audit rights dpa residency · Privacy Policy

Gong AI policy finding

“ Certain data protection laws and regulations, such as the EU GDPR, UK GDPR, the Brazilian Data Protection Act, and the CCPA, typically distinguish between two main roles for parties processing personal data: the “data controller” (or under the CCPA, “business”), who determines the purposes and means of processing; and the “data processor” (or under the CCPA, “service provider”), who processes the data on behalf of the data controller (or business). Below we explain how these roles apply to our Services, to the extent that such laws and regulations apply. Gong is the “data controller” of Prospect Data. With respect to such data, we assume the responsibilities of data controller (solely to the extent applicable under law), as set forth in this Privacy Policy. In such instances, our Service Providers processing such data will assume the role of “data processor”. Gong is the “data processor” of Customer Data, which we process on behalf of our Customer (who is the “data controller” of such data); and our Service Providers who process such Customer Data on our behalf are the “sub-processors” of such data. Gong is both a “data controller” and “data processor” of User Data. Such data is processed by Gong for its own purposes (as described in Section 2 above), as an independent ‘controller’; whilst those certain portions of it which are included in Customer Data will be processed by us on our Customer’s behalf, as a ‘processor’. ”

Document

Privacy Policy

Captured

2026-06-07

Location

§ 10 (Data Controller/Processor)

Snapshot SHA-256

9f76904ff1390dfc9742084825d9f85404a9e6018fd297eb30a36ef039b8b4f4

Informational only, not legal advice. Terms change; verify the source and capture date.