Last updated: February, 2025

Calix Field Service App Privacy Policy

What does this Privacy Policy cover?

The Calix Field Service App (“the FS App”) was developed by Calix, Inc. (“Calix”) to optimize the deployment of network equipment by broadband service providers that are Calix customers (“BSPs”). BSP field service technicians and other authorized BSP workforce members are the intended users of the FS App. For clarity, as used in this Privacy Policy, the term “BSP” means the organization that employs the individual users or authorizes them to use the FS App. The terms “you” and “your” refer to an individual user of the FS App.

Calix is a processor of (or service provider for) the personal information of BSP workforce members under applicable privacy and data protection laws. The BSP is the controller of (or business for) the personal information of its workforce members. In other words, the BSP determines how and why the information of its workforce members is processed. As such, FS App users should refer to the BSP’s privacy notice for details on the legal basis for processing personal information and how the BSP processes personal information.

Privacy Policy applies for any use of the FS App

This Privacy Policy applies to the mobile application described in the Calix Field Service App End User License Agreement (the “Agreement”). Please read your BSP’s privacy notice and this Privacy Policy carefully to understand how information collected by the FS App will be treated. If you do not agree with your BSP’s privacy notice and this Privacy Policy, you should not install, use, or access the App.

How Calix Collects Your Information

Acting under BSP instructions, Calix may collect and process information received from the BSP, or directly provided by you, when you access and use the FS App. Specifically, this information includes:

Name, email address, password/pin, and preferred language;
The precise geographic location of deployed equipment;
Photos of installed equipment and enclosures, cabling and power connections, areas inside and outside a house or other structure where equipment is installed, and other worksite conditions, including nearby objects;
Data insights based on correlation and analytics of your information collected in providing the FS App, and user-associated analytics to improve the quality of the app experience.

Categories of Data

Below is a summary of the categories of personal information that we have collected in the course of providing our Services in the last 12 months.

Category	Examples	Collected	Business Purpose
A. Identifier	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.	Yes	Provide BSP services
B. Personal Information categories listed in the California Records statue	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license, or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.	Yes	Provide BSP services
C. Protected classification characteristics under California or federal law	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	No	Not collected
D. Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	No	Not collected
E. Biometric information	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	No	Not collected
F. Internet or similar network activity	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	Yes	Product Improvement
G. Geolocation data	Physical location or movements	Yes	Federal funding reporting (where applicable) or Provide BSP services
H. Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information	No	Not collected
I. Professional or employment- related information	Current or past job history or performance evaluations.	No	Not collected
J. Non-public education information	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary codes.	No	Not collected
K. Inferences drawn from other personal information	Profile a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	No	Not Collected

Sensitive Personal Information Category	Examples	Collected	Business Purpose
A. Government identifiers	Social security, driver’s license, state identification card, or passport number.	No	Not collected
B. Complete account access credentials	Usernames, account numbers, or card numbers combined with required access/security code or password.	Yes	Provide BSP services
C. Precise geolocation	Your geolocation is within a radius of 1,850 feet.	Yes	Federal funding reporting (where applicable) or Provide BSP services
D. Racial or ethnic origin	Information regarding your race or ethnicity.	No	Not collected
E. Religious or philosophical beliefs	Information regarding your religious or philosophical beliefs or practices.	No	Not collected
F. Union membership	Whether or not you are a union membership.	No	Not collected
G. Genetic data	Data pertaining to your DNA or genes.	No	Not collected
H. Mail, email, or text message contents not directed to us	Contents of any message that is not sent to Calix.	No	Not collected
I. Unique identifying biometric information	Imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.	No	Not collected
J. Health, sex, life, or sexual orientation information	Information pertaining to your health, fitness, sexual orientation or identity or expression	No	Not collected

Use of Software Development Kits (SDKs)

The FSApp uses third-party SDKs to enhance functionality, improve experience, and analyze performance. Some SDKs utilized by the FSApp collect device identifiers. Device identifiers are small data files that uniquely identify your mobile device, and when combined with personal information, may be used to identify you. A device identifier may provide information about how you use FSApp and may remain persistent on your device to help enhance your navigation through the FSApp. The SDKs below may collect and process device identifiers.

Firebase Crashlytics (“Firebase SDK”)

Firebase is an app measurement solution that provides insights on app usage and user engagement. Firebase SDK collects information from your device to help us make informed decisions for performance optimization. The information may include a device identifier, device logs, and crash reports. The device identifier we collect is not combined with any personal information. For further information about how Firebase Crashlytics collects and uses data, please refer to their privacy and security page.

