Iteris, Inc. Online Privacy Policy

Last updated effective date: September 17, 2026

This Privacy Policy ("Privacy Policy") explains how Iteris, Inc. (“Iteris,” “us,” “we,” or “our”) collects, uses, discloses, and otherwise processes Personal Information through our websites, including www.iteris.com and other Iteris-controlled websites, mobile applications (“Apps”), and online interfaces to our products and services that link to this Privacy Policy (collectively, the “Websites”).

If you are a California resident, please review our section on “Additional Information for California Residents” for additional information about our privacy practices and your California privacy rights under California privacy law.

1. APPLICABILITY

Please read this Privacy Policy carefully to understand our policies and practices regarding your Personal Information and how we will treat it. This Privacy Policy may change from time to time (see “Changes to Privacy Policy” below). We will notify you of material changes as described in the “Changes to Privacy Policy” section below.

2. WHAT IS PERSONAL INFORMATION?

For the purposes of this Privacy Policy, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Personal Information does not include publicly available information, deidentified information, or aggregated consumer information.

3. PERSONAL INFORMATION WE COLLECT

We, and our vendors, may collect Personal Information about you based on your interactions with us and our Websites. We collect and, in the preceding twelve (12) months, have collected the following categories of Personal Information. Note that the Personal Information we collect about you may vary depending on the nature of your interactions with us and may not include all of the examples listed below.

  • Identifiers and Personal Records: Name, email address, postal address, phone number, IP address, account name
  • Customer Records: Name, contact information, company name, job title
  • Financial and Payment Information: Certain tokenized payment information
  • Transaction and Commercial Information: Your purchase and transaction histories or tendencies and information about our commercial relationship with you
  • Internet or Other Electronic Network Activity Information: Browsing history, search history, interactions with our Websites, device identifiers, and information regarding online interactions, including interactions over time across the internet, the Websites, and advertisements
  • Geolocation Data: Approximate location derived from IP address
  • Professional or Employment-Related Information: Current employer, job title, professional qualifications
  • Inferences reflecting preferences, characteristics, and behavior

We may combine information about you that we have collected with information we obtain from other parties in accordance with this Privacy Policy.

We may also collect, use, disclose, and otherwise process the categories of Personal Information listed in the chart above to protect and defend our assets and rights, prevent misconduct, operate our business, and comply with legal requirements and obligations.

4. HOW DO WE COLLECT PERSONAL INFORMATION?

We may obtain Personal Information from the following sources:

  • Directly from you. We collect information that you provide by filling in forms on our Websites. This includes information provided at the time you fill out one of our Contact Us forms, create an account (such as with our Iteris Resource Center), sign up to our newsletter, ask to receive email communications from us, or request information on our Investor Relations page. If you send us an email, your email address and the contents of your message will be collected. This includes text characters and any audio, video, and graphic information formats included in the message.
  • From you when you are applying for employment. We collect information you choose to provide when you apply to available Career Opportunities on our Websites via “Apply Now” or “LinkedIn.”
  • Automatically when you visit our Websites. Our servers automatically log information as you navigate through our Websites. Information collected automatically may include usage details, search queries and results, IP addresses, and information collected through cookies, web beacons, and other tracking technologies. For more information about information we collect through automatic data collection technologies, see the “Cookies and Similar Technologies” section below.
  • From Other Parties. We may receive additional information about you from other publicly and commercially available sources, as permitted by law. We may also obtain additional information about you from your references when you apply for employment with us.

We may combine Personal Information we collect or receive about you with other information we process about you and use or disclose it in the manner described in this Privacy Policy. We may collect Personal Information about your online activities over time and across different websites.

5. HOW WE USE PERSONAL INFORMATION

We use and otherwise process Personal Information that we obtain about you in a variety of ways depending upon how you interact with the Websites, including to:

