The Token Company procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | unknown | “ The initial term of this Agreement begins on the Effective Date of the Order and, unless terminated earlier pursuant to any of this Agreement’s express provisions, will continue in effect for the duration of the initial term set forth in the Order (the “ Initial Subscription Period ”). This Agreement will automatically renew for up to additional successive renewal terms of the duration set forth in the Order (each a “ Renewal Period ” and together with the Initial Subscription Period, the “ Subscription Period ”) unless earlier terminated pursuant to this Agreement’s express provisions or if either Party gives the other Party written notice of non-renewal at least sixty (60) days prior to the expiration of the then-current Initial Term or Renewal Term.” | Captured 2026-08-11Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ On the expiration or termination of the Agreement, the receiving party shall promptly return to the disclosing party all copies, whether in written, electronic, or other form or media, of the disclosing party’s Confidential Information, or destroy all such copies and certify in writing to the disclosing party that such Confidential Information has been destroyed.” | Captured 2026-08-11Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Upon expiration or termination of this Agreement for any reason all licenses and rights granted to Customer under this Agreement will also terminate and Customer must cease using, destroy, and permanently erase all copies of the API from all devices and systems Customer directly or indirectly controls.” | Captured 2026-08-11Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Business Partners: We may receive your information from our business partners, such as companies that offer their products and/or services as a part of or in connection with our services. For example, certain of our products and services allow our customers to integrate third-party services. If you choose to leverage these third-party service integrations, we may receive confirmation from our business partner regarding whether you are an existing customer of their services. Service Providers: Our service providers that perform services on our behalf, such as analytics and certain marketing providers, collect personal data and often share some or all of this information with us. For example, we receive personal data you may submit in response to requests for feedback to our survey providers. Other Sources: We may also collect personal data about you from other sources, including publicly available sources, third-party data providers, or through transactions such as mergers and acquisitions.” | Captured 2026-08-11Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “For example, a customer may provide us with your contact information as a part of a referral. Social Media: When you interact with our services through social media networks, such as when you follow us or share our content on social networks, we may receive some information that you permit the social network to share with third parties. The data we receive is dependent upon your privacy settings with the social network, and may include profile information, profile picture, username, and any other information you permit the social network to share with third parties. You should always review and, if necessary, adjust your privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information primarily to operate, maintain, and provide to you the features and functionality of our products and services, as well as to communicate directly with you, such as to send you messages about features that may be of interest to you. Advertisers, Influencers, and Publishers: We engage in advertising both on our services and through third-party services. Advertisers, influencers, and publishers may share personal data with us in connection with our advertising efforts. For example, we may obtain information about whether an advertisement on our services led to a successful engagement between you and a third-party advertiser. ” | Captured 2026-08-11Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We disclose or otherwise make available personal data in the following ways: In Connection with a Business Transaction or Reorganization: We may take part in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose, transfer, or assign personal data to a third party during negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, your personal data may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets. To Facilitate Legal Obligations and Rights: We may disclose personal data to third parties, such as legal advisors and law enforcement: in connection with the establishment, exercise, or defense of legal claims; to comply with laws or to respond to lawful requests and legal process; to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of use; to detect, suppress, or prevent fraud; to reduce credit risk and collect debts owed to us; to protect the health and safety of us, our customers, or any person; or as otherwise required by applicable law.” | Captured 2026-08-11Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ With Your Consent or Direction: We may disclose your personal data to certain other third parties or publicly with your consent or direction. For example, with your permission, we may post your testimonial on our websites.” | Captured 2026-08-11Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may receive the same categories of personal data as described above from the following sources and other parties: Our Affiliates: We are able to offer you the products and services we make available because of the hard work of our team members across all The Token Company entities. To provide our products and facilitate our services, The Token Company entities receive personal data from other The Token Company entities for purposes and uses that are consistent with this Privacy Notice. Single Sign-On: We may provide you the ability to log in to our services through certain third-party accounts you maintain. When you use these single sign-on protocols to access our services, we do not receive your login credentials for the relevant third-party service. Instead, we receive tokens from the single sign-on protocol to help identify you in our system (such as by your username) and confirm you successfully authenticated through the single sign-on protocol. This information allows us to more easily provide you access to our products and services. Employers: If you interact with our services in connection with your employment, we may obtain personal data about you from your employer or another company for which you work. For example, we may obtain your contact information from your employer to allow us to communicate with you about your employer’s customer relationship with us. Other Customers: We may receive your personal data from our other customers. ” | Captured 2026-08-11Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ During the Subscription Period, TTC shall provide Customer, at no additional charge, all Updates, each of which are a part of the API and are subject to the terms and conditions of this Agreement. Customer acknowledges that TTC may require Customer to obtain and use the most recent version of the API. Updates may adversely affect how Customer systems communicate with the TTC Offering. Customer is required to make any changes to Customer systems that are required for integration as a result of such Update at Customer’s sole cost and expense.” | Captured 2026-08-11Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ The API is a “commercial product” as that term is defined at 48 C.F.R. § 2.101, consisting of “commercial computer software” and “commercial computer software documentation” as such terms are used in 48 C.F.R. § 12.212. Accordingly, if Customer is an agency of the US Government or any contractor therefor, Customer receives only those rights with respect to the API as are granted to all other end users under license, in accordance with (a) 48 C.F.R. § 227.7201 through 48 C.F.R. § 227.7204, with respect to the Department of Defense and their contractors, or (b) 48 C.F.R. § 12.212, with respect to all other US Government licensees and their contractors.” | Captured 2026-08-11Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ TTC shall provide Customer with the commercially reasonable support services via Slack during TTC’s normal business hours. Except as expressly agreed by the Parties, this Agreement does not entitle Customer to any additional support services for the API.” | Captured 2026-08-11Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.