11x procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | medium | “If you are located outside the United States, the information that we collect from you may be transferred to and stored and processed at, a destination in the United States. By submitting information, you agree to this transfer, storing or processing. We will take all steps necessary to ensure that your information is treated securely and in accordance with this Privacy Policy.All our employees and contractors related to working with personal data as part of their duties are signed agreements that cover 11x and their responsibility regarding the transfer of data to remote working locations other than the United States.This Privacy Policy shall apply even if we transfer Personal Information to other countries.” | Captured 2026-06-09Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “**4.10. International Transfer of Information**” | Captured 2026-06-09Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “**4.9. Retention of Personal Information**” | Captured 2026-06-09Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We retain Personal Information that you provide us as long as we consider it potentially useful in contacting you about the Service or our other services, or as needed to comply with our legal obligations, resolve disputes and enforce our agreements, and then we securely delete the information.If you provide information to our customers as part of their use of the 11x Service, our customers decide how long to retain the personal information they collect from you. If a customer terminates its use of the Service, then we will provide a customer with access to all information stored for the customer by the Service, including any Personal Information provided by you, for export by the customer according to our agreement with our customer. After termination, we may, unless legally prohibited, delete all customer information, including your Personal Information, from the 11x Service.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ [**11x.ai**](http://11x.ai/) use and transfer to any other app of information received from Google APIs will adhere to [**Google API Services User Data Policy**](https://developers.google.com/terms/api-services-user-data-policy#), including the Limited Use requirements.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “If you choose to connect a Gmail account to 11x, we will ask you to grant 11x application permissions to access your Gmail account. These permissions are necessary to sustain the functionality of our Services, as intended and described in the Terms of Service. In particular, we will need to access your inbox folder to detect replies to emails that have been sent via 11x. Our servers only store emails that you have sent via 11x and any responses you have received to those emails so we can detect replies, classify them, and provide access to them in your 11x account. All data obtained via Gmail API is available in your 11x account.Also, we will store your authentication token and account email address. This data will be securely stored to be used by 11x to provide you with the Services (including but not limited to logging into your account, sending emails via the 11x platform, accessing emails you sent, and viewing replies you received to these emails). Under no circumstances will this data be voluntarily shared with any third parties; 11x could only provide this information to legal authorities upon their lawful request. Should you choose to disconnect your Gmail account or decide to close your account, any information from Google that is stored on our servers will be removed permanently. At 11x, we do not use data obtained from our customers (from their Google accounts) for advertising purposes; this includes personalized, re-targeted, and interest-based advertising.Our employees, contractors, and any human, in general, are not allowed to access your personal information, including the data obtained via Google API. ” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ one of our customers and would no longer like to be contacted by one of our customers that use our Services, please contact the customer that you interact with directly or leave a request on our Trust page.We may transfer Personal Information to companies that help us provide our Services. ” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “**4.5. Service Providers**” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Our Websites include Social Media Features, such as the Facebook Like button and Widgets, such as the Share This button or interactive mini-programs that run on our sites. These features may collect your IP address, which page you are visiting on our sites, and may set a cookie to enable the feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on our Websites. This Privacy Policy does not apply to these features. Your interactions with these features are governed by the privacy policy and other policies of the companies providing them.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “11x reserve the right to use or disclose your Personal Information if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud and security breaches, or comply with a law, court order, or legal process.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “Transfers to subsequent third parties are covered by the processing agreements with our customers.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “If you give us credit card information, we use it solely to check your financial qualifications and collect payment from you. We use a third-party service provider to manage credit card processing. This service provider is not permitted to store, retain, or use information you provide except for the sole purpose of credit card processing on our behalf.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “You can use the Services to create communication campaigns in order to reach out to or nurture prospects with sales, marketing or customer success purposes.11x does not control the content of campaigns (text, email or other communications templates) or the types of information that our customers may choose to collect or manage using the Services.That information belongs to you and is used, disclosed and protected by them according to their privacy policies and is not subject to this Privacy Policy.11x processes our customers’ information as they direct and in accordance with our agreements with our customers, and we store it on our service providers’ servers, but we do not have control over its collection or management.Our agreements with your customers prohibit us from using that information, except as necessary to provide and improve the Services, as permitted by this Privacy Policy, and as required by law.We have no direct relationship with individuals who provide Personal Information to our customers.11x acknowledges that you have the right to access your Personal Information.You control and are responsible for correcting, deleting or updating the information they have collected from you using the Services.If requested to remove data we will respond within a reasonable timeframe.We may work with you to help them provide notice to their visitors about their data collection, processing, and usage.Our agreements with your customers prohibit usage of the Services to collect, manage, or process Sensitive Information.We are not responsible for your customers’ use of information on the Services.11x collects information under the direction of its customers and has no direct relationship with the individuals whose Personal Information it processes.If you are a customer of” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “**3.7. Disclosure regarding information received from Google APIs**” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Certain aspects of the 11x Service allow or require you to connect with third-party applications or services. In connection with your use of any such third-party applications or services, such third parties may receive information about you including your username and any Content you choose to use in connection with those applications and services, and such third parties may contact you directly as necessary.The 11x Service may automatically collect and upload certain data from such applications via direct integrations or proxy services.This Privacy Policy does not apply to your use of such third party applications and services, and we are not responsible for how those third parties collect, use and disclose your information and Content. We encourage you to review the privacy policies of those third parties before connecting to or using their applications or services to learn more about their information and privacy practices.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “**4.11. Sharing with Third-party applications**” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We employ other companies and people to provide services to the visitors and users of the Services and we may need to share your information with them to provide information, products or services to you. Examples may include removing repetitive or invalid information from prospect lists, analyzing data, providing marketing assistance, processing credit card payments, supplementing the information you provide us in order to provide you with better service, and providing customer service. In all cases where we share your information with such third parties, we explicitly require the agent to acknowledge and adhere to our privacy and customer data handling policies.” | Captured 2026-06-09Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.