H2O.ai Privacy Policy
H2O.ai Privacy Policy (Updated October 23, 2025)
1. Introduction and Scope
H2O.ai, Inc. (“H2O”, “we”, “our”, or “us”) values your privacy and takes the protection of personal information seriously. This Privacy Policy explains how we collect, use, store, and share personal information when you use the H2O.ai platforms or services, including SaaS-based offerings, websites, and related services (collectively, the “Services”).
By accessing or using our Services, you acknowledge that your personal information will be handled as described in this Privacy Policy and in accordance with applicable laws. Except where explicitly stated, we do not rely on consent as the sole legal basis for processing.
Customer-provided input data, metadata, and model data are not used to train H2O.ai AI models, unless explicitly agreed in writing. Such data is processed solely to provide the requested Services.
This Privacy Policy applies globally, with additional information for residents of California, the EU/EEA/Switzerland, Brazil, Canada, Singapore, Australia, and other jurisdictions where applicable data protection laws provide specific rights.
If you have a disability, you may request an alternative format of this Privacy Policy by contacting privacy@h2o.ai.
2. What Does This Privacy Policy Cover?
This Privacy Policy covers H2O’s treatment of personally identifiable information (“Personal Information”) collected when you use our Services, participate in H2O events, or engage with our marketing activities. “Personal Information” refers to information that identifies or relates to a particular individual, and includes “personal data” under applicable laws.
This Policy does not cover models or information collected by third parties outside our control. This Policy does not apply to content that we process on behalf of our customers of our business offerings, such as our API. Any such use of that data is governed by agreements covering access and use of those offerings.
3. What Personal Information Does H2O Collect?
3.1 Information You Provide to Us
We collect information you provide when you:
● Subscribe to, purchase, or use Services;
● Create or manage H2O accounts;
● Register for or attend events, or communicate with us via phone, email, or otherwise;
● Submit support tickets, feedback, questionnaires, or other requests;
● Utilize notification services
● Participate in community features or post on H2O websites.
Types of information you may provide include:
● Name, email, address, phone, and other contact details;
● Payment information, including credit card and bank account information;
● Location information;
● Organization and colleagues’ contact information;
● Usernames, aliases, roles, and other authentication or security credentials;
● Feedback, testimonials, inquiries, support tickets, phone/chat/video sessions, email, and other communications with H2O;
● Image, video, 3D, or voice data from events or use of Services;
● Information regarding identity, including Government-issued ID information.
H2O does not require or intentionally collect special categories of personal data (health, biometric, political, etc.) unless required by law.
3.2 Automatic Information
We automatically collect certain data when you interact with H2O Services, including:
● Network and connection information (IP address, ISP);
● Device, application, browser type/version, operating system, time zone;
● Device location;
● Authentication/security credentials;
● Interaction and service metrics (downloads, streams, API calls, backup information, errors, and other logs);
● Clickstream and page interaction data (scrolls, clicks, downloads).
In addition to the information you provide, we automatically collect telemetry, logs, and metrics to maintain, secure, and improve our Services. These may be processed outside the region you selected for customer data storage, but are handled separately from customer input data.
3.3 Information from Other Sources
We may collect data from partners, service providers, or public sources, such as:
● Marketing, sales, and recruitment information;
● Purchase, subscription, or support interactions;
● Search results and links, including paid listings (such as sponsored links);
● Credit history and publicly available professional information.
H2O collects this information where permitted by applicable law and for purposes described in this Policy.
4. Cookies and Tracking
We use cookies, pixels, and similar technologies to:
● Recognize devices and user preferences;
● Improve services and security;
● Conduct research and diagnostics;
● Deliver personalized content and interest-based advertising.
Cookies may persist for up to 365 days. You can manage cookie preferences via our Cookie Preferences page. Third-party advertising and analytics providers may also collect anonymized or aggregated data via cookies or web beacons.
5. Commercial and Business Purposes for Collecting Personal Information
H2O collects Personal Information for purposes including:
● Providing, customizing, and improving the Services;
● Managing user accounts and profiles;
● Processing orders and billing;
● Marketing and advertising Services;
● Communicating with users;
● Improving the Services, including testing, research, internal analytics, and product development;
● Fraud prevention, security, and debugging;
● Legal compliance, enforcement of agreements, and dispute resolution.
We do not collect or use Personal Information for materially unrelated purposes without providing notice.
6. How H2O Uses and Shares Personal Information
6.1 Service Providers
We share Personal Information with third-party service providers to assist with:
● Hosting, technology, and communications;
● Security and fraud prevention;
● Customer support;
● Product fulfillment and delivery.
6.2 Advertising and Analytics Partners
● Advertising partners may use aggregated or anonymized data to provide targeted marketing.
● Analytics partners provide insights into web traffic, usage, and Service interaction.
6.3 Business Partners and Authorized Parties
● H2O may share Personal Information with joint promotion partners, social media services, or other users authorized by you.
6.4 Business Transfers
In mergers, acquisitions, or similar transactions, Personal Information may be transferred to a third party, with efforts to notify affected individuals.
