Bolto procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You have the right to request that we disclose: The categories of Personal Information we have collected about you; The categories of Personal Information about you we have sold or disclosed for a business purpose; The categories of sources from which we have collected Personal Information about you; The business or commercial purposes for selling or collecting Personal Information about you; The categories of Personal Information sold or shared, if any, about you, as well as the categories of third parties to whom the Personal Information was sold, by category of Personal Information for each party to whom Personal Information was sold; and The specific pieces of Personal Information collected. You may submit a request to know using one of the methods described below in “ Methods for Submitting Consumer Requests and Our Response to Requests ”. The delivery of our response may take place electronically or by mail. We are not required to respond to requests to know more than twice in a 12-month period. We do not sell, and have not in the prior 12 months sold, Personal Information about California residents. Therefore, we have not included a “Do Not Sell My Personal Info” link on our Site. If our practices change, we will update this Privacy Policy and take any other necessary action to comply with applicable law. We do, however, disclose Personal Information for business purposes as described in the “Third Parties We Share Personal Information With” section above.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We keep your data on your behalf and for your benefit. You can correct or terminate and delete your Account information by following the instructions on the Services or by e-mail at info@bolto.com, which you may also access for further assistance and questions regarding the Privacy Policy or for a copy of your Account data. If you cancel your Account or request us to delete your information, Bolto will limit its access to Personal Information to perform what is requested by you and will delete information accessible to Bolto within seven business days.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We keep Personal Information related to your Account for as long as it is needed to fulfill the purposes for which it was collected, to provide our services, to deal with possible legal claims, to comply with our business interests and/or to abide by all applicable laws. Thereafter, we either delete Personal Information about you or de-identify it. Please note that even if you request the deletion of Personal Information about you, we may be required (by law or otherwise) to retain the Personal Information and not delete it. However, once those requirements are removed, we will delete Personal Information about you in accordance with your request.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ You have the right to request that we delete any Personal Information about you that we have collected. Upon receiving a verified request to delete Personal Information, we will do so unless otherwise required or authorized by law. You may submit a request to delete Personal Information using one of the methods described below in “ Methods for Submitting Consumer Requests and Our Response to Requests ”.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “After cancellation, you will no longer have access to your Account, your profile or any other information through the Services. The provisions of these Terms of Service which by their intent or meaning intended to survive such termination, including without limitation the provisions relating to disclaimer of warranties, limitations of liability, and indemnification, shall survive the any termination of these Terms of Service and any termination of your use of or subscription to the Services and shall continue to apply indefinitely. We reserve the right to refuse the Services to anyone for any reason at any time. Bolto may terminate or limit your right to use the Services in the event that we are investigating or believe that you have breached any provision of this Agreement, by providing you with written or email notice. Such termination or limitation will be effective immediately upon delivery of such notice. If Bolto terminates or limits your right to use the Services pursuant to this section, you are prohibited from registering and creating a new Account under your name, a fake or borrowed name, or the name of any third party, even if you may be acting on behalf of the third party. Even after your right to use the Services is terminated or limited, this Agreement will remain enforceable against you. Bolto reserves the right to take appropriate legal action, including but not limited to pursuing arbitration in accordance with Section 12 of these Terms of Service. ” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ California Civil Code Section 1798.83 requires certain businesses that share customer Personal Information with third parties for the third parties’ direct marketing purposes to respond to requests from California customers asking about the businesses’ practices related to such information-sharing. We currently do not share or disclose your Personal Information to third parties for the third parties’ direct marketing purposes. If we change our practices in the future, we will implement an opt-out policy as required under California laws. Furthermore, subject to certain exemptions, California residents have the following rights with respect to Personal Information we may have collected about them: ” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Bolto is based in the United States. As a result, Personal Information that we collect in and through the Services and on the Site may be transferred to our U.S. offices. In addition, we may work with third-party service providers in the U.S. and in other countries to support our business activities. Thus, Personal Information may be transferred to, stored on servers in, and accessed from the United States and countries other than the country in which the Personal Information was initially collected. In all such instances, we use, transfer, and disclose Personal Information solely for the purposes described in this Privacy Notice and in compliance with applicable laws.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ any other terms applicable to the use of the services provided by the AI Providers. ” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose Personal Information you provide to us or that we collect automatically on the Site and in and through the Services with the following categories of third parties: Service providers, such as payment processors, web hosting and data storage service providers, and helping us deliver and develop the Services. data storage service providers, marketing service providers, and communications service providers; Public authorities, such as law enforcement, if we are legally required to do so or if we need to protect our rights or the rights of third parties; and Our subsidiaries and affiliates; or a subsequent owner, co-owner or operator of the Site and/or the Services and their advisors in connection with a corporate merger, consolidation, restructuring, the sale of substantially all of our stock and/or assets, or in connection with bankruptcy proceedings, or other corporate reorganization, in accordance with this Privacy Policy.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Payment and any other expenses must be paid through the third party payment processing system (the “ PSP ”) as indicated on the Services. You may be required to register with the PSP, agree to terms of service of the PSP, provide your payment details to the PSP and go through a vetting process at the request of the PSP to set up an account with the PSP (the “ PSP Services Agreement ”). By accepting these Terms of Service, you agree that you have downloaded or printed, and reviewed and agreed to, the PSP Services Agreement. Please note that Bolto is not a party to the PSP Services Agreement and that you, the PSP and any other parties listed in the PSP Services Agreement are the parties to the PSP Services Agreement and that Bolto has no obligations, responsibility or liability to any user or any other party under the PSP Services Agreement. All prices and fees displayed on the Services are exclusive of applicable federal, provincial, state, local or other governmental sales, goods and services or other taxes, fees or charges now in force or enacted in the future (“ Taxes ”). Any applicable Taxes are based on the rates applicable to the billing address you provide to us, and will be calculated at the time of a transaction is charged to your Account. Unless otherwise indicated, all prices, fees and other charges are in U.S. dollars, and all payments shall be in U.S. currency. Subscription Fees; Commitment. ” | Captured 2026-09-24Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.