Consent to affiliate sub-processor access to Customer Data is obtained through DPA agreement rather than a separate, explicit opt-in at the time of sub-processor engagement.
Consent to infrastructure sub-processor access to Customer Data is bundled into DPA agreement rather than requiring a separate, explicit opt-in at the time of sub-processor engagement.
Twilio
· Twilio Privacy Notice
Twilio collects the substantive content of communications, not merely metadata, which represents a high level of data sensitivity.
contain any viruses, worms or other malicious computer programming codes intended to damage Baseten's system or data
Customer represents and warrants that any Customer Content will not (a) infringe any copyright, trademark, or patent; (b) misappropriate any trade secret; (c) be deceptive, defamatory, obscene, pornographic or unlawful...
(viii) ensure that Customer Content will not violate this Agreement or any applicable law.
Figma
· Figma Terms of Service (Superseded URL)
The authorization is bounded by a sole-purpose limitation, which constrains how Figma and its service providers may use Customer Content and excludes other potential uses such as advertising or product development outside the Terms.
The clause establishes a broad set of internal purposes for which customer data may be used, including product development and optimization that extend beyond delivering the immediate service.
Customers retain assurance that their content will not be mined or repurposed to benefit Sourcegraph's product development beyond the service they are receiving.
This establishes that the public-facing Privacy Policy does not define Greenhouse's obligations when acting as a processor for business customers; a separate, non-public agreement governs those relationships.
Pinecone
· Pinecone Data Processing Addendum
Pinecone does not knowingly collect, and Customer is contractually prohibited from including, any sensitive data or any special categories of data (as defined in European Data Protection Laws) in Customer Personal Data.
When Atlassian processes personal information on behalf of our customers (such as your employer, if applicable), the customer is the controller of the personal information processed and manages those accounts
AWS
· AWS Customer Agreement
The region-selection right gives customers control over the geographic location of their data, while the consent mechanism ties that control to acceptance of data transfer into the chosen regions.
Okta
· Okta Privacy Policy
This allocation of control means Okta does not determine individual users' access; accountability for provisioning lies with the Okta customer organization.
Asana
· Asana Terms of Service
This establishes that Asana, not the Managed User, defers to the Customer on data control matters, meaning the Managed User's rights over their data are governed by the Customer, not directly by Asana.
Loom
· Loom Privacy Policy
When Atlassian processes personal information on behalf of our customers...the customer is the controller of the personal information processed and manages those accounts and any Service sites.
Each customer controls and is responsible for the information they process using our Services and for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent...
The obligation is demand-triggered and open-ended in scope, meaning Mistral AI can at any point require Customer involvement in risk-mitigation activities governed by AI-specific regulation.
any access to Customer Data that it grants is limited to read-only access in Customer's development environment for the Service (and Customer will not grant access to any other environment, such as its test, production or disaster recovery)
Customer is solely responsible for ensuring that both the duration and scope of access is strictly limited to the access required under the specific SOW.
Square
· Square Privacy Notice
We may collect Your Customers' Data when they interact with you through your use of Square's products, for instance when they make a payment at your establishment, or schedule an appointment, or receive an invoice from you.
Customers have no right to continued storage of their data after termination, and Amplitude may permanently delete it without any obligation to notify or preserve it.
The clause establishes a maximum retention period for customer and enterprise personal data tied to inactivity, meaning data is not held indefinitely.
Excluding Customer Data from the Privacy Notice means the privacy protections and rights described in the Notice do not govern how Anyscale handles that category of data.
Modal
· Modal Terms of Service
The restriction gives Customer enforceable control over where its data is geographically processed, which has direct implications for regulatory compliance and data sovereignty.
Cohere
· Cohere Privacy Policy
Enterprise Users cannot rely on this Privacy Policy to understand how their input and output data is governed; that is determined solely by their enterprise agreement.
Customer Data is used not only to deliver the service but also to build new products and improve AI Features, meaning the reader's data contributes to Weights & Biases' broader commercial development.
Linear
· Linear Terms of Service
Customer Data processed in connection with AI Services shall remain subject to the data protection obligations in Section 9.4, except as expressly modified by the AI Addendum.
Heap
· Heap Terms of Service
Any Customer Data processed through the CS Service during the Free Trial will be permanently lost unless Customer purchases a subscription to the same CS Service as those covered by the Free Trial before the end of the trial period.
the Customer Data does not contain...(z) information that is considered "sensitive personal information," "special categories of data" or analogous terms under data protection laws.