those payments and contact you. If you buy something from us - a subscription to a WordPress.com plan, a premium theme, a [custom domain](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/), some Longreads swag - or if you pay fees to a person or business through their WordPress.com site (for example via the Payments feature or the Pay with PayPal block), you'll provide additional personal and payment information like your name, credit card information, and contact information. We also keep a record of the purchases you've made. If you use our Ecommerce Services (including Woo Shipping, Woo Tax, and WooPayments), you'll have to create a WordPress.com account or connect an existing account and, for some Services, provide your site URL. You may also provide us with financial details to set up a payments integration, like the email address for your Stripe or PayPal account or your bank account information. Additionally, if you use [WooPay](https://woo.app/) to make purchases on other sites, we will store the contact information and payment information you provide to that service. And if you participate in a revenue sharing opportunity for your site, like [WordAds](https://wordads.co/), you'll provide some additional information - for example, a tax ID or other identifier so we can process payments to you.

47

- **Business Profile:** Some of our products collect additional information from you as part of creating a user/customer profile. For example, if you are a Jetpack CRM customer we may add you to our customer relationship database (powered by Jetpack CRM!) using information you provide us including your name, your employer, your job title or role, your contact information, and your communications with us. If you are a Happy Tools user, we use information you provide us like your timezone and location information, your company and team information, and your contact information, to set up your account and power the Service's features.

48

- **Content information:** You might provide us with information about you in draft and published content (a blog post or comment that includes biographic information about you, or any media or files you upload).

49

- **Credentials:** Depending on the Services you use, you may provide us with credentials for your self-hosted website (like SSH, FTP, and SFTP username and password). Jetpack and VaultPress users may provide us with these credentials in order to use our one-click restore feature if there is a problem with their site, or to allow us to troubleshoot problems more quickly.

50

- **Communications with us (hi there!):** You may also provide us with information when you respond to surveys, communicate with our Happiness Engineers about a support question, post a question in our public forums, or sign up for a newsletter like the one we send through Longreads. When you communicate with us via form, email, phone, WordPress.com comment, or otherwise, we store a copy of our communications (including any call recordings as permitted by applicable law).

51

- **Job applicant information:** If you apply for a job with us - awesome! You may provide us with information like your name, contact information, resume or CV, professional or personal references, similar professional and employment-related data, and work authorization verification as part of the application process. We may also collect additional information about you during the process, like background and credit checks (in applicable jurisdictions and only for certain job roles). You may also provide us with demographic information when required by law or to support our diverse workplace initiatives, such as your gender, racial or ethnic origin, veteran status, and disability status if you voluntarily submit such information as part of your application. We collect demographic information in accordance with applicable law, and do not request demographic information in jurisdictions where it may be prohibited. We will only use this sensitive information to accommodate a disability or illness, comply with legal obligations, protect the health and safety of our employees, and facilitate our internal programs relating to diversity, inclusion, and anti-discrimination.

52

53

#### _Information We Collect Automatically_

54

55

We also collect some information automatically:

56

57

- **Log information:** Like most online service providers, we collect information that web browsers, mobile devices, and servers typically make available, including the browser type, IP address, unique device identifiers, language preference, referring site, the date and time of access, operating system, and mobile network information. We collect log information when you use our Services - for example, when you create or make changes to your website on WordPress.com.

58

- **Transactional information:** When you make a purchase through our Services, we collect information about the transaction, such as product details, purchase price, and the date and location of the transaction. This includes when you purchase something we sell or when you use our Services (like [WooPay](https://woo.app/)) to buy something from a third party.

59

- **Usage information:** We collect information about your usage of our Services. For example, we collect information about the actions that site administrators and users perform on a site using our WordPress.com or Jetpack services - in other words, who did what and when (e.g., \[WordPress.com username\] deleted "\[title of post\]" at \[time/date\]). Our [WooCommerce Usage Tracker](https://woo.com/usage-tracking/) also tracks information like your email address, WooCommerce settings, and PHP settings, along with information about your online store, like the aggregate number of orders and customers. We also collect information about what happens when you use our Services (e.g., page views, support document searches at en.support.wordpress.com, features enabled for your website, interactions with our [Admin Bar](https://en.support.wordpress.com/admin-bar/) and other parts of our Services) along with information about your device (e.g., screen size, name of cellular network, and mobile device manufacturer). We use this information to, for example, provide our Services to you, get insights on how people use our Services so we can make our Services better, and understand and make predictions about user retention.

