MiTek Privacy Policy

Effective October 1, 2025

Thank you for visiting our website and, if applicable, filling out registration information and making a purchase of products and/or services offered through the website (the “Products/Services”). This privacy policy has been established by Mitek Corporation (“Mitek”) and the following entities or brands: Atlas Sound, L.P. (“Atlas”), Innovative Electronic Designs, LLC (“IED”), AtlasIED, MTX, Coustic, Magnum, DCM, Soundolier, ETA Systems, and Xtant (collectively, “we”, “us”, or “our”). Mitek, Atlas, and IED are separate legal entities, and nothing in this privacy policy or on the website is meant to suggest or imply any legal relationship between or among these companies.

This policy describes the types of information we may collect from you or that you may provide when you visit the website of any of the aforementioned brands or entities (“Website”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

On the Website.
Through any account you create via the Website, and any related credit application, as applicable.
In email, text, and other electronic messages between you and this Website, as applicable.
Through mobile and desktop applications you download from the Website, which provide dedicated non-browser-based interaction between you and the Website, as applicable.
When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.

It does not apply to information collected by:

Us offline or through any other means, including on any other website operated by MiTek or any third party (including our affiliates and subsidiaries); or
Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Website.

What Types of Information You Provide Us

Information you provide when you complete a registration or profile, which may include your first name and surname, country of residence, gender, date of birth, email address, username, and password
Information you provide us when you purchase something through our website, including your name, address, telephone number, e-mail address, credit card number and security code (although we store only the last four digits of the credit card number and the expiration date and we do not store the security code), and payment information
Information you provide through your usage of our site, such as which pages of our website you view and which Products/Services you purchase
Information you provide in “public forums” on our site, which includes information provided in comment fields about specific images, information in your user profile, or in other fields
Information you provide to us when you use our site, or, if available as an option, link your profile on a third-party site or platform with your registration account
Information given in response to any customer surveys, contests, or promotions in which you choose to participate
Location information when you visit our site, including location information either provided by a mobile device interacting with our website, or associated with your IP address, where we are permitted by law to process this information
Technical data, including your device identifier or IP address, when you visit our website or open emails we send

We consider some, but not all, of the information you provide us to be “your personal information.” We define “Personal Information” as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information includes, but is not limited to, the following if it identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer or household: name; alias; unique personal identifier; online identifier; account name; signature; social security number; physical characteristics or description; photograph; address; telephone number; email address; passport number; driver’s license or state identification card number; insurance policy number; education; employment; employment history; bank account number; credit card number; debit card number; any other financial information, medical information, or health insurance information; Internet Protocol address; characteristics of protected classifications under federal law (and if in California, also under California law); commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies; biometric information; internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement; geolocation data; audio, electronic, visual, thermal, olfactory, or similar information; professional or employment-related information; education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99); inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes; and sensitive personal information. “Personal information” does not include publicly available information that is truthful and lawfully made available to the general public from federal, state, or local government records.

In the event you disclose any of your personal information in a public forum on our site, the information in that disclosure will be treated as public, we will not take any steps to protect, secure, or delete that disclosure, and you should not have any expectation of privacy or confidentiality with regards to that disclosure.

Our site may provide you with hyperlinks to other sites not owned or controlled by us, and we are not responsible for the privacy practices of any site that is not owned or controlled by us. We encourage you to be aware when you leave our site or applications and to read the privacy policies of these other sites.

Additional Information

The following are categories of Personal Information collected from consumers, the categories of sources from which the information was collected, and the business purpose for which the information was collected and disclosed within the last twelve (12) months. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the Personal Information confidential, and prohibit using the disclosed information for any purpose except performing the contract.

