Data processed outside a user's home jurisdiction may be subject to different legal protections, and users in jurisdictions with strong data protection laws may have fewer legal remedies once their data crosses borders.
the disclosures described above may result in the transfer of your Personal Information outside of the country or region in which you reside.
Modal
· Modal Terms of Service
Modal may not transfer Personal Data to, or process such data in, a location outside of the European Economic Area or the UK without Customer's prior written consent, except in compliance with Section 10.2 below
The claim establishes a direct obligation on PlanetScale to maintain adequate protections whenever personal data crosses borders, grounding a legal commitment to international data protection standards.
Pinecone commits to a baseline standard for cross-border data transfers, either through jurisdictional approval or contractual safeguards, rather than transferring data without restriction.
Canva
· Canva Privacy Policy
we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. However, we always take steps to ensure that your information remains protected wherever it is stored …
Processing in the United States means your personal information is subject to U.S. law rather than the privacy protections of your home jurisdiction.
Transfers of personal data to the United States, and to or from NVIDIA, are made subject to the Standard Contractual Clauses which have been pre-approved by the European Commission and ensure appropriate data protection safeguards.
The information that is collected may be collected over time and combined with information collected on different websites and online services and across your devices, including to deliver targeted advertising to you...
The scope definition clarifies that privacy obligations and data handling practices apply across multiple Revolut subsidiaries and service categories operating in the U.S. market. This establishes the organizational boundary within which the stated privacy protections and data practices function.
GOAT
· GOAT Privacy Policy
The act of providing personal information is treated as consent to cross-jurisdictional transfer to countries where legal protections for that data may be weaker than in the user's home jurisdiction.
Personal Data is transferred to and stored in the United States and other jurisdictions, which may carry different legal protections than the user's home country.
BeReal
· BeReal Privacy Policy
...required to proactively share data with authorities...when we learn of certain Content on our App (e.g., Child Sexual Abuse Material or terrorism)
Cohere
· Cohere SaaS Agreement
CUSTOMER ACKNOWLEDGES THAT IF CUSTOMER CHOOSES TO SUBMIT ANY API DATA OR FINETUNING DATA TO THE COHERE API SAAS SERVICES, CUSTOMER DOES SO ENTIRELY AT ITS OWN RISK.
Customer specifically authorises the engagement as Subprocessors of those entities listed as of the Terms Effective Date at the URL specified in Section 11.2 (Information about Subprocessors).
Customer also authorizes Mistral AI to perform International Data Transfers to (a) on the basis of adequate safeguards in accordance with Applicable Data Protection Laws, or (b) pursuant to the SCCs.
By using the Application Services, Customer authorizes Mixpanel to transfer, store, and process Customer Content from and to Customer's Third-Party Services accounts on its behalf.
Consent to affiliate sub-processor access to Customer Data is obtained through DPA agreement rather than a separate, explicit opt-in at the time of sub-processor engagement.
Consent to infrastructure sub-processor access to Customer Data is bundled into DPA agreement rather than requiring a separate, explicit opt-in at the time of sub-processor engagement.
We may share and/or transfer customer information in connection with the sale or merger of our business or assets (subject to local laws). Also, if we go out of business, enter bankruptcy, or go through some other change of control.
Although customer data can change hands in a corporate transaction, the receiving party is bound by prior privacy commitments, limiting the new owner's freedom to repurpose the data.
without prejudice to Section 11.4 (Opportunity to Object to Subprocessor Changes) Customer generally authorises the engagement of any other third parties as Subprocessors
A prior and general authorization means Customer does not need to approve each Subprocessor individually, giving Mistral AI broad latitude to engage third parties to process Personal Data.
OpenAI
· OpenAI Data Processing Addendum
A general authorization means Customer has pre-approved the listed Sub-Processors collectively rather than approving each one individually, limiting Customer's control over which third parties handle their data.
The act of enabling a TPA integration automatically authorises Calendly to share Customer Data with that third party, without requiring a separate or explicit consent step.
If Customer does not want this data to be provided to the Provider, Customer will immediately request the suspension of the integration with the respective Provider.
Customer acknowledges that Optimization Services are performed using AI Services and agrees that Customer Property can be shared with and processed by these AI Services.
Customer acknowledges that Support Services are performed using AI Services and agrees that Customer Property can be shared with and processed by these AI Services as part of the Support Services.
Heap
· Heap Privacy Policy
We share your Visitor's personal data with our sub-processors listed here, only for the provision of the Service.
Databricks reserves the right to disclose any Submissions, and the circumstances surrounding their transmission, to any third party to operate the Sites, to protect Databricks or its suppliers...to comply with legal or regulatory obligations, to enforce these Terms...