Nutanix Biometrics Data Privacy Notice


Last Updated: October 7, 2025

Purpose of this Notice

This Biometrics Data Privacy Notice (“Notice”) describes the types of Biometric Data the Nutanix group of companies which includes Nutanix, Inc., Nutanix Netherlands, B.V., and our subsidiaries and affiliates, (collectively, “Nutanix”, “we,” “our,” or “us”) collect when you:

  • visit, interact with or use any of our websites, including the website at www.nutanix.com, social media pages, public forums (such as our blogs), mobile apps, online advertisements, marketing, or sales communications that link to this Privacy Statement (collectively, our “Sites”);
  • visit or attend any of our offices or events, or interact with or use our sales, marketing, and other offline activities (collectively, our “Offline Activities”); and
  • purchase or use certain services provided by us which link to this Privacy Statement where Nutanix is acting as a controller or business (as applicable) (collectively, including the Sites and Offline Activities, our “Offerings”). 

For clarity, this Notice applies to Biometric Data collected and processed by Nutanix acting as a data controller or business (as those terms are defined under applicable privacy laws) for the purposes and legal bases set forth below. This Notice does not apply to: (i)  Biometric Data submitted for processing by customers utilizing Nutanix products or services and processed by us as service provider or processor on their behalf ("Customer Data"), which is subject to our customer agreements and the customer’s respective privacy practices; and (ii) websites, products, or services that display or link to different privacy statements or that are operated by companies other than Nutanix, or to business activities or practices of third parties.

Nutanix is committed to protecting your privacy and your Biometric Data in accordance with all applicable laws including, but not limited to, the General Data Protection Regulation (EU) 2016/679 (the “GDPR”), the Illinois Biometric Information Privacy Act (“BIPA”),  California Consumer Privacy Act (“CCPA”), Texas Capture or Use of Biometric Identifiers or Biometric Information Act (“Texas CUBI”), Washington’s Privacy Act, other United States Federal, State or local legislation or ordinances (collectively, the “U.S. Laws”) and  other applicable worldwide laws (collectively, and together with the GDPR, BIPA, the U.S. Laws, “Laws”).

This Notice explains what Biometric Data we collect when you interact with Nutanix’s Offerings, why we collect it, how we use it, our safeguards, and your rights regarding your Biometric Data. If any provision of this Notice is inconsistent with applicable Law, this Notice will be interpreted to comply with such applicable Law.

1. What is Biometric Data? 

As used in this Notice, Biometric Data means personal information about an individual’s physical or human characteristics that can be used to identify that person and include “biometric identifiers” and “biometric information” as defined below. 

Biometric identifier” means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Biometric identifiers do not include writing samples, written signatures, photographs, human biological samples used for valid scientific testing or screening, demographic data, tattoo descriptions, or physical descriptions such as height, weight, hair color, or eye color.

Biometric information” means any information, regardless of how it is captured, converted, stored, or shared, based on an individual’s biometric identifier used to identify an individual. Biometric information does not include information derived from items or procedures excluded under the definition of biometric identifiers.

2. Biometric Data We Collect

Nutanix may collect or process the following types of Biometric Data-specifically voice data- during your interactions with Nutanix and our Offerings:

  • Audio of your voice, including recordings, when you explicitly use any voice-enabled features of our Offerings (e.g. voice-enabled chat assistance, our enterprise telecommunications services, microphone input).
  • Transcripts of your voice and resulting vocal patterns resulting from the audio or recordings when using voice-enabled features or Offerings.
  • Nutanix may process and match an individual’s voiceprint with other identifying data captured at the point of collection or use of the services or Offerings (e.g., name, phone number, email address, company name, job title, etc.) from the individual which is used to associate the individual with a customer or prospective customer profile.

3. Purpose for Collection of Biometric Data

Nutanix (and its service providers) collect and use Biometric Data, including voice data, for the following specific internal purposes:

  • To operate or provide the service to you: To process your voice requests, understand your commands, and provide relevant responses as part of the service or Offerings. 
  • For quality assurance: To ensure the accuracy and quality of the service. 
  • To improve and personalize the service: We may use samples of Biometric Data for quality control purposes, including to enhance the overall performance of and personalize our services or Offerings to you. 
  • For marketing purposes: We may create a profile based on products, services, or other Offerings of interest to You to market or sell our products to you.

Nutanix does not sell, lease, or otherwise disclose your Biometric Data.

4. Consent

By using, participating in, or accessing our services or Offerings, including any voice chat assistant or enterprise telecommunications service, you acknowledge that you are accepting and consenting to the collection and use of your Biometric Data as described in this Notice. Please read this Notice in conjunction with our Nutanix Privacy Statement, as this Notice is incorporated therein by reference. If you choose not to consent to our collection of Biometric Data, then please notify us at privacy@nutanix.com or utilize one of the methods in the Contact Us section below.