Category	Collected if Browsing Website	Collected if Account Holder	Collected if Applying for Credit	Categories of Sources of Personal Information From Which We May Collect	Category of Third-Party Recipients Which We May Share Personal Information; Business Purpose Disclosures
Identifiers and Personal Information, including as defined under Cal. Civ. Code §1798.80(e) (such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver’s license number, passport number, or other similar identifiers.)	YES Users who are not opted out: Browsing activity	YES Browsing activity, if not opted out Real name Postal address Phone number Email address Employer, if applicable Unique personal identifier Online identifier Internet Protocol address Payment information (bank account information, credit card information, billing address)	YES Browsing activity, if not opted out Real name Postal address Phone number Email address Employer, if applicable Unique personal identifier Online identifier Internet Protocol address Payment information (bank account information, credit card information, billing address) Credit History	Automatically Indirectly from you Directly from you Third parties	All, if not opted out: Analytics and search engine providers Account Holders and Credit Applicants: Service Providers Financial institutions
Protected classification characteristics under California or federal law	NO	NO	NO	N/A	N/A
Commercial information, internet or other similar network activity	YES, for user who are not opted out	YES	YES	Automatically Indirectly from you Directly from you	Analytics and search engine providers Service Providers Financial institutions
Biometric information	NO	NO	NO	N/A	N/A
Geolocation data	YES	YES	YES	Automatically Indirectly from you Directly from you	All, if not opted out: Analytics and search engine providers Account Holders and Credit Applicants: Service Providers Financial institutions
Sensory data	NO	NO	NO	N/A	N/A
Professional or employment-related information	NO	NO	YES	Directly from you	Service Providers Financial institutions
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	NO	NO	NO	NO	N/A
Inferences drawn from other Personal Information	NO	NO	NO	NO	N/A
Government Identifiers	NO	NO	YES U.S. users, only if tax exemption is requested	Directly from you	Government agencies
Complete account access credentials	NO	NO	NO	NO	N/A

How We Collect Your Information

We collect all of the information you provide to us through the activities described above. Please keep in mind that when you provide information to us via a third-party site or platform, the information you provide may be separately collected by the third-party site or platform. The privacy choices you made with the third-party site or platform will not apply to our use of the information we have collected. The information we collect is covered by this privacy policy only.
We acquire information from other sources to update or supplement the information you provided or we collected automatically.
We collect information through technology, such as cookies, Flash cookies, and Web beacons, including when you visit our site.

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

To our subsidiaries and affiliates.
To contractors, service providers, and other third parties we use to support our business, and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Mitek Corporation’s, including its affiliates or subsidiaries, assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Mitek Corporation, including its affiliates or subsidiaries, about our Website users is among the assets transferred.
To third parties to market their products or services to you if you have consented to or not opted out of these disclosures. We contractually require these third parties to keep personal information confidential and use it only for the purposes for which we disclose it to them.
To fulfill the purpose for which you provide it. For example, if you give us an email address to use the “email a friend” feature of our Website, we will transmit the contents of that email and your email address to the recipients.
For any other purpose disclosed by us when you provide the information.
With your consent.
To engage in credit checks for the opening of accounts for businesses.

We may also disclose your personal information:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
To enforce or apply our terms of use https://www.mtx.com/terms-and-conditions and other agreements, including for billing and collection purposes.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of MiTek, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Cookies and Similar Technology

A cookie is a small file that is placed onto your device (e.g., computer, smartphone, or other electronic device) that stores information when you visit a website. We use cookies and related technology on our site to help us with site functionality, and if a user is not opted out, also for user analytics, and marketing.

The cookies we place on your device fall into one of the following categories:

Strictly necessary cookies: these cookies are essential for you to be able to navigate our Site and use its features. Without these cookies, the services you have asked for could not be provided.
Performance cookies: these cookies collect information about how you use our Site, for example, which pages you go to most often. These cookies do not collect personally identifiable information about you. All information collected by these cookies is aggregated and anonymous, and is only used to improve how our Site works.
Functionality cookies: these cookies allow our Site to remember the choices you make (such as your username, language, last action, and search preferences) and provide enhanced, more personal features. The information collected by these cookies is anonymous and cannot track your browsing activity on other websites.
Marketing cookies: also known as advertising cookies, these cookies are used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement on our Site and help measure the effectiveness of the advertising campaign. This is sometimes referred to as online behavioral advertising. In some cases, our partners may use cookies to provide us with information about your interactions with their services. These cookies remember that you have visited a website, and this information is shared with other organizations such as advertisers. Those third-party cookies would be subject to the third-party service’s policies.

Web Beacons. Pages of our Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Consent to Use Cookies

The first time you visit our Site, a cookie notice is displayed describing our use of cookies and linking to this Cookie Policy. You may opt out of the cookies at this time.

Controlling Cookies

Your browser may give you the ability to control some types of cookies. If you do not want to accept the kinds of cookies you can control, you can change your browser settings so that certain types of cookies are not accepted.

