Users' personal data may be subject to lower legal protections once transferred internationally, and Marqeta has disclosed this risk explicitly.
Okta
· Okta Privacy Policy
Processing in countries without adequacy decisions means Personal Data may not receive the same level of legal protection as in the individual's home jurisdiction.
GOAT
· GOAT Privacy Policy
we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as standard data protection clauses adopted by the European Commission.
Transfers within the Zendesk Group or to third parties located in such third countries take place using a valid data transfer mechanism, such as the EU Standard Contractual Clauses and/or the U.K. Addendum...
Whenever a Cloudflare company transfers personal information originating from one country to another Cloudflare group company or a third party service provider or partner in a different country, we will implement appropriate safeguards...
The clause identifies the specific legal mechanisms Mercury uses to legitimize cross-border transfers of Personal Information from the EEA and UK, which are subject to heightened regulatory requirements.
ElevenLabs
· ElevenLabs Privacy Policy (Superseded URL)
Users located outside the United States—including those in jurisdictions with stronger data protection laws—have their personal data transferred to and stored in the US, where different legal protections apply.
Rumble
· Rumble Privacy Policy
Users in jurisdictions with stronger data protection laws than the US or Canada may have their Personal Information transferred to a jurisdiction where those protections do not apply.
Fastly
· Fastly Privacy Policy
Cross-border data transfers subject personal information to the laws and protections of other jurisdictions, which may differ from those of the user's home country.
International transfers of personal information are constrained to legally recognized safeguard mechanisms, limiting Datadog's ability to move data to countries without adequate protections.
Heap
· Heap Privacy Policy
In the event of such a transfer, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as Standard Contractual …
Users outside the United States are explicitly required to acknowledge that their data will be handled in the US, a jurisdiction that may offer different data protection standards than their home country.
Users outside the United States may have fewer legal protections over their data once it is transferred, and consent is deemed given simply by using the services.
Internet or electronic network activity information, collected from you and our analytics and advertising partners, may be shared with our service providers, and may be sold to or shared with our advertising partners.
ADP
· ADP Privacy Statement
Internet or network activity information, such as IP address, mobile device ids, MAC address, browsing history, search history... Shared with...Ad networks.
Internet or network activity information, such as browsing history, search history, interactions with our online properties or ads, and inferences drawn from such information...Shared with...Advertising partners...
Gusto
· Gusto Privacy Policy
Internet or Electronic Usage Data...Service providers; advertising partners Yes (to advertising partners)
We may share internet usage information with ad networks and other advertising partners for the purpose of cross-context behavioral advertising.
Intuit
· Intuit Privacy Statement
Intuit and Mailchimp do not sell Personal Information under the CCPA. Credit Karma does not sell or share Personal Information subject to the CCPA…
User identifying information—IP address and phone number—is subject to disclosure to authorities under a defined legal threshold, meaning users are not guaranteed anonymity in criminal investigations.
If you are a resident in a jurisdiction where transfer of personal information related to you to another jurisdiction requires your consent, then you provide us your express and unambiguous consent to such transfer.
Sharing is mandatory and automatic upon application, and data flows to systems outside ZipRecruiter's direct control, including third-party Applicant Tracking Systems.
By applying to a Job Advertisement on the Services, you give us permission to store your information on the Services and to share your information (including your resume/CV), with the entity that posted the Job Advertisement.
We understand that certain activities such as job hunting and personal messages are sensitive, and so we do not share those with your employer unless you choose to share it with them through our Services...
American Airlines' reservation of this right means that opting out does not prevent data sharing for joint activity purposes, which explicitly encompasses administrative, transactional, and analytical uses — substantially limiting the effect of any opt-out.
Figma
· Figma Privacy Policy (Superseded URL)
Users on Figma for Education Enterprise accounts are subject to domain capture data sharing without needing to take any affirmative action to enable it.
Figma
· Figma Privacy Policy
Default enablement of domain capture means it is active without any affirmative choice by the account administrator, automatically affecting users with matching email domains.
Figma
· Figma Privacy Policy
Figma for Education's Enterprise accounts have domain capture functionality enabled by default in order to protect against unauthorized access from users with a different email domain.
Users' personal information is not transferred to third parties in exchange for payment or other consideration by Khan Academy.
Apple
· Apple App Store Review Guidelines
Kids Category apps may not send personally identifiable information or device information to third parties.