BiteSight procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.” | Captured 2026-09-26Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.” | Captured 2026-09-26Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.” | Captured 2026-09-26Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.” | Captured 2026-09-26Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.” | Captured 2026-09-26Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ the right to request the deletion of your Personal Information. You have the right to request that we delete any of your Personal Information;” | Captured 2026-09-26Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for and may be retained for longer due to applicable legal obligation or based on the Users’ consent.” | Captured 2026-09-26Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to fulfil a legal obligation or upon order of an authority.” | Captured 2026-09-26Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.” | Captured 2026-09-26Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Users are also entitled to learn about the legal basis for Data transfers abroad including to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.” | Captured 2026-09-26Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Personal Data processed: Trackers; Usage Data.” | Captured 2026-09-26Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.” | Captured 2026-09-26Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Sale means any exchange of Personal Information by the Owner to a third party, for monetary or other valuable consideration , as defined by the applicable privacy US state law. Please note that the exchange of Personal Information with a service provider pursuant to a written contract that meets the requirements set by the applicable law, does not constitute a Sale of your Personal Information.” | Captured 2026-09-26Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Finally, we may collect your Personal Information from third parties that work with us in connection with the Service or with the functioning of this Application and features thereof.” | Captured 2026-09-26Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Sharing means any sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer's Personal Information by the business to a third party for cross-context behavioral advertising , whether for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged, as defined by the California privacy laws. Please note that the exchange of Personal Information with a service provider pursuant to a written contract that meets the requirements set by the California privacy laws, does not constitute sharing of your Personal Information.” | Captured 2026-09-26Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ MixPanel is an analytics service provided by Mixpanel Inc.” | Captured 2026-09-26Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Place of processing: United States – Privacy Policy – Opt Out . ” | Captured 2026-09-26Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ This Application uses Trackers. To learn more, Users may consult the Cookie Policy .” | Captured 2026-09-26Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ In Minnesota and Maryland Users also have the right to obtain a list of the specific third parties to which the controller has disclosed the consumer's personal data” | Captured 2026-09-26Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ In addition to the rights listed above common to all Users in the United States, as a User residing in Utah and Iowa, you have:” | Captured 2026-09-26Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.