Sunflower procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Platform may integrate with third-party services, such as video conferencing, communications, payment processing, EHR, and identity verification. Your use of those services may be subject to their own terms and privacy policies. Sunflower is not responsible for third-party services we do not control.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Meta Platforms, Inc. (Facebook / Instagram). We use the Meta Pixel on our website, the Facebook SDK in our mobile app, and Meta’s Conversions API on our servers. Through these tools, we transmit to Meta information including page views, app launches and usage events, registration events (including the name and category of sessions you register for, such as peer support groups), purchase-related events, your email address, IP address, device information, and advertising and click identifiers (including fbclid and fbp ). Meta uses this information to provide us advertising services — including measurement, campaign optimization, retargeting, and building audiences of people similar to our users — and may use it for its own purposes as described in Meta’s own privacy policy. These events may reflect your use of a sobriety and recovery service. Google LLC. We use Google Analytics (which collects usage, device, and IP-address information about your use of our website), Google sign-in, and Google Firebase, which provides our authentication, database, and file-storage infrastructure and therefore processes account, profile, questionnaire, and other information we store. Google processes this information as described in its own privacy policies, and we may use Google advertising services to measure and optimize campaigns. TikTok. We may use TikTok advertising tools, such as the TikTok pixel, TikTok SDK, and TikTok Events API, to transmit to TikTok information including usage and registration events, purchase-related events, device information, IP address, and advertising and click identifiers. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “TikTok uses this information to provide us advertising services — including measurement, campaign optimization, retargeting, and audience building — and may use it for its own purposes as described in TikTok’s own privacy policy. Other advertising partners. We may work with additional advertising networks, measurement providers, and social media platforms from time to time, which may receive similar event, device, identifier, and contact information for advertising measurement, optimization, retargeting, and audience building. PostHog. We use PostHog for product analytics and diagnostics. We transmit to PostHog your user ID, email address, usage events across the Services (including community, quiz, session, clinic-navigation, and purchase-related events), device information, and error and crash data. Vercel Inc. Our website is hosted by Vercel, which processes traffic to the site and provides us aggregate web analytics.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.