  • Provide our Websites and services. For example, to present our Websites and their content to you; provide you with information, products, or services that you request from us; and manage accounts and service features.
  • Communicate with you. For example, to notify you about changes to our Websites or any products or services we offer through them; respond to any questions, requests, or concerns you may bring to our attention; and deliver confirmations, account information, notifications, and similar operational communications.
  • Market and advertise to you. For example, to market and advertise our products and services and provide you with certain offers. We and our service providers also use the information you provide to send you communications, including promotional messages about Iteris and issues of interest, via email, postal mail, fax, text message, and phone, as permitted by local law and subject to your contact preferences.
    • Although we hope you will find our promotional communications of interest, you are able to opt out of receiving them by following the instructions for opt out included on each communication.
  • Analyze, support, and improve our Websites and offerings. For example, to analyze your user experience and the quality of our Websites, products, and services; provide you with technical support, customer service and account maintenance; and enable you to share information with social networks and to interact with Iteris on social media sites.
  • Maintain the integrity of our networks and address security issues. For example, to protect our business operations, secure our network and information technology, assets and Websites; to prevent and detect fraud, unauthorized activities, access and other misconduct; to investigate, investigate or take action regarding violations or suspected violations of law or our Terms of Use and other agreements with you, as well as fraud, illegal activities and other situations involving potential threats to the rights or safety of us, any person, or other party.
  • Support our general business operations. For example, to perform general business operations, accounting, record keeping and legal functions, including to analyze operational and business results and risks; collect outstanding amounts owed; maintain business records; and maintain our business relationships.
  • Comply with legal requests and obligations. For example, to comply with the law or legal proceedings in response to subpoenas, court orders, warrants or other lawful requests including responding to national security or law enforcement.

We also use your Personal Information as directed or authorized by you or to fulfill other notified purposes that we describe to you at the time we collect your information.

Your use of social media features will result in the collection or sharing of information about you, depending on the feature. The basic details we receive depends on your social network account privacy settings. This Privacy Policy does not apply to these features. Your interactions with these features are governed by the privacy policy and other policies of the companies providing them. We encourage you to review the privacy practices and settings of the social media sites you use to make sure you understand the Personal Information that may be collected, used, and shared by those sites.

6. RETENTION OF PERSONAL INFORMATION

Except as otherwise permitted or required by applicable law or regulation, we retain each category of Personal Information that we collect for as long as reasonably necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, and as required by applicable law. The criteria we use to determine retention periods include:

  • The length of time we have an ongoing relationship with you;
  • Whether there is a legal obligation to which we are subject (such as tax, accounting, or regulatory record-keeping requirements); and
  • Whether retention is advisable in light of our legal position (such as applicable statutes of limitations, litigation holds, or regulatory investigations).

This generally means holding each category of Personal Information for as long as one of the following criteria apply:

  • The Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the Personal Information.
  • The Personal Information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Information was collected.
  • The Personal Information is reasonably required to protect or defend our rights or property.
  • We are otherwise required or permitted to keep the Personal Information by applicable laws or regulations.

Where Personal Information is used for more than one purpose, we may retain it until the purpose with the latest period expires.

7. PERSONAL INFORMATION DISCLOSURE

Generally, we may use, disclose and process Personal Information where reasonably necessary to achieve the purposes described in the “How We Use Personal Information” section of this Privacy Notice. In accordance with these purposes, we may disclose Personal Information that we obtain as described in this Privacy Policy:

  • To our subsidiaries and affiliates for their business purposes.
  • To contractors, service providers, strategic partners, and other vendors we use to support our business (for example, distributors, resellers, installers, hosting websites, or maintenance providers for our products and services in your local area).
  • To marketing and advertising partners. We may also make certain Personal Information available to our vendors (such as analytics providers and advertising companies) that support our marketing, analytics, advertising and campaign management (see the “Cookies and Similar Technologies” section below for more information).
  • To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Iteris' assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by Iteris is among the assets transferred. In such event, we cannot guarantee that any entity receiving such information will comply with all terms of this Privacy Policy.

We may also disclose or use your Personal Information if required or permitted by law, or in the good-faith belief that such action is necessary to: (a) conform to national security requirements, comply with legal process, or respond to a governmental authority request; (b) protect and defend the rights or property of Iteris and its affiliates, licensors, or licensees; (c) enforce our applicable service agreements; (d) protect the personal safety or interests of our employees, consultants, other Iteris members, or members of the public in urgent circumstances; or (e) assist law enforcement in connection with investigations, fraud, infringement of intellectual property rights, or other suspected illegal activities.

8. COOKIES AND SIMILAR TECHNOLOGIES

We and our vendors use cookies, web beacons, pixels, tags and other similar technologies (collectively, “Cookies”) to collect information when you interact with our Websites. When you access our Websites, these Cookies may record information about your usage and activities (such as your IP address and device identifier, the browser you are using, length and time of visit and pages visited).

