Instantly procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | medium | “ From time to time, we may update this Privacy Policy. Any changes to it will become effective when it is posted to our website. Please check back to learn of any changes to this Privacy Policy 11. Storage of Information in the United States If you are accessing our website from outside of the United States, your connection likely will be through and to servers located in the United States and all Information you provide will likely be processed and securely maintained in our web servers and internal systems located within the United States. (We generally store the Information used in our Services in the United States.) Thus, you should be aware that in accessing this website or otherwise communicating with us, the Information we collect or receive from you may be subject to laws with lesser or different privacy standards than those in your own country (such as if you are in a country located in the European Union). 12. When We Act as a “Processor” or “Service Provider” We sometimes act as a “processor” when we receive and process our customers’ own proprietary personal information, such as their own list of customers, in order to perform services for them. For those data processing activities where we act as a “processor” of our customers’ information, also known as a “service provider” in jurisdictions such as California, this Privacy Policy does not apply to such personal information. If you have questions or requests regarding your personal information that we process at the direction of and on behalf of a customer of ours, please direct your question to that enterprise customer. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ iii. pursuant to another legal basis, such as explicit consent from the data subject of the EU Output Data, sufficient to comply with the consent requirements of GDPR or GDPR-UK.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ 6.5 Performance Data. Instantly retains all right, title and interest in and to the Performance Data, and may use Performance Data for any lawful purpose. 6.6 Data Processing Agreement. In the event Subscriber provides to Instantly or enables Instantly to Process any Personal Data that is subject to Applicable Data Protection Laws, Subscriber agrees that the terms and conditions of the Data Processing Addendum , applies and is hereby incorporated into this Agreement. Instantly and Subscriber shall comply with their respective obligations under the DPA. Any Subscriber Personal Data (as defined in the DPA) that is subject to Applicable Data Protection Laws shall be governed by the DPA and shall not be Confidential Information (defined herein). In the event of a conflict between any provision of the DPA and this Agreement, the provision providing the higher level of privacy or data protection shall govern. 6.7 Use of Output Data. Subscriber is solely responsible for its use of any data, information, or Output Data obtained through the Instantly Service. Instantly disclaims all responsibility and liability for Subscriber’s use of Output Data. Where Output Data includes personal information subject to applicable privacy laws (including the EU/UK GDPR, CCPA/CPRA, and similar laws), Subscriber will only process such data: (a) with valid, informed consent of the data subject; or (b) under another lawful basis recognized by applicable law (e.g., Subscriber’s legitimate interests to maintain and update its own customer database). ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Where we need to comply with a legal obligation; for more information on our specific purposes and use cases of personal information/personal data and the data types involved, see Sections 2 and 3, above. Where we need to protect your interests (or someone else’s interests); and/or Where we have obtained your consent. (We may request your consent before engaging in certain activities described in this Privacy Policy, such as if we retarget ads to visitors of our own website.) Data Transfers Across Borders and Overseas. European and U.K. law imposes certain conditions on overseas and in some cases cross-border transfers of personal information (personal data). We make such transfers under the following conditions: Transfers to countries that have been deemed to provide an adequate level of protection for personal information by the relevant authorities. Transfers using specific approved contracts, such as the EU Standard Contractual Clauses for transfers of personal information to third countries, with appropriate modifications for other jurisdictions. Transfers in reliance on the EU-U.S. Data Privacy Framework, the UK-U.S. Data Bridge, or other programs approved by relevant authorities. Transfers based on appropriate consent. Transfers necessary to perform a contract with the data subject. Transfers that are legally mandated in appropriate circumstances. Please contact us at the following address if you would like further information on the specific mechanism used by us when transferring your personal information out of the United Kingdom or Europe.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “When we no longer require the personal information we have collected about you, we may either delete it, anonymize it, or isolate it from further processing. 5. California Delete Act Information” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ - Affiliates, parent companies and subsidiaries: Instantly may share some or all of the Information in our possession with any affiliated or subsidiary companies (if we ever have any). - As required by law or to protect any person or entity: Instantly may disclose Information if we believe that such disclosure is necessary to (a) comply in good faith with relevant laws or to respond to subpoenas or warrants served on us; or (b) to protect or otherwise defend the rights, property or safety of Instantly, our customers, or any other person or entity. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We also may disclose any of the personal information we collect as follows: Sharing for Legal Purposes : In addition, we may disclose personal information with third parties in order to: (a) comply with legal process or a regulatory investigation (e.g. a subpoena or court order); (b) enforce our Terms of Service, this Privacy Policy, or other contracts with you, including investigation of potential violations thereof; (c) respond to claims that any content violates the rights of third parties; and/or (d) protect the rights, property or personal safety of us, our platform, our customers, our agents and affiliates, its users and/or the public. We likewise may provide information to other companies and organizations (including law enforcement) for fraud protection, and spam/malware prevention, and similar purposes. Disclosure In Event of a Corporate Transaction: We may also disclose personal information in the event of a major corporate transaction, including for example a merger, investment, acquisition, reorganization, consolidation, bankruptcy, liquidation, or sale of some or all of our assets, or for purposes of due diligence connected with any such transaction. Disclosure to Service Providers : We disclose any personal information we collect with our service providers, which may include (for instance) providers involved in tech or customer support, operations, web or data hosting, billing, accounting, security, marketing, data management, validation, enhancement or hygiene, or otherwise assisting us to provide, develop, maintain and improve our services. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ - With Our Customers: As described above, we license the Information in various ways to our customers (and something to partners and resellers, who license the Information to their customer), when we provide our Services. We may sometimes share the Information with those Customers’ service providers (for instance, a provider that prints or sends direct mailings for a Customer, or sends email campaigns for a Customer). ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Government agencies (such as the US Postal Service and Census Bureau).” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Activity or otherwise provide, disclose, or make available any data obtained from or through the Instantly Service to any third party, except as strictly necessary to achieve the Permitted Purpose through Subscriber’s own employees or service providers bound by written confidentiality and processor obligations; (l) disclose, provide access to, or make available Outputs, Performance Data, Third-Party Data, Visitor ID Information, Warmup data, or any other data obtained through the Instantly Service to any third party, except to Subscriber’s processors who (i) act on Subscriber’s documented instructions solely for the Permitted Purpose, and (ii) are bound by written terms at least as protective as this Agreement; (m) use the Instantly Service or data obtained through it to build, train, or augment any public or commercial dataset, data product, contact list, look-alike audience, data broker service, or competitive database; (n) upload to or merge any such data into any public or shared repository or any tool designed for third-party access, resale, or redistribution; (o) circumvent, mask, or remove any flags, validity determinations, or other Performance Data indicators when providing data to any third party; or (p) use Supersearch/enrichment outputs or Visitor ID Information for any purpose other than the Permitted Purpose. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “This no-refund policy applies to all subscription plans, Credits, and any add-on or ancillary services, including but not limited to the VIP Services, “Done-For-You” service, Warmup Service, and Supersearch. 5.4 Third-Party Service Provider. Instantly uses Stripe, Inc. and its affiliates as its third-party service provider for payment services (e.g., card acceptance, merchant settlement, and related services) (“Third-Party Service Provider”). If Subscriber makes a purchase on the Instantly Service, Subscriber will be required to provide its payment details and any additional information required to complete Subscriber’s order directly to our Third-Party Service Provider. Subscriber agrees to be bound by Stripe’s Privacy Policy (currently accessible at https://stripe.com/us/privacy ) and its Terms of Service (currently accessible at https://stripe.com/ssa) and hereby consent and authorize Instantly and Stripe to share any information and payment instructions Subscriber provides with one or more Third-Party Service Provider(s) to the minimum extent required to complete the transactions. Please note that online payment transactions may be subject to validation checks by Instantly’s Third-Party Service Provider and Subscriber’s card issuer, and Instantly is not responsible if Subscriber’s card issuer declines to authorize payment for any reason. For Subscriber’s protection, Instantly’s Third-Party Service Provider uses various fraud prevention protocols and industry standard verification systems to reduce fraud and Subscriber authorizes Third-Party Service Provider to verify and authenticate Subscriber’s payment information. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Data compilers and consumer data resellers, consumer goods retailers, informational and retail websites, content publishers, non-profit organizations, business-to-business companies, job recruiters, data analytics providers (referred to below together as “Customer Categories”).” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ (a) Free trials : Free trials are non-paid access of the Instantly Service subject to use restrictions (maximum limits to the number of daily and monthly emails and support ticket requests, restriction on API calls, restriction on number of Credits, etc.). Restrictions for such trials are set forth at https://instantly.ai/pricing. Subscriber may at any time terminate Subscriber’s free trial or upgrade to a paid plan.” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ 5.1 Subscriptions . Instantly offers various options and subscription plans to its clients, including free trials and paid plans. These options and plans, including relevant pricing, are available at https://instantly.ai/pricing. The pricing of these plans are in U.S. dollars and all payments will be made in U.S. dollars. ” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.