6.5 Legal Obligations
We may share Personal Information to meet legal obligations, enforce agreements, or protect rights, property, or safety.
6.6 Data Not Considered Personal Information
Aggregated, de-identified, or anonymized data may be used or shared for analytics and Service improvement, provided individuals are not identifiable.
6.7 AI Services
H2O does not use Customer Content to train or improve our AI models except for the customer itself. Our Company may also use third-party AI services (such as large language models) to support and improve our operations. We do not, however, control or have access to the training date or model parameters of those systems, and we cannot directly access, identify, or remove information that may be embedded within them. Requests regarding such data should be directed to the provider of the relevant AI service.
7. Retention of Personal Information
Customer data is deleted upon termination of the customer environment unless otherwise agreed. Logs are retained for up to three (3) years. Telemetry, metrics, and diagnostic data may be retained indefinitely for security, operational, and reliability purposes, unless deletion is requested and feasible (subject to technical limitations and legal obligations).
8. Children’s Personal Information
We do not knowingly collect information from children under applicable age thresholds in your jurisdiction. We target enterprise clients, not children. If we discover such information, it will be deleted promptly. If you become aware that a child under the applicable age has provided any personal information to us while using our Services, please email us at privacy@h2o.ai, and we will investigate the matter.
9. Subprocessors
H2O uses subprocessors to support delivery of Services. A current list is published at http://trust.h2o.ai/ and updated periodically.
10. Information Security
H2O implements technical and organizational safeguards, including encryption, role-based access controls, monitoring, and audits. H2O maintains SOC 2 Type II certification and is pursuing ISO 27001. Data breaches posing risks are reported in accordance with applicable law. Despite these efforts, no transmission is ever fully secure or error free and you should, therefore, take special care in determining what information you provide the Services. In addition, H2O is not responsible for circumvention of any privacy settings or security measures contained on the Services or third-party websites.
11. Privacy Information for Specific Jurisdictions
Depending on where you live and subject to applicable exceptions, you may have the following rights in respect of Personal Information:
● The right to know information about our processing of your Personal Information, including the right to access your Personal Information, often in a portable format;
● The right to request deletion of your Personal Information;
● The right to correct your Personal Information; and
● The Right to be free from discrimination relating to the exercise of any of your privacy rights.
11.1 California Residents (CCPA/CPRA)
● Rights to access, deletion, and non-sale of Personal Information.
● We do not sell or share personal information, including for cross-context behavioral advertising.
● Methods to exercise rights: email privacy@h2o.ai.
11.2 Nevada Residents
● Right to opt out of sales of certain Personal Information, email privacy@h2o.ai. H2O does not sell Personal Information.
11.3 EU/EEA/Switzerland Residents (GDPR)
● H2O is the controller for personal data collected in these jurisdictions.
● Lawful bases: contract, legal obligation, legitimate interest, consent (where required).
● Rights: access, rectification, erasure, portability, objection, restriction, withdrawal of consent.
● Complaints may be filed with local supervisory authorities.
11.4 Global Privacy Rights
● Residents of Brazil, Canada, Singapore, India, and Middle East jurisdictions may have rights to access, correct, delete, or port personal data, and to object or restrict processing. These rights may vary by jurisdiction and are subject to local legal requirements.
11.5 Exercising Your Rights.
You can exercise your privacy rights by submitting a request through privacy@h2o.ai.
11.6 Verification.
In order to protect your Personal Information from unauthorized access, change, or deletion, we may require you to verify your identity before you can submit a request to know, correct, or delete Personal Information. If you do not have an account with us, or if we suspect fraudulent activity, we may ask you to provide additional Personal Information for verification. If we cannot verify your identity, we will not be able to honor your request.
11.7 Authorized Agents.
You may also submit requests through an authorized agent, but if you do so, the agent must present written authorization to act on your behalf, and you may also be required to independently verify your identity.
12. Transfers of Personal Data
● Personal data is primarily processed in the U.S., but customers can select data residency options where available.
● International transfers rely on Standard Contractual Clauses, EU-U.S. Data Privacy Framework, UK Addendum, or Swiss Addendum.
● By using the Services, you authorize transfer, storage, and processing of your information in the U.S. and other countries as necessary.
13. Conditions of Use
Privacy disputes are subject to this Policy, our Terms of Service, and any written agreement between you and H2O, including applicable limitations, arbitration, and California law.
14. Marketing Communications
● You may unsubscribe from marketing emails by clicking “Unsubscribe” or emailing privacy@h2o.ai.
15. Changes to this Privacy Policy
H2O may update this Policy from time to time. The version in effect at the time of data collection governs. Material changes will be posted at https://h2o.ai/privacy/.
16. Questions or Concerns
Contact us at privacy@h2o.ai with questions, concerns, or to exercise your rights. However, H2O may decline to act on automated, bulk, or unverifiable privacy requests submitted by third-party entities without sufficient proof of authorization or identity verification. H2O will make every effort to address inquiries promptly.