59

- **Usage information:** We collect information about your usage of our Services. For example, we collect information about the actions that site administrators and users perform on a site using our WordPress.com or Jetpack services - in other words, who did what and when (e.g., \[WordPress.com username\] deleted "\[title of post\]" at \[time/date\]). Our [WooCommerce Usage Tracker](https://woocommerce.com/usage-tracking/) also tracks information like your email address, WooCommerce settings, and PHP settings, along with information about your online store, like the aggregate number of orders and customers. We also collect information about what happens when you use our Services (e.g., page views, support document searches at en.support.wordpress.com, features enabled for your website, interactions with our [Admin Bar](https://en.support.wordpress.com/admin-bar/) and other parts of our Services) along with information about your device (e.g., screen size, name of cellular network, and mobile device manufacturer). We use this information to, for example, provide our Services to you, get insights on how people use our Services so we can make our Services better, and understand and make predictions about user retention.

60

- **Location information:** We may determine the approximate location of your device from your IP address. We collect and use this information to, for example, calculate how many people visit our Services from certain geographic regions. We may also collect information about your precise location via our mobile apps (like when you post a photograph with location information) if you allow us to do so through your mobile device operating system's permissions.

61

- **Stored information:** We may access information stored on your mobile device via our mobile apps. We access this stored information through your device operating system's permissions. For example, if you give us permission to access the photographs on your mobile device's camera roll, our Services may access the photos stored on your device when you upload a really amazing photograph of the sunrise to your website.

62

- **Interactions with other users' sites:** We collect some information about your interactions with other users' sites while you are logged in to your account with us, such as your "Likes" and the fact that you commented on a particular post, so that we can, for example, [recommend posts](https://en.support.wordpress.com/algorithms-search-and-recommendations/) we think may interest you. As another example, we collect information about the comments IntenseDebate users make while logged in and use that information to, for example, tally up statistics about your comments (check them out in your dashboard!) and display information about your comments in your IntenseDebate public profile.

63

- **Information from cookies & other technologies:** A cookie is a string of information that a website stores on a visitor's computer, and that the visitor's browser provides to the website each time the visitor returns. Pixel tags (also called web beacons) are small blocks of code placed on websites and emails. Automattic uses cookies and other technologies like pixel tags to help us identify and track visitors, usage, and access preferences for our Services, as well as track and understand email campaign effectiveness and to deliver targeted ads. For more information about our use of cookies and other technologies for tracking, including how you can control the use of cookies, please see our [Cookie Policy](http://www.automattic.com/cookies).

