Remove.bg procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ 11.3.1 The Operator has designated a single point of contact for member states’ authorities, the European Commission, and the European Board for Digital Services to contact us for the purposes of the DSA; please email us at [email protected] .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “Our local representative in the United Kingdom is EDPO UK Ltd (“EDPO UK”) with a registered address at 8 Northumberland Avenue, London WC2N 5BY, United Kingdom. EDPO UK can be contacted at privacy@edpo.com. If you are in the UK, data subject request forms can be accessed at [https://edpo.com/uk-gdpr-data-request/](https://edpo.com/uk-gdpr-data-request/).” | Captured 2026-08-12Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “Your data will be stored and processed in Europe and any other country in which Operator, its affiliates or service providers maintain facilities.” | Captured 2026-08-12Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “However, we've taken appropriate safeguards to require that your data will remain protected in accordance with this privacy policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal data, or by implementing standard contractual clauses with our affiliates and service providers.” | Captured 2026-08-12Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “This means that your data may be transferred to and processed in countries other than the country in which you are located. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).” | Captured 2026-08-12Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Your data will be stored and processed in Europe and any other country in which Operator, its affiliates or service providers maintain facilities. This means that your data may be transferred to and processed in countries other than the country in which you are located. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective). However, we've taken appropriate safeguards to require that your data will remain protected in accordance with this privacy policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal data, or by implementing standard contractual clauses with our affiliates and service providers.” | Captured 2026-06-09Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible. We may retain certain account information to comply with our legal obligations (such as for accounting and audit purposes).” | Captured 2026-08-12Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “If you are wondering what happens to your files when you upload them, the answer is simple: We upload them securely, process them as you would expect, provide you with the results for download, then delete them shortly after. That’s all.” | Captured 2026-08-12Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ If you are wondering what happens to your files when you upload them, the answer is simple: We upload them securely, process them as you would expect, provide you with the results for download, then delete them shortly after. That’s all. We don’t publish your files, we don’t share them with anyone unexpected. If you want to learn more, find our privacy policy below.” | Captured 2026-06-09Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible. We may retain certain account information to comply with our legal obligations (such as for accounting and audit purposes).” | Captured 2026-06-09Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “We retain personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).” | Captured 2026-08-12Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “Our web server collects data that your Internet browser communicates to us, including the IP address of the requesting computer, location data, device or app data, together with the date, time, the request, which file is requested (name and URL), the amount of data transferred to you, a message as to whether the request was successful, identification data of the browser and operating system used, and the website from which the access was made (should the access take place via a link). The server logs are stored for a maximum of 3 months. We also collect information about how you have interacted with our Services, such as the pages you view, the links you click, the features you use, session duration, if you login to your account and purchasing behaviour, and we may infer your industry from the class of image or video utilised. Collecting this information enables us to better understand how people are using our Services and we use this information for our internal analytics purposes to improve the quality and relevance of our Services. We may also use this information to create aggregate, anonymized statistics which we use to provide certain features within the Services and for promoting and improving our Services. We may also analyze your activity, content, media uploads and related data in your account to provide and customize the Service, and to train our algorithms, models and AI products and services using machine learning to develop, improve and provide our Service.” | Captured 2026-08-12Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 11.3 Authorities ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “- to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this privacy policy” | Captured 2026-08-12Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “We may receive information about you from third parties. For example, if you access our Services through a third-party connection or log-in (e.g. through Facebook or Google), that third party may pass certain information about your use of its service to us. This information could include, for example, your name and email address, and any other information that you have permitted the third party to share with us. You should always review, and if necessary, adjust your privacy settings on third-party services before linking or connecting them to our Services. You may also unlink your third party account from our Services by adjusting your settings on the third-party service. If you unlink your third-party account, we will no longer receive information collected about you in connection with that service.” | Captured 2026-08-12Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “- to any other person with your consent to the disclosure.” | Captured 2026-08-12Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 11.3.3 For member states’ authorities, seeking to submit an order to provide information, please reach out to the aforementioned point of contact. Please ensure all requests meet the requirements of Article 10(2) of the DSA.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “We don’t publish your files, we don’t share them with anyone unexpected.” | Captured 2026-08-12Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Kaleido / Remove.bg / Unscreen / Designify” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose your personal data to the following categories of recipients: to our group companies, services providers and partners who provide data processing services to us (for example, to support the delivery of, provide functionality on, or help to enhance the security of our websites or provide analytics services to us) or who otherwise process data for purposes that are described in this privacy policy or notified to you when we collect your data. to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary as a matter of applicable law or regulation, to exercise, establish or defend our legal rights, or to protect your vital interests or those of any other person. to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this privacy policy to any other person with your consent to the disclosure.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “We use cookies served by Google Analytics to collect limited data directly from you to enable us to better understand your use of our Services, including making use of the demographics and interests reports services of Google Analytics. Further information on how Google collects and uses this data can be found at [www.google.com/policies/privacy/partners/](https://www.google.com/policies/privacy/partners/). You can opt-out of all Google supported analytics within the services by visiting [https://tools.google.com/dlpage/gaoptout](https://tools.google.com/dlpage/gaoptout).” | Captured 2026-08-12Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “- to our group companies, services providers and partners who provide data processing services to us (for example, to support the delivery of, provide functionality on, or help to enhance the security of our websites or provide analytics services to us) or who otherwise process data for purposes that are described in this privacy policy or notified to you when we collect your data.” | Captured 2026-08-12Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “We may disclose your personal data to the following categories of recipients:” | Captured 2026-08-12Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.