These Cookies may collect information about your usage and activities (such as your IP address and device identifier, the browser you are using, length and time of visit and pages visited), geolocation data (to deliver content based on your location and help you find a location near you) and details about how you interact with our Websites.

This Personal Information is used by us and our vendors for various purposes, including to: operate, enable and improve our Websites; analyze usage and performance; track bugs and errors; verify account credentials and enable logins; track sessions; prevent fraud and protect and secure our Websites; personalize and improve your experiences; improve and measure our advertising campaigns; and provide you with more relevant content, ads and offers within our Websites and on third-party websites and services.

Browser Opt Outs. Web browsers have varying default settings for accepting Cookies. You can access your browser settings to learn more about Cookie management, including deleting and rejecting Cookies. You may be able to adjust your web browser security settings to refuse all Cookies or to indicate when a Cookie is being sent. However, if you disable the use of Cookies in your web browser, some features of our Websites may not function properly.

Do Not Track. Certain web browsers have “Do Not Track” features, which allow users to send signals to websites indicating their preference not to be tracked. Our Websites do not support Do Not Track at this time. Other tools are available for managing data collection and usage, such as the Cookie controls and advertising controls mentioned above. For more information about Do Not Track, visit donottrack.us⁠⁠⁠.

Third-Party Tools. We may use third-party tools (such as Google Analytics) to understand and analyze how visitors interact with and experience our Websites, including the features you engage with, how you navigate, page views, and how much time is spent on a page. We have implemented Google Analytics Advertising Features, such as remarketing with Google Analytics, cross device remarketing and reporting, Google Analytics demographics and interest reporting, and Google Display Network impression reporting. Please find more information about your choices regarding Google Analytics below.

  • Google Analytics: Our Websites use Google Analytics. You may prevent your data from being used by Google Analytics by downloading the Google Analytics Opt-Out Browser Add-on at https://tools.google.com/dlpage/gaoptout/. Google's use of information collected by Google Analytics is restricted by the Google Analytics Terms of Service (https://marketingplatform.google.com/about/analytics/terms/us/) and the Google Privacy Policy (https://policies.google.com/privacy). For more information on how Google collects and processes data, visit https://policies.google.com/technologies/partner-sites.

You may manage certain Cookies on our Websites by selecting the “Manage Cookie Preferences” link located in the footer of our Websites, where you can review and adjust your Cookie preferences. Please note that these settings are specific to each website and browser; therefore, you must configure your preferences individually for each Website you visit. Additionally, if you access our Websites from a different device or browser, you will need to set your preferences accordingly.

Interest-Based Advertising. We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") at https://thenai.org/how-to-opt-out/ and from members of the Digital Advertising Alliance ("DAA") at www.aboutads.info/choices.

9. LINKS TO OTHER WEBSITES

Some content, applications, or links, including advertisements, on or accessible from our Websites are served by parties that we do own or operate (“Other Sites”). This Policy does not apply to those Other Sites, which may have their own privacy policies and terms that describe how they may use and disclose your Personal Information. Our Websites may include social media features and widgets, such as the Facebook "Like" button and the "Share this" button, as well as other interactive apps that run on the Websites and enable certain features to work (e.g., content sharing and comments).

We are not responsible for the privacy practices, content or policies of Other Sites. Please make sure to review any privacy disclosures of Other Sites carefully.

10. DATA SECURITY

When we transfer your Personal Information internationally, we use appropriate safeguards as described in the “Cross-Border Data Transfers" section of this Privacy Policy.

Iteris takes appropriate security measures to protect against unauthorized access to, or unauthorized alteration, disclosure, or destruction of, users' information.

The safety and security of your Personal Information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Websites, you are responsible for picking a secure password and keeping this password confidential. We ask you not to share your password with anyone.

The transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Websites. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Websites.

If you have any questions regarding which measures and techniques we use, feel free to contact us as indicated below under Questions.

11. CROSS-BORDER DATA TRANSFERS

We transfer Personal Information to various jurisdictions for the purposes described above, including to the United States and other jurisdictions that may not provide the same level of data protection as your home country, and law enforcement agencies in the recipient countries may have access to your Personal Information. You acknowledge that your Personal Information may be processed in and further transferred to jurisdictions other than your own, including the United States, Italy, Colombia, and other jurisdictions. We provide appropriate protections for cross-border transfers as required by applicable law for international data transfers, including entering into the European Commission’s standard contractual clauses for transfers originating from the European Economic Area. Where required by such laws, you may request a copy of the suitable mechanisms we have in place by contacting us as detailed below under “Questions”.

