ForgeRock Privacy Notice

Last updated Feb 15, 2022

This Privacy Notice explains how ForgeRock, Inc. collects, uses, and discloses your personal data when you register with us or use our applications, services, or portals. Collection, use, and disclosure of personal data is sometimes referred to as processing. This notice also explains your rights related to this data.

1 reader recommends this article

1. Personal data we use

Any data that could reasonably be used to identify you is personal data. We collect your personal data when you provide it to us and when you use the application, service, or portal. Your personal data includes your name, work address, wireline and/or mobile telephone number, email address, IP address, device identifying information, and employer’s name accessed through the application, service, or portal.

2. The data controller

ForgeRock, Inc.

201 Mission St, Suite 2900

San Francisco, CA 94105.

3. Contact email


4. ForgeRock’s reasons for processing your personal data

(a) Service Provision: if you use ForgeRock services, we shall use your personal data to (1) identify and authenticate users of Backstage; (2) provide support and account management, and improve the end user experience; (3) communicate with you with respect to the operation of Backstage; (4) protect ForgeRock’s systems and prevent criminal activities; (5) develop ForgeRock’s products; or (6) exercise our legal rights (whenever necessary).  Our legal basis for processing your data is to meet our legitimate business interests. We have put in place safeguards to ensure that your privacy is protected and that our legitimate interests do not override your interests or fundamental rights and freedoms;

(b) Marketing: if you provide your opted-in consent, we shall use your personal data to (1) contact you with marketing messages and offers relating to products and services offered by ForgeRock and our family of companies and (2) to personalize marketing messages we send you or make suggestions for other products and services. Our legal basis for processing your personal data is your consent to receive our advertising and content services.  You may withdraw your consent to receive these communications at any time by clicking on the unsubscribe link available at https://go.forgerock.com/Manage-My-Preferences.html

5. International transfer of your personal data

Your personal data will, in many instances, be processed outside of the EEA by ForgeRock or the approved third party suppliers, operating in: (1) IT hardware and software services; (2) cloud services; (3) corporate and technical education services (4) advertising & marketing; and (5) administration and field services. ForgeRock has sufficient safeguards in place in accordance with applicable law to ensure that your personal data will, at all times and in all locations, be adequately protected to the standards required by applicable EEA Data Protection laws.  The mechanisms employed to provide such protection will be the EU Standard Contractual Clauses.

6. When we share your personal data

We may share your personal data among the ForgeRock family of companies, with our approved third party suppliers (as described above), and as set forth in  https://www.forgerock.com/privacy-policy.

7. Personal data retention period

We will keep your personal data for as long as we have a relationship with you. Once our relationship with you has come to an end, we will retain your personal data for a period of time that enables us to: (1) maintain business records for analysis and/or audit purposes; (2) comply with record retention requirements under the law; (3) defend or bring any existing or potential legal claims; and (4) deal with any complaints regarding the services. We will delete your personal data when it is no longer required for these purposes. If there is any personal data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of that data. Please contact privacyrequests@forgerock.com if you would like additional information about data retention.

8. Right to object

In certain circumstances, you may object to ForgeRock’s use of your personal data by contacting us via privacyrequests@forgerock.com.

9. Additional rights

You may access your personal data or request that ForgeRock erase or restrict the processing of your personal data by contacting us via privacy@forgerock.com.  You also have the right to complain to your data protection regulator.  For more information about your rights, please review https://www.forgerock.com/privacy-policy.

Copyright and Trademarks Copyright © 2022 ForgeRock, all rights reserved.