The notice states that the complete Privacy Notice consists of the main page and additional product-specific or region-specific sub-notices, meaning the full scope of data practices applicable to a given user or product context requires review of multiple linked documents.
This analysis describes what Smartsheet's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that the main notice is not a self-contained disclosure; the operational scope of data collection, use, and sharing obligations for specific products or user groups is distributed across multiple linked documents that must be reviewed collectively to assess compliance.
The updated privacy policy states that only Smartsheet's U.S.-based affiliates participate in the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Framework. Previously, the policy referenced participation by Smartsheet and its affiliates without geographic qualification. This narrowed scope may affect the data transfer mechanisms available for processing personal data from EU, UK, and Swiss users if non-U.S. affiliates are involved in data handling. The policy does not explicitly describe alternative transfer mechanisms for non-U.S. affiliates.
View change record →This new provision explicitly acknowledges a layered privacy notice structure with product-specific sub-notices, potentially deferring detailed privacy disclosures to separate documents rather than consolidating them in the main policy.
View full change record →Under this structure, users seeking a complete understanding of how their personal data is collected and used by Smartsheet must access and review multiple linked sub-notices in addition to the main privacy notice page.
How other platforms handle this
Client will not... (ii) interfere with any independent efforts by Plaid to provide End User notice or obtain End User consent
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
"The Smartsheet Privacy Notice ("Privacy Notice") consists of this page and the specific notices which describe how we collect, use, and share personal data and explain your related rights and choices.Excerpt from Smartsheet's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that the main notice is not a self-contained disclosure; the operational scope of data collection, use, and sharing obligations for specific products or user groups is distributed across multiple linked documents that must be reviewed collectively to assess compliance.
Under this structure, users seeking a complete understanding of how their personal data is collected and used by Smartsheet must access and review multiple linked sub-notices in addition to the main privacy notice page.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Smartsheet.