64

65

#### _Information We Collect from Other Sources_

11	11	### Who We Are and What This Policy Covers
12	12
13	13	Howdy! We are the folks behind a variety of products and services designed to allow anyone - from bloggers, to photographers, small business owners, and enterprises - to take full advantage of the power and promise of the open web. Our mission is to democratize publishing and commerce so that anyone with a story can tell it, and anyone can turn their great idea into a livelihood. We believe in powering the open internet with code that is open source and are proud to say that the vast majority of our work is available under the General Public License ("GPL"). Unlike most other services, because our GPL code is public, you can actually download and take a look at that code to see how it works.
14	14
15	15	This Privacy Policy applies to information that we collect about you when you use:
16	16
17		- Our websites (including automattic.com, wordpress.com, jetpack.com, woo.com, crowdsignal.com, gravatar.com, intensedebate.com, vaultpress.com, akismet.com, simplenote.com, simperium.com, leandomainsearch.com, cloudup.com, longreads.com, atavist.com, mailpoet.com, automatewoo.com, jetpackcrm.com, happy.tools, wpcourses.com, wpscan.com, newspack.pub, and wp.cloud);
	17	- Our websites (including automattic.com, wordpress.com, jetpack.com, woocommerce.com, crowdsignal.com, gravatar.com, intensedebate.com, vaultpress.com, akismet.com, simplenote.com, simperium.com, leandomainsearch.com, cloudup.com, longreads.com, atavist.com, mailpoet.com, automatewoo.com, jetpackcrm.com, happy.tools, wpcourses.com, wpscan.com, newspack.pub, and wp.cloud);
18	18	- Our mobile applications (including the WordPress mobile app for Android and iOS);
19	19	- Our other Automattic products, services, and features that are available on or through our websites (for example, WordPress.com plans, the Payments feature, the Pay with PayPal block, WordPress.com, Jetpack, Woo Shipping, Woo Tax, Gravatar, the IntenseDebate comment management system, Akismet plans, Simplenote, Simperium, Cloudup, Longreads, MailPoet, AutomateWoo, Jetpack CRM, Happy Tools, WordPress.com Courses, WPScan and Newspack); and
20	20	- Other users' websites that use our Services, while you are logged in to your account with us.
21	21
22	22	This Privacy Policy also applies to information we collect when you apply for a job at Automattic or one of our subsidiaries.
23	23
40	40	#### _Information You Provide to Us_
41	41
42	42	It's probably no surprise that we collect information that you provide to us directly. Here are some examples:
43	43
44	44	- Basic account information: We ask for basic information from you in order to set up your account. For example, we require individuals who sign up for a WordPress.com account to provide an email address and password, along with a username or name - and that's it. You may provide us with more information - like your address and other information you want to share - but we don't require that information to create a WordPress.com account.
45	45	- Public profile information: If you have an account with us, we collect the information that you provide for your public profile. For example, if you have a WordPress.com account, your username is part of that public profile, along with any other information you put into your public profile, like a photo or an "About Me" description. Your public profile information is just that - public - so please keep that in mind when deciding what information you would like to include.
46		- Payment and contact information: There are various ways in which you may provide us payment information and associated contact information. For example, if you buy something from us or earn revenue through your site, we'll collect information to process those payments and contact you. If you buy something from us - a subscription to a WordPress.com plan, a premium theme, a [custom domain](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/), some Longreads swag - or if you pay fees to a person or business through their WordPress.com site (for example via the Payments feature or the Pay with PayPal block), you'll provide additional personal and payment information like your name, credit card information, and contact information. We also keep a record of the purchases you've made. If you use our Ecommerce Services (including [Store on WordPress.com,](https://en.support.wordpress.com/store/) Woo Shipping, Woo Tax, and WooPayments), you'll have to create a WordPress.com account or connect an existing account and, for some Services, provide your site URL. You may also provide us with financial details to set up a payments integration, like the email address for your Stripe or PayPal account or your bank account information. Additionally, if you use [WooPay](https://woo.app/) to make purchases on other sites, we will store the contact information and payment information you provide to that service. And if you participate in a revenue sharing opportunity for your site, like [WordAds](https://wordads.co/), you'll provide some additional information - for example, a tax ID or other identifier so we can process payments to you.
	46	- Payment and contact information: There are various ways in which you may provide us payment information and associated contact information. For example, if you buy something from us or earn revenue through your site, we'll collect information to process those payments and contact you. If you buy something from us - a subscription to a WordPress.com plan, a premium theme, a [custom domain](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/), some Longreads swag - or if you pay fees to a person or business through their WordPress.com site (for example via the Payments feature or the Pay with PayPal block), you'll provide additional personal and payment information like your name, credit card information, and contact information. We also keep a record of the purchases you've made. If you use our Ecommerce Services (including Woo Shipping, Woo Tax, and WooPayments), you'll have to create a WordPress.com account or connect an existing account and, for some Services, provide your site URL. You may also provide us with financial details to set up a payments integration, like the email address for your Stripe or PayPal account or your bank account information. Additionally, if you use [WooPay](https://woo.app/) to make purchases on other sites, we will store the contact information and payment information you provide to that service. And if you participate in a revenue sharing opportunity for your site, like [WordAds](https://wordads.co/), you'll provide some additional information - for example, a tax ID or other identifier so we can process payments to you.
