Olive procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ To the extent that Olive is processing any of your personal data in scope of the Colorado Privacy Act, Connecticut Data Privacy Act, Montana Consumer Data Privacy Act, Oregon Consumer Privacy Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, and/or Virginia Consumer Data Protection Act, Olive will:” | Captured 2026-08-17Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal data to third parties who intend to license or sell that personal data. You can exercise this right by contacting us at [email protected] with the subject line "Nevada Do Not Sell Request" and providing us with your name and the email address associated with your account.” | Captured 2026-08-17Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of personal data to third parties for such third parties' direct marketing purposes; in order to submit such a request, please contact us at [email protected] .” | Captured 2026-08-17Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ 3. Allow, and cooperate with, reasonable assessments by a designated assessor; alternatively, Olive may arrange for a qualified and independent assessor to conduct an assessment of Olive's policies and technical and organizational measures in support of the obligations under the foregoing laws using an appropriate and accepted control standard or framework and assessment procedure for such assessments;” | Captured 2026-08-17Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We may further retain information in an anonymous or aggregated form where that information would not identify you personally.” | Captured 2026-08-17Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ These providers process your data according to their own privacy policies and data processing agreements. We may also store inputs and outputs related to AI processing in our systems for debugging and quality improvement purposes.” | Captured 2026-08-17Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We retain personal data about you for as long as you have an open account with us or as otherwise necessary to provide you with our Services. In some cases we retain personal data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule, or regulation.” | Captured 2026-08-17Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ 2. Delete or return all your personal data upon your request at the end of the provision of the Services, unless retention of the personal data is required by law;” | Captured 2026-08-17Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ All of your personal data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy, or other transaction in which that third party assumes control of our business (in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices.” | Captured 2026-08-17Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We disclose your personal data to the categories of service providers and other parties listed in this section. Depending on state laws that may be applicable to you, some of these disclosures may constitute a "sale" of your personal data. For more information, please refer to the section with state-specific rights below.” | Captured 2026-08-17Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ 4. Engage any subcontractor pursuant to a written contract in accordance with the foregoing laws that requires the subcontractor to meet the obligations of Olive with respect to the personal data.” | Captured 2026-08-17Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Hosting, technology, and communication providers. AI and machine learning providers. Identity verification and authentication providers. Cloud storage providers. Analytics providers. Security and fraud prevention consultants. Support and customer service vendors.” | Captured 2026-08-17Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share any personal data that we collect with third parties in conjunction with any of the activities set forth under "Meeting Legal Requirements and Enforcing Legal Terms" in the "Our Commercial or Business Purposes for Collecting Personal Data" section above.” | Captured 2026-08-17Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We do not sell, rent, or share mobile phone numbers, SMS opt-in data, or messaging consent with third parties or affiliates for their own marketing or promotional purposes. We may share this information with service providers only as necessary to deliver messages and operate the messaging program. Your consent to receive marketing text messages is not a condition of purchase.” | Captured 2026-08-17Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Service Providers. These parties help us provide the Services or perform business functions on our behalf. They include:” | Captured 2026-08-17Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Olive uses artificial intelligence throughout the app. When you use the Services, your inputs, activity, and related context may be sent to third-party AI model providers for processing. This includes generating personalized content, explanations, images, and recommendations.” | Captured 2026-08-17Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.