Rytr procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | medium | “ If you are accessing our application from outside the United States, please be mindful that such information may be transferred, stored or processed in the United States where our servers or central databases are located. Even though you access it from a foreign land we ensure we will follow the best practices in keeping your information protected. By using our Services you understand that we are governed by the United States Privacy and Data Protection Laws which are very different from the laws of your country. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Also, if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information would be one of the assets transferred to or acquired by a third party. Government Bodies: We may disclose your Personal Information and Usage Information as and when required in response to a sub-poena, court order, government demand or to comply with any legal requirements for protecting our interest. We will contact you by e-mail when we have to adhere to such legal request. All communications sent by us at such email address shall be deemed to have been communicated to you.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “From Service Providers. For example, third-party vendors to monitor and analyze the use of our Service, third-party vendors to provide advertising on our Service, third-party vendors to deliver targeted advertising to You, third-party vendors for payment processing, or other third-party vendors that We use to provide the Service to You.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Business Transfers: We may choose to buy or sell assets. In these types of transactions, customer information is typically one of the business assets that would be transferred. Also, if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information would be one of the assets transferred to or acquired by a third party.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We neither rent nor sell your Information in personally identifiable form to anyone in order to monetize through ads or leads. However, we do share your Personal Information with third parties as described below: Third-party vendors: We employ third party vendors to provide Services on our behalf for varied purposes like business analytics, customer service, marketing, distribution, payment processing, live chat etc. We may authorize such vendors to collect information on our behalf in order to operate features of our application or to deliver services tailored to your needs. We assure that such information used by third party vendors is only to perform their functions and they are not permitted to share or use that information for any other purpose. Companies within our corporate family : We may be required to provide information about you to our parent or subsidiary company or corporate affiliates. To the extent our parent company or subsidiaries or corporate affiliates have information about you, they will follow the best practices as described in this Privacy Policy when using it. Business Partners : We take the help of our Business Partners in conjunction with whom we offer our Services to you. If you choose to access these optional services provided by our Business Partners, we may share information about you, including your personal information, with those Partners. Please note that we do not control the privacy practices of these third-party Business Partners. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If we sold Your personal information or disclosed Your personal information for a business purpose, We will disclose to You:” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We may use third-party services for payment processing (e.g. payment processors) such as Stripe. We will not store or collect Your payment card details. That information is provided directly to Our third-party payment processors whose use of Your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information. Their Privacy Policy can be viewed at https://stripe.com/us/privacy ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Third-party vendors: We employ third party vendors to provide Services on our behalf for varied purposes like business analytics, customer service, marketing, distribution, payment processing, live chat etc. We may authorize such vendors to collect information on our behalf in order to operate features of our application or to deliver services tailored to your needs. We assure that such information used by third party vendors is only to perform their functions and they are not permitted to share or use that information for any other purpose.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Companies within our corporate family : We may be required to provide information about you to our parent or subsidiary company or corporate affiliates. To the extent our parent company or subsidiaries or corporate affiliates have information about you, they will follow the best practices as described in this Privacy Policy when using it.” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.