Privacy

Effecive as of July 23, 2025

Statsig, Inc. (“Statsig,” or “we”) is an experimentation platform that helps customers build products through tools such as feature flags, experiments, and analytics. This privacy policy (“Privacy Policy”) explains how Statsig collects, uses, discloses, and otherwise processes Personal Data from our websites, social media pages, marketing or sales communications, the evaluation or purchase of Statsig products and services, the implementation and use of Statsig products and services, online or offline interactions, and other means offered and controlled by us (collectively, the “Statsig Services”). “Personal Data” means any information that identifies, relates to, describes, or is capable of being associated with, or could reasonably be linked, directly or indirectly, with you.

This Privacy Policy does not apply to any information Statsig processes as a data processor or service provider on behalf of its customers. In those circumstances, Statsig’s customers are responsible for the collection and use of your data. You should refer to that customer’s privacy notice and direct any inquiries to them.

COLLECTION

We collect Personal Data from you directly, through automated means, and from third parties as follows.

Information You Provide to Us

• Account Information – We collect information about you when you create an account with us. The data collected may include your name, email address, company name, postal address, phone number, and payment information.
• Support Information – We collection information you provide to us when you open a support request or otherwise communicate with us. The data collected may include your name, email address, title, company, and other information you provide in your request.
• Sales and Marketing Information – We collection information you provide for promotional communications, including when you submit forms on our websites, register for an event, or request a demo. The data collected may include your name, email address, title, company name, and phone number.
• Information We Collect Automatically Based on Use of Statsig Services – We collect information related to your use of the Statsig Services. The data collected may include your IP address, device and browser information, location, session date, time, duration, the pages you viewed, data obtained from APIs, and log files generated during your usage of the Statsig Services.
• Cookies and Similar Technologies – We use cookies and similar technologies (such as web beacons and pixels) to collect information about your interactions with the Statsig Services. The data collected may include identifiers, IP address, device and browser information, usage data, session information, links clicked, and pages visited. For more information about how we use cookies and similar technologies, please see the Cookies section.

Information We Collect From Third Parties

• Other Services Linked to Your Account – We may collect information about you when you link your Statsig account to other services. The data collected may include profile information and credentials via single sign-on or third-party API services.
• Service Providers – We may use third-party service providers in the operation of our business. The data collected from such third-party service providers may include name, email address, company name, title, postal address, and phone number.
• Advertising Partners – We receive information about you from marketing or promotional service providers. The data collected may include name, location, email address, company name, title, postal address, phone number, and employment information.

USAGE

We use Personal Data that we collect about you or that you provide to us for the following purposes:

• To provide the Statsig Services, including to maintain your account, process transactions with you, send service notices and security alerts, respond to your questions and inquiries, and provide customer support and technical assistance.
• To improve and create new Statsig Services, including to monitor and analyze trends and usage, and research and development.
• To maintain and increase security of Statsig Services and business operations, including to combat fraud, spam, malware and/or information security risks, detect bugs, report errors, and perform activities to maintain the quality or safety of Statsig Services.
• To market and promote the Statsig Services, including to show you advertisements, enhance and personalize your experience, send marketing and sales communications, communicate with you about our events, webinars, conferences, and demos, and facilitate contests and promotional events.
• To comply with legal and regulatory obligations, including to administer and perform our contracts, and for tax and accounting purposes.

DISCLOSURE

We may disclose the information we collect as follows:

• Service Providers – We may share certain information to service providers who perform services on our behalf, including for services such as data storage, analytics, billing, marketing, product content and features, customer service, data storage, security, fraud prevention, professional services, and legal services.
• Payment Processors – We use third-party payment processors to receive and process payments in relation to the use of Statsig Services. These payment processors act as an independent controller of the Personal Data received when providing these services.
• Marketing and Analytics – We may share certain information with analytics and search-engine providers that assist us in the improvement and optimization of our websites.
• Legal Obligations – We may share certain information if necessary or appropriate to comply with any law enforcement, legal, or regulatory process, including to comply with a subpoena, warrant, or court order and to defend our legal rights.
• Security – We may share certain information if we believe in good faith such disclosure is necessary to enforce our agreements and policies, including for billing and collection purposes, to protect the security or integrity of Statsig Services, and to protect the rights or personal safety of Statsig employees and representatives.
• Business Transfers – We may share certain information in connection with or during negotiations or closing of any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Consent – We may share your information upon your consent to do so.

