Topaz Labs procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Request access to your Personal Information. This enables you to receive a copy of the Personal” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Exercising Your Rights. To exercise your rights described above, please submit a request by emailing” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Right to Know and to Access. You have the right to request that we disclose certain information to you” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Data Controller. Topaz located at 14555 Dallas Parkway, Suite 350, Dallas, TX 75254, acts as the data” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Right to Appeal. If we deny your request to exercise a privacy right, you may appeal our decision by” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. Failure to provide sufficient information may result in Topaz’s inability to fulfill your request.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Right to Portability. You have the right to request that we provide a copy of the Personal Information we” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Object to processing of your Personal Information where we are relying on a legitimate interest (or” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “have collected about you, in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. Once we receive your request and confirm your identity, we will provide you a copy of your data as required under the applicable data protection laws. We may provide this data to you via email to the email address you have provided with your request. Subject to, without limitation, technical feasibility and legal requirements.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Request access to your Personal Information (commonly known as a “data subject access request”).” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Request restriction of processing of your Personal Information. This enables you to ask us to suspend” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we could refuse to comply with your request in these circumstances. Where permitted by law, Topaz may also decline to act on such requests.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “contacting us at privacy@pazlabs.com with the subject line “Privacy Rights Appeal.” We will review and respond to your appeal within the timeframe required by applicable law. If you remain unsatisfied, you may also contact your state’s Attorney General.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “controller for the Personal Information we process in connection with the use of the Services by users in the EEA. If you have any questions about how Topaz processes your Personal Information or would like to make use of your rights as a data subject, please contact us at privacy@topazlabs.com. Information Rights under GDPR. Your rights with respect to your Personal Information include the following:” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “Information we hold about you and to check that we are lawfully processing it.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Request the transfer of your Personal Information to you or to a third party. We will provide to you, or a” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• License Enforcement and Compliance Auditing: To verify your compliance with the terms of our” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “about our collection and use of your Personal Information over the past 12 months. This information is disclosed in the Collection of Personal Information section of this Policy. You also have the right to request access to Personal Information collected about you and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it. You may submit such a request as described below. To protect our customers’ Personal Information, we are required to verify your identify before we can act on your request. Topaz may decline to provide access when doing so would, amongst other things, adversely affect the rights of others, reveal trade secrets, or where another lawful exception applies.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• No Fee Usually Required. You will not have to pay a fee to access your Personal Information (or to” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Minimal Fee May Be Required. You may have to pay a minimal fee to access your Personal Information” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Right to Correct. Subject to certain exceptions, you have the right to request that we correct inaccurate” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Request correction of the Personal Information that we hold about you. This enables you to have any” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “longer than 30 days if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “this Policy or the principles established in PIPEDA, we encourage you to contact us at privacy@topazlabs.com. United States Residents. US data protection laws (including the CCPA/CPRA and similar state laws) grant California, Colorado, Connecticut, Nevada, Utah, and Virginia residents’ certain data rights. These rights apply only to the extent required by applicable law and may be subject to exceptions, such as where retention is necessary for, without limitation, compliance, billing, auditing, security, or internal business purposes.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Non-Discrimination. We will not discriminate against you for exercising any of your data privacy rights.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• What We May Need from you. We may need to request specific information from you to help us confirm” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “those of a third party) and there is something about your situation which makes you want to object to processing on this ground as you feel it affects your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information that override your rights and freedoms.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Time Limit to Respond. We try to respond to all requests within one month. Occasionally it could take” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “This enables you to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “third party you have chosen, your Personal Information in a structured, commonly used, machine readable format.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “EULA, prevent unauthorized use, and conduct audits as permitted therein.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “Your rights with respect to your Personal Information may vary based on your jurisdiction. Subject to applicable law, you may request access to, correction of, or deletion of certain Personal Information by contacting us as described in the Contact Us section below. Topaz reserves the right to deny or limit such requests where permitted by law, including where they are unfounded, excessive, technically infeasible, or could adversely affect the rights and freedoms of others. European Union and United Kingdom. The following additional information and rights only apply to Personal Information associated with users who use the Services from the European Economic Area (“EEA”), including those based in the United Kingdom.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Right to Challenge Our Compliance. If for any reason, you are concerned about our compliance with” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “(or to exercise any of the other rights). We will provide you with the approximate cost before processing the request. We will confirm with you that you still wish to proceed with the request.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “Personal Information that we have collected about you. Once we receive your request and confirm your identity, we will review your request, taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information to see if we can correct the data. We may also request additional information showing that the information you want to correct is inaccurate. Corrections may be limited where requests are excessive, repetitive, or technically infeasible.” