Visme AI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ 6. CONSENT TO TRANSFER INFORMATION. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ 6.1 Your information may be transferred to servers and databases located outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as your jurisdiction. Please be advised that we may transfer your information to and from any state, province, country or other governmental jurisdiction, and process it in the United States or elsewhere. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to any such transfer.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 16.2 For Users in the EEA, where we transfer your information to a third party provider that is not located in the EEA, and is not subject to an adequacy decision by the EU Commission, we will require those third-party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ 4.1 Your personal information and files are stored on our servers on Amazon Web Services in the US. We always take steps to ensure that your information remains protected in accordance with applicable laws.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ (a) We provide users with options to access and fully delete all of the data associated with their accounts, subject to any exclusions that may apply. Use the guide [below, or go to https://support.visme.co/?s=delete to use the self-serve deletion feature under your Account > Account Settings > Delete Your Account].” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ (b) How to Request Deletion of Your Account. We recommend using this method only if you cannot delete your account yourself by logging in and using the instructions in section 9.5 a [above]. We can only delete data for people who can reasonably prove they are owners of the data in question. We will need to verify your ownership of the data. To submit this request, contact our support team by sending an email to [email protected] and make sure to provide your Full Name, your Username associated with your account and your account#.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ 20 FOR K-12. In addition to those rights as outlined above, we will delete a student’s Covered Information if the school or district requests deletion of data under the control of the school or district.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ 19.1 This Section sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ 19. RETAINING AND DELETING PERSONAL DATA. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ 19.3 Notwithstanding the other provisions of this Section, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We will usually keep your data on record, until you tell us to delete it.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 5.5 Third Parties: We employ third parties to perform functions on our behalf such as companies hosting or operating the Site, processing and/or fulfilling orders for products purchased through the Service, sending e-mail and/or other communications, and maintaining customer and user information and databases. These third parties may have access to your personal information in connection with performing these functions.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 3.10 For matters in which we are required to use your information by law: we will use or disclose your information where we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) to enforce our Terms of Use or to protect the security or integrity of our Service; and/or (c) to exercise or protect the rights, property, or personal safety of Service, our Users or others.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Visme’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy , including the Limited Use requirements. Google user data usage is limited to providing or improving user-facing features that are prominent in the user interface.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 5.6 In addition, as our business changes, we may buy or sell various assets. In the event all or a portion of the assets owned or controlled by us, our parent, or any subsidiary or affiliated entity are sold, assigned, transferred, or acquired by another company, the information from and/or about our Service users may be among the transferred assets.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The collected information may be shared with Reddit to:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 5.8 The third parties will receive only the information required to provide said specific services; the information will be kept and protected by the same principles and level of protection followed by Visme, and it cannot be used for any other purposes. We do not transfer or disclose your information to third parties for purposes other than the ones provided.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We will also share your information with third parties in certain circumstances, such as where you consent to our sharing it with a third party for a particular purpose. So, for example, if you enable the Google Sheets integration function, then when you fill out submit data, it transfers automatically to GoogleSheets. The application that uses the Google API Services is subject to the Google Privacy Policy. Google user data usage is limited to providing or improving user-facing features that are prominent in the user interface.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We treat unique form questions and responses as information that is private unless a party other than Visme has made that information public. We don’t use form data other than as described in this privacy policy without our Customers’ consent. We don’t sell Customers’ form data, nor do we make it available to third parties without the Customer’s permission.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The collected information may be shared with LinkedIn to:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 5.9 We may disclose or share Non-Personally Identifiable Information with Third-Party Providers and the public. For example, we may share aggregated demographic information (which does not include any Personally Identifiable Information) or use Third Party Providers to track and analyze Non-Personally Identifiable usage and volume statistical information from our users to administer the Service. We may also publish this aggregated information for promotional purposes. Such data is collected on our behalf and is owned and used by us.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 5.2 for K-12. We will not sell, lease, rent, trade or otherwise make available a student’s information, including covered information, except that in the event of a purchase, merger or other type of acquisition of us by another party, that party may use Covered Information in the same manner we do.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ If you use our Service or Site to connect with other parties, you should check their Privacy Policy; we’re not responsible for those.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 5.3 Financial transactions relating to our website and services may be handled by our payment services providers. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments, and dealing with complaints and queries relating to such payments and refunds.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 5.1 We may disclose your personal data to any member of our group of companies, this means our subsidiaries, our ultimate holding company, and all its subsidiaries insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may receive information about you from third parties. For example, if you access our websites or Service through a third-party connection or login, for example, through Facebook Connect or Google by “following,” “liking,” “log in” etc., that third party may pass certain information about your use of its service to us. This information could include but is not limited to, the user ID associated with your account (for example, your Facebook UID), an access token necessary to access that service, and any information that you have permitted the third party to share with us, and any information you have made public in connection with that service. You should always review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them. You may also unlink your third-party account from the Service by adjusting your settings on the third-party service. If you unlink your third-party account, we will no longer receive information collected about you in connection with that service. We may also receive information about you and your engagement with our advertisements from our ad servers, ad networks, and social media platforms. Some of our Services let you access your accounts and your information via other service providers.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Form responses. We collect and store the form responses that you submit, in some cases using third-party server providers like Amazon Web Services on behalf of our Customers. The form creator is responsible for this data, and they manage it. A form may ask you to provide personal information or data. If you have any questions about a form that a Customer has sent to you or given you access to fill in, or about the data to be provided in the form, please contact the form creator directly, since Visme is not responsible for the content of that form. The form creator may have their own privacy policy.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 5.7 We do disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We’ll notify you when we’re asked to hand over your personal information in this way unless we’re legally prohibited from doing so. When we receive requests like this, we’ll only release your personal information if we have a good faith belief that the law requires us to do so.” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ 18.1 for K-12 This clause does not apply when we are providing services to K-12.” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.