Global Privacy Statements

Ping Identity Privacy Statement

Last Updated: July 2026

Style

highlight

Privacy Statement

Last Updated: July 2026

At Ping Identity, we are committed to protecting your privacy and being transparent about how we collect, use, disclose, and protect personal information.

This Ping Identity Privacy Statement (“Privacy Statement”) explains how Ping Identity Corporation and its affiliates (collectively, "Ping Identity," "we," "our," or "us") process personal information when you interact directly with us, including through our websites, applications, and business activities.

For the personal information described in this Privacy Statement, Ping Identity acts as a controller.

This Privacy Statement does not apply to:

Customer Data processed on behalf of customers in connection with our identity and access management products and services, which is governed by our agreements with those customers. Please see our Customer Data Privacy Statement for more information;

Personal information processed in connection with recruitment, which is governed by our Career Center Privacy Statement where applicable.

If you have questions about this Privacy Statement, please contact us at
privacy@pingidentity.com.

1. Personal Information We Collect

We collect personal information directly from you, automatically when you interact with our websites, applications or services, from your employer or organization where you interact with us in a business capacity, from publicly available sources (such as professional social networks), and from service providers, business partners, data brokers, trade associations, sales lead providers, event organizers, and other third parties. We may also use service providers to verify, update or standardize contact information.

During the preceding 12 months, we have collected the following categories of personal
information:

Category of Personal Information

Examples

Identifiers

Name, business or mailing address, email address, telephone number, account identifiers, usernames, online credentials, device identifiers, advertising identifiers

Professional or Employment-Related Information

Employer, job title, professional role, customer support records, training records, product usage, communication preferences, supplier qualification information, and, where applicable, information regarding your authority to act on behalf of your organization

Commercial Information

Purchases, payments, downloads, refunds, customer service interactions, website usage, transaction records

Internet or Other Electronic Network Activity Information

IP address, browser and device information, cookies, pixel tags, server logs, operating system information

Geolocation Data

Approximate location derived from IP address; precise geolocation where enabled (e.g., when using certain mobile applications or location-based event services)

Financial Information

Payment card information, bank account information, billing records

Audio and Visual Information

Photographs, video recordings, videoconference recordings, CCTV recordings, call recordings (which may be transcribed or analyzed for quality assurance, training or service improvement), voicemails

Inferences

Marketing preferences, analytics, fraud indicators, security risk indicators and similar information derived from other personal information

Additional information regarding cookies and similar technologies is available in our Cookies and Online Technologies Statement.

2. How We Use Personal Information

We may collect, use and disclose personal information for the following purposes:

Providing our products and services

To provide the information, products and services you request or reasonably expect based on your relationship with us.
To communicate with you, including responding to your inquiries, providing customer support, administering your account, sending transactional communications, and, where permitted by law, marketing communications.
To provide location-based services within our products and mobile applications.

Operating and improving our business

To develop, improve, test, maintain and support our products, services, websites and business operations, including customer service, recordkeeping, quality assurance, analytics, reporting, financial management, supplier management, training, and to create de-identified or aggregated information where permitted by law.
To personalize your experience, communications and interactions with Ping Identity, including by recognizing your interactions across our websites, applications and, where appropriate, across devices and browsers, where permitted by applicable law.
To administer events, webinars, conferences, promotions, surveys, training, certifications and related engagement activities.

Security and risk management

To maintain the security, integrity, availability and reliability of our products, services, systems and networks, including cybersecurity, identity and access management, loss prevention, fraud detection and prevention, and protection against malicious, deceptive or illegal activity.
To maintain physical security at our facilities, manage visitor access, investigate incidents, and prevent loss, fraud and other unauthorized activity.
To support business continuity and disaster recovery.
To enforce our contracts and to protect Ping Identity, our workers, our clients and their employees and the public against injury, theft, legal liability, fraud or abuse, to people or property.

Legal and corporate purposes

To comply with applicable laws, regulations, legal process and lawful requests from governmental authorities.
To establish, exercise or defend legal claims.
To conduct corporate governance, audits, reporting and compliance activities.
To facilitate corporate transactions, including in connection with a sale, merger, consolidation, change in control, transfer of substantial assets, reorganization, or liquidation, of our business(es).

We may also use personal information for any other purpose disclosed to you at the time of collection, with your consent where required by law, or as otherwise permitted or required by applicable law.

