Superagent procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We are based in the United States, and personal data may be processed in the United States and other countries outside Europe. Where a recipient is not in a jurisdiction recognized as adequate, we use appropriate safeguards or another lawful transfer mechanism. Contact us for information about the safeguard relevant to your personal data.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Submit requests to privacy@superagent.sh . You may also complain to the data protection authority where you live or work or where you believe an infringement occurred. EEA authority contact information is available from the European Data Protection Board , and UK residents may contact the Information Commissioner's Office .” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ This section applies to individuals in the European Economic Area and United Kingdom (" Europe ").” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Where required, we use transfer mechanisms such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or other lawful safeguards. You may request information about the applicable safeguard by contacting privacy@superagent.sh .” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Superagent is headquartered in the United States and uses service providers that operate in the United States and other countries. Personal information may therefore be transferred to countries whose laws provide different levels of protection.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Customer Data retention is governed by the Agreement and our Global Data Processing Addendum.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Retention periods vary according to the amount, nature, and sensitivity of the information, the risk of harm from unauthorized use or disclosure, the purpose of processing, whether the purpose can be achieved by other means, contractual commitments, and legal requirements. When information is no longer required, we delete or anonymize it, or securely isolate it until deletion is possible.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We retain personal information for as long as reasonably necessary to provide the Service, fulfill the purposes described in this Privacy Policy, comply with legal, accounting, and reporting requirements, establish or defend legal claims, and prevent fraud or abuse.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Payment processors. Stripe collects and processes payment information under its own privacy policy. See Stripe's Privacy Policy .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Connected services and parties designated by you. We share information with services such as GitHub, webhook destinations, or signing providers when you direct us to connect or send data to them.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Service providers and subprocessors that provide hosting, database, authentication, analytics, session replay, error monitoring, email, payments, electronic signatures, integrations, AI inference, sandbox infrastructure, security, and support services. Our public Subprocessor List identifies providers that may process Customer Data.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Some Superagent products use third-party infrastructure providers to perform model inference. Current provider categories are identified on our Subprocessor List . We may change the models used within those services as technology evolves.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Service may link to websites and services operated by third parties. We do not control those services, and their privacy practices are governed by their own notices.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Authorities and others when reasonably necessary for compliance and protection purposes.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Service providers and business partners that help us operate, secure, market, and support the Service.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Business transferees in connection with a financing, merger, acquisition, reorganization, bankruptcy, or sale of all or part of our business or assets.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ These Terms do not require us to provide support or maintenance for the public Site. Support commitments, if any, are governed by the Services Agreement or an applicable Order.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.