Sonatype Nexus Repository privacy & data

Sonatype Inc. is the data controller of your personal data.

Name, phone number, email address, user ID, demographic information.

Payment information (e.g. credit/debit card details) and records of transactions made on our website.

Details of your visits to our site and information generated in the course of the use of our Services (including the timing, frequency, and pattern of service use)

details regarding the device you use to access our Services, including, its operating system, and browser type.

records of communications if you contact us and your preferences for communications.

Information about your current employer, professional or employment experience and educational background

gender, race, disability status, veteran status (voluntarily provided during employment application).

Manage provision of our products and services, including to take steps to enter into a contract for sale or for services, create and manage user accounts, process payments, fulfill orders, verify identity, process contest entries and prizes, and send service communications.

Enable AI analysis and training for AI models or systems, including generative AI providers, to assess and enhance your communications and interactions with Sonatype and our products.

Deliver tailored advertising on our Services based on your preferences or interests across services and devices and measuring the effectiveness of ads.

Where we process your personal data to create and maintain your user account, we do this for as long as you are an active user and for 6 years after this, unless required in connection with litigation.

Where we process personal data for site security purposes, we retain it for 18 months.

otherwise, it will be deleted after 6 months.

we rely on approved standard contractual clauses (module 1 or 2 depending on nature of relationship)

business partners and service providers who rely on processor BCRs.

If you want to learn more about our specific retention periods for your Personal Data, you may contact us at privacy@sonatype.com .

The right of access Enables you to receive a copy of your personal data

The right to rectification Enables you to correct any inaccurate or incomplete personal data we hold about you

The right to erasure Enables you to ask us to delete your personal data in certain circumstances

The right to restrict processing Enables you to ask us to halt the processing of your personal data in certain circumstances

The right to object Enables you to object to us processing your personal data in some circumstances

The right to data portability Enables you to request us to transmit personal data that you have provided to us, to a third party without hindrance

Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to other companies who will sell or license their information to others. At this time, Sonatype does not engage in such sales.