COOKIES

Cookies are small text files sent to your browser from a web server and stored on your device. A cookie contains a unique number, which is used to recognize your computer or mobile device when you access the Statsig website. Web beacons, also referred to as pixel tags, are small graphic images contained on websites or emails that allow us to track number of website visitors, number of emails opened, and other related statistics.

Statsig uses both first-party and third-party cookies, web beacons, and other tracking technologies for various purposes, including to personalize and enhance the experience of our website visitors, collect usage statistics and patterns, display information more effectively, and better understand how the Statsig Services are used. First-party cookies and web beacons are cookies and web beacons that are served directly by Statsig to your device. Third-party cookies and web beacons are served by a third-party service provider on behalf of Statsig. We may combine this with other information we collect about you for various purposes, including to improve our websites, understanding campaign effectiveness, tailoring communications, and for other business purposes.

If you do not want us to collect cookies on our website, you may configure your browser settings so that cookies from websites cannot be placed on your device. If you do so, please note that certain parts of our website may become unavailable or may not function properly.

Through the Digital Advertising Alliance and Network Advertising Initiative, several media and marketing associations have developed industry self-regulatory programs to give consumers a better understanding of and control over ads that are customized based on a consumer’s online behavior across different websites and properties. To make choices about internet-based ads from participating third parties, including to opt-out of receiving behaviorally targeted advertising, please visit the Network Advertising Initiative’s or Digital Advertising Alliance’s opt-out pages located at https://optout.networkadvertising.org/?c=1 and https://youradchoices.com.

SECURITY

The security of your Personal Data is important to us. We have implemented and will continually maintain a variety of technical and organizational measures to protect your Personal Data from unauthorized access and against unlawful processing, accidental loss, destruction, and damage. However, no Internet is ever fully secure or error free, and thus we do not promise and cannot guarantee the security of your Personal Data or communications.

You are responsible for maintaining the confidentiality of your password and other information used by you to access the Statsig Services. While Statsig has implemented a variety of measures to protect your Personal Data, any transmission of your Personal Data is done at your own risk and Statis does not promise and cannot guarantee the security of your Personal Data or communications.

RETENTION

We will retain and use your Personal Data as necessary for the purpose for which it was collected, to comply with our business requirements and legal obligations, resolve disputes, protect our assets, and enforce our agreements. We will take reasonable steps to delete your information if you request deletion of your information.

CHILDREN

The Statsig Services are not directed to individuals under the age of 18, and we do not knowingly collect the Personal Data of individuals under the age of 18. If you believe we may have collected Personal Data from someone under the applicable age of consent in your jurisdiction without proper consent, please let us know using the contact methods described below.

RIGHTS

You have certain rights and choices with respect to your Personal Data, including:

• Account Information – Our customers may access, update, or change information they have provided to us by logging into their Statsig account or emailing us at support@statsig.com, subject to the terms of any agreement with us. We may retain certain Personal Data as necessary to comply with our legal obligations or for legitimate business purposes, such as to resolve disputes or enforce our agreements.

• Marketing Communications – You may opt out of receiving promotional emails from Statsig by following the instructions in those emails or via the contact section in this Privacy Policy. If you opt-out of receiving promotional communications, we may still send you non-promotional communications, such as those about your account or our ongoing business relationship.

