Reclaim AI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ European Commission’s Standard Contractual Clauses. Reclaim uses Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK where appropriate) for transfers to, among others, Australia, Canada, India, Japan, South Korea, and the United States. A copy of our Data Processing Addendum can be found at: https://reclaim.ai/dpa ; a signed copy of the executed version can be provided by emailing [email protected] .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “Reclaim's European Representative for the purposes of this Policy is: Osano International Compliance Services Limited; if you are within the European Economic Area, you may contact our European Representative at the following address:” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ For individuals in the European Economic Area, the United Kingdom, Switzerland, Canada or any other jurisdiction outside of the United States with laws governing personal data collection, please be aware that by using our Service, you understand and acknowledge that your Personal Data will be transferred from your location to our facilities and servers in the United States where we or our sub-processors have operations. A complete list of our sub-processors can be found on our Sub-processor page: https://reclaim.ai/subprocessors .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Data Privacy Frameworks. Reclaim complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. Data Privacy Framework (DPF) as set forth by the US Department of Commerce (the "Frameworks"). Reclaim has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regards to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Reclaim has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “In particular, we offer the following safeguards if Reclaim transfers Personal Data from jurisdictions with different data protection laws:” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We keep Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy, while we have a business need to do so, or as required by law (e.g. for tax, legal, accounting or other purposes), whichever is the longer.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Google and Outlook API Services Disclosure : Reclaim's use and transfer of information received from Google and/or Outlook APIs to any other app will adhere to the Google API Service User Data Policy as well as to the Microsoft APIs Terms of Use . ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider, your Personal Data and other information may be shared in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction along with other assets.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Services, or the public, or (v) protect against legal liability. Affiliates: We may share Personal Data with our affiliates, meaning an entity that controls, is controlled by, or is under common control with Reclaim. Our affiliates may use the Personal Data we share in a manner consistent with this Privacy Policy. Calendar Data or App Data would never be shared with our affiliates. Other Users: Some of your Personal Data may be visible to users and administrators of your organization if you sign-up for the Service with an email address under that organization. Data will never be shared with anyone outside of your domain. Calendar Data or App Data would only be shared with other users if you specifically direct us to share such Personal Data through the Service.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “In the context of an onward transfer, Reclaim has responsibility for the processing of Personal Data it receives under the Frameworks and subsequently transfers to a third party acting as an agent on its behalf. Reclaim shall remain liable under the Frameworks if its agent processes such Personal Data in a manner inconsistent with the Frameworks, unless the organization proves that it is not responsible for the event giving rise to the damage.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Other Integrations: Reclaim has a variety of integrations with partner services for video conferencing (e.g., Zoom), communication and chat (e.g., Slack), and task management (e.g., Atlassian Jira). For these integrations, we collect Personal Data and App Data required to authenticate to and enable the integration, and metadata specific to the integration.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The Service may contain links to other websites or services not operated or controlled by Reclaim, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Data with vendors and service providers we engage to perform tasks on our behalf, for example to help deliver our services, bill our customers and respond to support tickets. Pursuant to our instructions, these parties will access, process or store Personal Data in the course of performing their duties to us. We take commercially reasonable steps to ensure our service providers adhere to the security standards we apply to your Personal Data and anonymize your Personal Data whenever possible. You can see a complete list of sub-processors on our Sub-processor page: https://reclaim.ai/subprocessors .” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ You may enable or log in to the Service via various online third party services, such as Google (“Social Networking Services”). By logging in or directly integrating these third party services into the Service, we're able to personalize your experience and authenticate your account using your existing third party service information. To take advantage of this feature and capabilities, we may ask you to authenticate, register for or log into Social Networking Services on the websites of their respective providers. As part of such integration, the Social Networking Services will provide us with access to certain information that you have provided to such Social Networking Services, and we will use, store and disclose such information in accordance with our Privacy Policy. For more information about the implications of activating these Social Networking Services and Reclaim’s use, storage and disclosure of information related to you and your use of such services within Reclaim, please see our Privacy Policy . However, please remember that the manner in which Social Networking Services use, store and disclose your information is governed solely by the policies of such third parties, and Reclaim shall have no liability or responsibility for the privacy practices or other actions of any third party site or service that may be enabled within the Service.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Affiliates: We may share Personal Data with our affiliates, meaning an entity that controls, is controlled by, or is under common control with Reclaim. Our affiliates may use the Personal Data we share in a manner consistent with this Privacy Policy. Calendar Data or App Data would never be shared with our affiliates.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To comply with legal obligations and legal process and to protect our rights, privacy, safety or property, and/or that of our affiliates, you or other third parties.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Payment Processing: Notwithstanding any amounts owed to Reclaim hereunder, RECLAIM DOES NOT PROCESS PAYMENT FOR ANY SERVICES. To facilitate payment for the Service via bank account, credit card, or debit card, we use Stripe, Inc. and its affiliates (“Stripe”), a third-party payment processor. These payment processing services are provided by Stripe and are subject to the Stripe terms and conditions and other policies available at https://stripe.com/legal and Stripe’s Global Privacy Policy available at: https://stripe.com/privacy (collectively, the "Stripe Agreements"). By agreeing to these Terms of Service, users that use the payment functions of the Service also agree to be bound by the Stripe Agreements, as the same may be modified by Stripe from time to time. You hereby authorize Stripe to store and continue billing your specified payment method even after such payment method has expired, to avoid interruptions in payment for your use of the Service. Please contact Stripe for more information. Reclaim assumes no liability or responsibility for any payments you make through the Service.” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.