Privacy policy — Conga CLM

Cited by

Facts read from this source

• Notice updated Report an error

  “Last updated: August 4, 2025 Last reviewed: May 22, 2025”

• Legal entities Report an error

  “This Notice applies to Conga Corporation and its worldwide affiliates and subsidiaries including AppExtremes, LLC dba Conga, Conga APAC Pty Ltd., Conga Europe Ltd., Conga Switzerland GmbH, and Octiv, Inc.”

• Customer data ownership Report an error

  “information pertaining to other individuals and entities provided by our Customers during their use of Conga Services is not used by Conga for any purpose outside the scope of any agreement(s) with you, and remains under the ownership of Conga’s Customers”

• No sale Report an error

  “We will never share, rent, or sell your information to third-parties except as noted below”

• CCPA service provider Report an error

  “The parties agree that, for purposes of this Notice, Conga is a “Service Provider” (not a “third party”) to you pursuant to the CCPA.”

• DPA available Report an error

  “Data Processing Addenda or Agreements, incorporating the Standard Contractual Clauses, as approved by the European Commission and incorporating stringent requirements of Article 28 of the EU General Data Protection Regulation 2016/679. Please find Conga’s DPA at the following link for your execution, if necessary: https://conga.com/legal-center.”

• Sccs scope Report an error

  “The Standard Contractual Clauses apply only to the Personal Data that is transferred from the EEA and/or Switzerland and the United Kingdom to outside the EEA and Switzerland or the United Kingdom”

• Dpf certified Report an error

  “Conga Corporation and its afiliate AppExtremes, LLC (together "Conga") complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.”

• Dpf dispute resolution Report an error

  “Conga Corporation commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS , an alternative dispute resolution provider based in United States.”

• Ftc jurisdiction Report an error

  “With respect to personal data received or transferred pursuant to the Data Privacy Framework, Conga is subject to the investigatory and regulatory enforcement powers of the U.S. Federal Trade Commission (FTC).”

• Retention Report an error

  “we may retain your Personal Information only for as long as we believe it is necessary to fulfill the purposes for which the Personal Information was collected”

• Data subject rights Report an error

  “the right to request erasure of your Personal Information, restriction of processing as it applies to you, object to processing and the right to data portability”

• Privacy contact Report an error

  “you may contact us by completing this form, or by mail at any of the addresses listed below: Conga (global headquarters) 13699 Via Varra Broomfield, CO 80020 United States”

• Minors age limit Report an error

  “Our Services are not designed for and are not marketed to people under the age of 16 (“minors”).”

• No AI training google workspace Report an error

  “We do not use Google Workspace APIs to develop, improve, or train generalized AI or machine learning models.”

• Data transfer measures Report an error

  “Standard Contractual Clauses Data Processing Addenda or Agreements, incorporating the Standard Contractual Clauses”

• Processes under customer direction Report an error

  “Conga processes Customer data under the direction of its Customers, and has no direct control or ownership of the personal data it processes.”

• Base country Report an error

  “Conga is a U.S.-based, global company.”

• Opt out free Report an error

  “You may always object to the use of your Personal Information for direct marketing purposes or withdraw any consent previously granted for a specific purpose at no cost to you.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer European sovereignty
• The Data Protection Officer European sovereignty
• The General Counsel European sovereignty
• The General Counsel European sovereignty
• The IT Integrator European sovereignty
• The IT Integrator European sovereignty
• The Procurement Analyst European sovereignty
• The Procurement Analyst European sovereignty
• The Sales Ops Owner European sovereignty
• The Sales Ops Owner European sovereignty
• The Skeptic European sovereignty
• The Skeptic European sovereignty