Voiceflow procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | medium | “ We are based in Canada, but, unless we expressly agree otherwise, we may host, transfer, and process data, including Personal Information, in Canada and in other countries through Voiceflow and third parties that we use to operate and manage the Service. These countries may have data protection laws that are different from those of your country of residence. Voiceflow takes appropriate measures to ensure such transfers are in compliance with applicable laws. ” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “We are based in Canada, but, unless we expressly agree otherwise, we may host, transfer, and process data, including Personal Information, in Canada and in other countries through Voiceflow and third parties that we use to operate and manage the Service. These countries may have data protection laws that are different from those of your country of residence. Voiceflow takes appropriate measures to ensure such transfers are in compliance with applicable laws.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “Voiceflow will retain Personal Information we process on behalf of our customers or collect directly from our customers for as long as needed to provide Service to our customers, subject to our compliance with this Policy, or as required or permitted under the applicable law. We may further retain and use this Personal Information as necessary to comply with our legal obligations; maintain accurate accounting, financial, and other operational records; resolve disputes; and enforce our agreements. We have established internal policies for the deletion of data from customer accounts following termination of a customer’s subscription to the Service.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Voiceflow will retain Personal Information we process on behalf of our customers or collect directly from our customers for as long as needed to provide Service to our customers, subject to our compliance with this Policy, or as required or permitted under the applicable law. We may further retain and use this Personal Information as necessary to comply with our legal obligations; maintain accurate accounting, financial, and other operational records; resolve disputes; and enforce our agreements. We have established internal policies for the deletion of data from customer accounts following termination of a customer’s subscription to the Service. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may be required to disclose Personal Information to respond to subpoenas, court orders, and law enforcement or governmental requests or investigations, or to establish or exercise our legal rights or defend against legal claims. We may also share Personal Information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations or our Terms of Service, or as otherwise required by law.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ b. Information we may receive from and share with third parties ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “To facilitate the exchange of data between third-party SaaS applications, we may need to store certain information (“ App Credentials ”) that helps us access these third-party SaaS application accounts on your behalf. We store your App Credentials in an encrypted form. When we access these third-party applications on your behalf, the third-party application provides us with access to certain data. We will use, store, and disclose this data in accordance with this Policy. You should note that Voiceflow shall have no liability or responsibility for the privacy practices or other actions of any third-party applications for which you provide us with App Credentials. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may now or in the future receive Personal Information about you from third parties. For example, if you access our Site or Service through a third-party connection or log-in or connect an application to Voiceflow, that third party you connected with may pass certain information about your use of its service to Voiceflow. This information could include, but is not limited to, the user ID associated with your account, an access token necessary to access that service, any information that you have permitted the third party to share with us, and any information you have made public in connection with that third-party service. You should always review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the Service. Voiceflow may also share Personal Information with its third-party service providers (such as its credit card processors and hosting partners) to provide the necessary hardware, software, networking, storage, and other services we use to operate the Service and maintain a high-quality user experience. We do not permit our service providers to use the Personal Information we share for their marketing purposes. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ In this Policy, “ Personal Information ” means information or an information set that identifies or could be used to identify an individual directly or indirectly. Except as described in this Policy, Voiceflow will not give, sell, rent, or loan any Personal Information to any third party. Personal Information does not include “ Usage Data ” which we define as encoded or anonymized information or aggregated data we collect about a group or category of services, features, or users which does not contain personally identifying information. Usage Data helps us understand trends in usage of the Service so that we can better consider new features or otherwise tailor the Service. In addition to collecting and using Usage Data ourselves, we may share Usage Data with third parties, including our customers, partners and service providers, for various purposes, including to help us better understand our customers’ needs and improve the Service as well as for advertising and marketing purposes. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Use of Data from Google APIs . Voiceflow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Voiceflow may assign or transfer this Policy, and your user account and related Personal Information, to any person or entity that acquires all or substantially all of the business, stock or assets of, or is merged with Voiceflow. We may also transfer or assign such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, or similar transactions or proceedings, provided that the recipient of such information will continue to be bound by the terms of this Privacy Policy. ” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.