3. How We Disclose Personal Information

We may disclose personal information for the purposes listed above to:

Our affiliates;
Service providers, contractors and subprocessors that process personal information. on our behalf;
Professional advisors, including auditors, accountants, cybersecurity firms, insurers and legal counsel;
Business partners involved in providing products, services or events;
The organization or employer with which you are associated, as necessary to fulfill our commercial relationship, including sharing information regarding purchases, authorized users, product usage, training records, certifications or satisfaction surveys;
Payment processors, financial institutions, and credit reporting agencies;
Advertising, analytics and marketing providers, where permitted by law;
Government authorities, regulators, courts or law enforcement where required or permitted by law;
Parties involved in an actual or proposed merger, acquisition, financing or other corporate transaction; and
Other third parties with your consent or at your direction.

We do not sell personal information for monetary consideration. We may share certain personal information for cross-context behavioral advertising as described in this Privacy Statement and our California Privacy Notice. You can opt out by visiting Your Privacy Choices. We also recognize Global Privacy Control (GPC) signals where required by applicable law.

4. De-identified and Aggregated Information

We may de-identify or aggregate personal information so that it can no longer reasonably be used to identify an individual. We may use and disclose de-identified or aggregated information for any lawful purpose, including research, analytics, reporting and product improvement.

5. Children’s Privacy

We do not knowingly collect, use, or disclose personal information of children under 16.

6. Third-Party Websites and Services

Our websites and services may contain links to third-party websites, applications, or services that are not operated by Ping Identity. If you choose to visit or interact with these third parties, your personal information will be governed by their own privacy notices and practices, and we encourage you to review them before providing personal information.

In addition, certain third parties may collect personal information directly through our websites or services. For example:

advertising, analytics and measurement providers may collect information through cookies, pixels and similar technologies;
social media platforms may collect information when you interact with embedded social media features or content; and
market research providers or other third parties may collect information directly from you if you choose to participate in surveys, promotions or research activities.

Those third parties process personal information in accordance with their own privacy notices. Additional information regarding cookies and similar technologies, and your choices regarding those technologies, is available in our Cookies and Online Technologies Statement.

7. Marketing Communications

If you have opted to receive marketing communications from Ping Identity, you may opt out at any time.

Email. To stop receiving marketing emails, click the "Unsubscribe" link included in any marketing email or update your preferences through our Email Preference Center.
Text Messages. To stop receiving marketing text messages, reply to any message, or follow any other opt-out instructions included in the message.

If you have multiple email addresses associated with your interactions with Ping Identity or need assistance updating your marketing preferences, please contact us at privacy@pingidentity.com.

Please note that even if you opt out of marketing communications, we may still send you transactional or relationship communications, including messages regarding your account, purchases, support requests, security, service updates, or other communications that are necessary to provide our products and services or as otherwise permitted by applicable law.

8. Your Privacy Rights and How to Exercise Them

Depending on your country or state of residence and applicable law, you may have the following privacy rights, where applicable:

The right to be informed about our collection, use and disclosure of your personal information;
The right to know if we maintain your personal information, and if we do, to access that information (subject to the rights of others) and to request that we provide your information in a portable format;
The right to request that we correct your information if it is incomplete or incorrect;
The right to request that we delete your personal information;
The right to object or restrict certain processing of your personal information, including:
- The right to opt out of the sale of your personal information;
- The right to opt out of sharing your personal information for certain targeted advertising;
- The right to object to certain profiling or automated decision-making that has legal or similarly significant effects;
- The right to withdraw consent where processing is based on consent.
The right to transfer your information to a third party, where technically feasible.

To exercise your rights, please visit Your Privacy Choices or contact privacy@pingidentity.com.

If Ping Identity processes your personal information on behalf of one of our customers, please contact that customer directly.

California residents should also review our California Supplement, and individuals located in the EEA, Switzerland or the United Kingdom should review our EEA, Swiss and UK Privacy Supplement.

Please understand that these rights are subject to some limitations. For example, we may require documentation to support certain corrections to your information. We may request additional information from you to verify your identity before responding to your request.

9. Analytics, Profiling and Automated Decision-Making

We use analytics to understand how individuals interact with our products, services and websites, improve user experiences, enhance product functionality, and protect against fraud and security threats.

Where applicable, we take steps to comply with laws that regulate the use of profiling or automated decision-making tools to make decisions that produce legal or similarly significant legal effects for you; any such decisions are subject to human review.

10. Information Security

We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction.

Our service providers and contractors are contractually required to implement appropriate security measures.

11. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Statement and for any additional period required or permitted by applicable law, including to satisfy legal, accounting, reporting, audit and compliance obligations.

Retention periods vary depending on the type of information, the purpose for which it was collected, and applicable legal requirements.

12. International Transfers of Personal Information

Ping Identity is a global family of companies, headquartered in the United States. If you reside outside the US, your personal information may be processed or stored in the United States or other countries which may not have equivalent privacy or data protection laws. However, regardless of where your personal information is transferred, we will protect it in accordance with this Privacy PolicyStatement and applicable law.

Where required, we use approved Standard Contractual Clauses and other approved data transfer mechanisms to assure that personal data is adequately protected. Please contact the Ping Identity Privacy Office at privacy@pingidentity.com if you would like more information about cross-border transfers or to obtain a copy of any applicable Standard Contractual Clauses.

13. Data Privacy Framework

Ping Identity complies with the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. Ping Identity has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Ping Identity has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policyPrivacy Statement and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework program, please visit https://www.dataprivacyframework.gov/s/. To view our Data Privacy Framework certification, please visit https://www.dataprivacyframework.gov/s/participant-search.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Ping Identity commits to cooperate and comply, respectively, with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

The United States Federal Trade Commission has jurisdiction over Ping Identity’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

Individuals have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding Data Privacy Framework compliance not resolved by any of the other DPF mechanisms. See the link to Annex I of the DPF Principles for additional information: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction

Ping Identity may have liability in the case of onward transfers to third parties.

If you have an inquiry or a complaint regarding our Data Privacy Framework compliance program, please contact us via email to privacy@pingidentity.com. We will respond within 45 days.

Ping Identity may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

14. Changes to this Privacy Statement

We may update this Privacy Statement from time to time. If we make material changes, we will provide notice as required by applicable law. The "Last Updated" date above indicates when this Privacy Statement was most recently revised.

15. Contact Us

If you have questions about this Privacy Statement or our privacy practices, please contact the Ping Identity Privacy Office at privacy@pingidentity.com.

To exercise your privacy rights, please visit Your Privacy Choices.

If you believe we have not handled your personal information in accordance with applicable law, we encourage you to contact us so that we may investigate and address your concerns. We will review all privacy-related inquiries and complaints and respond as appropriate.

Where required by applicable law, you also have the right to lodge a complaint with your local data protection authority or other applicable regulator.

Cookies and Online Technologies Statement

Last Updated: July 2026

When you visit our website or use our mobile applications, Ping Identity and our partners may automatically collect certain information, using technologies such as cookies, pixel tags, browser analysis tools, server logs and web beacons. For example, we use information we collect about all website users to optimize our websites and to understand website traffic patterns.

A “cookie” is a text file that websites send to a website visitor’s computer or device to uniquely identify the visitor’s web browser and to store information or settings in the browser. You can control cookies by changing your browser’s setting.

Our websites use four kinds of cookies:

Essential cookies, which are required for our website to operate properly and cannot be switched off in our systems. Some essential cookies are used to help ensure the security of our websites.
Functional cookies, which enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
Performance cookies, which allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies, we will not know when you have visited our site and will not be able to monitor its performance.
Targeting cookies, which may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

When you visit our websites, we will always place essential cookies. You have choices about functional, performance and targeting cookies. You can use our Cookie Settings in the footer of our website to control which of these cookies you wish to accept or to reject all non-necessary cookies.

Our websites use Pixel Tags. Pixel tags, also known as tracking pixels, web beacons or clear GIFs, are tools used to transmit information to our service providers’ or partners' servers. When you visit a website or open an email that contains a web beacon, that tool will instruct your browser to transmit information such as your IP address, device details, time of the activity, and nature of the activity (e.g., email read, web pages visited) to us. These tools allow us to measure response to our communications and to improve our websites. They also enable partners to compile information about your browsing activity on the websites for personalization and online targeted advertising.

Our websites may use other tracking methods. Our websites may use other types of tracking and analytics tools, such as behavioral analytics technologies. These tools allow us to recognize devices, even if you have rejected cookies, but they are only used for security and fraud detection purposes. For example, we use these tools to detect bots and other threats.

