Skyvern procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | unknown | “ When you use our automation Services, we generate and store the following data: Screenshots of each automation step, which you can view in your dashboard;” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “To let you choose a spreadsheet, we also list the names and IDs (file metadata, not contents) of spreadsheets in your My Drive and shared drives; we do not read the contents of spreadsheets you do not select. How we protect and retain this data. Google OAuth tokens are encrypted at rest and all data is transferred over encrypted (TLS) connections. We retain Google user data only as long as needed to provide the feature, which includes keeping it in the workflow run results you can view in Skyvern (see Data Retention below, including how to request deletion). You can disconnect a Google integration at any time from your Skyvern settings; upon disconnection we revoke our access with Google and delete the stored credentials. You may also revoke Skyvern's access at any time via your Google Account security settings at myaccount.google.com/permissions . No use for AI or machine learning training. We do not use data obtained through Google Workspace APIs (Gmail, Google Drive, or Google Sheets), whether raw, aggregated, anonymized, or derived, to develop, improve, or train artificial intelligence or machine learning models. Google user data is excluded from the "train and improve our machine learning models" purpose described elsewhere in this policy. Limited Use. Skyvern's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy , including the Limited Use requirements. ” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Upon termination: Your right to use the Services will immediately cease; We may delete your account and associated data in accordance with our Privacy Policy ; and Sections 7, 8, 9, 11, 12, 13, 15, 16, and 17 shall survive termination.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain your data for as long as necessary to provide our Services and as required by applicable law. You may request deletion at any time by contacting support@skyvern.com .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose anonymized information about our users, and information that does not identify any individual, without restriction. We may disclose personal information that we collect or you provide as described in this privacy policy: To our subsidiaries and affiliates. To contractors and/or service providers if applicable. To visitor-identification, advertising, enrichment, and customer-relationship partners for the purposes described above, subject to your choices and applicable law. To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Ikonomos Inc.'s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Ikonomos Inc. about our Website and Services users is among the assets transferred. To fulfill the purpose for which you provide it. For any other purpose disclosed by us when you provide the information. With your consent. We may also disclose your personal information: To comply with any court order, law, or legal process, including to respond to any government or regulatory request. To enforce or apply our Terms of Use and other agreements, including for billing and collection purposes. If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Ikonomos Inc., our customers, or others.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Visitor identification. When enabled with your marketing consent, RB2B (GetEmails, LLC) may collect online identifiers, IP addresses, device and browser information, pages visited, and visit times. It matches this activity with other data to help identify visiting companies and, for US visitors, professional contact details. International identification provides company information rather than individual visitor identities. Matches may be incomplete or inaccurate. Purposes and disclosures. We may use these results to understand business interest and identify relevant sales opportunities. RB2B also processes cookie data for its own data matching, validation, service development, and advertising purposes. It acts as an independent controller for that data, rather than only processing it on our behalf. Disclosing identifiers and browsing activity for these uses may constitute a sale or sharing under applicable US privacy laws, even without a monetary payment. Business contact enrichment. We use tools such as Clay and HubSpot to combine signup and business contact details with professional information from data providers and public sources. This may include names, work contact details, job titles, professional profile links, employer information, company size and industry, and potential business responsibilities or reporting relationships. We use this information to assess product fit and organize business relationships. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Analytics cookies, including PostHog. Marketing cookies and tracking technologies for advertising, campaign measurement, and visitor identification. The information these third parties collect may be associated with your personal information, or they may collect information about your online activities over time and across different websites and other online services. Some partners also process information for their own purposes, as described in their privacy notices. You can ask us about these disclosures at support@skyvern.com . Managing Your Preferences. Optional cookies follow the preferences you save through our banner. If you have not saved a choice, they remain off. Select Reject All to refuse them, or use Manage Preferences to choose categories. You can reopen these controls through Cookie Settings in the Website footer and withdraw consent at any time. Declining optional cookies does not prevent you from browsing the Website. This policy describes our data practices; it does not change your saved cookie choices.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ To provide our Services, we share data with the following: LLM Providers: We send screenshots to LLM providers (including OpenAI, Anthropic, Google Gemini, Azure OpenAI, and AWS Bedrock) for AI-powered visual analysis and automation processing. These screenshots may contain visible user data, including sensitive information you have entered into forms during automation tasks. Cloud Infrastructure: We use AWS for cloud infrastructure and data storage. Proxy Network Providers: We use residential proxy networks to perform automation tasks.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Depending on the services enabled and your privacy choices, our Website may use PostHog for analytics and Google (GTM/Google Ads), Apollo, RB2B, Freebuff, Meta (Meta Pixel), LinkedIn (Insight Tag), Reddit (Reddit Pixel), Microsoft (UET), and TikTok (TikTok Pixel) for marketing. These providers may use cookies, pixels, and similar technologies to collect information about Website visits. Our cookie banner separates the following categories:” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.