{"platform":"Rastro","slug":"rastro","category":"Workflow & Automation","website":"https://www.rastro.ai","risk_rating":"low","verification":"partially_verified","verification_detail":{"tier":"partially_verified","partial_reason_code":"missing_terms","partial_reason_label":"Terms not yet captured","blocked_core_documents":[]},"rating":{"value":"low","unknown_reason_code":"none","unknown_reason_label":"Rated"},"corpus_status":"corpus_partial","canonical":"https://airinetwork.com/platform/rastro","machine_url":"https://airinetwork.com/api/machine/platform/rastro","last_reviewed":"2026-07-20","findings_count":0,"findings":[],"documents":[{"doc_type":"privacy","pdf_page_count":null,"extraction_method":null,"page_level_citations":false,"last_captured":"2026-07-20","last_verified_scan":"2026-07-20","verified_scan_count":1}],"clause_intelligence":{"clauses_count":9,"risk_patterns_count":4,"stance_events_count":4,"patterns_by_family":{"privacy_sharing":3,"training_use":1},"risk_summary":{"high":1,"medium":2,"low":1},"evidence":[{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"medium","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"We do not sell personal data. We may share personal data with service providers that help us operate the website and related workflows, subject to appropriate contractual and operational controls. Hosting, infrastructure, storage, caching, and monitoring providers, including AWS services such as EKS, Bedrock, S3, ElastiCache, and CloudWatch, for application and evaluation workflows. Application hosting and site an...","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"output_ownership","quote":"We do not sell personal data. We may share personal data with service providers that help us operate the website and related workflows, subject to appropriate contractual and operational controls. Hosting, infrastructure, storage, caching, and monitoring providers, including AWS services such as EKS, Bedrock, S3, ElastiCache, and CloudWatch, for application and evaluation workflows. Application hosting and site analytics providers, including Vercel, for site delivery, performance, and usage reporting. Advertising and analytics providers, including Google Ads and Google Analytics where enabled, for paid-search attribution, aggregate reporting, and conversion measurement. Database, authentication, storage, and backend-service providers, including Supabase, for saved sessions and related application storage. Model and automation providers, including OpenAI, when a submitted request requires model processing to generate a preview, demo result, or related output. Scheduling or external-service providers when you choose to follow a link or complete a workflow on a third-party site, such as Cal.com. Professional advisers, auditors, counterparties in a transaction, or public authorities where disclosure is reasonably necessary or legally required.","source_url":"https://www.rastro.ai/privacy-policy","deep_link":"https://www.rastro.ai/privacy-policy#:~:text=%20We%20do%20not,necessary%20or%20legally%20required.","structural_citation":"Privacy Policy › “How we share personal data”","citation_basis":"heading_path","char_start":2711,"char_end":3978}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We do not sell personal data. We may share personal data with service providers that help us operate the website and related workflows, subject to appropriate contractual and operational controls. Hosting, infrastructure, storage, caching, and monitoring providers, including AWS services such as EKS, Bedrock, S3, ElastiCache, and CloudWatch, for application and evaluation workflows. Application hosting and site an...","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"output_ownership","quote":"We do not sell personal data. We may share personal data with service providers that help us operate the website and related workflows, subject to appropriate contractual and operational controls. Hosting, infrastructure, storage, caching, and monitoring providers, including AWS services such as EKS, Bedrock, S3, ElastiCache, and CloudWatch, for application and evaluation workflows. Application hosting and site analytics providers, including Vercel, for site delivery, performance, and usage reporting. Advertising and analytics providers, including Google Ads and Google Analytics where enabled, for paid-search attribution, aggregate reporting, and conversion measurement. Database, authentication, storage, and backend-service providers, including Supabase, for saved sessions and related application storage. Model and automation providers, including OpenAI, when a submitted request requires model processing to generate a preview, demo result, or related output. Scheduling or external-service providers when you choose to follow a link or complete a workflow on a third-party site, such as Cal.com. Professional advisers, auditors, counterparties in a transaction, or public authorities where disclosure is reasonably necessary or legally required.","source_url":"https://www.rastro.ai/privacy-policy","deep_link":"https://www.rastro.ai/privacy-policy#:~:text=%20We%20do%20not,necessary%20or%20legally%20required.","structural_citation":"Privacy Policy › “How we share personal data”","citation_basis":"heading_path","char_start":2711,"char_end":3978}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Rastro works with service providers that may process data in more than one jurisdiction. Where personal data is transferred across borders, we rely on the safeguards required or appropriate for the relevant transfer, which may include contractual commitments and similar transfer mechanisms.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Rastro works with service providers that may process data in more than one jurisdiction. Where personal data is transferred across borders, we rely on the safeguards required or appropriate for the relevant transfer, which may include contractual commitments and similar transfer mechanisms.","source_url":"https://www.rastro.ai/privacy-policy","deep_link":"https://www.rastro.ai/privacy-policy#:~:text=%20Rastro%20works%20with,and%20similar%20transfer%20mechanisms.","structural_citation":"Privacy Policy › “International transfers”","citation_basis":"heading_path","char_start":4921,"char_end":5213}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"We use personal data to operate the site, respond to you, provide previews and demo workflows, generate requested outputs, create evaluation accounts when you ask us to, secure our systems, investigate misuse, understand aggregate site usage, measure paid-search campaign performance, attribute demo requests, and meet legal or contractual obligations. For users in the EEA, UK, or similar jurisdictions, our legal ba...","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"We use personal data to operate the site, respond to you, provide previews and demo workflows, generate requested outputs, create evaluation accounts when you ask us to, secure our systems, investigate misuse, understand aggregate site usage, measure paid-search campaign performance, attribute demo requests, and meet legal or contractual obligations. For users in the EEA, UK, or similar jurisdictions, our legal bases may include taking steps at your request before entering into a contract, performing a contract, complying with law, pursuing legitimate interests such as operating and securing the site, and, where required, consent. Consistent with our public product commitments, we do not use customer-submitted catalog data to train general-purpose models.","source_url":"https://www.rastro.ai/privacy-policy","deep_link":"https://www.rastro.ai/privacy-policy#:~:text=%20We%20use%20personal,to%20train%20general-purpose%20models.","structural_citation":"Privacy Policy › “How we use personal data”","citation_basis":"heading_path","char_start":1903,"char_end":2671}}]},"tier_conditions":[],"disclaimer":"Informational only, not legal advice. Every finding is a verbatim quote from a fully-read, gate-verified document; verify via snapshot_sha256 + wayback_url. Partially-verified platforms show findings only from their verified document(s).","benchmark":{"disclaimer":"Automated assessment against a published rubric — not legal advice.","bands":[]},"@jsonld":{"@context":"https://schema.org","@type":"Dataset","name":"Rastro — AI policy risk findings","description":"Verified, cited policy findings for Rastro across 13 risk surfaces.","url":"https://airinetwork.com/platform/rastro","creator":{"@type":"Organization","name":"AIRIN","url":"https://airinetwork.com"},"isAccessibleForFree":true,"license":"https://airinetwork.com/terms","additionalProperty":[{"@type":"PropertyValue","name":"verification","value":"partially_verified"},{"@type":"PropertyValue","name":"tier_condition_count","value":0}],"hasPart":[],"variableMeasured":[]}}