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “• Time Limit to Respond. We try to respond to all requests within 30 days. Occasionally it could take us” | Captured 2026-08-14Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “the processing of your Personal Information in the following scenarios: o If you want us to establish the data’s accuracy. - 9 - o Where our use of the data is unlawful, but you do not want us to erase it. o Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims. o You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “By contacting Topaz, you acknowledge and agree that (i) communications may not always be secure, (ii) Topaz may retain records of your communications for compliance, training, and dispute resolution purposes, and (iii) Topaz is not obligated to respond to inquiries that are abusive, repetitive, or outside the scope of its legal obligations.” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “o For the API Service: To facilitate Your access to processed content, input media and output content may be temporarily stored on our servers. This content is subject to automatic deletion after a limited period of time. You may also permanently delete this content at any time prior to its automatic deletion. However, Topaz may retain residual copies in backup or archival systems for a limited period where required for compliance, auditing, or dispute resolution. o For Web Applications: The retention period for media content uploaded to our Web Applications is determined by your specific subscription plan. The exact terms of retention are presented to you at the time of purchase. Content may be deleted by you at any time. Topaz reserves the right, consistent with applicable law, to retain certain metadata or transactional records for billing, compliance, and legal purposes notwithstanding user deletion.” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process, when you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Information to comply with local law. Note, however, that we may not always be able to comply with your request for erasure for specific legal reasons that will be notified to you, including, without limitation, where retention is required for compliance, billing, dispute resolution, or security purposes.” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “Services following notice of an updated Policy shall be deemed consent to disclosures as described in the updated Policy. 4A: MEDIA CONTENT STORAGE AND RETENTION. Topaz Labs is committed to the security and responsible handling of the media content you process through our cloud-based Services.” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “shall not affect processing carried out prior to such withdrawal, and Topaz reserves the right to retain and process Personal Information where another lawful basis applies.” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “• Right to Delete. Subject to certain exceptions, you have the right to request that we delete any of your” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “• Request erasure of your Personal Information (also known as the “right to be forgotten”). This enables” | Captured 2026-08-14Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “Personal Information. Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the information applies. We will delete or deidentify Personal Information not subject to one of these exceptions from our records and will direct our service - 10 - providers to take similar action. Topaz may retain Personal Information where required for, without limitation, compliance, billing, auditing, fraud prevention, security, or dispute resolution.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “• Other: we may obtain Personal Information, such as demographic information or updated” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “to claims asserted against us, to enforce or administer our agreements and terms, for fraud prevention, risk assessment, investigation and/or to protect the rights, property or safety of us or our affiliates, clients, customers and/or others. Topaz reserves the right to pursue all remedies available, including disclosure of information, where it reasonably believes its rights or interests are threatened.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “this information to perform services for us, such as hosting providers, auditors, advisors, consultants, customer service and/or support providers. Topaz requires such providers to handle Personal Information consistent with this Policy; however, to the extent permitted by law, Topaz disclaims liability for acts or omissions of such providers outside Topaz’s reasonable control.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “order, subpoena, government investigation, or as otherwise required by law. We also reserve the right to report to law enforcement agencies any activities that we, in good faith, believe to be unlawful. In addition, we may share certain Personal Information when we believe that doing so is reasonably necessary to protect the rights, property, business operations, or safety of our company and/or others.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “authorities as required by law or as necessary to protect the company’s rights Device Information:” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “• Third-Party Service Providers: we employ other companies and individuals to perform” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “functions on our behalf. These third-party service providers have access to Personal information needed to perform their functions, but may not use it for other purposes.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “• Service providers: we may disclose Personal Information to third-party service providers who use” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “• Legal compliance: we may be required to share Personal Information in response to a valid court” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “authorities as required by law or as necessary to protect the company’s rights Profiles and Inferences: inferences drawn from any of the information” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “contemplated merger, sale, transfer of assets, acquisition, financing and/or restructuring of all or part of our business, bankruptcy or similar event, including related to due diligence conducted prior to such event where permitted by law. You acknowledge and agree that your Personal Information may be included in the transferred assets and that the acquirer or successor may continue to use such information as described in this Policy, subject to applicable law.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “authorities as required by law or as necessary to protect the company’s rights” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “• Protect our rights: we may disclose Personal Information where we believe it necessary to respond” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “authorities as required by law or as necessary to protect the company’s rights governance and internal operations” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “providers - 14 - identified above to create a profile reflecting a users preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes. • • • • • • •” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “• Business transfers: we may disclose and/or transfer Personal Information as part of any actual or” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “4. DISCLOSURE OF PERSONAL INFORMATION. We may share or disclose the Personal Information” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “• Your Consent: we may disclose Personal Information with your consent. Continued use of the” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, your Personal Information may be transferred to and processed in countries that may not provide the same level of data protection as your home jurisdiction. Where required, Paz uses appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs), the UK Addendum, or other lawful transfer mechanisms. By using the Services, you acknowledge and consent to such transfers, subject to applicable law.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “contact details, from third parties; we may also collect information from public records.” | Captured 2026-08-14Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “you use our Software, Web Applications, APIs, or On-Premise Deployments, or interact with us, or information we derive about you and your preferences or interests based on the Personal Information we collect and our interactions with you. Where permitted by law, Topaz may also supplement the Personal Information you provide with information obtained from commercial sources, affiliates, or publicly available sources. 2.3. Information We Collect From You. We may collect Personal Information from you related to:” | Captured 2026-08-14Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.