47	47	- Business Profile: Some of our products collect additional information from you as part of creating a user/customer profile. For example, if you are a Jetpack CRM customer we may add you to our customer relationship database (powered by Jetpack CRM!) using information you provide us including your name, your employer, your job title or role, your contact information, and your communications with us. If you are a Happy Tools user, we use information you provide us like your timezone and location information, your company and team information, and your contact information, to set up your account and power the Service's features.
48	48	- Content information: You might provide us with information about you in draft and published content (a blog post or comment that includes biographic information about you, or any media or files you upload).
49	49	- Credentials: Depending on the Services you use, you may provide us with credentials for your self-hosted website (like SSH, FTP, and SFTP username and password). Jetpack and VaultPress users may provide us with these credentials in order to use our one-click restore feature if there is a problem with their site, or to allow us to troubleshoot problems more quickly.
50	50	- Communications with us (hi there!): You may also provide us with information when you respond to surveys, communicate with our Happiness Engineers about a support question, post a question in our public forums, or sign up for a newsletter like the one we send through Longreads. When you communicate with us via form, email, phone, WordPress.com comment, or otherwise, we store a copy of our communications (including any call recordings as permitted by applicable law).
51	51	- Job applicant information: If you apply for a job with us - awesome! You may provide us with information like your name, contact information, resume or CV, professional or personal references, similar professional and employment-related data, and work authorization verification as part of the application process. We may also collect additional information about you during the process, like background and credit checks (in applicable jurisdictions and only for certain job roles). You may also provide us with demographic information when required by law or to support our diverse workplace initiatives, such as your gender, racial or ethnic origin, veteran status, and disability status if you voluntarily submit such information as part of your application. We collect demographic information in accordance with applicable law, and do not request demographic information in jurisdictions where it may be prohibited. We will only use this sensitive information to accommodate a disability or illness, comply with legal obligations, protect the health and safety of our employees, and facilitate our internal programs relating to diversity, inclusion, and anti-discrimination.
52	52
53	53	#### _Information We Collect Automatically_
54	54
55	55	We also collect some information automatically:
56	56
57	57	- Log information: Like most online service providers, we collect information that web browsers, mobile devices, and servers typically make available, including the browser type, IP address, unique device identifiers, language preference, referring site, the date and time of access, operating system, and mobile network information. We collect log information when you use our Services - for example, when you create or make changes to your website on WordPress.com.
58	58	- Transactional information: When you make a purchase through our Services, we collect information about the transaction, such as product details, purchase price, and the date and location of the transaction. This includes when you purchase something we sell or when you use our Services (like [WooPay](https://woo.app/)) to buy something from a third party.
59		- Usage information: We collect information about your usage of our Services. For example, we collect information about the actions that site administrators and users perform on a site using our WordPress.com or Jetpack services - in other words, who did what and when (e.g., \[WordPress.com username\] deleted "\[title of post\]" at \[time/date\]). Our [WooCommerce Usage Tracker](https://woo.com/usage-tracking/) also tracks information like your email address, WooCommerce settings, and PHP settings, along with information about your online store, like the aggregate number of orders and customers. We also collect information about what happens when you use our Services (e.g., page views, support document searches at en.support.wordpress.com, features enabled for your website, interactions with our [Admin Bar](https://en.support.wordpress.com/admin-bar/) and other parts of our Services) along with information about your device (e.g., screen size, name of cellular network, and mobile device manufacturer). We use this information to, for example, provide our Services to you, get insights on how people use our Services so we can make our Services better, and understand and make predictions about user retention.
	59	- Usage information: We collect information about your usage of our Services. For example, we collect information about the actions that site administrators and users perform on a site using our WordPress.com or Jetpack services - in other words, who did what and when (e.g., \[WordPress.com username\] deleted "\[title of post\]" at \[time/date\]). Our [WooCommerce Usage Tracker](https://woocommerce.com/usage-tracking/) also tracks information like your email address, WooCommerce settings, and PHP settings, along with information about your online store, like the aggregate number of orders and customers. We also collect information about what happens when you use our Services (e.g., page views, support document searches at en.support.wordpress.com, features enabled for your website, interactions with our [Admin Bar](https://en.support.wordpress.com/admin-bar/) and other parts of our Services) along with information about your device (e.g., screen size, name of cellular network, and mobile device manufacturer). We use this information to, for example, provide our Services to you, get insights on how people use our Services so we can make our Services better, and understand and make predictions about user retention.
