We use software-as-a-service products (“Okta Service”) provided by Okta, Inc. and its affiliates (“Okta”) to provide certain features and services to you. Okta offers products that collect both Customer Data and Usage Data (as defined in Okta’s agreements with customers, including from the Okta Service). Okta’s collection of both types of data enables Okta to provide and innovate upon the Okta Service, which in turn allows it to act as a service provider to its customers and to continuously improve upon the services it provides to its customers.
In connection with the products Okta makes available to its customers, Okta may collect additional data, such as user-agent and browser version, IP address, the URLs you visit, logs of your usage and click activities, logs about your login history, identity confirmation, and device data (such as whether your device is managed by an administrator, the operating system installed on the device, certain device configurations, and similar device or version information). For the Okta Mobility Management product, data collected may include the applications that are installed on your device. Collectively, Okta refers to this data as “Ancillary Data.” Some of the Ancillary Data Okta receives is dependent on our organization’s policies and settings and what we permit to be shared with Okta. Okta uses Ancillary Data to improve security and to provide and improve its products to customers, including to better understand customer behavior to create new features and provide threat-related insights for its customers. For example, Okta may use the URL you visit to let you better manage your passwords for the websites you visit.
Some of these products that collect and process Ancillary Data include:
- the Okta browser plugin; and
- the Okta mobile and desktop applications (Okta Verify and Okta Mobile).
Through the Okta browser plugin, the Ancillary Data Okta collects includes details about your login session, IP address, user-agent, and the web application name and website address, as well as other information that is not personal in nature. In addition, Okta may collect interaction data about your use of the Okta browser plugin. Okta uses the information collected through the Okta browser plugin for security purposes and to provide features, such as by allowing you to better manage your passwords for websites that you visit.
More information about Okta’s use of Ancillary Data is available at www.okta.com/privacy-policy.