[1vuio0pswjnm7]

Suggested reading: https://web.archive.org/web/20210625205312/https://neeva.com...

   [x] Collects data 
   [x] Collects name, address and phone number
   [x] Collects contacts from other accounts
   [x] Collects usage data
   [x] Solicits personal data through "surveys"
   [x] Uses cookies, local storage and "other technologies" to collect any information (e.g., personal information)
   [x] Claims purpose of collection is to "improve product/service" but are not limited by any enforceable user agreement regarding such purpose  
   [x] May collect data about its users from other other companies 
   [x] May "have a presence" (e.g., tracking pixel) on other sites/services 
   [x] May transfer personal data to subsidiaries, with no control over what those companies may do with the data 
   [x] May transfer personal data to third party companies, with no control over what those companies may do with the data 
   [x] May use aggregated data for any (commercial) purpose, not subject to privacy policy
   [x] May use "de-identified" data for any (commercial) purpose, not subject to privacy policy
   [x] May move data anywhere in the world at any time, for any reason

If the user is paying, why is there no "contract" governing the "service". It might define the rights and obligations of Neeva and the user. If Neeva violates their privacy policy (how would we know), then what happens. Users are paying Neeva, so potentially they could could claim financial losses, but what exactly is Neeva promising to do. There is no document that details what exactly users are paying for. Even practical terms such as how many results can a user retreive per hour. A look at the "bill of rights" (doubtful this could be considered a contract for service) reveals there are few restrictions on Neeva, other than Neeva will not retain data for longer than 90 days unless asked to do so by the user or required by law. (However they are explcitly allowed in the privacy policy to transfer the data to a third partes who may be under no such restrictions.)

While the plan may not be to sell ads, this project could be aimed at (user-financed) aggregated data collection. There is zero information on how they will use aggregated data and any such use is not subject the privacy policy, it's free from any restrictions. There is not even any statement that aggregated data would be anonymised or, if so, how.