Apollo.io procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Where Is Information Processed? ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “### Where Is Information Processed? ###” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ In some cases, your personal information may be transferred to, stored, and processed in a country that is not regarded as ensuring an adequate level of protection for personal information under European Union or other applicable laws. However, we will seek to ensure that a similar degree of protection is afforded to your personal information by ensuring that, where possible, we have put in place appropriate safeguards (such as standard contractual clauses approved by the European Commission) in accordance with applicable legal requirements, or otherwise transfer personal information in accordance with applicable laws, such as, where the transfer is necessary for the performance of a contract between you and us or between us and a third party in your interest, where the transfer is necessary to establish, exercise or defend legal claims, or where the transfer is made for important reasons of public interest. For more information on the appropriate safeguards in place or to obtain a copy, please contact us at privacy@apollo.com. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ How Long Is Information Retained? ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ When deciding how long to keep your personal information after our relationship with you has ended, we take into account how long we need to retain the information to fulfill the purposes described above and to comply with our legal obligations, including obligations to financial services regulators. We may also retain personal information to investigate or defend against potential legal claims in accordance with the limitation periods of jurisdictions where legal action may be brought.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “### How Long Is Information Retained? ###” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ The CCPA does not restrict our ability to do certain things like comply with other laws or comply with regulatory investigations. In addition, the CCPA does not apply to certain information like personal information collected, processed, sold or disclosed pursuant to the GLBA. We also reserve the right to retain, and not to delete, certain personal information after receipt of a Request to Delete from you where permitted by the CCPA or another law or regulation.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ We retain your personal information as described above in the section How Long Is Information Retained? ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose information when we believe in good faith that such disclosures:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not “sell” your personal information under the CCPA, meaning we do not rent, release, disclose, transfer, make available, or otherwise communicate personal information to another business or third party for monetary or other valuable consideration. We also do not “share” your personal information, as defined under the CCPA to mean sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose this information to third-parties for the purposes and on the basis described above (see Section B), for example, to process your transactions and to respond to your requests for information or communications from third-parties.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Third parties as needed to complete a transaction, including financial institutions or advisors, entities that assist with fraud prevention, custodians or lenders to or creditors of a fund Identifiers; Additional information subject to Cal. Civ. Code § 1798.80(e); Characteristics of protected classifications under certain federal or state laws; Commercial information; Education information; Professional or Employment Related Information; Inferences Performing services; Auditing related to interactions with you and concurrent transactions; Short-term transient use; Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; Debugging and repainting errors impairing functionality (such as website); and Activities to verify, maintain, or improve the quality of our services. Professional services organizations, such as auditors and law firms Identifiers; Additional information subject to Cal. Civ. Code § 1798.80(e); Characteristics of protected classifications under certain federal or state laws; Commercial information; Education information; Internet or Electronic Network Activity Information; Audio (e.g., voicemail), electronic, visual or similar information; Professional or Employment Related Information; Inferences Performing services; Auditing related to interactions with you and concurrent transactions; Short-term transient use; Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; Debugging and repainting errors impairing functionality (such as website); Internal research for technological development and demonstration; and Activities to verify, maintain, or improve” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may collect personal information about you from other sources such as our service providers or other vendors that assist with our business. Additionally, some of our third-party partners may ask you to provide personal information on their websites and may share such personal information with us, as governed by their respective privacy policies.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Sometimes we engage companies that process information for us or act on our behalf in association with the operation of the Sites and our services. For example, such companies may deliver products or services, improve the functionality of the Sites, collect information about you, communicate with you, or store information for us. In some cases, these companies may need to access information about you.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ In addition, we may disclose and in the preceding 12 months, may have disclosed for all of the categories of personal information identified in The Types of Information We Collect and How We Collect It above to the following categories of third parties: (i) judicial courts, regulators, or other government agents purporting to have jurisdiction over us, our subsidiaries or our affiliates, or opposing counsel and parties to litigation; and (ii) other third parties as may otherwise be permitted by law. We may disclose the categories of personal information identified in The Types of Information We Collect and How We Collect It for the business or commercial purposes identified above in How We Use the Information We Collect . Additionally, we may disclose your personal information to third parties upon your request, at your direction, or with your consent.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We do not sell or share your personal information (as those terms are defined under the CCPA). We do not knowingly sell or share the personal information of California Residents under 16 years old. In the preceding 12 months, we may have disclosed for a business purpose the following categories of personal information (described in more detail in The Types of Information We Collect and How We Collect It above) to the following categories of third parties, as describe in the below chart:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share your information with our affiliates and subsidiaries, or with our attorneys, banks, auditors, securities brokers and other service providers in connection with the purposes described above. We may also partner with other organizations or companies to provide co-sponsored or co-branded promotions, services, or events, and we will share your information with our co- sponsor(s) and partners to the extent necessary for the partnership to function.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ are required by law, including, for example, to comply with a court order or subpoena, or in response to a law enforcement agency’s request; will help to protect our rights or enforce our Terms of Use; will support our detection, prevention, or response to fraud or intellectual property infringement; at your direction or with your consent; will help protect your safety or security, including the safety and security of property that belongs to you; and will protect the safety and security of the Sites, databases, and/or third-parties, including the safety and security of tangible and/or intangible property that belongs to us or to third-parties.