ActiveCampaign procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ One of the mechanisms we use to help provide protection for the transfer of personal data to countries outside of your home country is through a series of intercompany agreements. If you are in the EEA, the UK or Switzerland, this may include the Standard Contractual Clauses authorized under European Union law. You can find a copy of the Standard Contractual Clauses at this link .” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “We remain responsible and liable under the Data Privacy Framework for any personal data that we disclose to third parties for external processing on our behalf, as described in the “ Disclosure of Information ” section above, unless we prove we are not responsible for the event giving rise to the damage. Where appropriate or required to do so, we will give you an opportunity to opt out where personal data we control about you is to be disclosed to an independent data controller in a manner not specified in this Privacy Policy or is to be used for a purpose that is materially different from those set out in this Privacy Policy. Requests to opt out of such disclosures or uses of your personal data should be sent to us using the details provided in the “ Contact Us ” section below. In compliance with the Data Privacy Framework, ActiveCampaign commits to resolve DPF Principles-related complaints about our collection and use of your personal data. EU, UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the Data Privacy Framework should first contact ActiveCampaign at privacy@activecampaign.com . We are subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission. Further, in compliance with the Data Privacy Framework, ActiveCampaign commits to refer unresolved complaints concerning our handling of personal data received in reliance on the Data Privacy Framework to JAMS, an alternative dispute resolution provider based in the United States. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ In connection with our processing of personal data (as defined by European law) received from the European Union, the United Kingdom or Switzerland, ActiveCampaign and AC PM LLC comply with the EU-U.S. Data Privacy Framework (“ EU-U.S. DPF ”), the UK Extension to the EU-U.S. DPF and the Swiss-U.S. Data Privacy Framework (“ Swiss-U.S. DPF ”) as set forth by the U.S. Department of Commerce (collectively, the “ Data Privacy Framework ”) with respect to personal data we process from the EU, the UK or Switzerland and transfer to the United States. ActiveCampaign has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“ EU-U.S. DPF Principles ”) with regard to the processing of personal data received from the EU and the UK in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. ActiveCampaign has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“ Swiss-U.S. DPF Principles ”) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. For more information about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov . ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ In order to provide you with the Services you subscribe to or that you request from us, information about you may be transferred to ActiveCampaign locations in the United States, Australia, Ireland, Brazil, and Costa Rica as well as countries where our service providers and approved ActiveCampaign partners may be based. In some cases, information about you may be transferred to or accessed from other countries, including when you consent and allow us to do so, where it is required in order for us to provide Services to you and when we need to do so to provide functions like product support, troubleshooting and gaining insights into the usage patterns of our Services. When information about you is transferred to countries other than your home country, you may not have the same rights and protections as you do under local law. Any international transfers of such information will be done in accordance with applicable law.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We may retain your personal information for the length of time as described in the “ Retaining Your Information ” section above.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ If you are a current client, you may update, correct or delete certain account information about you at any time by logging into your online account or emailing us at privacy@activecampaign.com . If you wish to cancel or temporarily pause your account, please email us at privacy@activecampaign.com and let us know what you are requesting, but note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period of time.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We will retain information about you only for as long as is necessary for the purposes set out in this Privacy Policy or as described to you, including for as long as your account is active (i.e., for the lifetime of your account), or as needed to provide the Services to you. If you no longer want us to use information about you to provide the Services to you, you may cancel your account. We will retain and use such information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws or to demonstrate our compliance with applicable laws governing our interaction with you), resolve disputes and enforce our agreements. We also retain log files for internal analysis purposes. These log files are generally retained for a limited period of time, except in cases where they are used for the safety and security of the Services, to improve functionality of the Services or we are legally obligated to retain them for longer time periods.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Should you choose to connect your email account to our platform, you will be using a set of features built using technology from Nylas, Inc. By signing up or using the Nylas application, you understand and agree that Nylas, Inc. and its affiliates who provide Nylas (“ Nylas ”), will have access to your information and will be permitted to use that information for specific, limited purposes to provide the Services to you, in accordance with our agreement with Nylas. This integration is a completely optional service and is not required to use our platform. Google OAuth: You have the option of integrating aspects of your Google email metadata with your account through our integration with Nylas. We will ask for your consent to connect your Google account to your ActiveCampaign account. This step is optional but can very valuable in helping you to make the best use of our platform by tracking your interactions with your leads and customers. When you connect your Google account with the ActiveCampaign platform through Nylas, we will have access to certain information such as the email meta headers (sender, recipient, and date), the email message body and subject line (“ Google Data ”). We only process Google Data you make available to us through this integration in order to provide the Service to you and to improve the Services, consistent with Google’s Limited Use Requirements . We do not independently access the Google Data ourselves unless we first obtain your consent to view the Google Data (e.g., to provide you with tech support), we need to do so for internal security purposes, to comply with applicable law, or where the data is fully aggregated and anonymized for internal use purposes and cannot be used to identify you or your email recipients. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ required by any applicable law, rule or regulation (including lawful requests by public authorities to meet national security or law enforcement requirements); If we believe your actions are inconsistent with the spirit or language of our user agreements or policies, or to protect the rights, property and safety of ActiveCampaign or others; With our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests; In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company; Between and among ActiveCampaign and our current and future parents, affiliates, subsidiaries and other companies under common control and ownership; and With your consent or at your direction. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ ActiveCampaign offers use of a payment card as a convenience to its customers and uses a third-party payment processor to process payment transactions. By enabling payment by payment card, you agree to be bound by the separate terms of service applicable to the third-party payment processing services. You acknowledge and agree that all information submitted in connection with your payment card is separately collected, processed and stored by the third-party payment processor and is subject to the third-party payment processor’s privacy policy. ActiveCampaign reserves the right to change or add third-party payment processors at any time. ACTIVECAMPAIGN WILL NOT BE RESPONSIBLE FOR AND WILL HAVE NO LIABILITY IN RESPECT OF ANY SERVICES PROVIDED BY THE THIRD-PARTY PAYMENT PROCESSOR. By providing a credit card or other payment method that we accept, you represent and warrant that you are authorized to use the designated payment method. In addition, you authorize us (or our third party payment processor) to charge your payment method for the total amount of your subscription fees or one-time purchases (and applicable taxes and other charges). If the payment method cannot be verified, is invalid or is otherwise not acceptable, your account may be suspended until your payment is processed. You must resolve any problem we encounter in order to proceed. You acknowledge that the amount billed may vary due to promotional offers, changes to your subscription or changes in applicable taxes or other charges, and you authorize us (or our third party payment processor) to charge your payment method for the corresponding amount. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We often need to engage other companies and individuals to help us operate and provide the Services. This includes our related bodies corporate, vendors and service providers (such as learning management platforms, customer service support, analytics and security providers) who have only limited access to information about you, may use such information only to perform these tasks on our behalf, and are obligated to us not to disclose or use information about you for other purposes. We will not disclose information about you except in the following circumstances or as otherwise described in this Privacy Policy: With related bodies corporate, vendors, consultants and service providers who need access to such information to carry out work on our behalf, such as companies that assist us with web hosting, payment processing, fraud detection and prevention, customer service support providers and chatbot providers; If you post content in a public area of our Services, we disclose this information publicly on our Services; If you choose to use integrations we offer on our Services or to otherwise integrate third party products with our Services, such as connecting your email account to our platform or integrating an ecommerce account with our Services, we may disclose certain information to the integration partners or as directed by you through the integration you enable (See our “Integrations with Other Services” section for more information); With approved ActiveCampaign partners to provide the Services, customer support, and additional onboarding, implementation and consulting services to you in your local language; In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation or legal process, or as otherwise” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ In addition, we will only transfer the Google Data to others if necessary to provide or improve user-facing features that are prominent in the Services, to comply with applicable laws, or as part of a merger, acquisition, or sale of assets. We also do not use Google Data for advertising purposes. At any time, you can disconnect your Google account and delete this data in your account or by reaching out to privacy@activecampaign.com and requesting that it be deleted.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We may disclose your personal information to third parties as described in the “ Disclosure of Information ” section above. Note that any disclosure of information as described in that section does not apply to Contact Data.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If you are in Brazil, the following applies to you: You acknowledge and accept EBANX PTE. LTD. (“ EBANX ”) as a third-party payment processor and authorize EBANX to process any and all payments to ActiveCampaign, which may include foreign exchange transactions. All payments processed by EBANX will be in accordance with the EBANX terms and conditions available at https://www.ebanx.com/pt-br/legal . You agree to promptly provide any additional information or documents requested by EBANX to comply with EBANX policies or applicable laws. Moreover, EBANX may contract a third-party payment provider or financial partner, duly licensed and regulated by the Brazilian Central Bank, to carry out exchange operations and remittances if permitted by the applicable laws.