Pendo (“Pendo SDK”)

Pendo SDK is a product analytics and user engagement platform that helps businesses understand user behavior and collect feedback. Pendo collects various types of data depending on the configuration such as user analytics, user/device identifier, and device information. The device identifier for Pendo is a unique string generated randomly and is not maintained across multiple applications. The device identifier we collect is not combined with any personal information. For further information about how Pendo collects and uses data, please refer to their privacy and security page.

The data collected by third-party SDKs is governed by their respective privacy policies.

How Calix Uses the Information

Acting under BSP instructions, Calix uses the information collected under this Privacy Policy to:

Provide you with the FS App features and provide the BSP with the Supported Cloud Services described in the Agreement;
Implement, improve and/or enhance the FS App, including making future releases available to you;
Participate in broadband federal funding program reporting requirements;
Carry out Calix’s obligations as described or authorized in the Agreement, your BSP’s privacy notice, and this Privacy Policy;
Enforce Calix’s rights under the Agreement between you and Calix; and
Fulfill any other purpose authorized by you, the BSP, and reasonably required for the FS App.

Disclosure of Information

To access, review or correct any information, please contact the BSP.

Deleting Information

Calix does not sell or otherwise distribute or disclose your information to third parties other than as described or authorized in the Agreement, including this Privacy Policy.

Calix discloses the information to its subsidiaries, affiliates and certain third-party vendors and contractors that provide development, integration, web hosting and consulting services to Calix to provide you with the FS App, to maintain, support, develop, improve and/or enhance the FS App and to fulfill Calix obligations associated with the FS App.

Calix may be required to disclose information under certain circumstances:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request;
To enforce Calix’s rights under the Agreement between you and Calix;
If Calix believes disclosure is necessary or appropriate to protect the rights, property, or safety of Calix, its customers or other third parties; or
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Calix’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceedings, in which case your information held by Calix will be among the assets transferred.

Children Under the Age of 16

The FS App is not intended for children under 16. Calix, acting under BSP instructions, does not knowingly collect personal data of children under 16 without parental consent. If Calix learns that personal information from a child under 16 has been obtained or received without verification of parental consent, Calix will delete that information. If you believe Calix might have any information from or about a child under 16, please notify Calix by completing a Request Form (clicking the link will take you to TrustArc, whom Calix has engaged to assist with personal information requests).

Data Security

All information you provide to us is stored on our secure servers behind firewalls. Calix utilizes mechanisms such as intrusion detection systems, intrusion prevention systems, firewalls and encryption to secure information from accidental loss and from unauthorized access, use, alteration, and disclosure.

Calix deploys Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) to alert and proactively contain potential threats. Enhanced security visibility and coverage is enabled through added layers of firewall and IDS beyond the network perimeter. Management connections to servers are always authenticated and encrypted via Secure Shell (SSH) when administration access is required for troubleshooting, patch management, and upgrades.

Calix runs automated vulnerability scanning on all perimeter systems to identify potential security risks. Scanning applications are regularly updated to remain current and up to date on important security vulnerabilities. Patches are applied to all relevant systems unless a compensating control is implemented.

Calix uses a variety of industry-standard security technologies and best practices to help protect information from unauthorized access, use, or disclosure. All data stored on the Calix systems is encrypted following industry standards using the strongest keys and ciphers. All communications with the FS App are protected with industry standard security protocols.

You and the BSP control access to the FS App and any Supported Cloud Services described in the Agreement. You must secure your login credentials and passwords and protect them as confidential. Calix is not responsible for circumvention of any privacy settings or security measures.

Your Choices about our Collection, Use, and Disclosure

Depending on your jurisdiction and the type of data collected, you may have the following rights with respect to your personal information depending on the applicable consumer privacy laws.

a. Notice.

b. Access.

c. Correction.

d. Deletion.

e. Opt-out of sale or sharing of personal information

f. Limit use of sensitive personal information.

g. Portability.

h. Opt-out of automated decision-making and profiling,

i. Appeal.

j. Non-discrimination.

To access, review or correct any information, please contact the BSP or you can exercise your rights by clicking the Request Form link in the “Contacting Us” section below.

Other California Privacy Rights

The State of California also grants California residents privacy rights unrelated to the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”). Those rights include:

California “Shine the Light law (Civil Code Section § 1798.83), which permits California residents to request certain information regarding our disclosures of personal information to third parties for their direct marketing purposes. Calix does not disclose personal information to third parties for their direct marketing purposes.

Changes to this Privacy Policy

The date this Privacy Policy was last revised is identified below. You are responsible for periodically visiting this Privacy Policy to check for any changes.

Contact Information

To ask questions or comment about this Privacy Policy and Calix’s privacy practices for the FS App and the Supported Cloud Services, contact your BSP or complete this Request Form (clicking the link will take you to TrustArc, whom Calix has engaged to assist with personal information requests).