Skip to main content
Platform Review
PricingSign in
← All platforms
Workflow & Automation · albato.com

Albato

Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskMEDReviewed 2026-07-19
Creator: low · GRC: low · Counsel: low
creator band
Severe
enterprise · Severe
Dealbreaker · Training without opt-out
Exhibit A · Privacy Policy · verbatim

The use of any Customer Data that you send to Google by Albato is limited to the practices disclosed above and Albato only accesses this data under your explicit instructions.

highest-risk verified finding on training use — tap for the citation
70 verified findings2 policy surfaces1/2 core docs verified

Partially verified: Privacy Policy assessed · Terms of Service pending. Everything below comes only from what was read in full.

Risk triage

Watch: Privacy and data use

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
4
medium
52
low
1/2
docs
Trains on your data?
No training on your content by default
from 1 cited finding
Who owns outputs?
Not yet assessed
no verified finding covers this surface yet
Commercial use?
Not yet assessed
no verified finding covers this surface yet
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →
Risk by role
Select a role to tailor the summary and reorder the findings below.

Scores derived from 39 enriched findings — same verbatim citations as below. AI-generated, not legal advice.

What this means for you
  • Albato's terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.

Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.

How to read this page: Overall risk rates what Albato's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Creator lens
Your prompts, your outputs, your IP
SEVERE
Dealbreaker — Training without opt-out. Your inputs/outputs are used to train models and the policy provides no way to decline. see the clause · and another

Based on 170 verified, verbatim-cited findings below — read the citations.

Enterprise lens
Data use, retention, subprocessors, audit
SEVERE
Dealbreaker — Training without opt-out. Your inputs/outputs are used to train models and the policy provides no way to decline. see the clause · and another

Based on 203 verified, verbatim-cited findings below — read the citations.

Automated assessment against a published rubric — not legal advice.

Partially verifiedWorkflow & Automation

Partially verified — Privacy Policy — Verified (read in full, 70 findings); Terms of Service — Capture under review. Findings below are from fully-read, verified documents only; remaining core documents are pending capture.

Why partial?

Needs review

A core policy document is captured but requires review before AIRIN can mark the corpus fully verified.

Document status
  • Privacy Policy
    Verified - read in full - 70 citationsstaticLast captured 2026-07-19
  • Terms of Service
    Completeness unconfirmedstatic
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Privacy & data use

This segment establishes that contacting the company is treated as consent to processing necessary for the performance of or steps prior to a business relationship, with contract as the lawful basis.

" 1.1 By contacting us by means specified in paragraph "Personal Data we may collect from you", we assume that processing is necessary for the performance of a business relationship (oral or written contract) or in order to take steps prior ..."
plan language
Privacy & data use

This segment defines the contractual basis for processing data in connection with steps taken prior to entering a business relationship, establishing the legal ground for this category of processing.

" To take steps at the request of the data subject prior to entering into a business relationship (oral or written contract):"
📍 Privacy Policy › “How we will use your personal data (Lawful basis for processing)”Jump to exact text →
plan language
Privacy & data use

Describes the procedure of invoicing services upon the data subject entering a business relationship, indicating a specific processing activity tied to contractual performance.

" 1.3 Once you enter into a business relationship (oral or written contract) with us, we will invoice our services."
Conflicting provisions (3)
  • Clause B states the platform 'will use' contact details to provide marketing information, implying a mandatory action, while Clause A explicitly grants the user the right to unsubscribe from marketing emails, creating an opposing claim about the user's control.

    "You may occasionally receive emails from us. These may be marketing or other informational emails to you as our existing client. You have right to unsubscribe from our marketing emails, you may find the unsubscribe link in every email. In this case we will continue to send you only informational emails on our products and services necessary to provide you services under relevant contract between us (including without limitation information on the products, services, on your personal account status, updates on the operation of the Services). "
    " 1.4 We will use your contact details to provide you training and marketing information on our products and services as well as information necessary to provide you services in accordance with relevant contract between us."
    Within one document
  • Clause B states the platform 'will use' contact details to provide marketing information, implying a mandatory action, while Clause A explicitly grants the user the right to unsubscribe from marketing emails, creating an opposing claim about the user's control.

    "You may occasionally receive emails from us. These may be marketing or other informational emails to you as our existing client. You have right to unsubscribe from our marketing emails, you may find the unsubscribe link in every email. In this case we will continue to send you only informational emails on our products and services necessary to provide you services under relevant contract between us (including without limitation information on the products, services, on your personal account status, updates on the operation of the Services). "
    " 1.4 We will use your contact details to provide you training and marketing information on our products and services as well as information necessary to provide you services in accordance with relevant contract between us."
    Within one document
  • Clause B states the platform 'will use' contact details to provide marketing information, implying a mandatory action, while Clause A explicitly grants the user the right to unsubscribe from marketing emails, creating an opposing claim about the user's control.