If you turn off any cookies, please be aware that you may lose some of the functionality of this site. For more information about cookies and how to disable them, please check one or more of the following resources: http://www.allaboutcookies.org/ or https://ico.org.uk/for-the-public/online/cookies/.

Cookies We Use

The table below explains the cookies we use on our websites and the purposes for which they are used:

Cookie Name	Cookie Description	Cookie Type	Expiration	When Collected
Nop.customer	Functional cookie for technical data (REQUIRED)	Persistent	Session + 1 Year	When browsing
ASP.NET_SessionId	Functional cookie for technical data (REQUIRED)	Session	Session	When browsing
__RequestVerificationToken	Functional cookie to prevent hacking (REQUIRED)	Session	Session	When browsing
_ga_FM80CKT3E7 _ga _gcl_au _hjSession_1274652 _hjSessionUser_1274652	Google Tag Manager (“GTM”) to determine whether to apply cookies pursuant to applicable laws	Persistent	Session +1 Year	When browsing
hubspotutk __hssc __hssrc __hstc	HubSpot tracking code, only if not opted out, to track user data for form submission	Persistent	Session + 1 Year	When browsing
cookiebot.com	Cookie preference, to identify user location to determine whether or not to allow cookies, and if user is opted out, cookie is required	Persistent	1 year from initial preference selection	When browsing

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Website are served by third-parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our website. The information they collect may be associated with your personal information, or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

How We Use Your Information

We may use your information to:

Provide you with the products and services you request
Communicate with you about your account or transactions
Improve our products, services, and operations
Personalize your experience on our site and application
Send you information about new Products/Services features
Send you offers and promotions for our Products/Services
Send you offers and promotions for third-party products and services. We do not share personal information with third parties without the explicit consent of the individual.
Detect, investigate, and prevent activities that may violate our policies or be illegal

When We Share Your Information

We may share your Personal Information with other companies in limited circumstances and only when we have notified you of our intention to share your personal information. We may either notify you of this sharing in this privacy policy or in a separate notice. The instances of when we may share your personal information with other companies (and which you authorize us to share in such instances) include:

When you direct us to share your Personal Information with third-party sites or platforms
When we identify other companies that offer products or services that we believe will be of interest to our website users, or when we identify companies that can connect our website users to products or services that may be of interest to the users
When we share Personal Information with third parties in connection with the sale of a business, to enforce our Terms of Use or rules, to ensure the safety and security of our guests and third parties, to protect our rights and property and the rights and property of our guests and third parties, to comply with legal process or in other cases if we believe in good faith that disclosure is required by law
See above table for the categories of information shared and the categories of third parties with whom the information is shared.

In addition, upon making a purchase through our website, each of our customers is assigned a random sales order number, which we use to track customer orders. This sales order number is different from any other sales order number and may be passed to third-party vendors with whom our staff works to provide more efficient and relevant services to users. These third parties are unable to connect or associate this randomly generated number with an individual email address, phone number, mailing address, or any other data that may be used to specifically identify you. However, our anonymous customer numbers may be used to measure traffic and visiting patterns on our website and on other websites on the Internet. We may also compile statistics and other data about our customers on an aggregated basis and may share such aggregated data with selected third parties. This data will not specifically identify you. Further, as permitted by applicable law, we can (and you authorize us to) disclose your name, street, address, city, state, zip code, country, phone number, email and/or company to other website users in connection with an investigation of fraud, intellectual property infringement, piracy or other unlawful activity whenever we, in our sole discretion, believe necessary or appropriate.

We do not presently sell, trade, or rent Personal Information to other parties. We reserve the right to do so in the future, but will allow individuals to opt out of this process. You may change your Personal Information at any time, including email address, phone number, mailing address, and credit card information when purchasing item(s). By purchasing Products/Services through our website, you consent to the collection and use of this information by us. In the event of changes in our privacy policy, this page will be updated with the current information.

Display Advertising /Remarketing and Site Analytics

This website may use remarketing services to advertise on third-party websites (including Google, Yahoo, Bing, Amazon, ESPN, CNN, and more) to previous visitors to our site. It could mean that we advertise to previous visitors who haven’t completed a task on our site, for example, using the contact form to make an enquiry. This could be in the form of an advertisement on the Google search results page or a site in the Google Display Network. Third-party vendors, including Google, use cookies to serve ads based on someone’s past visits to a website. Of course, any data collected will be used in accordance with our own privacy policy and such third-party vendors’ privacy policies.