60	60	- Location information: We may determine the approximate location of your device from your IP address. We collect and use this information to, for example, calculate how many people visit our Services from certain geographic regions. We may also collect information about your precise location via our mobile apps (like when you post a photograph with location information) if you allow us to do so through your mobile device operating system's permissions.
61	61	- Stored information: We may access information stored on your mobile device via our mobile apps. We access this stored information through your device operating system's permissions. For example, if you give us permission to access the photographs on your mobile device's camera roll, our Services may access the photos stored on your device when you upload a really amazing photograph of the sunrise to your website.
62	62	- Interactions with other users' sites: We collect some information about your interactions with other users' sites while you are logged in to your account with us, such as your "Likes" and the fact that you commented on a particular post, so that we can, for example, [recommend posts](https://en.support.wordpress.com/algorithms-search-and-recommendations/) we think may interest you. As another example, we collect information about the comments IntenseDebate users make while logged in and use that information to, for example, tally up statistics about your comments (check them out in your dashboard!) and display information about your comments in your IntenseDebate public profile.
63	63	- Information from cookies & other technologies: A cookie is a string of information that a website stores on a visitor's computer, and that the visitor's browser provides to the website each time the visitor returns. Pixel tags (also called web beacons) are small blocks of code placed on websites and emails. Automattic uses cookies and other technologies like pixel tags to help us identify and track visitors, usage, and access preferences for our Services, as well as track and understand email campaign effectiveness and to deliver targeted ads. For more information about our use of cookies and other technologies for tracking, including how you can control the use of cookies, please see our [Cookie Policy](http://www.automattic.com/cookies).
64	64
65	65	#### _Information We Collect from Other Sources_
109	109
110	110	#### _How We Share Information_
111	111
112	112	We share information about you in limited circumstances, and with appropriate safeguards on your privacy. These are spelled out below, as well as in the section called [Ads and Analytics Services Provided by Others](https://automattic.com/privacy/):
113	113
114	114	- Subsidiaries and independent contractors: We may disclose information about you to our subsidiaries and independent contractors who need the information to help us provide our Services or process the information on our behalf. We require our subsidiaries and independent contractors to follow this Privacy Policy for any personal information that we share with them.
115		- Third-party vendors: We may share information about you with third-party vendors who need the information in order to provide their services to us, or to provide their services to you or your site. This includes vendors that help us provide our Services to you (like Stripe, which powers WooPayments, payment providers that process your credit and debit card information, payment providers you use for your own ecommerce operations, fraud prevention services that allow us to analyze fraudulent payment transactions, cloud storage services, postal and email delivery services that help us stay in touch with you, customer chat and email support services that help us communicate with you, registrars, registries, data escrow services that allow us to provide domain registration services, and your hosting provider if your site is not hosted by Automattic); those that assist us with our marketing efforts (e.g., by providing tools for identifying a specific marketing target group or improving our marketing campaigns, and by placing ads to market our services); those that help us understand and enhance our Services (like analytics providers); those that make tools to help us run our operations (like programs that help us with task management, scheduling, word processing, email and other communications, and collaboration among our teams); other third-party tools that help us manage operations; and companies that make products available on our websites (like the extensions on Woo.com), who may need information about you in order to, for example, provide technical or other support services to you. We require vendors to agree to privacy commitments in order to share information with them. Other vendors are listed in our more specific policies (e.g., our [Cookie Policy](https://automattic.com/cookies/)).
