Clay procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are a resident in the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here .” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “If you are a resident in Switzerland, the contact details for the data protection authorities are available here .” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “In line with data portability requirements for the GDPR, you can easily export data from your Clay and permanently delete data.” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You may review, change, or terminate your account at any time. ” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ In line with the 2018 General Data Protection Regulation (GDPR) Clay offers Data Processing Agreements (DPAs) to users upon request. This DPA includes standard contractual clauses ("Model Clauses") that are the mechanism for GDPR-compliant data transfer. To request a DPA, please email privacy@clay.com .” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with applicable legal requirements.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ If you would at any time like to review or change the information in your account or terminate your account, you can: Log in to your account settings and update your user account.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “Clay is not responsible or liable for the deletion or accuracy of any content, including the content that you upload. This includes storage, transmission and receiving. Clay has the right to create reasonable limits on Clay’s use and storage of content, including reasonable limits on file size, storage space, or processing capacity. Clay will notify users in writing if they make any material changes that could potentially deny your access to your content.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ You’re free to stop using Clay at any time for any reason. Either party may terminate this Agreement for cause with written notice. Upon termination, your access to the Services will be disabled. Sections 5 (User Content), 6 (Intellectual Property), 9 (Modification of Terms), 10 (Privacy Policy), 11 (Data Retention), 14 (Release), 16 (Force Majeure), and 17 (Data Security) will survive termination.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Clay Labs retains user data as long as your user account is active. If your account is deleted, your data is deleted with it. Users can request data deletion by contacting support@clay.run ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Contact us using the contact information provided.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “In line with data portability requirements for the GDPR, you can easily export data from your Clay and permanently delete data.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ the categories of third parties to whom the personal information was sold or disclosed for a business purpose; and” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may collect limited data from public databases, marketing partners, social media platforms, and other outside sources. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose. Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests. Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract. Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements). Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “More specifically, we may need to process your data or share your personal information in the following situations: Business Transfers. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a merger, reorganization, joint venture, assignment, sale, or change of ownership, we may share personal information for the purpose of facilitating and completing the transaction.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Notify and/or send Content to and/or fully cooperate with the proper law enforcement authorities for further action.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ How do we use and share your personal information? More information about our data collection and sharing practices can be found in this privacy notice. You may contact us by email at privacy@clay.com , or by referring to the contact details at the bottom of this document. If you are using an authorized agent to exercise your right to opt-out we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf. Will your information be shared with anyone else? We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Each service provider is a for-profit entity that processes the information on our behalf. We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal data. Clay Labs Inc has not disclosed or sold any personal information to third parties for a business or commercial purpose in the preceding 12 months. Clay Labs Inc will not sell personal information in the future belonging to website visitors, users and other consumers.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Sublicense your content, to allow our services to work as intended. (For example, so we can store your content with our cloud service providers.)” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ the categories of personal information that we sold or disclosed for a business purpose;” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 17.1.2 Security Standards Clay Labs adheres to stringent administrative, physical, and technical safeguards to prevent unauthorized access to or disclosure of your data.” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “All Clay accounts are on a subscription basis; the Subscription will renew unless canceled before the Renewal Commencement Date. Subscription renewals happen with Clay’s most up-to-date pricing unless otherwise stated in your contract.” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “We won’t charge you a fee to use the basic functionality of our services, but you may be able to pay for additional features, usage and products. If you do agree to pay for additional features, usage or products you agree to pay your invoice on-time. You will also leave a credit card on file for Clay to charge. You agree to immediately notify Clay of any change in your billing address or the credit card. Clay reserves the right at any time to change its prices, charge for previously free Services and change its billing methods on a going forward basis, either immediately upon posting on the website or by e-mail delivery to you. Except as set forth in the Agreement, all fees are non-refundable. ” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “If you have a paid plan with Clay your subscription will continue for the duration laid out in your contract. Your contract will automatically renew at Clay’s most-up-to-date-rates when your subscription ends. If you’d like to opt-out of auto-renewal services you can do so by canceling your Clay subscription. You can cancel your subscription by emailing support@clay.run or in your Clay account.” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.