Intercom Fin AI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ 6.2 Certain recipients (our service providers and other companies) who process your personal data on our behalf may also transfer personal data outside the country in which you are resident. Where such transfers occur, we will make sure that an appropriate transfer agreement is put in place to protect your personal data.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Intercom Group Companies based in the US, we rely on the EU-U.S. Data Privacy Framework (" EU-U.S. DPF "), the UK Extension to the EU-U.S. DPF (" UK-U.S. DPF "), and the Swiss-U.S. Data Privacy Framework (" Swiss-U.S. DPF ") as set forth by the U.S. Department of Commerce. To learn more about the Data Privacy Framework (" DPF ") program, and to view our certification, please visit https://www.dataprivacyframework.gov/;” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ recipients who are located outside of the EEA, the UK or Switzerland, we rely on the EU-U.S. DPF, UK-U.S. DPF or Swiss-U.S. DPF where those recipients are located in the US or for onward transfers from the US, and otherwise we rely on the EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA).” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 3.1. Data Processing by Intercom. All data processing activities carried out as part of the Services will be governed by the Data Processing Addendum (“ DPA ") incorporated by reference herein.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ The Federal Trade Commission has jurisdiction over Intercom, Inc.'s compliance with the EU-U.S. Data Privacy Framework EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 6.5 In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Intercom, Inc. commits to resolve DPF Principles-related complaints about our collection and use of your Personal Information. EU, UK and Swiss individuals with inquiries or complaints regarding our handling of Personal Information received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF or the Swiss-U.S. DPF should first contact Intercom through our Privacy Request Form .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ 6.1 The Intercom Services and Sites, and our messenger domains are provided and hosted in the United States. If you are located outside the United States, we may transfer, and process, your personal data outside of the country in which you are resident to other Intercom Group Companies and our service providers including to, Ireland, the UK, Australia and other such countries as we deem appropriate from time to time. These countries may not have equivalent privacy and data protection laws (and, in some cases, may not be as protective). We will protect your personal data in accordance with this Privacy Policy wherever it is processed.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 6.4 Intercom, Inc. complies with the EU-U.S. DPF, the UK-U.S. DPF, and the Swiss-U.S. DPF as set forth by the U.S. Department of Commerce. Intercom, Inc. has certified to the U.S. Department of Commerce that it adheres to (i) the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK-U.S. DPF and (ii) the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/ .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Intercom, Inc. remains responsible if its service provider, when acting on its behalf, processes personal data in a manner inconsistent with the DPF Principles, unless it is not responsible for the event giving rise to the damage.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ other Intercom Group Companies based outside of the US, we rely on the EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA); and” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 6.6 In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Intercom, Inc. commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (" DPAs "), the UK Information Commissioner's Office (ICO), the Gibraltar Regulatory Authority (" GRA ") and the Swiss Federal Data Protection and Information Commissioner (" FDPIC ") with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. Under certain conditions, it may be possible to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms, see here for additional information.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 6.3 If you are a resident of the EEA, the UK or Switzerland, we will protect your personal data when it is transferred outside of the EEA, the UK or Switzerland by processing it in a territory which the European Commission has determined provides an adequate level of protection for personal data; or otherwise ensuring appropriate safeguards are in place to protect your personal data. For transfers of your personal data to:” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ 5.1 We retain your personal data only for as long as necessary to fulfill the purposes set out in this Privacy Policy.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ 3.3. Storage of Customer Data. Intercom does not provide an archiving service. Intercom agrees only that it will not intentionally delete any Customer Data from the Services prior to termination of Customer's applicable Subscription Term and expressly disclaims all other obligations with respect to storage.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “Upon any expiration or termination of this Agreement, Customer will immediately cease any and all use of and access to all Services (including any and all related Intercom Technology) and delete (or, at Intercom's request, return) any and all copies of the Documentation, any Intercom passwords or access codes and any other Intercom Confidential Information in its possession.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Complying with legal obligations : We process your personal data when cooperating or complying with public and government authorities, courts or regulators in accordance with our obligations under applicable laws and to protect against imminent harm to our rights, property or safety, or that of our users or the public, as required or permitted by law.