VectorShift procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ For questions or complaints concerning the processing of your personal data, you can email us at privacy@vectorshift.ai . Alternatively, if you are located in the European Union, you can also have recourse to the European Data Protection Supervisor or with your nation’s data protection authority.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We value your privacy and your rights as a data subject and have therefore appointed Prighter Group, together with its local partners, as our privacy representative and your point of contact for the following region:” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you want to contact us via our representative, Prighter, or exercise your data subject rights, please visit: https://app.prighter.com/portal/14810883296 ” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Reasonable access to your personal data will be provided at no cost. If access cannot be provided within a reasonable time frame, VectorShift will provide you with a date when the information will be provided. If for some reason access is denied, VectorShift will provide an explanation as to why access has been denied.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ VectorShift has its headquarters in the United States. Information we collect about you will be processed in the United States. By using VectorShift’s services, you acknowledge that your personal information will be processed in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the GDPR. Pursuant to Article 46 of the GDPR, VectorShift is providing for appropriate safeguards by entering binding, standard data protection clauses, enforceable by data subjects in the EEA and the UK. These clauses have been enhanced based on the guidance of the European Data Protection Board and will be updated when the new draft model clauses are approved.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Prighter gives you an easy way to exercise your privacy-related rights, such as requests to access or erase personal data.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Depending on the circumstance, VectorShift also collects and transfers to the U.S. personal data with consent; to perform a contract with you; or to fulfill a compelling legitimate interest of VectorShift in a manner that does not outweigh your rights and freedoms. VectorShift endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with VectorShift and the practices described in this Privacy Statement. VectorShift also enters into data processing agreements and model clauses with its vendors whenever feasible and appropriate. Since it was founded, VectorShift has received zero government requests for information.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ VectorShift is headquartered in San Francisco in the United States. VectorShift has appointed an internal data protection officer for you to contact if you have any questions or concerns about VectorShift’s personal data policies or practices. If you would like to exercise your privacy rights, please direct your query to VectorShift’s data protection officer. VectorShift’s data protection officer’s name and contact information are as follows:” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside VectorShift might have received the data from VectorShift; what the source of the information was (if you didn’t provide it directly to VectorShift); and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by VectorShift if it is inaccurate. You may request that VectorShift erase that data or cease processing it, subject to certain exceptions. You may also request that VectorShift cease using your data for direct marketing purposes. In many countries, you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how VectorShift processes your personal data. When technically feasible, VectorShift will—at your request—provide your personal data to you.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ The European Union’s General Data Protection Regulation (GDPR) and other countries’ privacy laws provide certain rights for data subjects. Data Subject rights under GDPR include the following:” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you wish to confirm that VectorShift is processing your personal data, or to have access to the personal data VectorShift may have about you, please contact us.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Your personal data is stored by the VectorShift on its servers, and on the servers of the cloud-based database management services the VectorShift engages, located in the United States. The VectorShift retains service data for the duration of the customer’s business relationship with the VectorShift and for a period of time thereafter, to analyze the data for VectorShift’s own operations, and for historical and archiving purposes associated with VectorShift’s services. VectorShift retains prospect data until such time as it no longer has business value and is purged from VectorShift systems. All personal data that VectorShift controls may be deleted upon verified request from Data Subjects or their authorized agents. For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at: privacy@vectorshift.ai ” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ 5.3 Effect of Termination. Upon any expiration or termination of this Agreement, (i) Customer shall immediately cease any and all use of and access to the Service and (ii) each party will return to the other party (or destroy at the discloser’s request) such other party’s Confidential Information (subject to Section 5.4 below). In the event this Agreement is terminated by Customer for VectorShift’s uncured breach as authorized in Section 5.2, or is terminated pursuant to Sections 6.2 or 7, VectorShift will promptly refund to Customer all fees paid in advance for the remainder of the term. In the event of any other termination, all fees that but for termination would otherwise have been due for the full term of Customer’s purchase (as if no termination had occurred) will be non-cancellable and non-refundable (and, if not already paid, will become promptly due).” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may contract with third-party service providers to assist us in better understanding our Site visitors.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The VectorShift website connects with third party services such as Facebook, LinkedIn, Twitter and others. If you choose to share information from the VectorShift website through these services, you should review the privacy policy of that service. If you are a member of a third party service, the aforementioned connections may allow that service to connect your visit to our site to your personal data.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ VectorShift's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ These companies will use your Personal Information in the same way as we can under this Privacy Policy, unless otherwise specified.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may also release your Personal Information when we believe release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may share your Personal Information with other companies owned by or under common ownership as VectorShift which also includes our subsidiaries (i.e., any organization VectorShift owns or controls).” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ VectorShift may provide the ability to connect to 3rd party sites. These sites may operate independently from VectorShift and have their independent privacy policies. You should review their privacy policies individually. If VectorShift does not own the sites, we are not responsible for their content, and/ or privacy practices.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The personal information VectorShift collects from you is stored in one or more databases hosted by third parties located in the United States. These third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval. On occasion, VectorShift engages third parties to send information to you, including information about our products, services, and events.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Except for the cases below, we do not sell, trade, or otherwise transfer to outside parties your Personal Information.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose your Personal Information to third-party service providers (for example, payment processing and data storage and processing facilities) that we use to provide the Services.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ 1.4 Third-Party Applications. The Service may enable Customer to send Customer Data to and from different third-party equipment, services, sources, and destinations Customer uses (“Third-Party Applications”). Customer use of any Third-Party Applications is subject to Customer’s separate agreement with the provider. Customer is responsible for selecting and configuring the Third-Party Applications it chooses to use with the Service and for any exchange of Customer Data it enables through the Service. Notwithstanding anything to the contrary, VectorShift is not responsible for any Third-Party Applications used by Customer with the Service. For clarity, VectorShift has no liability or obligation under the separate agreement between Customer and the applicable third-party provider.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We do not otherwise reveal your personal data to non VectorShift persons or businesses for their independent use unless: (1) you request or authorize it; (2) it’s in connection with VectorShift hosted and VectorShift co-sponsored conferences as described above; (3) the information is provided to comply with the law (for example, compelled by law enforcement to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others; (4) the information is provided to our agents, vendors or service providers who perform functions on our behalf; (5) to address emergencies or acts of God; or (6) to address disputes, claims, or to persons demonstrating legal authority to act on your behalf. We may also gather aggregated data about our services and website visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, advertisers, and/or other third parties for marketing or promotional purposes.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a merger, reorganization, joint venture, assignment, sale, or change of ownership, we may share Personal Information for the purpose of facilitating and completing the transaction.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ In particular, we may release your Personal Information to third parties as required to (i) satisfy any applicable law, regulation, subpoena/court order, legal process or other government request, (ii) enforce our Terms of Service, including the investigation of potential violations thereof, (iii) investigate and defend ourselves against any third party claims or allegations, (iv) protect against harm to the rights, property or safety of VectorShift, its users or the public as required or permitted by law and (v) detect, prevent or otherwise address criminal (including fraud or stalking), security or technical issues.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.