Ollama procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | medium | “ Data may be transferred to and processed in the United States. Where required by law, we use appropriate safeguards for international transfers. If you are a resident in the European Economic Area, then these countries may not have data protection or other laws as comprehensive as those in your country. We will however take all necessary measures to protect your personal information in accordance with this privacy policy and applicable law.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Retention criteria by category:” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Billing records: retained as required by tax, accounting, and other legal obligations.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible, we will securely store your personal information and isolate it from any further processing until deletion is possible.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Purchased extra usage credits expire one year after they are added to your account” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Deleting your account: You may, at any time, delete your account via ollama.com under your active profile.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain information as required by law or for legitimate business purposes. You can request deletion of your account and associated data at any time.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Support communications: retained until resolved and then archived or deleted.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Metadata and analytics: retained as needed for service operations, security, and improvement, then deleted or de-identified.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Account information: retained while your account is active and deleted upon request, subject to legal obligations.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not sell your personal information. We may process or share information on the following bases:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Legal requirements: When required by law, a legal process, or to protect our rights.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To provide you the Service: Third parties who help us operate (e.g., Stripe for payments, cloud infrastructure providers, model inference providers).” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Vital interests: We may disclose your information where we believe it is necessary to investigate, prevent, or act regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.