Our site uses a unique tracking code to support Google Display Advertising, enabling Google Analytics to collect traffic data by using our cookies. This is in addition to the data collected through the standard Google Analytics implementation, allowing the Remarketing feature based on Display Advertising from Google. It is with this feature that we use Remarketing with Google Analytics to advertise online, adhering to the Google AdWords Remarketing Policy and its sensitive category restrictions.

When you access our website, general non-personal information such as Internet browser used, geographical data regarding users, i.e., country of residence, number of visits, average time spent on site, pages viewed, is recorded automatically (not as part of website maintenance). This information is used only to gauge the popularity of the website and to help improve the site’s functionality in the future. This information is never used by third parties.

Our site also uses a unique tracking code to support Facebook and LinkedIn Advertising. This tracking code uses cookies, web beacons, or similar technologies to collect or receive information from our website and elsewhere on the Internet for the purposes of providing measurement services and target ads. You can set preferences for how Facebook advertises to you using the Facebook Ad Preferences page in your account settings. Visit https://optout.aboutads.info/ to learn more about opting out of the collection and use of information for ad targeting.

Please note that once we share your Personal Information with another company, the other company’s privacy practices will govern their use of the information.

How We Secure Your Data

The security of your Personal Information is important to us, because we know that the security of your information is important to you. We have implemented reasonable security procedures that are intended to protect your information. All information you provide to us is stored on our secure servers behind firewalls. Any payment transactions – available only in the United States – will be encrypted pursuant to Payment Card Industry Data Security Standards (“PCI DSS”). From time to time, we review and update our procedures to consider appropriate new security technology and methods.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Website, like message boards. The information you share in public areas may be viewed by any user of the Website.

Please be aware that no security measures are perfect or impenetrable. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website. If, despite our security measures, your most sensitive information, such as your payment information, has been compromised, we will notify you in accordance with our legal obligations in your jurisdiction.

We operate globally, and although we do not currently do so, we may transfer your Personal Information to locations around the world. Wherever we control the transfer, storage, or processing of your Personal Information, we will take reasonable steps to safeguard the privacy of your Personal Information.

How You Control Your Information

You may access, modify, change, or correct your registration and transaction information in the same manner in which you originally provided it to us.

You may also opt out of us using your personal data for personal sales data, targeted advertising, and or profiling decisions. To opt out, please contact us at support@mtx.com.

You also have the following rights:

Right to Withdraw Consent and Stop Our Use of Your Personal Information: If you have consented for MiTek to use your personal information for a specific purpose or purposes, you may contact us to instruct us that you withdraw your consent that we use your personal information for that purpose or those purposes. Note however, this will not affect any processing or use of your personal information that took place before you withdrew your consent.

You may contact us to receive a copy of your personal information and it shall be provided in a structured, commonly used and machine-readable format, which you may then port elsewhere for your purposes.

Right to View, Correct or Change Your Personal Information: You have the right to know whether we process your personal information and to view the information we collect from you. If your personal information has changed or you discover our records of your personal information is otherwise incorrect, you may contact us to change your personal information accordingly.

Right to Be Forgotten: If you do not wish for MiTek to have your personal information anymore, you may contact us to instruct us to delete your Personal Information from our records. We will delete your Personal Information from our database. Note, however, if you have communicated to us through e-mail or other channels, we may incidentally have portions of your personal information within our internal archives of such communications, however, we will not use such Personal Information for any purpose inconsistent with your right to be forgotten or the record-keeping purposes of the archive. We may also preserve your personal information if we are required to do so by law, however, we will not use such Personal Information for any purpose inconsistent with your right to be forgotten or such legal obligation.

Right to Review Decision-Making: If you question why you have received a communication or other material from MiTek, you may contact us to learn what about your personal information led us to send you the communication or other material. You have the right to object to a decision based solely on automated processing, including profiling, which produces legal effects concerning or affecting you.

Right to Restriction of Processing: If any of the following conditions apply, you have the right to request a restriction on the processing of your data: (1) accuracy of the data is contested; (2) the processing is unlawful and you oppose erasure of the data; (3) the controller no longer needs your personal data for processing but legal claims require data not to be erased; and (4) you object to the processing of your personal information.

