End Close procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | medium | “ We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, contractual, or audit requirements. When personal data is no longer needed, we securely delete or de-identify it in accordance with our Data Management Policy. Specifically: Account data is retained for the duration of your active account and for a period following termination as required by applicable law or our contractual obligations. Customer financial data processed through our platform is retained per the terms of the applicable customer agreement and deleted promptly upon termination of that agreement. Marketing and communication data is retained until you opt out or as otherwise required by law. Personally identifiable information (PII) is deleted or de-identified as soon as it is no longer serves a legitimate business purpose.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share your information with third parties when you have given us your explicit consent to do so.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may disclose your information if required to do so by law, subpoena, court order, or other governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ In the event of a merger, acquisition, financing, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your data becomes subject to a materially different privacy policy.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may receive information about you from third-party sources, including: Identity and access management providers (e.g., Google Workspace) used for authentication. Business contact data enrichment services for prospecting purposes. Our cloud infrastructure and monitoring providers (e.g., AWS) in the course of providing and securing our services.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We engage trusted third-party vendors who process personal data on our behalf to help us deliver our services. All service providers are contractually required to protect personal data and use it only for the purposes we specify. We conduct third-party risk assessments in accordance with our Third-Party Management Policy.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Our website and platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not sell your personal information. We may share your information in the following circumstances:” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.