5. How We Use and Share Your Biometric Data

Nutanix may use your Biometric Data, including your voice data, solely to provide, improve,  and personalize the services and Offerings to you, and market our Offerings that may be of interest to you. Your Biometric Data is not shared with third parties, except for our service providers who are authorized to provide the Offerings to you and who are bound by written confidentiality and data protection obligations.  Nutanix may use transcript data or metadata in an anonymized and aggregated form for analytics. 

6. How Long We Keep Your Biometric Data

We retain your Biometric Data only as long as necessary to fulfill the purposes for which it was collected, or as required by law, unless you withdraw your consent for Nutanix to store the data. After this period, Nutanix will delete Biometric Data. You may withdraw your consent and ask for your Biometric Data to be deleted by sending a request to privacy@nutanix.com.

With respect to voice recordings specifically, Nutanix will store voice recordings only after you have provided explicit consent (whether oral, written, or electronic). With our AI chat assistant, voice recordings are not stored, but transcripts of the voice recording may be stored for up to 12 months.

7. Your Rights and Choices

The rights you have with respect to your Biometric Data are described below and in the “Your Privacy Rights and Choices” section of the Nutanix Privacy Statement. Specific residents have the following rights as described below:

  • 7.1. European Union, United Kingdom, and Switzerland Residents

    If you reside in the EU, you have:

    • Right of Access: Request a copy of any personal data we hold about you (including Biometric Data).
    • Right to Rectification: Request correction of inaccurate or incomplete data.
    • Right to Erasure (“Right to Be Forgotten”): Request deletion of personal data (including Biometric Data) when no longer necessary or if you withdraw consent.
    • Right to Restrict Processing: Temporarily halt processing under certain circumstances (e.g., accuracy contested).
    • Right to Data Portability: Receive your Biometric Data in a structured, machine-readable format.
    • Right to Object: Object to our processing of your Biometric Data for direct marketing or legitimate interest.
    • Right to Withdraw Consent: Withdraw any previously granted consent (e.g., for voice recordings).

    To exercise any of these rights, please submit a Privacy Rights Request here or email privacy@nutanix.com. We will verify your identity (e.g., email verification) and respond within 30 days (or with notice, an extension if required)

  • 7.2. California Residents

    If you reside in California, you may request:

    • Know What We Collect: Request disclosure of categories of personal information or Biometric Data we have collected, used, or disclosed in the past 12 months.
    • Request Deletion: Ask us to delete your personal information or Biometric Data, subject to certain exceptions (e.g., completing a transaction, detecting security incidents).
    • Opt Out of Sale of Data: Although we do not “sell” Biometric Data as defined by the CCPA, you can request a “Do Not Sell My Personal Information” if you believe we are sharing for cross-context advertising or similar.
    • Non-Discrimination: We will not discriminate against you for exercising any CCPA rights (e.g., by lowering service quality or charging different prices).

    To exercise any of these rights, submit a request via privacy@nutanix.com or our “Do Not Sell or Share My Personal Information” web form. We will verify your identity (e.g., email verification) and respond within 45 days (with another 45 days’ extension with notice, if required).

  • 7.3. Illinois, Texas, and Washington Residents

    If you reside in Illinois, Texas, Washington, or U.S. states with other similar laws applicable to the processing of Biometric Data, you may request:

    • Right to Informed Written Consent: We will obtain your consent before collecting any Biometric Data.
    • Right to Disclosure: You may request a description of what Biometric Data we have collected, how it is used and stored, and any third parties with whom it is shared.
    • Right to Receive Copies: You may request a copy of any Biometric Data we hold about you.
    • Right to Deletion: You may request that we delete any or all Biometric Data if no longer needed for the purpose it was collected.
    • Right to Sue for Violations (Illinois only): If Nutanix violates BIPA’s provisions (e.g., no proper consent, failure to delete), you may have the right to statutory damages in state court.

    To exercise these rights, email  privacy@nutanix.com with the subject “Biometric Data Request” and specify which right you wish to exercise. We will comply within 30 days, or sooner if required by applicable state law.

  • 7.4. Withdrawing Consent

    You have the right to withdraw your consent at any time by any of the following methods:

    • Disabling or declining to use the service or Offering (including disabling any voice assistance features in the settings)
    • Submitting a request by contacting the Nutanix Privacy Team at: privacy@nutanix.com.
    • Submitting a Privacy Rights Request webform here.

       

8. Security

Nutanix and its service providers implement robust security measures to protect your Biometric Data, including voice data, from unauthorized access, disclosure, alteration, or destruction. These measures include industry-standard encryption, access controls, logging, and other data security technology to ensure that your Biometric Data is processed, stored, transmitted, and protected as securely as possible.

9. Contact Us

If you have any questions or concerns about this Notice, or our use of your Biometric Data, please contact us by email at privacy@nutanix.com. To contact Nutanix’s Data Protection Officer, please reach out to dpo@nutanix.com

You can also contact us to exercise your rights here.

10. Changes to This Notice

Nutanix may update this Notice from time to time in response to changing legal, regulatory, technical, or business developments. When we update this Notice, we will make it available through our Offerings and indicate the date of the latest revision.  Please revisit this page periodically to stay aware of any changes to this Notice.