Depending on where you live, you may have the following rights under applicable data protection laws:

• Right to access – You may request access to the Personal Data we hold about you.
• Right to deletion – You may request deletion of your Personal Data, subject to certain exceptions.
• Right to correction – You may request correction of your Personal Data.
• Right to data portability – You may request a copy of your Personal Data in a portable format.
• Right to opt out – You may opt out of the sale or sharing of your Personal data, targeted advertising and profiling.
• Right to limit use/disclosure of sensitive personal data – Statsig does not use sensitive Personal Data for a purpose other than the purpose for which it was originally collected or subsequently authorized by you unless Statsig has received your affirmative and explicit consent. Where required by law, you may limit our use and disclosure of your sensitive Personal Data.
• Right to appeal – If we deny your request, you may appeal our decision via the contact methods described below.

If Personal Data covered by this Privacy Policy is to be used for a new purpose that is materially different from that for which the Personal Data was originally collected or subsequently authorized, or is disclosed to a non-agent third party in a manner not specified in this Privacy Policy, Statsig will provide you with an opportunity to choose whether to have your Personal Data so used or disclosed. Requests to opt out of such uses or disclosures should be sent to us using the contact methods described below.

To exercise your rights under applicable data protection laws, please contact us using the contact methods described below. Before we fulfill a request, we will need to verify that the information you submit matches the information in our records. We will use commercially reasonable efforts to comply with your requests. In certain circumstances, we may not be able to fulfill your request if we believe such requests would violate a law or legal requirement or cause the information to be incorrect. In addition, we may need to retain certain information for recordkeeping purposes, legal purposes, or to complete any transactions that you began prior to your request. We will not discriminate against you if you exercise your rights under applicable law.

TRANSFERS

By interacting or using the Statsig Services or otherwise providing information to Statsig, you understand that your Personal Data may be transferred to or otherwise processed in a country other than the one you are in, including the United States, which may have data protection rules that are different than those in your country. To ensure your Personal Data receives an adequate level of protection and security, Statsig has implemented appropriate safeguards for cross-border transfers of Personal Data as may be required by applicable data protection laws. These safeguards may include the European Commission-approved standard contractual clauses to the extent required by applicable law.

Statsig complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. Statsig has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Statsig has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit Data privacy framework website.

If we transfer your Personal Data to a third party acting as an agent on our behalf, we will remain liable under the DPF Principles if such third-party agent processes such Personal Data in a manner inconsistent with the DPF Principles, unless we can prove we are not responsible for the event giving rise to the damage.

The Federal Trade Commission has jurisdiction over Statsig’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

DISPUTES

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Statsig commits to resolve DPF Principles-related complaints about our collection and use of your Personal Data. EU, UK, and Swiss individuals with inquiries or complaints regarding Statsig’s handling of Personal Data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Statsig privacy at privacy@statsig.com.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Statsig commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

For DPF disputes that cannot be resolved via the methods above, you may have the ability to invoke binding arbitration as more fully outlined in the Data privacy framework website. We are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.

CALIFORNIA

If you are a California resident, you have the rights set forth in this section. Statsig does not sell Personal Data as we understand “sell” to be defined by the CCPA. We may share Personal Data as we understand “share” to be defined by CCPA.

In the preceding 12 months, the categories of Personal Data we collect from you and the categories of third-party recipients to whom we disclose such Personal Data for business purposes are set forth below. For additional information on the Personal Data we collect, use, and disclose, please see the Collection, Usage, and Disclosure sections above.

| Categories of Personal Data We Collect | Categories of Third-Party Recipients to Whom We Disclose Personal Data for Business Purposes | | Identifiers, including names, email addresses, postal address, phone numbers, cookies, and professional and employment-related data | Service providers; third parties | | Internet and electronic network activity information, including IP address and device information | Service providers | | Geolocation information | Service providers | Commercial information, including account records, payment information, and transaction data | Service providers; third parties |

CONTACT

If you have any questions or concerns regarding this Privacy Policy, please contact us via email at privacy@statsig.com.

CHANGES

We may modify this Privacy Policy at any time and will post any changes we make to this Privacy Policy on this page. You can determine when this Privacy Policy was last revised by referring to the last updated date at the top of this Privacy Policy.