Right to Object: You have the right to object to the processing of personal data concerning yourself as long as such processing does not fall under any exception permitting the MiTek to process your personal information.

To exercise any of these rights, please contact us at support@mtx.com. We may retain some information for our own backup, archival, record or audit purposes and as otherwise required by law, however, we will only retain the information for those purposes and will no longer share with other companies the Personal Information from deleted accounts. Please note that we will only be able to delete your Personal Information that is within our control, and we will not be able delete your Personal Information that we had previously shared with others in accordance with this privacy policy.

How We Protect Children’s Privacy

Our Website is not intended for children under 18 years of age. No one under age 18 may provide any personal information to or on the Website. We do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information on this Website or through any of its features, register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at support@mtx.com.

Retention

Information gained through cookies and similar technologies are explained in the Cookies and Similar Technologies section above. We will continue to store and process your information with respect to Cookies, as outlined above. With respect to other information not collected through cookies, we will retain information in perpetuity until the earlier of either of (i) your request that we delete your personal information in accordance with the procedures set forth in this Privacy Policy; (ii) your personal information is no longer required to fulfill the identified purpose for which it was collected; or (iii) we decide to delete your personal information for reasons such as because your failure to use our Service for a prolonged period of time (as determined in our sole discretion) or another business reason makes it desirable for us to delete your information. We may continue to retain your personal information to meet any legal requirements or to defend or exercise our legal rights. When the relevant processing activity has been completed, we may destroy your data, or alternatively anonymize the data in such a way that you are not personally identifiable, either directly or indirectly.

Where Information is Collected and Controlled

The personal and other information that is subject to this policy (including the information collected from visitors outside the United States) is collected and controlled by us in the United States. You agree that your information will be processed in the United States for the purposes described herein. We only collect data and share data as described herein. You have the right to opt out of collection and sharing at any time. If you did not opt out when you first entered our site, but would like to, please send an email to support@mtx.com.

Record of Processing Activities for Controllers & Processors

This Record of Processing Activities (Record) describes how MiTek and its parent company or companies, subsidiaries, and affiliates in the United States control and process personal data. MiTek maintains documentation, as required by one or more laws, on controllers and processors. This Record is company confidential information, but MiTek will provide it to the appropriate supervisory authority on request as required by applicable law.

Controller/Processor Details:

Name: Mitek Corporation (“Mitek”)

Address: 1 Mitek Plaza, Winslow, IL 61089

Telephone Number: (602) 438-4545

Website: www.mitekusa.com

Categories of Data Subjects

Mitek collects personal data from the following categories of data subjects:

MiTek’s customers or consumers.
MiTek’s vendors or suppliers.
MiTek’s employees and job applicants.

MiTek collects and processes personal data about vendors or suppliers for the following purposes:

To obtain products and services.
Vendor administration, order management, and accounts payable.
Evaluating potential suppliers.

Categories of Personal Data Recipients

MiTek discloses personal data to the following categories of recipients, some of which may be located in third countries or may be international organizations:

MiTek’s parent company, subsidiaries, and affiliated entities, including branches.
Business partners.
Auditors and professional advisors, such as lawyers and consultants.
Federal, state, and local law enforcement officials.
Third-party service providers, such as providers of:
- IT system management;
- Payment processing;
- Credit reporting;
- Collections agents;
- Analytics and search engine providers;
- Customer relations management; and
- Information security.

MiTek makes limited personal data transfers subject to the second subparagraph of Article 49(1), which are necessary for MiTek’s compelling legitimate interests. MiTek’s provides appropriate safeguards for these limited personal data transfers through contractual clauses.

Technical and Organizational Security Measures

MiTek has implemented the following technical and organizational security measures to protect personal data:

Pseudonymization of personal data.
Encryption of personal data.
Segregation of personal data from other networks.
Access control and user authentication.
Employee training on information security.
Written information security policies and procedures.

How Our Privacy Policy May Be Changed

From time to time, in response to new technologies, industry practices, regulatory requirements, changes in our Products/Services, or other circumstances, we may change this privacy policy. If these changes are material, we will provide notice to you, which may include updating this policy, and, if we are required by applicable law, we will obtain your consent. If you choose not to accept the new privacy policy, your account may be terminated.

How You May Comment and Inquire About This Policy

If you have a comment or question about this privacy policy, please contact us at the following address: support@mtx.com.