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Prospective lenders to or creditors of a fund or portfolio company in which we have or are considering investing Identifiers; Additional information subject to Cal. Civ. Code § 1798.80(e); Commercial information; Education information; Professional or Employment Related Information; Inferences Performing services; Auditing related to interactions with you and concurrent transactions; Short-term transient use; Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; Debugging and repainting errors impairing functionality (such as website); and Activities to verify, maintain, or improve the quality of our services Our portfolio companies Identifiers; Additional information subject to Cal. Civ. Code § 1798.80(e); Commercial information; Education information; Professional or Employment Related Information; Inferences Performing services; Auditing related to interactions with you and concurrent transactions; Short-term transient use; Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; Debugging and repainting errors impairing functionality (such as website); Activities to verify, maintain, or improve the quality of our services; and Business development and marketing initiatives. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The services we use include, but may not be limited to: Google Analytics and Adobe, which may provide you with choices about how they collect and use information. As described above, we share personal information with analytics providers on the basis that it is necessary to meet our legitimate interests in efficiently managing our business and for developing future business. To find out more about how Google Analytics collects and processes data, please click here. Google Analytics has its own cookies that it uses to track and aggregate this information. You can prevent the use of Google Analytics relating to your use of our Site by downloading and installing the browser plugin available here. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Except as otherwise disclosed in this Privacy Notice or as otherwise communicated to you, Apollo takes reasonable steps to require these companies to collect, store, and use information about you only on our behalf and in accordance with this Privacy Notice. We share personal information with service providers on the basis that it is necessary to meet our legitimate interests in efficiently managing our business and for developing future business.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ The above-described disclosures are provided on the basis that they are either necessary to comply with our legal obligations or they are necessary to meet our legitimate interests in managing our business efficiently and for developing future business.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may also disclose your personal information or otherwise make it available to our service providers such as our IT and/or CRM providers, other entities that have agreed to limitations on the use of your personal information, or entities that fit within other exemptions or exceptions in, or as otherwise permitted by, the CCPA.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The third-party partners from which we receive personal information include web hosting providers. We may receive information related to name, occupation, address, and contact information from such third-party partners. Our use of information received from such a third- party will be dictated by the third party’s privacy policy and not this Privacy Notice.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Category of Third Parties Categories of Personal Information Business or Commercial Purpose for Disclosure Our affiliates Identifiers; Additional information subject to Cal. Civ. Code § 1798.80(e); Characteristics of protected classifications under certain federal or state laws; Commercial information; Education information; Internet or Electronic Network Activity Information; Audio (e.g., voicemail), electronic, visual or similar information; Professional or Employment Related Information; Inferences Performing services; Auditing related to interactions with you and concurrent transactions; Short-term transient use; Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; Debugging and repainting errors impairing functionality (such as website); Internal research for technological development and demonstration; Activities to verify, maintain, or improve the quality of our services; Business development and marketing initiatives. Counterparties and intermediaries (e.g., broker- dealers) Identifiers; Additional information subject to Cal. Civ. Code § 1798.80(e); Characteristics of protected classifications under certain federal or state laws; Commercial information; Education information; Professional or Employment Related Information; Inferences Performing services; Auditing related to interactions with you and concurrent transactions; Short-term transient use; Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; Debugging and repainting errors impairing functionality (such as website); and Activities to verify, maintain, or improve the quality of our services. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The Sites may contain links to websites operated by third-parties, and your personal information may be collected by those third-parties when you use their websites.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may engage analytics providers to help us understand how users engage with the Sites. These providers may use cookies and similar technologies to collect information about your use of the Sites as well as information about your use of other websites over time.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may also disclose your information to service providers that provide products or services to us or to facilitate our business operations, including marketing, advertising and related services.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Third-parties, such as our analytics providers, may collect data that relates to you on the Sites, across time, and over other websites. We cannot control third-parties’ responses to do-not-track signals or other such mechanisms. Third-parties’ use of data relating to you and responsiveness to do-not-track signals is governed by their respective privacy policies.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share information about you with third-parties when you engage in certain activities on the Sites that are sponsored by third-parties. For example, you may choose to purchase products or services offered by a third-party or elect to receive information or communications from a third- party. If you engage in such third-party offerings, we may share information (e.g., your e-mail address) with third-parties in association with the offerings.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 2. Service Providers” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may also share information about you to the extent reasonably necessary to proceed with the consideration, negotiation, or completion of a merger, reorganization, or acquisition of our business, or a sale, liquidation, or transfer of some or all of our assets.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 4. Additional Sharing Practices” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Please note that for purposes of this Section E, “sharing” does not include “sharing” as defined under the CCPA. For additional disclosures and information on our CCPA practices, please review Additional Information for California Residents below.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ If you are a California resident, you have the right to request certain information from us regarding the manner in which we share with third-parties certain categories of information that identifies you for the third-parties’ direct marketing purposes. If you wish to exercise this right, please email us at privacy@apollo.com . For additional information about your rights under the CCPA and how to exercise those rights, refer to Additional Information for California Residents .” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 3. Analytics Providers” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.