	115	- Third-party vendors: We may share information about you with third-party vendors who need the information in order to provide their services to us, or to provide their services to you or your site. This includes vendors that help us provide our Services to you (like Stripe, which powers WooPayments, payment providers that process your credit and debit card information, payment providers you use for your own ecommerce operations, fraud prevention services that allow us to analyze fraudulent payment transactions, cloud storage services, postal and email delivery services that help us stay in touch with you, customer chat and email support services that help us communicate with you, registrars, registries, data escrow services that allow us to provide domain registration services, and your hosting provider if your site is not hosted by Automattic); those that assist us with our marketing efforts (e.g., by providing tools for identifying a specific marketing target group or improving our marketing campaigns, and by placing ads to market our services); those that help us understand and enhance our Services (like analytics providers); those that make tools to help us run our operations (like programs that help us with task management, scheduling, word processing, email and other communications, and collaboration among our teams); other third-party tools that help us manage operations; and companies that make products available on our websites (like the extensions on woocommerce.com), who may need information about you in order to, for example, provide technical or other support services to you. We require vendors to agree to privacy commitments in order to share information with them. Other vendors are listed in our more specific policies (e.g., our [Cookie Policy](https://automattic.com/cookies/)).
116	116	- Legal and regulatory requirements: We may disclose information about you in response to a subpoena, court order, or other governmental request. For more information on how we respond to requests for information about WordPress.com users, please see our [Legal Guidelines](https://en.support.wordpress.com/report-blogs/legal-guidelines/). Additionally, if you have a domain registered with WordPress.com, we may share your information to comply with the Internet Corporation for Assigned Names and Numbers' (ICANN) regulations, rules, or policies. For example, your information relating to your domain registration may be available in the WHOIS database, or we may be required to share your information with ICANN-approved Dispute Resolution Service Providers. Please see our [Domain Registrations and Privacy support document](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/) for more details.
117	117	- To protect rights, property, and others: We may disclose information about you when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of Automattic, third parties, or the public at large. For example, if we have a good faith belief that there is an imminent danger of death or serious physical injury, we [may disclose information related to the emergency without delay](https://en.support.wordpress.com/report-blogs/legal-guidelines/).
118	118	- Business transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company, or in the unlikely event that Automattic goes out of business or enters bankruptcy, user information would likely be one of the assets that is transferred or acquired by a third party. If any of these events were to happen, this Privacy Policy would continue to apply to your information and the party receiving your information may continue to use your information, but only consistent with this Privacy Policy.
119	119	- With your consent: We may share and disclose information with your consent or at your direction. For example, we may share your information with third parties when you authorize us to do so, like when you connected your site to a social media service through our Publicize feature.
120	120	- Aggregated or de-identified information: We may share information that has been aggregated or de-identified, so that it can no longer reasonably be used to identify you. For instance, we may publish aggregate statistics about the use of our Services, or share a hashed version of your email address to facilitate customized ad campaigns on other platforms.
121	121	- Site owners: If you have a WordPress.com account and interact with another site using our Services, your information may be shared with the administrators of the site. For example, if you leave a comment on a site created on WordPress.com or running Jetpack, your IP address and the email address associated with your WordPress.com account may be shared with the administrator(s) of the site where you left the comment. Or if you make a payment (like via the [Payments feature](https://en.support.wordpress.com/recurring-payments/)) to a site, your public display name, user name, and email address may be shared with the administrator(s) of the site. Or if you follow/subscribe to another WordPress.com site we will share your email address with the site owner.
163	163	### Your Rights
164	164
165	165	If you are located in certain parts of the world, including some US states and countries that fall under the scope of the European General Data Protection Regulation (aka the "GDPR"), you may have certain rights regarding your personal information, like the right to request access to or deletion of your data.
166	166
167	167	#### _US Privacy Laws_
168	168
169		Laws in some US states, including California, Colorado, Connecticut, Utah, and Virginia, require us to provide residents with additional information about the categories of personal information we collect and share, where we get that personal information, and how and why we use it. You'll find that information in this section (if you are a California resident, please note that this is the Notice at Collection we are required to provide you under California law).
	169	Laws in some US states require us to provide residents with additional information about the categories of personal information we collect and share, where we get that personal information, and how and why we use it. You'll find that information in this section (if you are a California resident, please note that this is the Notice at Collection we are required to provide you under California law).
170	170
171	171	In the last 12 months, we collected the following categories of personal information, depending on the Services used:
172	172
173	173	- Identifiers (like your name, contact information, and device and online identifiers);
174	174	- Commercial information (your billing information and purchase history, for example);
175	175	- Characteristics protected by law (for example, you might provide your gender as part of a research survey for us or you may choose to voluntarily disclose your race or veteran status as part of your job application);
227	227	#### _Appeals Process for Rights Requests Denials_
228	228