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ In the preceding 12 months, we have disclosed the following CCPA-defined categories of personal information for business or commercial purposes to the following categories of recipients:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Category of Personal Information Disclosed for a business or commercial purpose Categories of Recipients Identifiers Related bodies corporate, vendors, consultants and service providers who perform services on our behalf including, data hosting providers, fraud detection and prevention vendors, customer service support providers, IT support providers, learning management platforms, video hosting platforms, cloud services providers Characteristics of protected classifications under state or federal law Related bodies corporate, vendors, consultants and service providers who perform services on our behalf including data hosting providers, cloud services providers Commercial Information Related bodies corporate, vendors, consultants and service providers who perform services on our behalf including payment processors, IT support providers, cloud services providers Internet or electronic network activity information Related bodies corporate, vendors, consultants and service providers who perform services on our behalf including data hosting providers, data analytics providers, cloud services providers Geolocation data Related bodies corporate, vendors, consultants and service providers who perform services on our behalf including data hosting providers, data analytics providers, cloud services providers Audio, electronic, visual, thermal, olfactory, or similar information Related bodies corporate, vendors, consultants and service providers who perform services on our behalf including data hosting providers, cloud services providers Professional or employment related information Related bodies corporate, vendors, consultants and service providers who perform services on our behalf including data hosting providers, cloud services providers Education” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ In addition, we may disclose aggregated or de-identified information, which cannot reasonably be used to identify you. Please also see our “Advertising and Analytics Services Provided by Others” section below.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ You may have the option of integrating our Services with other services, technologies or platforms on your desktop, permitted websites and/or your mobile phone. For example, we may offer you widgets that have countdowns to various launches as well as the opportunity to connect the Services with other third-party services that you use in your business. These integrations may require you to input information about you or result in the disclosure of information about you from the Services to a third party, or cause the Services to receive information about you from a third party with whom you instruct us to integrate. These integrations may (i) check for updates automatically and transmit your information to their server and/or engine; (ii) send information entered into or accessed by the technology to its server and/or engine; (iii) be visible to the public if embedded on publicly available webpages (such as social networking webpages); or (iv) transmit information about you to or from the Services, depending on the policies of that website. Please note that when you enable an integration between the Services and a third party, any information about you that is transmitted to a third party will be subject to the policies and procedures of that third party and not of ActiveCampaign.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Internet or electronic network activity information Advertising networks and social networks You have the right to opt out of this “sharing” at any time by going to our “Do Not Sell or Share My Personal Information” link on our CCPA webpage . We do not knowingly collect, and therefore do not share, the personal information of consumers under the age of 16.” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ d. Usage Limits. In accordance with Section 5.4 of these Terms, the usage limits that apply to your use of the AC WhatsApp Service will be specified in the billing page within your account console. When you register for a paid subscription to the AC WhatsApp Service, you will select the maximum number of WhatsApp Contacts to which you are permitted to send Marketing Content through your account (“ WhatsApp Contact Limit ”). You may increase the WhatsApp Contact Limit by upgrading your subscription plan or purchasing increases to your WhatsApp Contact Limit as an additional product enhancement. If you are bundling the AC WhatsApp Service with other Services, you will be prompted to select an email Contact limit for such Services, as well as a WhatsApp Contact limit. Your monthly send limit (if applicable) will be based on the WhatsApp Contact Limit and your subscription plan, as may be further described on our Pricing page. If you reach your monthly send limit, you will not be able to send any more messages to your WhatsApp Contacts, including any messages scheduled for sending at a future date, until the start of the next calendar month. You may increase your monthly send limit by upgrading your subscription plan or purchasing increases to your WhatsApp Contact Limit.” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ a “WhatsApp Contact” means a Contact to whom you have sent a message via WhatsApp using the AC WhatsApp Service or from whom you have received a message via WhatsApp. For clarity, each WhatsApp Contact constitutes a “Contact” within the meaning of Section 5.2 of these Terms. Without limiting the definition of “Contact Data” provided in Section 4 of these Terms, “Contact Data” of WhatsApp Contacts further includes any content or information that we access directly or indirectly in connection with your use of the AC WhatsApp Service. “WhatsApp Eligibility Requirements” has the meaning set forth in Section 5.6 of these Terms. a “WhatsApp Credit” or “WhatsApp Credits”, mean one or more credits that you purchase from ActiveCampaign to send Paid Messages to WhatsApp Contacts. “Paid Messages” are the messages described at the “ Purchasing ActiveCampaign WhatsApp Messaging ” help article (the “ Purchasing Help Page ”) that WhatsApp Credits can be used to purchase; provided, that ActiveCampaign reserves the right to modify what constitutes a “Paid Message” at any time, as well as the price per WhatsApp Credit, without additional notice to you, including without limitation to reflect changes made to the WhatsApp Business Platform’s pricing model; any such changes will be communicated via an update to the Purchasing Help Page.” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.