The California Consumer Privacy Act (CCPA) establishes and enhances consumer privacy rights for California residents and imposes rules on businesses that handle their personal information.
The implementation date for the California Consumer Privacy Act (CCPA) was January 1, 2020. The CCPA establishes certain rights which California residents will have in regards to their personal information. This includes the right to:
Raygun provides tools and services that help software developers make better software. As a Raygun customer, your data will be treated in accordance with the CCPA legislation. Having reviewed the CCPA, Raygun is prepared, as a service provider, to both assist our customers fulfill their obligations under the CCPA and to respond to California residents that exercise their rights.
We encourage you to manage your information, and to make use of the privacy controls we have included in our tools and services. You will not be discriminated against for exercising any of your privacy rights under the CCPA.
Frequently Asked Questions
Does Raygun comply with CCPA (California Consumer Privacy Act) with regards to the data of Raygun customers?
Yes.
What is a “service provider” under the CCPA?
A “service provider” under the CCPA is any for-profit entity that processes a consumer’s personal information on behalf of another business, which discloses the personal information for a business purpose. To be a service provider, the entity must also receive the personal information under a written contract that limits the service provider’s processing to purposes specified in the contract or otherwise permitted by the CCPA. Raygun is considered a "service provider" as defined in the CCPA. As a "service provider," we only use customer data and personal information as permitted in our customer agreements.
Where is the Raygun data stored geographically? Under which jurisdiction?
All Raygun data is stored in the US-EAST-1 region of the AWS Datacenter.
Does Raygun collect any Personal Information from customer’s applications about their users, and what kind of data?
Raygun provides the ability to control the data you send to us from your applications. All Raygun providers offer the ability to exclude specific and sensitive information before being sent for us to process. Some Raygun features allow you to send IP address information, email addresses, usernames, and other custom data to assist with issue diagnosis. Raygun does not collect this information by default. You are in full control of the data you send to us.
How long is the data retained for?
Data will remain in your Raygun account until your data retention period expires for that data, or you manually choose to delete this information from your account settings.
How can I opt-out of sending Personal Information data to Raygun?
You can opt out of sending Personal Information related data to your application from your Application Settings page. You can navigate to this page by clicking on Application settings in the sidebar of your Raygun app.
The User Information section allows you to:
- Disable IP address storage
- Disable geolocation lookups
- Disable fetching extra details for affected users
How do I prevent sensitive data from being sent into Raygun?
You are in complete control of the data you choose to send to Raygun. Should error and session details contain data you do not wish to be processed, Raygun allows you to remove sensitive information on the client side before the data is sent to us. For more information on how to accomplish this, please see
this article.
How can I handle user data deletion requests inside Raygun?
To help you with compliance, Raygun exposes the controls that allow you to:
- Find a user’s data
- Export the user’s data
- Delete the user’s data
You do not need to rely on a Raygun team member to do this for you. It’s all built right into the Raygun app.
How can I handle user data deletion requests inside Raygun?
If you have any issues, please
contact us and we’ll be glad to help.
How can I delete a single error instance?In some situations, you may want to delete an error instance (not just a group). To do this, open the error group which contains the error instance you need to delete. Raygun will give you a list of instances to delete.
Deleting error instances cannot be undone and won’t affect your data quota.How long does it take to ensure the data is deleted?
Raygun stores a lot of data for customers. A single customer could easily account for hundreds of gigabytes of data. Due to this, deletes can take some time to process. When a delete is triggered, a background process starts removing the data associated with that user. It can take time, but you should be thinking in minutes or hours, not days or weeks.
How do I know that when a deletion action is taken, data is definitely not kept inside Raygun?
All activity in Raygun is audited. So in the
audit log you’ll be able to see that a deletion was made. As CCPA is partly about the right to be forgotten, we do not audit log ‘who’ was deleted, but the user who requested that a deletion occur.
Further information
If you have additional concerns or questions about CCPA compliance
contact us.