Mobb procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ We and our authorized Service Providers (defined in Section 5 below) maintain, store and process personal data in the United States of America, the EU and other locations, as reasonably necessary for the proper performance and delivery of our Site and its Services, or as may be required by law. While privacy laws may vary between jurisdictions, Mobb.dev, its affiliates, and Service Providers engaged in processing hereunder, are each committed to protect personal data in accordance with this Policy, customary industry standards, and such appropriate lawful mechanisms and contractual terms requiring adequate data protection – regardless of any lesser legal requirements that may apply in the jurisdiction to which such data is transferred. To the extent we transfer Visitors’ personal data originating from the European Economic Area (EEA), the UK or Switzerland elsewhere, we rely on appropriate data transfer mechanisms as established under applicable law, such as the standard contractual clauses adopted by the EU, the UK or Switzerland. You are entitled to request a copy of the standard contractual clauses used in these cases, and may do so by e-mailing privacy@mobb.ai.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain Visitors’ personal data for as long as it is reasonably necessary in order to maintain and expand our relationship and provide you with our Site and offerings; in order to comply with our legal and contractual obligations; to pursue our legitimate business purposes; or to protect ourselves from any potential disputes (i.e., as required by laws applicable to log-keeping, records and bookkeeping, and in order to have proof and evidence concerning our relationship, should any legal issues arise following your discontinuance of use), all in accordance with our data retention policy. Please note that except as required by applicable law or our specific agreements with you, we will not be obligated to retain your personal data for any particular period, and we are free to securely delete it or restrict access to it for any reason and at any time, with or without notice to you. If you have any questions about our data retention policy, please contact us by e-mail at privacy@mobb.ai.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Our Service Providers may have access to your personal data, depending on each of their specific roles and purposes in facilitating and enhancing our Site and Services, and may only use the data for such limited purposes as determined in our agreements with them. Third-party websites and services: Our Site may include links to third party websites and integrations with third party services. Such websites and third-party services, and any data you process, submit, transmit or otherwise use with such websites and third-party services, are governed by such third party’s terms and privacy practices and policies, and not by this Policy. We encourage you to carefully read the terms and privacy policies of such website and third-party services. Protecting rights and safety: We may share personal data with others if we believe in good faith that this will help protect the rights, property or personal safety of Mobb.dev, any of our Visitors, users or customers, or any members of the general public. Mobb Organizational Access: Authorized administrators may have access to Users’ Data. Access is limited to organization-designated roles and governed by Mobb role-based access controls. Mobb.dev affiliated companies; change of control: We may share personal data internally within our group, for the purposes described in this Policy. In addition, should Mobb.dev or any of its affiliates undergo any change in control or ownership, including by means of merger, acquisition or purchase of substantially all or part of its assets, personal data may be shared with or transferred to the parties involved in such an event. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “If we believe that such change in control might materially affect your personal data then stored with us, we will notify you of this event and the choices you may have via e-mail or prominent notice on our Site. Additional sharing: For the avoidance of doubt, Mobb.dev may share personal data in additional manners, pursuant to your explicit approval, or if we are legally obligated to do so, or if we have successfully rendered such data non-personal, non-identifiable and anonymous. We may transfer, share or otherwise use non-personal and non-identifiable data at our sole discretion and without the need for further approval.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share your data with certain third parties, including law enforcement agencies, our Service Providers and our affiliates, in accordance with this Notice and as described below: Legal compliance: We may disclose or allow government and law enforcement officials access to your personal data, in response to a subpoena, search warrant or court order (or similar requirement), or in compliance with applicable laws and regulations. Such disclosure or access may occur if we believe in good faith that: (a) we are legally compelled to do so; (b) disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing; or (c) such disclosure is required to protect our legitimate business interests, including the security or integrity of our Site, products, and services. Service Providers: We may engage selected third-party companies and individuals to perform services complementary to our own. Such service providers may include hosting and server co-location services, communications and content delivery networks (CDNs), data security services, fraud detection and prevention services, web analytics, e-mail distribution and monitoring services, session, call or activity recording and analysis services, remote access services, performance measurement, data optimization and marketing services, social and advertising networks, content providers, e-mail, voicemail, support and customer relation management systems, and our legal, financial and compliance advisors (collectively, “ Service Providers ”). ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To comply with court orders and warrants, and prevent misuse of the Site, and to take any action in any related legal dispute and proceeding.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 8.1. Sub-processors. Customer acknowledges that the Service is hosted and made available by certain subprocessors of the Company (the “Sub-processors”). The Company may remove, add or replace its Subprocessors from time to time, at its sole discretion. 8.2. Other Products and Services. The Service may rely on, integrate with, and contain links to other thirdparty services, or may enable Customer and its Users to access, engage and procure certain services and products provided by third parties (the “Third-Party Services”). Customer acknowledges and agrees tha regardless of the manner in which such Third-Party Services may be presented or offered to Customer, Company does not endorse any such Third-Party Services or shall be in any way responsible or liable with respect to any such Third-Party Services. BY ACCESSING AND/OR USING THE THIRD-PARTY SERVICES, CUSTOMER ACKNOWLEDGES THAT ITS ACCESS AND USE OF THE THIRD-PARTY SERVICES ARE AT ITS SOLE DISCRETION AND RISK, AND CUSTOMER IS SOLELY RESPONSIBLE FOR ENSURING SUCH THIRD-PARTY SERVICES ARE IN COMPLIANCE WITH CUSTOMER’S REQUIREMENTS AND ANY APPLICABLE LAW OR REGULATION. COMPANY BEARS NO RESPONSIBILITY AND/OR LIABILITY FOR ANY LINKS OR THIRD-PARTY SERVICES, INCLUDING WITHOUT LIMITATION, SUCH THIRD-PARTY SERVICES’ OPERABILITY OR INTEROPERABILITY WITH COMPANY’S SERVICE, SECURITY, ACCURACY, RELIABILITY, DATA PROTECTION AND PROCESSING PRACTICES AND THE QUALITY OF ITS OFFERINGS, AS WELL AS ANY ACTS OR OMISSIONS BY THIRD PARTIES.” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.