Auctor procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ To the extent the processing of your personal information is subject to the European Union (“EU”) General Data Protection Regulation (“EU GDPR”) or UK General Data Protection Regulation (“UK GDPR”), the following terms apply in addition to the above Sections: EU Representative Pursuant to Article 27 of the EU GDPR, Auctor has appointed Ria Pardeep as its representative in the European Union. You may contact our EU representative at [email protected] . UK Representative Pursuant to Article 27 of the UK GDPR, Auctor has appointed Graham Reilly as its representative in the United Kingdom. You may contact our UK representative at [email protected] . ” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are a resident of Quebec, Alberta, or British Columbia, you may be afforded certain rights under the Privacy Act (Law 25), Alberta Personal Information Protection Act (“Alberta PIPA”), or the British Columbia Personal Information Protection Act (“BC PIPA”), respectively. Under these laws, you may be provided with the following rights:” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are located in the EU/EEA or UK, to the extent provided for by law, you have the right:” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Our processing of personal information of individualslocated in Australia is governed by the Australian Privacy Principles (“APPs”)contained in the Privacy Act 1988. A copy of the APPs may be obtained from thewebsite of the Office of the Australian Information Commissioner at https://www.oaic.gov.au/. ” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are located in Canada, you may be provided with certain rights pursuant to the Personal Information Protection and Electronic Documents Act (“PIPEDA”), including:” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Any information you provide tous through the use of the Services may be stored, processed, transferred among,and accessed from the United States. We will handle your personal informationin accordance with this privacy policy regardless of where your personalinformation is maintained. Regarding transfers from the EEA or UK to the UnitedStates, we rely on the derogations for transfers which are necessary to performthe transaction with you, including, as applicable, the Standard ContractualClauses. Where required by law, you may request a copy of the suitablemechanisms we have in place by contacting us as detailed below. If you residein other non-US jurisdictions outside the EEA or UK, your use of the Servicesor provision of any personal information constitutes your consent for thetransfer of such data to the United States for the purposes identified above.If you have questions about cross-border transfers, please contact us asdetailed below. ” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ • To have your personal information erased.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ • The right to have personal information de-indexed, in certain circumstances (i.e., “the right to be forgotten”).” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain your data only for as long as necessary to fulfill the purposes outlined in this privacy policy or as required by law. When data is no longer needed, we ensure its secure deletion using secure data-wiping methods. ” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ • Deletion. You may request that we delete personal information about you that we maintain, subject to certain exceptions under applicable law.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The provisions of this privacy policy, including thosedisclosing the kinds of personal information collected and processed, thepurposes for such collection and processing, and the manners in which you mayaccess your personal information, are applicable to you. When processingpersonal information in connection with the provision of our Services, we actas an agency under the Australian Privacy Act. Your personal information willbe stored and processed in the United States, and we may disclose personal informationto recipients located in the United States.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may disclose personal information that we collect or you provide as described in this privacy policy:” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Auctor's access to, use of, and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements. Specifically, with respect to any data obtained through Google APIs ("Google user data"), whether in raw, aggregated, or anonymized form:” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • For any other purpose disclosed by us when you provide the information or for any other purpose with your consent.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • To enforce or apply agreements to which we are a party, including for billing and collection purposes.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • To fulfill the purpose for which you provide it.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose the following categories of personal information, as categorized by CCPA, to our service providers:” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Auctor’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Auctor about our Services users is among the assets transferred.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Auctor, our customers, or others.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Transfer. We do not transfer or sell Google user data to third parties, including data brokers, advertisers, or information resellers, except (i) as necessary to provide or improve user-facing features and only with the user's consent; (ii) to comply with applicable law; or (iii) as part of a merger, acquisition, or sale of assets, with notice to affected users. Human access. We do not allow humans to read Google user data unless (i) we have obtained the user's affirmative agreement to view specific data; (ii) it is necessary for security purposes, such as investigating abuse; (iii) it is necessary to comply with applicable law; or (iv) the data has been aggregated and anonymized and is used for internal operations. Notwithstanding any other provision of this Privacy Policy, including provisions relating to advertising, marketing, or disclosure to third parties, the terms of this section govern our handling of Google user data and control in the event of any conflict. Transferring Personal Data to the U.S. Auctor AI is headquartered in the United States. By using our Services, you acknowledge that your personal information will be processed in the United States. We have implemented appropriate safeguards, including standard data protection clauses, to protect your data in accordance with GDPR and other relevant regulations. ” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not sell or share your personal information, as such terms are defined by CCPA. ” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • If applicable, enable those vendors to contact consignees/buyers to arrange delivery or collect amounts due (e.g., duties). Where applicable law requires consent (e.g., for certain direct contacts or marketing), we will obtain consent and you may withdraw it at any time.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Some content or applications, including advertisements, on the Services are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies to collect information about you when you use our Services. The information they collect may be associated with your personal information, or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see Choices About How We Use and Disclose Your Information below. ” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • To contractors, service providers, and other third parties we use to support our business.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The exact nature and scope of these rights vary by province. To exercise any applicable Canadian provincial privacy rights, please submit a request by emailing us at [email protected] . We may request additional information from you in order to verify your identity and facilitate your request. If we are unable to complete your request, we will notify you in writing. If you are dissatisfied with our decision regarding your request, you may contact your local Privacy Commissioner’s Office. We may transfer your personal information outside of Canada. In such cases, we will employ reasonable data security measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, or disclosure. If you have any questions regarding how we handle cross-border data transfers, please contact our DPO at [email protected] . ” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • To comply with any court order, law, or legal process, including to respond to any government or regulatory request.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ • Share necessary personal information with carriers, agents, customs brokers, final‑mile vendors, warehouse operators, insurers, IT/collaboration providers, and payment processors to perform the Services; and” | Captured 2026-07-19Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.