Naïve procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | low | “ We retain your data for as long as your Account is active or as needed to provide the Service. Upon Account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Upon termination, your right to use the Service ceases immediately. We may retain your data for a reasonable period in accordance with Section 8.3.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ We retain your information for as long as your account is active or as needed to provide the Service. Upon account deletion, we delete or anonymize your data within 90 days, except where retention is required by law (e.g., tax, legal compliance) or for legitimate business purposes (e.g., dispute resolution).” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ The Service provides a mechanism to erase a data subject's records from your stored results. Naïve is not the source of this information; erasure through the Service does not remove a record from the originating provider's dataset, and a subject seeking that must apply to the provider directly. You are responsible for passing on any request you receive that requires action upstream.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Where you enable them, the People, Company Data and Social Data features return information sourced from third-party data providers. Naïve does not create, verify, or warrant the accuracy, completeness, or currency of this information, and it may be incomplete or out of date. These features are made available per workspace at our discretion and may require approval before use.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ When you authorize integrations, we transmit data to those third-party platforms in accordance with your settings. Those services have their own privacy policies governing their use of your data.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ When you connect third-party platforms (e.g., Google Search Console, analytics providers, CMS platforms), we receive data authorized by you through those integrations. We process such data in accordance with the permissions you grant and the third party's terms.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Social Data returns publicly posted content from third-party platforms, currently X, Reddit, Instagram, TikTok, YouTube, Bluesky, and Hacker News. You are responsible for complying with each platform's terms of service in respect of the data you collect and how you use it. Bluesky and Hacker News are served by their own public APIs; X, Reddit, Instagram, TikTok, and YouTube are served by a third-party collection provider, and the terms of those platforms generally restrict automated collection regardless of who performs it. Where your requirements call for a platform's own API, the Service tells you which platforms it can serve that way and refuses the request for those it cannot. Reviews & Listings returns local listing and review content on the same basis, and does not return the identity or review history of the individuals who wrote those reviews.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Service may connect to third-party platforms (e.g., Google Search Console, analytics providers, CMS platforms) through integrations you authorize. You are responsible for compliance with those third parties' terms of service.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We share information with trusted service providers that assist us in operating the Service (e.g., hosting, payment processing, analytics, AI model providers). These providers are contractually bound to protect your data and use it only for the purposes we specify.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose your Confidential Information only: (a) to subprocessors and service providers that require it to deliver the Service on our behalf, each bound by written obligations no less protective than this Section and, in the case of personal information, by a data processing agreement; (b) to third-party platforms you have expressly authorized through an integration you enable, and only to the extent your settings direct; (c) with your prior written consent; or (d) as required under Section 9.4. Any other disclosure requires your prior written approval. Where we disclose Confidential Information to any third party under this Section, we will disclose only the minimum necessary for the applicable purpose, and will use de-identified or aggregated data in place of identifiable Customer Data wherever the purpose can reasonably be achieved without identifiers.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may disclose information where required by law, court order, or government request; to protect our rights, property, or safety or that of others; or in connection with a merger, acquisition, or sale of assets. In each case we disclose only the minimum information necessary, use de-identified or aggregated data in place of identifiable information wherever the purpose can reasonably be achieved without identifiers, and require any recipient to be bound by confidentiality obligations no less protective than our own. Where the law permits, we will give you notice before disclosing your information in response to a legal demand. These disclosures remain subject to the confidentiality obligations in Section 9 of our Terms of Service .” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ If your Organization exceeds its included credit allocation, additional usage will be billed at the applicable overage rate, or the Agent may be paused until credits are replenished, depending on your plan settings.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ The Service operates on a credit-based usage model. Credits are consumed when the Agent performs actions. Credit pricing and consumption rates are published on our pricing page and may be updated with 30 days' notice.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ "Credits" means the usage-based units consumed when the Agent performs actions on your behalf.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.