229	229	In some circumstances we may deny your request to exercise one of these rights. For example, if we cannot verify that you are the account owner we may deny your request to access the personal information associated with your account. As another example, if we are legally required to maintain a copy of your personal information we may deny your request to delete your personal information.
230	230
231	231	In the event that we deny your request, we will communicate this fact to you in writing. You may appeal our decision by responding in writing to our denial email and stating that you would like to appeal. All appeals will be reviewed by an internal expert who was not involved in your original request. In the event that your appeal is also denied this information will be communicated to you in writing. Please note that the appeal process does not apply to job applicants.
232	232
233		If your appeal is denied, in some US states (Colorado, Connecticut, and Virginia) you may refer the denied appeal to the state attorney general if you believe the denial is in conflict with your legal rights. The process for how to do this will be communicated to you in writing at the same time we send you our decision about your appeal.
	233	If your appeal is denied, in some US states you may refer the denied appeal to the state attorney general if you believe the denial is in conflict with your legal rights. The process for how to do this will be communicated to you in writing at the same time we send you our decision about your appeal.
234	234
235	235	### Controllers and Responsible Companies
236	236
237	237	Automattic's Services are worldwide. Different Automattic companies are the controller (or co-controller) of personal information, which means that they are the company responsible for processing that information, based on the particular service and the location of the individual using our Services.
238	238
239	239	Depending on the Services you use, more than one company may be the controller of your personal data. Generally, the "controller" is the Automattic company that entered into the contract with you under the Terms of Service for the product or service you use. In addition, Automattic Inc., our US-based company, is the controller for some of the processing activities across all of our Services worldwide.
244	244
245	245	<table><tbody><tr><td>If you reside outside of the Designated Countries:</td><td><strong>Automattic Inc.</strong><br>60 29th Street #343<br>San Francisco, CA 94110</td></tr><tr><td>If you reside in the Designated Countries:</td><td><strong>Aut O'Mattic A8C Ireland Ltd.</strong><br>Grand Canal Dock, 25 Herbert Pl<br>Dublin, D02 AY86<br>IrelandAutomattic Inc. is also the controller for some of the processing activities related to Services provided by Aut O'Mattic A8C Ireland Ltd.</td></tr></tbody></table>
246	246
247	247	_**Woo Services
248	248	**_
249	249
250		_Woo services includes WooCommerce, WooPayments, Woo Shipping, Woo Tax, MailPoet, and other products and services available at Woo.com._
	250	_Woo services includes WooCommerce, WooPayments, Woo Shipping, Woo Tax, MailPoet, and other products and services available at woocommerce.com._
251	251
252	252	<table><tbody><tr><td>If you reside outside of the Designated Countries:</td><td><strong>WooCommerce, Inc.</strong><br>60 29th Street #343<br>San Francisco, CA 94110Automattic Inc. is also the controller for some of the processing activities related to Services provided by WooCommerce, Inc.</td></tr><tr><td>If you reside in the Designated Countries:</td><td><strong>WooCommerce Ireland Ltd.</strong><br>Grand Canal Dock, 25 Herbert Pl<br>Dublin, D02 AY86<br>IrelandAutomattic Inc and WooCommerce, Inc are also the joint controllers for some of the processing activities related to Services provided by WooCommerce Ireland Ltd.</td></tr></tbody></table>
253	253
254	254	### How to Reach Us
255	255
256	256	If you have a question about this Privacy Policy, or you would like to contact us about any of the rights mentioned in the [Your Rights section](https://automattic.com/privacy/) above, please contact us through our [web form](https://wordpress.com/help/contact) or via [email](mailto:privacypolicyupdates@automattic.com). These are the fastest ways to get a response to your inquiry, but you can also contact us by telephone at 1-877-273-3049.
284	284	Although most changes are likely to be minor, Automattic may change its Privacy Policy from time to time. Automattic encourages visitors to frequently check this page for any changes to its Privacy Policy. If we make changes, we will notify you by revising the change log below, and, in some cases, we may provide additional notice (like adding a statement to our homepage or the [WordPress.com Blog,](https://en.blog.wordpress.com/) or sending you a notification through email or your dashboard). Your further use of the Services after a change to our Privacy Policy will be subject to the updated policy.
285	285
286	286	### Other Information and Resources
287	287
288	288	[Jetpack Privacy Center](https://jetpack.com/support/privacy/)
289	289
290		[Woo and the GDPR](https://woo.com/gdpr/)
	290	[Woo and the GDPR](https://woocommerce.com/gdpr/)
291	291
292	292	### Translation
293	293
294	294	Our Privacy Policy was originally written in English (US). We may translate it into other languages. For example:
295	295
296	296	French: [https://automattic.com/fr/privacy](https://automattic.com/fr/privacy)
300	300	In the event of a conflict between a translated version of our Privacy Policy and the English version, the English version will control.
301	301
302	302	That's it! Thanks for reading.
303	303
304	304	### Change log
305	305
	306	- _April 22, 2024:_ Removed the outdated list of specific US states covered by the US Privacy Laws section
306	307	- _October 31, 2023:_ Changed instances of "WooCommerce" to "Woo."
307	308	- _July 12, 2023:_ Added new example of information shared with site owners.
308	309	- _March 17, 2023:_ Removed references to WPVIP.
309	310	- _December 30, 2022:_ Updated the California rights section to apply to additional US states.
310	311	- _October 18, 2022_: Added wp.cloud to the list of our websites.
311	312	- _April 26, 2022:_ Included information regarding WooPay.

Privacy Policy

Full text changes — 20231201_rev01 to 20240501_rev01