Nowadays procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have data protection laws that differ from those in your country. When we transfer personal information internationally, we implement appropriate safeguards to protect your information in accordance with this Privacy Policy and applicable data protection laws. For transfers from the EEA, UK, or Switzerland, we rely on:” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Cancellation and Refunds: If the Customer cancels before sourcing starts, all payments are refunded. If canceled after sourcing begins but before signing a contract, a $500 fee applies. Once the contract is signed, all payments are non-refundable. Subject to earlier termination as provided below, this agreement is for the Initial Service Term as specified in the Order Form and will not be automatically renewed for additional periods. Upon any termination, the company will make all Customer Data available to the customer for electronic retrieval for a period of thirty (30) days, but thereafter the company may, but is not obligated to, delete stored Customer Data. All sections of this agreement which by their nature should survive termination will survive termination, including, without limitation, accrued rights to payment, confidentiality obligations, warranty disclaimers, and limitations of liability.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain your personal information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Account Data: We retain your account information for as long as your account is active or as needed to provide you Services. Event Data: Event information is retained to maintain your event history and for compliance purposes. After Account Deletion: When you delete your account, we will make your data available for electronic retrieval for 30 days. After this period, we may delete your data, though we may retain certain information for legal compliance, dispute resolution, and enforcement of our agreements. Log Data: Access logs and security logs are retained for security monitoring and incident response purposes.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We share your information with trusted third-party service providers who help us deliver our Services: Supabase: Database hosting and management (PostgreSQL) for storing your event data and account information. Anthropic (Claude): AI-powered features for email parsing, venue analysis, RFP generation, and contract and proposal analysis. Your data is not used to train AI models at the individual or event level. Nowadays AI Corp. may use aggregated, anonymized booking patterns for product improvement. Stripe: Secure payment processing for handling transactions and subscriptions. Google: Gmail API for email integration and Google Maps API for venue discovery and location services. SendGrid: Email delivery service for transactional emails and notifications. PostHog: Product analytics and error tracking to improve our Services. Vercel: Application hosting and content delivery network (CDN) for serving our platform. All service providers are bound by data processing agreements and are required to protect your information and use it only for the purposes we specify.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not sell your personal information. We share your information only in the following limited circumstances:” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ When you use our Services to plan events, we share relevant event information with venues and service providers to obtain quotes and facilitate bookings on your behalf. This includes event details such as dates, attendee count, your contact information, and — where applicable for hotel or rooming arrangements — attendee names, room assignments, dietary restrictions, and arrival information necessary to fulfill the booking.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Circumstances necessary to protect our rights, property, or safety, or that of our users or the public Enforcement of our Terms of Service or investigation of potential violations” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may disclose your information if required to do so by law or in response to:” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Our Services may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to these third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services before providing them with your personal information. When you connect third-party services (such as Gmail) to our platform, you should review their privacy policies to understand how they collect, use, and share your information. You can revoke access to third-party integrations at any time through your account settings or the third party's settings.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may share your information with other parties when you have given us explicit consent to do so, such as when you authorize us to share information with event collaborators you invite to your account.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.