Bubble Lab procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We are based in the United States and process information in the United States and other countries. Data-protection laws in these countries may differ from those in your jurisdiction. Where we transfer information internationally, we do so in accordance with applicable law and use appropriate safeguards where required. By using the Services, you understand that your information may be transferred to and processed in the United States.” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We retain information for as long as needed to provide the Services, operate our business, and comply with our legal obligations, resolve disputes, and enforce our agreements. We retain information we process on behalf of a Customer in accordance with our agreement with that Customer; following termination, we may retain such information for a limited period to allow export, after which we may delete it subject to legal, security, operational, and routine backup-retention requirements. Aggregated & De-Identified Information may be retained and used indefinitely.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ To operate a Customer's community, we process member and partner data the Customer provides or authorizes us to access, which may include names, contact details, professional background, company and role, interests, asks, expertise, fundraising status, engagement history, and connected messaging content (for example, from Slack, Discord, or WhatsApp workspaces the Customer connects).” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may obtain and enrich information from third-party platforms and publicly available sources, including professional networks (such as LinkedIn and X), public web pages, data-enrichment providers, and integration partners, and combine it with other information we hold to build and improve profiles, matching, search, analytics, and the Services generally.” | Captured 2026-08-14Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.