Retool demonstrates strong privacy practices with a comprehensive policy, dedicated DPO contact, and full support for GDPR and CCPA. While data is shared with organizational administrators and other users within an account, this is inherent to the platform's collaborative nature. The absence of a self-service data request form is a minor drawback.