Privacy Shield Statement

MongoDB, Inc., ObjectLabs, Inc. and TightDB, Inc. and their affiliates and subsidiaries (“MongoDB”, “we”, “our” or “us”) have self-certified with the EU-US and Swiss-US Privacy Shield Frameworks as set forth by the US Department of Commerce regarding the transfer of personal data from the European Union and Switzerland to the United States as further described in our certification on the Privacy Shield website at https://www.privacyshield.gov . For convenience, we have described generally the scope of that certification below.

Scope.

MongoDB provides database solutions and associated services to businesses all over the world, acting as a data processor on behalf of those businesses. MongoDB’s Privacy Shield certification applies to the personal data that these businesses transfer to us from the European Union and Switzerland for the provision of our services, except where any of our agreements with those businesses stipulate a different adequacy mechanism recognized by the EU commission (e.g. standard contractual clauses). MongoDB will comply with the Privacy Shield Principles agreed to by the U.S. Department of Commerce and the European Commission in respect of such personal data. The personal data types that our customers put into our services is at their discretion (subject to any limitations in our contracts) and we only process it in accordance with their instructions (as set forth in those contracts, including the applicable Data Processing Addendum, the current version of which is available at https://www.mongodb.com/legal/dpa). To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov.

Third Party Sub-processors.

MongoDB uses third party sub-processors to help us provide our services and those sub-processors may process personal data. MongoDB remains responsible and liable under the Privacy Shield Principles for our third party sub-processors as set forth in the Privacy Shield Principles.

Inquiries, Complaints and your Rights.

If you have any questions about this Privacy Shield Statement or wish to make a complaint, we encourage you to contact us at privacy@mongodb.com. For any complaints that cannot be resolved with MongoDB directly, MongoDB has chosen to cooperate, for the purposes of the EU-US and Swiss-US Privacy Shield Frameworks, with the JAMS Privacy Shield Program. Information on how to contact JAMS is available at https://www.jamsadr.com/eu-us-privacy-shield. Under certain conditions, as further explained in the Privacy Shield Principles, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. MongoDB is subject to the investigatory and enforcement powers of the US Federal Trade Commission (FTC).