Albato procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | medium | “ Your personal data will be processed in EEA and United States. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy regardless of any legal requirements which may apply in these jurisdictions.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ When we processes any personal data on your behalf, you are the controller and we are the Processor for the purposes of the Data Protection Legislation.We only will process that personal data only on your explicit instructions, notify you without undue delay on becoming aware of a personal data breach; at your direction, delete or return personal data and copies thereof, unless required by Applicable Law to store the personal data;” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ "Data Protection Legislation" means Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), California Consumer Privacy Act, Brazilian Civil Rights Framework for the Internet (Law 12,965/2014), Decree 8,771 of 11 May 2016 (Decreto N 8.771 de 11 de Maio de 2016) and any other European Union or Brazilian legislation relating to personal data and all other legislation and regulatory requirements in force from time to time which apply to a party relating to the use of personal data (including, without limitation, the privacy of electronic communications).” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ For the purpose of the Data Protection Legislation the data controller ("Albato", "we", "us" and "our" ) is Albato Ltd, a company incorporated in Cyprus having its registered office at Vasilissis Freiderikis, 34 Flat/Office 106, 1035, Nicosia, Cyprus.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Please be informed that after we delete your personal account at your request, you will not be able to reactivate it and restore the information.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ You have right to Request Erasure of your information, always subject to the provisions of the applicable law. ” | Captured 2026-07-03Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ The identity of the data subject must be proven in a suitable way; thus we will” | Captured 2026-07-03Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ · Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ If you would like to exercise the said right in connection with the Services, with the site www.albato.com , Facebook App or other means of access to Albato, please contact us via email support@albato.com or via support chat available in your personal account. This right is available to all users than can access Albato via any means.” | Captured 2026-07-03Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We might hold your information for as long as is necessary to comply with our and legal obligations and in accordance with our legitimate interests as a data controller after the contractual relationship between you and us elapses. The lawful basis for such retention is Legitimate interests and Legal obligation. As the data subject you have rights related to maintenance, storage and processing of your personal data. Please see paragraph "Your rights".” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ · Where our use of the data is unlawful but you do not want us to erase it.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ The right to request deletion of your information is not unreservedly guaranteed, it is limited especially when colliding with the right of freedom of expression and information and compliance with our legal obligations. Depending on the situation (e.g. our obligations may differ for Site and Services and Facebook App situation), we may partly deny your request, e.g. when we are legally obliged to keep all or some of your information for some prescribed time.” | Captured 2026-07-03Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We will keep your personal data during the performance of an oral or written contract between you and us or during the communication process related to the steps prior to entering a prospective verbal or written contract.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We may continue to retain such Personal Information even after the contract between parties terminates, as reasonably necessary to comply with our legal obligations or to protect our legitimate interests if applicable. We will use reasonable endeavours to ensure your data is up-to-date. As a data subject you have rights related to maintenance, storage and processing of your personal data. Please see paragraph "Your rights".” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Unless otherwise specified, where you have indicated to us that you are happy for us to send you the information about our products and services we offer and we feel may interest you or similar to those that you have already purchased or enquired about do so, we assume you are happy for us to keep your collected personal data. We may retain your Personal Information (contact details) for as long as your User Account is active or as otherwise needed to provide you with information about our services. As the data subject you have rights related to processing of your personal data and the option of withdrawing your consent to receive promotions at any time. Please see paragraph "Your rights".” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ then process your request in accordance with applicable law.” | Captured 2026-07-03Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ California Privacy Rights: We will not share any Personal Data with third-parties for their direct marketing purposes to the extent prohibited by California law. If our practices change, we will do so in accordance with applicable laws and will notify you in advance.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ ● We may disclose your information to third parties when we reasonably believe we are obligated to do so by law, and in order to investigate, prevent, or take action regarding suspected or actual prohibited activities, including but not limited to, fraud and situations involving potential threats to the physical safety of any person. We may disclose or otherwise allow others access to your Personal Information pursuant to a legal request, such as a subpoena, legal proceedings, search warrant or court order, or in compliance with applicable laws, if we have a good faith belief that the law requires us to do so, with or without notice to you. Your details may also be disclosed to the police and law enforcement agencies for the purpose of fraud detection, crime prevention and national security.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not rent, sell, or share personal information about you with other people or non-affiliated companies without your consent except to provide products or services you've requested, when we have your permission, or under the following circumstances:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ ● Customer Data that you send to Google, or data that you request from any of the Google services, automatically or otherwise. Note that, as a security precaution, if you choose to connect your apps or services provided by Google via Albato API and you request data from any of the Google services, information that identifies you or your device may also be sent in order to authenticate the request. You can revoke access at any time.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. This includes technical data from analytics providers such as Google based outside the EU;” | Captured 2026-07-03Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ ● Email addresses of your Inbox and Sent folders, when you choose to sync your apps and Gmail with your device's address book using Albato services. Please note, Albato has no access to your Contacts; and” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ ● In the event we are acquired by or merged with a third party entity or undergo another change of control, we reserve the right to transfer information to a successor entity. In this event, we will notify you by electronic means before information about you is transferred and becomes subject to a different privacy policy.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We might hold your information for as long as is necessary to comply with our and legal obligations and in accordance with our legitimate interests as a data controller after the contractual relationship between you and us elapses. The lawful basis for such retention is Legitimate interests and Legal obligation. As the data subject you have rights related to maintenance, storage and processing of your personal data. Please see paragraph "Your rights".” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ ● The contents, metadata and related information of emails, Google calendar events and stored files when you choose to sync your App with Gmail, calendar and cloud storage services (Google Drive);” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ · integrate our services;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If you connect your apps or services provided by other parties such as Google via your Albato integration services, certain Customer Data may be collected from your device by Google and accessed by Albato. In order to provide authentication and authorization for these processes Google APIs use the OAuth protocol. Certain types of data may be collected automatically through the use of application programming interfaces such as the Google API Services or Gmail's API (OAuth), you can find further information here: https://developers.google.com/identity/protocols/oauth2 and may include:” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.