Continue procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | unknown | “ To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We will usually retain the personal data we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights. To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations. Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We will usually retain the personal data we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Personal data may also be disclosed in the event of insolvency, bankruptcy or receivership. To Comply with Legal Obligations and Rights : We may disclose personal data to third parties, such as legal advisors and law enforcement: in connection with the establishment, exercise, or defense of legal claims; to comply with laws or to respond to lawful requests and legal process; to protect the rights and property of us, our agents, customers, and others, including to enforce our agreements, policies and terms of use; to detect, suppress, or prevent fraud; to reduce credit risk and collect debts owed to us; to protect the health and safety of us, our customers, or any person; or as otherwise required by applicable law.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Rather, all such information is provided directly by you to our third-party processor. The payment processor’s use of your personal data is governed by their privacy notice. To view Stripe’s privacy policy, please click here . Event, Contest, Sweepstakes, and Survey Information , including information provided when you sign up for an event, enter a contest or sweepstakes, complete a survey or submit a testimonial. We use this information primarily to administer and facilitate our products and services, respond to your submission, communicate with you, conduct market research, inform our marketing and advertising activities, improve and grow our business, and facilitate the related event, content, sweepstakes, or survey. Support Information , including the contents of custom messages sent through the forms, email addresses, or other contact information we make available to users, as well as recordings of calls with us (where permitted by law). We use this information primarily to investigate and respond to your inquiries, to communicate with you, and to improve our products and services.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Our products and other services may include links to third-party websites, plug-ins, applications and other services. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any personal data practices of third-party websites and online services or the practices of other third parties. To learn about the personal data practices of third parties, please visit their respective privacy notices.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Service Providers : Our service providers that perform services solely on our behalf, such as analytics and certain marketing providers, collect personal data and often share some or all of this information with us. For example, we receive personal data individuals submit in response to requests for feedback to our survey providers. Other Sources : We may also collect personal data about individuals that we do not otherwise have from other sources, including publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We also obtain personal data from other sources, which we often combine with personal data we collect either automatically or directly from an individual. We may receive the same categories of personal data for the same purposes as described above from the following sources and third parties: Single Sign-On : We may provide you the ability to log into our services through certain third-party accounts you maintain. When you use these single sign-on protocols to access our services, we do not receive your login credentials for the relevant third-party service. Instead, we receive tokens from the single sign-on protocol to help identify you in our system (such as by your username) and confirm you successfully authenticated through the single sign-on protocol. This information allows us to more easily provide you access to our products and services. Employers : If you interact with us or our products and services in connection with your employment, we may obtain personal data about you from your employer or another company for which you work. For example, we may obtain your contact information from your employer to allow us to communicate with you about your employer’s customer relationship with us. Other Users : We may receive your personal data from our other users. For example, a user may provide us with your contact information as a part of a referral. Social Media : When an individual interacts with us through social media networks, such as when someone follows us or shares our content on other social networks, we may receive some information about that individual that they permit the social network to share with third parties. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Single Sign-On : We may provide you the ability to log into our services through certain third-party accounts you maintain. When you use these single sign-on protocols to access our services, we do not receive your login credentials for the relevant third-party service. Instead, we receive tokens from the single sign-on protocol to help identify you in our system (such as by your username) and confirm you successfully authenticated through the single sign-on protocol. This information allows us to more easily provide you access to our products and services. Employers : If you interact with us or our products and services in connection with your employment, we may obtain personal data about you from your employer or another company for which you work. For example, we may obtain your contact information from your employer to allow us to communicate with you about your employer’s customer relationship with us. Other Users : We may receive your personal data from our other users. For example, a user may provide us with your contact information as a part of a referral. Social Media : When an individual interacts with us through social media networks, such as when someone follows us or shares our content on other social networks, we may receive some information about that individual that they permit the social network to share with third parties. The data we receive is dependent upon an individual’s privacy settings with the social network, and may include profile information, username, and any other information the individual permits the social network to share with third parties. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ With Your Consent or Direction : We may disclose personal data about an individual to certain other third parties or publicly with their consent or direction.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “The data we receive is dependent upon an individual’s privacy settings with the social network, and may include profile information, username, and any other information the individual permits the social network to share with third parties. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information primarily to communicate directly with you, such as to send you messages about features that may be of interest to you. Advertisers, Influencers and Publishers : We may engage in advertising through third-party services. Advertisers, influencers and publishers may share personal data with us in connection with our advertising efforts. For example, we may obtain information about whether an advertisement for our non-open-source offerings led to a successful engagement with the individual who viewed it. Business Partners : We may receive your information from our business partners, such as companies that offer their products and/or services as a part of or in connection with our services. For example, certain of our products and services may allow our customers to integrate with third-party services (such as Slack). If you choose to leverage these third-party service integrations, we may receive confirmation from our business partner regarding whether you are an existing customer of their services and we may receive the same types of personal data described above through the relevant integration. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information primarily to communicate directly with you, such as to send you messages about features that may be of interest to you. Advertisers, Influencers and Publishers : We may engage in advertising through third-party services. Advertisers, influencers and publishers may share personal data with us in connection with our advertising efforts. For example, we may obtain information about whether an advertisement for our non-open-source offerings led to a successful engagement with the individual who viewed it. Business Partners : We may receive your information from our business partners, such as companies that offer their products and/or services as a part of or in connection with our services. For example, certain of our products and services may allow our customers to integrate with third-party services (such as Slack). If you choose to leverage these third-party service integrations, we may receive confirmation from our business partner regarding whether you are an existing customer of their services and we may receive the same types of personal data described above through the relevant integration. Service Providers : Our service providers that perform services solely on our behalf, such as analytics and certain marketing providers, collect personal data and often share some or all of this information with us. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To Your Employer : If you interact with our services in connection with your employment, we may disclose personal data to your employer or another company for which you work. For example, we may provide information to your employer about your usage of our services in connection with your work for them. To Marketing Providers : We coordinate and share personal data with our marketing providers in order to advertise and communicate with individuals about our products and the services we make available. To Service Providers : We engage other third parties to perform certain functions on our behalf in connection with the uses of personal data described in the sections above. Depending on the function the third party serves, the service provider may process personal data on our behalf or have access to personal data while performing functions on our behalf. To Other Businesses as Needed to Provide Services : We may share personal data with third parties you engage with through our services or as needed to fulfill a request or transaction including, for example, payment processing services. In Connection with a Business Transaction or Reorganization : We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal data to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “For example, we receive personal data individuals submit in response to requests for feedback to our survey providers. Other Sources : We may also collect personal data about individuals that we do not otherwise have from other sources, including publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | Paid | low | “we use third-party payment processors, including Stripe to process payments made to us. As such, we do not retain any personally identifiable financial information, such as credit card number, you provide such third-party payment processors in connection with such payments. Rather, all such information is provided directly by you to our third-party processor. The payment processor’s use of your personal data is governed by their privacy notice.” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.