Caddy procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Customer data may be stored and processed in the United States and other jurisdictions where our service providers operate. Alternative data residency options may be available where agreed.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ We may transfer and process data in countries outside of your jurisdiction. Where required, we rely on appropriate safeguards, including Standard Contractual Clauses.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Conversation history and other content in your account are retained for the life of your account so you can access them. You can delete this data at any time, or request deletion by contacting us at contact@trycaddy.ai . When an account is deleted: customer data is deleted within 30 days backups may persist for up to an additional 30 days We may retain certain information: for security, fraud prevention, and debugging to comply with legal obligations to enforce our agreements” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ You may need to create an account to use the Service. You agree to: provide accurate information maintain the security of your credentials notify us of unauthorized access You are responsible for all activity under your account. You may delete your account at any time through the Service or by contacting us at contact@trycaddy.ai ” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Service may connect to or rely on third-party services and integrations. This Privacy Policy does not apply to the privacy practices of those third parties, which are governed by their own policies.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ If you connect a financial account, Caddy uses Plaid Inc. (“Plaid”) to access information from your financial institution on your behalf. Through Plaid, Caddy may access and process: transaction history and transaction details account type and financial institution details other financial account information you authorize Caddy to access You connect your financial account through Plaid, and Caddy does not receive or store your financial institution login credentials. Caddy uses the information it receives to provide the Service, such as answering questions about your transaction history and spending, and does not use it to move money. Plaid processes your information in accordance with the Plaid End User Privacy Policy.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Caddy uses subprocessors to operate the Service. A current list of subprocessors is available on request by contacting us at contact@trycaddy.ai .” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share information with service providers that support the operation of the Service, including infrastructure providers, analytics providers, AI service providers, and other operational tools. These providers process information on our behalf and are subject to appropriate safeguards. We may also disclose information: to comply with law or legal process to protect rights, property, or safety in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business Caddy uses Plaid Inc. (“Plaid”) to connect to your financial accounts and retrieve financial account information that you authorize Caddy to access. By connecting a financial account, you grant Caddy the right, power, and authority to access and transmit your personal and financial information from the relevant financial institution on your behalf. You acknowledge and agree that Plaid may access, transmit, store, and process your personal and financial information in accordance with the Plaid End User Privacy Policy, available at https://plaid.com/legal/#end-user-privacy-policy .” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Service integrates with third-party services. By connecting integrations: you authorize Caddy to access data necessary to provide the Service you agree to comply with the terms of those services Caddy is not responsible for: outages or failures of third-party services changes to third-party APIs or functionality data handling practices of third-party services” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Caddy may provide access to the Service on a trial, beta, or evaluation basis. Beta features may: be incomplete change at any time contain errors These features are provided “as-is” without warranties.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Certain features may require payment. Pricing and billing terms will be provided in the Service.” | Captured 2026-09-24Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.