Snowflake
Partial disclosure · high confidence
A thorough enterprise data-platform notice with a full rights set, named transfer safeguards, and a contactable DPO, but it says nothing about model training and gives only vague retention.
What the policy says
Full data-subject rights
Section 14 grants access, correction, deletion, portability, objection, restriction, and consent withdrawal. Users exercise them through named OneTrust webforms, a phone line at 1-877-243-8061, and recognition of the Global Privacy Control signal.
Named transfer safeguards
Section 10 relies on standard contractual clauses and self-certifies under the EU-U.S., UK extension, and Swiss-U.S. Data Privacy Frameworks, with a linked sub-processors and affiliates list.
Vague retention only
Section 16 keeps personal information for as long as there is an ongoing legitimate business need and commits to delete or anonymize it afterward, with no stated number of days, so retention scores low.
Shares for ad targeting with opt-out
Snowflake states it does not sell personal information. The California table discloses sharing Identifiers and Internet Activity for cross-context behavioral advertising, and offers an opt-out through cookie settings, the Global Privacy Control, and a privacy webform.
Score by area
Details
- Category
- Data platform
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2025-11-28
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.