Tavily procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ 5.1 If you have an enterprise subscription: Some of the service providers that we engage for the provision of our Services (as described above) are located in the United States, which has not been found by the European Union nor the United Kingdom Secretary of State to provide an adequate level of protection of personal information, i.e. a level of protection of fundamental rights and freedoms that is essentially equivalent to that guaranteed within the European Union or United Kingdom. However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with the EU and UK data privacy laws. These include implementing the European Commission’s Standard Contractual Clauses (and UK Addendum) for transfers of personal information with our service providers, which require all of them to protect the personal information they process from the EEA in accordance with the EU and UK data protection laws. 5.2 If you have a consumer subscription: As a US based entity, we collect the data directly from the United States and so there is no cross-border transfer of personal information. However, we still apply reasonable safeguards to protect such personal information from unauthorized access or use, such as by implementing technical, administrative, and organizational measures and processing the personal information in compliance with the law and with the provisions of this Privacy Policy. ” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “We use this information to respond to your questions or inquiries and to troubleshoot where necessary. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is that it is necessary for the performance of the service requested by you. We retain this information for the period necessary to provide the Services and as set forth in the Data Retention section below. Subscribe to our newsletter/blog/community/SLA updates/changes to sub-processors. When you subscribe to our newsletter, blog, community, SLA updates and changes to sub-processors list, we collect, from you, your personal identifiers (such as username, password, name, and email address). We use this information to send you news and updates about our products and services, related blog, newsletters, SLA, and changes to our sub-processor list. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. You may revoke your consent at any time with effect moving forward by clicking the “unsubscribe” link included within each email we send to you. However, we may continue to send you service-related messages including messages related to SLA updates and changes to sub-processors list. We, through our service provider, may use tracking pixels to determine whether you open emails, the time of opening, information about the device you use (including IP address), whether you interacted with the email, the topic of the email, whether it was delivered, sender and recipient addresses. ” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Unless otherwise stated in this Privacy Policy, we retain your personal information (i) for as long as you maintain an account with us, (ii) until we receive a valid request to delete the information, in which case we will delete or anonymize the information after receiving the request, (iii) until we no longer need the information to fulfill the purposes for which we collected it, or (iv) until the information is no longer needed for a service provider’s or contractor’s operational purpose(s). We use the following criteria to determine whether it remains reasonably necessary to retain your personal information for such purposes or a service provider’s or contractor’s operational purpose(s): 3.1 Whether there is a retention period required by statute or regulations; 3.2 The existence of actual or threatened litigation for which we are required to preserve the information; 3.3 The statutes of limitations for potential legal claims; and 3.4 Generally accepted best practices in our industry, including in relation to the safety and security of our properties and assets. When we determine that it is no longer reasonably necessary to retain your personal information for one or more disclosed operational purposes based on the above criteria, we will delete or anonymize your personal information. ” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “We retain this information for the period necessary to provide and improve the Services and as set forth in the Data Retention section below. To the extent the EU or UK data protection laws apply, the legal basis for this processing activity is the performance of a contract. For transparency, our third-party payment processor may share information with third parties for fraud and export law-related purposes. Please see Stripe’s Privacy Policy for information regarding Stripe’s collection, use, and sharing of personal information. Log-in using third party services (Single Sign On / SSO). If you log-in to the Platform using a third-party authentication service provider (e.g., your Google or GitHub account), we will also collect other information from the third-party authentication service provider, including, for example, your Google ID, profile photo, and information that you choose to share with us through your Google or GitHub privacy settings, if you logged-in using your Google account. Such information is governed by the applicable third-party authentication service provider’s privacy policy, meaning the authentication provider may use the data for its own purposes. We retain this information for the period necessary to provide and improve the Services and as set forth in the Data Retention section below. For clarity, this information will not be shared as part of any of your queries that we submit to such third party services as part of the use of our Platform, if any. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 4.2.3 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Website. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. 4.3 Sharing of Personal Information with Third Parties Per your instruction: If you share personal information in your query, you direct us to share the information with third-party search index providers, particularly in limited situations where our own search index is unable to retrieve the requested content in response to your query. If you do not wish for personal information to be shared, do not include personal information in your query. Sale/share: In the preceding twelve (12) months, Tavily has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please visit Cookies Settings within our Website. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “It has been contractually agreed with the Social Network that the Social Network is responsible for providing you with information about the processing for Page Insights. Information Processed Solely by Social Networks. We do not know how the Social Networks use personal information for their own purposes, how long the personal information is stored on the Social Networks or whether the Social Networks’ data is passed on to third parties. If you are currently logged in to a Social Network as a user, the Social Network automatically collects, through trackers on your device, your Social Network ID or a link between the Social Network ID and the advertising ID (IDFA from Apple or GAID from Google) when you open the Social Network app through your mobile device (e.g., smartphone or tablet). This enables the Social Network to understand that you have visited our Social Media Page along with other social media pages that you have clicked on, whether you clicked on Social Network buttons integrated into websites that partner with the Social Network, and other online interactions that report user data to the Social Network. Based on this data, content or advertising tailored to you can be offered. You can find more information about the personal information collected by Social Networks, how it is used and how long it is stored by visiting the Social Network’s privacy policies, linked above. Interact with the Website. In addition to the personal information you provide directly to us, we also collect information from you automatically as you use our Website via cookies, pixels, web beacons, and similar tracking technologies. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on. You can also adjust your Ad Settings or change settings in your Google My Activity if you are signed into your Google Account. To opt out, please visit Cookies Settings within our Website. Google Tag Manager. Google Tag Manager is a tag management system to manage tags used for tracking and analytics on the Website. Tags are small code elements that, among other things, are used to manage traffic and visitor behavior and to test and optimize websites. We utilize Google Tag Manager to manage and organize all third-party tags on the Website and to control when those tags are triggered. YouTube. We use YouTube (owned by Google) as our video platform to embed content from YouTube on our Website. YouTube places its own cookies on your device when you visit part of our Website where a YouTube video is embedded. YouTube uses these cookies to track viewing statistics and assign a unique identifier to the device on which the video is viewed, enabling YouTube to recognize the device. This data is collected by Google. Google can use this data to show relevant advertising and for its own promotional purposes in accordance with Google’s Privacy Policy. The Google cookies also allow YouTube and its partners to show you advertisements on and outside of YouTube. To opt-out of this sharing and displaying of YouTube ads, visit Your data in YouTube, where you can clear and control the information YouTube collects on you. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ While we mostly use our own services, we may also share your query data with third-party search index providers in limited situations where our own search index is unable to retrieve the requested content in response to your query. Such information is governed by the applicable third-party index provider’s privacy policy. By sharing personal information in your query, you direct us to share the information with the applicable third-party index provider, if necessary. If you do not wish for personal information to be shared, do not include personal information in your query. Even if we use third party services to this end, if you logged into our Services using a third party service (SSO) your log-in information will not be shared as part of any query that we submit to such third party services, if any. Information from third party sources: To provide the Services, we collect information from the web, by obtaining data from third party indexes directly or via third parties. 2.2 If you are a Website visitor, this includes when you: Apply for a job. When you apply for a position at Tavily, we collect your personal information and handle it in accordance with our Candidate Privacy Policy available here. Contact us for any purpose. When you contact us, we collect, from you, your personal identifiers (such as name, email address), professional or employment-related information (job title, company size), and any additional information you choose to include in your message. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may share your query data with third-party search index providers (e.g., Google) in limited situations where our own search index is unable to retrieve the requested content in response to your query. By sharing personal information in your query, you direct us to share the information with the third parties if necessary. If you do not wish for personal information to be shared, do not include personal information in your query. For legal purposes. We share personal information where we are legally required to do so, such as in response to court orders, subpoenas, governmental/regulatory bodies, law enforcement or legal process, including for national security purposes. We may share your information with our legal advisors or auditors to establish, protect, or exercise our legal rights or as required to enforce our terms of service or other contracts or to defend against legal claims or demands. We also share this information with third parties as necessary to: detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; to comply with the requirements of any applicable law; or to comply with our legal obligations. To the extent the EU or UK data protection laws apply, the legal basis for this processing is compliance with the law or our legitimate interest in complying with non-EU data protection laws to which we are subject. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 4.1 General Sharing Tavily shares personal information as described in the PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG section, and generally in the following instances: Within Tavily. We share your personal information within Tavily for the legitimate business purposes of efficiently and effectively providing the Services and improving it, such as accounting and customer service support. Access to your personal information is limited to those on a need-to-know basis. To the extent the EU or UK data protection laws apply, the legal basis for this is our legitimate interest in providing the Services more efficiently. In the event of a corporate reorganization. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, including without limitation bankruptcy or liquidation, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction. To the extent the EU or UK data protection laws apply, the legal basis for this is our legitimate interest in carrying out our business operations or, if required by law, consent. With third-party search index providers. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “For more information on how Facebook, X, LinkedIn, Instagram, YouTube, and TikTok use your personal information, please see Facebook’s Privacy Policy, X’s Privacy Policy, LinkedIn’s Privacy Policy, Instagram’s Privacy Policy, YouTube’s Privacy Policy, and TikTok’s Privacy Policy. Facebook, X, LinkedIn, Instagram, YouTube, and TikTok (the “Social Networks”) process personal information in the USA where the laws may be less protective than in your country of residence. For example, in accordance with U.S. laws, in certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in other countries may be entitled to access your personal information. Social Media Pages. When interacting with our Social Media Pages, we collect, from you, your personal identifiers (such as, first and last name) and visual information (such as, photograph (i.e., profile picture)), as well as any information that you provide when interacting with our Social Media Pages (e.g., commenting, sharing, and rating). We use this information to advertise our products, for events and invitations, and to communicate with users via the contribution and comment function. To the extent the EU or UK data protection laws apply, the legal basis for the processing is our legitimate interest in advertising our products via our Social Media Pages and communicating with users, customers, and interested parties. Because our Social Media Pages are publicly accessible, when you use them to interact with other users, for example by posting, leaving comments or liking or sharing posts, any personal information that you post in them or provide when registering can be viewed by others or used by them as they see fit. ” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time with effect moving forward and may do so by contacting us via email at support@tavily.com. 4.2 Sharing in the Last Twelve (12) Months For a business purpose. In the preceding twelve (12) months, Tavily has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors: 4.2.1 We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; website hosting; cloud storage; data analysis; customer service; email delivery; support; customer experience; marketing; external auditors and legal counsel; payment processing; identity verification; and similar services. 4.2.2 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Website and platform errors. ” | Captured 2026-08-14Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.