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “Intercom may use the services of subcontractors and permit them to exercise the rights granted to Intercom in order to provide the Services under this Agreement, provided that Intercom remains responsible for (i) compliance of any such subcontractor with the terms of this Agreement,(ii) for the overall performance of the Services as required under this Agreement, and (iii) compliance with the terms of the DPA.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ targeted online advertising providers” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ " Third-Party Platform(s) ” means any software, software-as-a-service, data sources or other products or services not provided by Intercom that are integrated with or otherwise accessible through the Services.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 16.8. Subcontractors. Intercom may use the services of subcontractors and permit them to exercise the rights granted to Intercom in order to provide the Services under this Agreement, provided that Intercom remains responsible for (i) compliance of any such subcontractor with the terms of this Agreement,(ii) for the overall performance of the Services as required under this Agreement, and (iii) compliance with the terms of the DPA.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ The categories of third parties to whom Personal Information was sold, shared, or disclosed for a business purpose.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Professional advisors, such as lawyers, auditors and insurers, in the course of the professional services that they render to us.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ The categories of Personal Information that we sold or disclosed for a business purpose.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Intercom Software Australia Pty Ltd;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Intercom Inc.;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Intercom Software UK Limited;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 5.1. Integration with Third Party Platforms. The Services may be able to be integrated with certain Third-Party Platforms and/or Third Party Apps. Customer may import and export Customer Data between the Services and certain Third-Party Platforms through supported integrations. In order for the Services to communicate with such Third-Party Platforms, Customer may be required to input credentials in order for the Services to access and receive relevant information from such Third-Party Platforms. By enabling use of the Services with any Third-Party Platform, Customer authorizes Intercom to access Customer's accounts with such Third-Party Platform and to share Customer Data with them for the purposes described in this Agreement. Customer is solely responsible for complying with any relevant terms and conditions of the Third-Party Platforms and maintaining appropriate accounts in good standing with the providers of the Third-Party Platforms. Customer acknowledges and agrees that Intercom has no responsibility or liability for any Third-Party Platform, including, without limitation, any beta releases or pre-release features of a Third-Party Platform, or how a Third-Party Platform uses or processes Customer Data after it is exported to such Third-Party Platform. Intercom does not guarantee that the Services will maintain integrations with any Third-Party Platform, and Intercom may disable integrations of the Services with any Third-Party Platform at any time with or without notice to Customer. For clarity, this Agreement governs Customer's use of and access to the Services, even if accessed through an integration with a Third-Party Platform.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ contact enrichment and lead generation providers; and” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Parties to transactions or potential transactions (and their professional advisors) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business, assets, or equity interests of Intercom Group Companies (including, as part of a bankruptcy or similar proceeding).” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Consultants and vendors engaged by us to support our provision of the Intercom Services and Sites and the operation of our business (for services such as hosting, information technology and software, customer support, email and telephone communications, call recording, marketing, advertising, payment processing, user authentication, market/survey research, data brokerage, generative artificial intelligence, and analytics).” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Any such other group companies, as may be added to this list from time to time.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Third party advertising companies may use cookies and similar technologies to collect information about your activity on the Intercom Services and other online services over time to serve you online targeted advertisements, including the companies listed in the third-party cookies section of our Cookie Policy .” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 4.1 We may disclose some or all of the personal data we collect to the following third parties:” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ recipients of marketing communications; and” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Personal Information we collect, use, and share on behalf of our customers as a " service provider " under the CCPA.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ (ii) Seats . With respect to seat-based charges specifically, if Customer exceeds the originally contracted quantity of seats, the additional seats activated by Customer will be billed as additional usage charges. In the month the additional seats are activated, these charges will be prorated as of the effective date of the change and included in the next invoice that Customer receives.” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ a) Baseline Monthly Fee . Intercom will charge Customer the monthly subscription fee in advance of each billing period. The monthly subscription fee will be based on the contracted quantity of charge-based seats purchased for the applicable service plan plus any upgrades (e.g., Proactive Support Plus), if applicable. Customer's invoice will also include any fees for one-time services (e.g., onboarding services) ordered by Customer.” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.