Char procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You have the right to lodge a complaint with your local supervisory authority.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Correction — ask us to correct inaccurate or incomplete information.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Objection and restriction — object to certain processing or ask us to restrict it.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ To exercise any of these rights, email privacy@char.com with "Privacy Request" in the subject line. We may ask for information to verify your identity. We will respond within the period required by applicable law (typically 30 days).” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Our Service is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the U.S. and other countries where our subprocessors operate. By using the Service, you understand that your information will be processed in countries that may have different data protection laws than your own. Where required, we use Standard Contractual Clauses or other valid transfer mechanisms.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Access — request a copy of the personal information we hold about you.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Deletion — ask us to delete your account and personal information.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ When we transfer personal data out of the EEA, UK, or Switzerland to the United States or other countries, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Depending on where you live, you may have the following rights:” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Portability — receive a machine-readable copy of data you provided.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Withdrawal of consent — where processing is based on consent, withdraw it at any time.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ You may request that we delete personal information we have collected from you.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Cloud-stored notes, transcripts, and integration data — retained while your account is active or until you delete them. Deleted within 30 days of account deletion.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Local data — stored on your device. Not affected by account deletion. You can delete it through your operating system at any time.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Logs, telemetry, and analytics — typically retained for up to 12 months in pseudonymous form.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Billing records — retained for the period required by applicable tax law (typically 7 years).” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ On termination, your license to use the Service ends. We will delete your cloud-stored data within the timelines in the Privacy Policy. Provisions that by their nature should survive (including Sections 4.2, 4.4, 10, 12, 13, 14, 15, and 16) will survive.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Account data — retained while your account is active. Deleted within 30 days of account deletion, except where we are required to retain it for legal, tax, or fraud-prevention purposes.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Meeting audio and transcripts — if you choose to record a meeting, Char captures audio from your device (and, where you opt in, from a meeting bot) to produce a transcript. Audio is processed transiently for transcription and is not retained on our servers after the transcript is delivered, unless you explicitly enable cloud storage of recordings.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ You may delete your account at any time by emailing privacy@char.com or using the in-app account deletion flow, where available. After deletion, we will remove your cloud-stored data within the timelines described in the Privacy Policy. Locally stored data on your device is not affected.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Meeting audio — processed transiently for transcription. Not stored on our servers after the transcript is delivered, unless you explicitly enable cloud storage of recordings.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ For legal reasons , when we receive a valid legal request, or to protect the rights, safety, or property of Char, our users, or the public. We will push back on overbroad requests where appropriate and, where legally permitted, give you notice.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Google Analytics, Microsoft Clarity Website analytics Web interaction metadata (with consent where required) ” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ With our subprocessors as listed above, to deliver the Service.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ You authorize Char to exchange the data you select with that third party.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Regular review of subprocessors and access patterns.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ With your direction , when you connect an integration or share content with another user.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may add, remove, or change features at any time. We may add or remove subprocessors as described in our Privacy Policy . When we make material changes that materially reduce functionality you depend on, we will provide reasonable advance notice.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Integration content — when you connect a third-party service (such as Google Calendar, Slack, GitHub, Linear, Devin, or Loops.so), Char accesses the data you authorize that integration to share. You can revoke any integration at any time from in-app settings.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ With your employer or workspace administrator , where you signed up using an organization-provisioned email address or are part of a paid team plan. In that case, the administrator can manage your access, billing, and account settings. Your raw note content is not transferred to the administrator without your consent.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may add, remove, or replace subprocessors as the Service evolves. The current list is maintained on this page; material changes will be announced via email or in-app notice before they take effect.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ In a corporate transaction , such as a merger, acquisition, or sale of assets. Your data remains subject to this Policy, and we will provide notice of any material change in handling.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Billing information — for paid plans, billing name and address. Card numbers are handled directly by our payment processor (Stripe) and are not stored on our servers.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We share information only as described here:” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Amazon Web Services (AWS) Cloud hosting and storage (US region) All cloud-stored Customer Content and account data Stytch Authentication and identity Email, authentication tokens, device metadata Stripe Payment processing Billing details, card data (handled by Stripe directly) Recall.ai Meeting bots for video calls Meeting audio (transient), meeting metadata ” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Service connects to third-party services — including AI model providers, calendar and email providers, integration brokers, and meeting platforms — to deliver certain features. When you enable an integration:” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ You can disconnect any integration at any time from in-app settings.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We use a small number of trusted vendors to run the Service. Each is bound by a data processing agreement and processes data only as needed to deliver the function below.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ That third party's terms and privacy practices apply to your use of their service.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ We may change subscription prices. If we do, we will notify you at least 30 days before the change takes effect. The new price applies to your next renewal. If you do not agree, you may cancel before the change applies.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Some features require a paid subscription. We will tell you the price, billing cycle, and what is included before you subscribe. Subscriptions renew automatically until you cancel.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ All fees are stated and charged in U.S. dollars unless we specify otherwise. We use Stripe to process payments. You authorize us to charge your payment method for all fees due, including taxes.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Free trials and promotional credits, where offered, have the terms we publish at the time. We may end or change them at any time, except for benefits you have already accrued.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ You can cancel any time. Cancellation takes effect at the end of the current billing period. Fees already paid are non-refundable , except where required by law or where we expressly state otherwise.” | Captured 2026-09-24Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.