Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Sep 11, 2026; our capture on Oct 15, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“Under certain conditions, you may pursue binding arbitration through the Data Privacy Framework Panel.”
“If there is a conflict between the terms of this Privacy Notice and the Data Privacy Framework Principles, the Principles will govern.”
“In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.”
“Smartsheet's commitments under the Data Privacy Framework Principles are subject to the investigatory and enforcement powers of the United States Federal Trade Commission.”
“If you reside in the EEA, UK, or Switzerland, and your complaint cannot be resolved through this process, you may contact JAMS, our U.S.-based third party dispute resolution provider (free of charge).”
“If we make any material changes that affect the way we treat your data, we will notify you by email, through the Site or Services, or by other legally acceptable means.”
This document sets out how Smartsheet handles your personal data — including how long it keeps it (generally no more than seven years), when it may share it with third parties or disclose it to authorities, and what rights you have over it. Smartsheet will not treat you differently if you exercise your privacy rights, and if it makes material changes to how it handles your data, it will notify you directly. You can opt out of having your personal data shared for advertising and marketing by completing a form.
The Smartsheet Privacy Policy establishes the substantive terms under which Smartsheet collects, retains, transfers, shares, and protects personal data. It sets a general seven-year retention ceiling with defined exceptions, excludes collection of Sensitive Personal Data as enumerated under applicable U.S. state laws, and obtains consent to international transfer at the point of data provision. The document subordinates its own terms to the Data Privacy Framework Principles where conflicts arise, subjects Smartsheet's DPF commitments to FTC investigatory and enforcement authority, and preserves Smartsheet's ongoing liability for personal data transferred to third-party agents. Material changes to data treatment trigger notification obligations via email, the Site or Services, or other legally acceptable means.
As an individual user, your personal data is subject to a general seven-year retention limit, though it may be held longer for tax, legal, or dispute-related purposes. Smartsheet will not deny you access, charge you more, or reduce the quality of your service because you exercise your privacy rights. If your data is transferred to a third-party agent, Smartsheet remains liable for how that agent handles it. If you want to stop Smartsheet from sharing your personal data for advertising and marketing, you can do so by completing the opt-out form Smartsheet provides.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
1 important change detected
5 versions captured · Latest change detected by ConductAtlas: June 2026
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“Under certain conditions, you may pursue binding arbitration through the Data Privacy Framework Panel.”
“In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.”
“If there is a conflict between the terms of this Privacy Notice and the Data Privacy Framework Principles, the Principles will govern.”
“Smartsheet's commitments under the Data Privacy Framework Principles are subject to the investigatory and enforcement powers of the United States Federal Trade Commission.”
“If you reside in the EEA, UK, or Switzerland, and your complaint cannot be resolved through this process, you may contact JAMS, our U.S.-based third party dispute resolution provider (free of charge).”
“If we make any material changes that affect the way we treat your data, we will notify you by email, through the Site or Services, or by other legally acceptable means.”
“We do not discriminate based on whether you choose to exercise your choices and rights and will not, based on your exercise of rights, deny the Services to you; charge you different rates (including through penalties or discounts/benefits); provide a …”
“We will keep your personal data longer if required for tax or accounting purposes, to ensure we would be able to defend or raise a claim, to resolve disputes, to enforce our contractual rights, or where we have a legitimate …”
“We do not collect Sensitive Personal Data. Sensitive Personal Data defined under the respective U.S. states (such as the California Consumer Privacy Act, or "CCPA") includes social security numbers, driver's license numbers, state identification cards, passport numbers...”
“Smartsheet is and will remain liable for the processing of personal data it receives under the Data Privacy Framework and subsequently transfers to a third party acting as an agent on its behalf.”
“By providing us with your personal data, you agree to such transfer and/or processing.”
“To opt out of the sharing of your personal data for all of our advertising and marketing activities, please complete this form.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Smartsheet has updated this document before. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Binding Arbitration Through Data Privacy Framework Panel and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.