Skymerse procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Skymerse is based in the United States. If you are located outside the US (including in the EEA, UK, or Switzerland), your personal data will be transferred to and processed in the United States. Where required, we rely on our service providers' certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) or on Standard Contractual Clauses (SCCs) approved by the European Commission, together with the data processing agreements we have in place with those providers.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain your personal data only for as long as necessary to fulfill the purposes described in this policy: Waitlist emails are kept until you unsubscribe, request deletion, or for up to 24 months after our product launches - whichever comes first. Contact form data is kept for up to 12 months after your inquiry is resolved, unless a longer retention period is required by law. Server logs and technical data are retained for a short period necessary for security monitoring and troubleshooting, after which they are deleted. After the applicable retention period, your data is permanently deleted.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We share personal data only with service providers who process data on our behalf under appropriate data protection agreements: Transactional email service (Postmark by ActiveCampaign) - to deliver waitlist confirmations and contact form notifications. Hosting provider (Vercel Inc.) - to serve this website; as part of hosting, Vercel processes IP addresses and request logs on our behalf. Analytics provider (Google LLC - Google Analytics 4) - to collect pseudonymous website usage statistics, only when you have given cookie consent. We do not sell, rent, or otherwise disclose your personal data to third parties for their own marketing purposes.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.