12. PRIVACY RIGHTS

This section consolidates your privacy rights under applicable laws. Depending on your jurisdiction, you may exercise the rights described below by contacting us at privacy@iteris.com or at the phone number listed in the Questions section.

Depending on your jurisdiction, you may have the right to:

  • Ask us to confirm whether we process your Personal Data.
  • Request access to or information about your Personal Data that we collect, use, and/or disclose.
  • Request that your Personal Data be corrected, updated, and/or completed if you become aware that any Personal Data we hold about you is incorrect, out of date, or incomplete.
  • Ask for a copy of your Personal Data, including in an electronic format, and transmit such Personal Data to another entity under circumstances required by applicable law.
  • Object to or restrict collection, use, disclosure, or other processing of your Personal Data under certain circumstances.
  • Withdraw your consent to process your Personal Data in circumstances where our collection, use, disclosure, or other processing is based on your consent; or request details about consequences for not consenting to a processing activity.
  • Request that we delete, destroy, anonymize, or block the processing of Personal Data that we have collected, used, disclosed, or otherwise processed about you.
  • Lodge a complaint with your local supervisory authority.

Communications Preferences. If you no longer wish to receive our marketing communications or remain on our mailing list(s), you can opt out of such communications at any time. To unsubscribe, please follow the unsubscribe link in the relevant communication.

Note that we will not profile or use automated decision-making in a way that produces legal effects concerning you or otherwise significantly affects you without providing additional notice, as appropriate.

13. ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS

This section is provided pursuant to the California Consumer Privacy Act, as amended (the “CCPA”) and applies to Personal Information we collect from California residents.

The disclosures in this Privacy Policy apply to our current practices, as well as our activities in the last 12 months.

Collection, Use, and Disclosure of Personal Information. We collect, use, and disclose Personal Information as set out in the “How Do We Collect Personal Information?,” “How We Use Your Personal Information,” and “Personal Information Disclosure” sections above. Additionally, we collect Personal Information described in Cal. Civ. Code § 1798.80(e), including Contact Information and Other Identifiers and Contents of Communications, as described in the “How Do We Collect Personal Information?” section.

Under the CCPA, we sell and share for cross-context behavioral advertising, the following categories of Personal Information: identifiers and personal records, customer records, internet or other electronic network activity information, geolocation data, and inferences. We have sold and shared these categories of Personal Information to third parties, including our advertising technology partners and vendors for cross-context behavioral advertising and other marketing and advertising services on the Website. We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.

California Privacy Rights. We provide California residents with privacy rights as outlined below. You may exercise the rights described below by contacting us at privacy@iteris.com or at the phone number listed in the Questions section. You may have the following rights:

  • Right to Know: Request disclosure of the categories and specific pieces of Personal Information we have collected, the sources, the business purposes, and the categories of service providers, contractors, and third parties to whom we disclosed it.
  • Right to Delete: Request deletion of your Personal Information, subject to certain exceptions.
  • Right to Correct: Request correction of inaccurate Personal Information.
  • Right to Opt Out of Sales or Sharing: You may opt out of sales or sharing of your Personal Information by clicking the “Do Not Sell or Share My Personal Information” link in the footer of our website or enabling the Global Privacy control (GPC) opt-out preference signal. Please note that you will need to opt out for each browser or device you use.
  • Right to Non-Discrimination: We will not retaliate or discriminate against you for exercising your rights.

We may verify your identity before processing any request as required by applicable law. You may designate an authorized agent to submit requests on your behalf.

To appeal a denied request, contact privacy@iteris.com with the subject line “Privacy Rights Appeal.”

We do not collect sensitive Personal Information from California residents.

14. CHANGES TO PRIVACY POLICY

Iteris may at any time make changes to this Privacy Policy. Changes will be indicated by the "Last Updated" date at the top of this page, and a notification of changes will be posted here.

If we make material changes to this Privacy Policy, we will notify you or obtain consent regarding such changes as required by law. of. We suggest that you check this page frequently to see if any changes have been made. If you have concerns about any changes, please contact us as indicated below in the section below titled, Questions.

15. QUESTIONS

If you have questions about this Privacy Policy and our privacy practices, please contact us at privacy@iteris.com or at (888) 254-5487.