Our websites collect personal information using Server Logs. A server log is a text file that records activities on our web services. When you visit a website, we log the date and time of your visit, the device you use to access our website, your operating system type, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone where your device is located. Our server logs also record the IP address of the device you use to connect to the Internet. An IP address is a unique identifier that devices use to identify and communicate with each other on the Internet. We may also collect information about the website you were visiting before you came to Ping Identity and the website you visit after you leave our site. We use this information in aggregate, such as to analyze website traffic patterns and to better understand website user behavior generally. We also use the information for security purposes, to detect threats, and for fraud prevention. For example, we may block login attempts coming from countries where we do not do business. We do not sell or share the information collected by our logs, and we do not use this information for online targeted advertising.

Our websites use third party analytics services, such as Google Analytics. Analytics services help us understand how people use our websites. In some cases, these services are provided by companies that act as our processor in some contexts and as independent controller in others, depending on the applicable implementation.

To learn more and opt out of data collection through Google Analytics: https://support.google.com/analytics/answer/181881?hl=en.

Our websites integrate with Social Media Platforms. Our websites may enable you to interact with us and others via social media platforms, such as Facebook, Twitter, YouTube, LinkedIn and Instagram. We may also allow you to login to our websites using social media platform credentials. We may collect personal information about you and your friends if you choose to use these tools. If you engage with our content on or through a social media site, you may allow us to have access to certain information associated with your social media account (e.g., name, username, email address, profile picture).

Additionally, social media platforms collect persistent identifiers through your browser or mobile operating system, so they may collect information about your use of our websites. If you have previously provided personally identifiable information to these platforms, the platform operators may recognize you here. Your use of social network plugins is subject to each social media site’s privacy policy. For more information, please read the privacy policies posted by the social media platforms that you use.

We may also display interest-based ads to you when you are using social media platforms. These platforms allow us to personalize the ads that we display to you. We may convert your email address into a unique number which can be matched by the platform with its user to allow delivery of the advertising. You can opt-out of online targeted advertising by exercising Your Privacy Choices.

Customer Data Privacy Statement

Last Updated: July 2026

This Customer Data Privacy Statement applies to the personal information processed by Ping Identity in the course of providing identity and access management solutions to our customers (collectively, “Customer Data”).

Ping Identity generally processes Customer Data on behalf of and under the instructions of its customers as a data processor under applicable data protection laws and as a service provider or contractor under applicable U.S. privacy laws. Our customers are responsible for determining the purposes for which Customer Data is processed, providing applicable privacy notices to individuals, and responding to requests to exercise privacy rights relating to Customer Data. Ping Identity assists customers with these obligations as required by law and our agreements.

In limited circumstances, and where permitted by applicable law, Ping Identity may further process Customer Data, including to maintain the security, integrity, availability and reliability of our products and services, detect and prevent fraud, abuse and other malicious or illegal activity, comply with legal obligations, and establish, exercise or defend legal claims.

Subject to our agreements with customers and applicable law, Ping Identity may use and disclose Customer Data as necessary to:

Provide the products, services, support and other activities described in our customer agreements;
Maintain, troubleshoot, secure and improve the performance, reliability, quality and functionality of our products and services, including creating aggregated or de-identified information where permitted by our customer agreements and applicable law;
Detect, prevent, investigate and respond to security incidents, fraud, abuse, malicious, deceptive or illegal activity, and protect the security and integrity of our products, services, customers and users;
Comply with applicable laws, regulations and legal process, enforce our agreements, protect the rights, safety and property of Ping Identity, our customers and others, and support our corporate governance, audit, risk management and business continuity activities.

We do not sell or share Customer Data for cross-context behavioral advertising or use Customer Data for targeted marketing purposes. We do not use Customer Data to build marketing profiles about individuals or to deliver targeted advertising based on their use of our products or services. We may present generic or contextual content within our products and services that is not based on Customer Data.

We may disclose Customer Data to:

The applicable customer;
Our affiliates, who process Customer Data only for the purposes described in this statement and in accordance with applicable law;
Our subprocessors, service providers and contractors, who are contractually required to protect Customer Data and process it only on our behalf and for authorized purposes; and
Government authorities, regulators, courts or other third parties where required by law or legal process, or where necessary to protect our rights, users or services, including in accordance with our Government Agency Requests for Data Guidelines.

No mobile information, including text messaging originator opt-in data and consent, will be shared with third parties or affiliates for their marketing or promotional purposes.

If you have questions about your privacy rights relating to Customer Data, please contact the organization with which you have a direct relationship. If you believe Ping Identity has not handled your personal information appropriately, you may also contact the Ping Identity Privacy Office at privacy@pingidentity.com.

Supplemental Privacy Statements

You will find the following policies on our Supplemental Privacy Policy page: