Nebula Security procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | medium | “ We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on the nature of the data, legal obligations, dispute resolution, and legitimate business needs.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We may suspend or terminate your access to the Service at any time, with or without cause or notice. Upon termination, rights granted to you will cease, and we may delete data associated with your account subject to legal retention requirements. Provisions intended by their nature to survive termination will survive.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ If you access the Service from outside the country where we operate, your information may be transferred to and processed in countries that may have different data protection laws. Where required, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Service may integrate with or depend on third-party services (including Google products and APIs). Those services are governed by their own terms. We are not responsible for third-party services or any loss arising from your use of them.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose information as follows: Service providers. Vendors that host infrastructure, provide analytics, deliver email, monitor security, or otherwise assist in operating the Service, subject to confidentiality and processing terms. Google and integrated platforms. When you connect Google accounts or use Google-hosted deployment models, information may be processed by Google pursuant to Google’s policies and your settings. Legal and safety. Regulators, courts, law enforcement, or other parties when required by law or when we reasonably believe disclosure is necessary to protect rights, safety, or security. Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards. With your direction or consent. Any other disclosure you authorize.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review third-party privacy policies, including Google’s Privacy Policy available at https://policies.google.com/privacy .” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.