Lovo procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “We have designated a representative in the European Union:” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ LOVO is a US company based in Berkeley, CA 94704 and operates globally. Therefore, your personal data may be transferred to and stored outside the country in which you are located. This includes the US and other countries outside the EEA. If we process your data outside the EEA, we ensure that the legal requirements of Art. 44 et seq. GDPR for such a third country transfer are met and that your data is processed in accordance with the European data protection standard. If we use third-party tools that process your data outside the EEA, we usually use the so-called EU standard contractual clauses (SCC), which we conclude with the respective provider. In addition, in accordance with the requirements of the ECJ (“Schrems II”), a case-by-case risk analysis is carried out with regard to the respective third country transfer in order to ensure that your data is processed lawfully in the third country concerned and, in particular, that access to your data by state authorities is prevented.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ be able to assert our rights and enforce our legal claims.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ (a) With third-party service providers, vendors, and partners who assist us in meeting business operations and Services’ needs (for example, to support the delivery of, provide functionality on, or help enhance the security of our Services), or parties that otherwise process Personal Information for the purposes described in this Policy or communicated to you when we collect your Personal Information. This includes, but is not limited to, vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, event management services, email communication software and email newsletter services, advertising and marketing services, web analytics services, banks, financial institutions, legal and other professional services firms, and affiliates. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The Services may contain links to other apps, websites, and services not operated or controlled by LOVO, including social media services and single-sign-on services (“Third-Party Sites”). The information that you share with Third-Party Sites will be governed by the specific privacy policies and terms of service of the Third-Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third-Party Sites directly for information on their privacy practices and policies.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ (b) With any other person, with your consent for such disclosure” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We may share your Personal Information with the following types of recipients: ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ For business transactions provided certain conditions are met;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not and will not sell your Personal Information.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Legal obligations (legal basis: Art. 6 para. 1 p. 1 lit. c GDPR/UK-GDPR): We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ If the information is publicly available and is specified by the regulations” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Our Services may contain links to third-party websites or Services that are not owned or controlled by us, including but not limited to Facebook and Gmail.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Category of Personal Information Sources of Personal Information Use of Personal Information Disclosure of Personal Information Social Information We may collect Social Information from you when you interact with our Social Media Pages. We may use Social Information to perform analytics and to communicate with you. We may disclose Social Information to our affiliates. Communication Information We collect Communication Information directly from you. We use Communication Information for providing our Services and responding to you. We disclose Communication Information to our affiliates and communication services providers. Technical Information We collect Technical Information from you. We use Technical Information for analytics and in some cases, for moderation and prevention of fraud and malicious activity by users of our Services. We disclose Technical Information to our affiliates and analytics provider(s). ” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.