Customer.io

customer.io · facts updated 3 hours ago

Privacy facts at a glance

Jurisdictions: US · EU
Subprocessors: 8
Retention: The privacy policy includes a section on 'How Long We Retain Personal Information' but the specific retention period is not stated in the provided excerpts.
Transfer mechanism: International Data Transfer Mechanism (referenced in DPA but specific mechanism such as SCCs not named in provided excerpts)
DPA available: Yes
GDPR addressed: Yes
CCPA addressed: Yes

Named subprocessors

Amazon Web Services Google Cloud Platform Snowflake OpenAI, LLC Google Cloud (Vertex AI) Anthropic (Claude) Mailgun Twilio

Tracked documents

https://customer.io/legal/privacy-policy checked 12 hours ago

https://customer.io/legal/terms-of-service checked 9 hours ago

Data processing agreement

https://customer.io/legal/dpa checked 12 hours ago

Subprocessor list

https://customer.io/legal/sub-processors checked 14 hours ago

Security / trust page

https://customer.io/legal/security checked 14 hours ago

Recent changes

minor Terms of service 9 hours ago

Customer.io updated the footer/navigation label from 'Legal index' to 'Legal overview' and changed the footer copyright link text from 'TermsPrivacy' to 'Legal', with no substantive policy content changes.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Customer.io in your workspace.

Get notified when Customer.io adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial

No card required.