    "You may occasionally receive emails from us. These may be marketing or other informational emails to you as our existing client. You have right to unsubscribe from our marketing emails, you may find the unsubscribe link in every email. In this case we will continue to send you only informational emails on our products and services necessary to provide you services under relevant contract between us (including without limitation information on the products, services, on your personal account status, updates on the operation of the Services). "
    " 1.4 We will use your contact details to provide you training and marketing information on our products and services as well as information necessary to provide you services in accordance with relevant contract between us."
    Within one document

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 4
Tier-specific - 0
Total citations - 70
Severity
Surface
Document
Tier
Privacy & data use
High
" The identity of the data subject must be proven in a suitable way, thus we will verify your identity and then process your request in accordance with applicable law. The right to request deletion of your information is not unreservedly guaranteed, it is limited especially when colliding with the right of freedom of expression and information and compliance with our legal obligations. Depending on the situation (e.g. our obligations may differ for Site and Services situation), we may partly deny your request, e.g. when we are legally obliged to keep all or some of your information for some prescribed time."
Privacy Policy › “Request erasure”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause limits the right to erasure by requiring identity verification and specifying that the right is not absolute, noting exceptions including conflicts with freedom of expression, legal obligations, and the possibility of partial denial of erasure requests.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. This includes technical data from analytics providers such as Google based outside the EU;"
Privacy Policy › “Direct interactions.”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment describes the automatic collection of Technical Data via cookies, server logs, and analytics providers including Google outside the EU, disclosing the use of third-party subprocessors and cross-border data flows involved in data collection.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" 1.4 We will use your contact details to provide you training and marketing information on our products and services as well as information necessary to provide you services in accordance with relevant contract between us."
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment permits the company to use contact details to provide training and marketing information on products and services and to fulfill contractual obligations, identifying these as processing purposes.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" ● Email addresses of your Inbox and Sent folders, when you choose to sync your apps and Gmail with your device's address book using Albato services. Please note, Albato has no access to your Contacts; and"
Privacy Policy › “Google integrations”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment discloses that email addresses from Inbox and Sent folders may be collected when syncing with Gmail via Albato, and clarifies that Albato does not access Contacts, partially limiting the scope of data access disclosed.

AI-generated interpretation, not legal advice.

Privacy & data use
FavorableHigh
" The use of any Customer Data that you send to Google by Albato is limited to the practices disclosed above and Albato only accesses this data under your explicit instructions."
Privacy Policy › “Google integrations”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment restricts Albato's use of Customer Data sent to Google to only the practices disclosed in the policy, and limits access to such data to situations where the user has given explicit instructions, preventing broader or undisclosed uses of that data.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" California Privacy Rights: We will not share any Personal Data with third-parties for their direct marketing purposes to the extent prohibited by California law. If our practices change, we will do so in accordance with applicable laws and will notify you in advance."
Privacy Policy › “Your rights”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Restricts the company from sharing personal data with third parties for direct marketing purposes to the extent prohibited by applicable law, and obliges the company to notify users in advance if its practices change — user-favorable restriction on third-party data sharing for marketing.

AI-generated interpretation, not legal advice.

Training on your content
High
" The use of any Customer Data that you send to Google by Albato is limited to the practices disclosed above and Albato only accesses this data under your explicit instructions."
Privacy Policy › “Google integrations”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Restricts the organization's use of customer data sent to Google to only the practices disclosed above and states that the organization accesses this data solely under the user's explicit instructions — prohibits use beyond disclosed purposes, user-favorable.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Contact Data includes billing address, delivery address, email address and telephone numbers, Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us, Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website, Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses, Usage Data includes information about how you use our website, products and services, Marketing and Communications Data includes your preferences in receiving marketing from us."
Privacy Policy › “Personal data we may collect from you”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment enumerates specific categories of personal data collected (Contact Data, Transaction Data, Technical Data, Profile Data), fulfilling the controller's obligation to inform data subjects of the types of personal data processed about them.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" "Data processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;"
Privacy Policy › “Definitions and interpretation”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines 'Data processor' as the entity processing personal data on behalf of the controller, which is legally operative for establishing the processor relationship and associated obligations throughout the document.

AI-generated interpretation, not legal advice.

Privacy & data use
FavorableHigh
" "Consent" means agreement, which must be freely given, specific, informed and be an unambiguous indication of the Data Subject's wishes by which they, by a statement or by a clear positive action, signify agreement to the Processing of Personal Data relating to them."
Privacy Policy › “Definitions and interpretation”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines 'Consent' as it applies to processing of personal data, establishing the legal standard required for lawful consent-based processing throughout the policy.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" "Data controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;"
Privacy Policy › “Definitions and interpretation”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines 'Data controller,' identifying the party that determines the purposes and means of processing personal data, which is legally operative for assigning responsibility under data protection legislation.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" "Data subject", "You", "your" means:"
Privacy Policy › “Definitions and interpretation”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines 'Data subject,' 'You,' and 'your,' identifying the categories of individuals whose personal data rights and protections are established throughout the policy.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" "Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."
Privacy Policy › “Definitions and interpretation”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines 'Personal data' by setting out the legal standard for what constitutes identifiable information, determining the scope of data subject to protection and processing obligations throughout the document.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" "Processing" means any activity that involves the use of Personal Data. It includes obtaining, recording or holding the data, or carrying out any operation or set of operations on the data including organizing, amending, retrieving, using, disclosing, erasing or destroying it."
Privacy Policy › “Definitions and interpretation”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines 'Processing' broadly to include all operations on personal data, establishing the scope of activities regulated under the policy and applicable data protection legislation.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" · subscribe to our publications;"
Privacy Policy › “Direct interactions.”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Identifies subscription to publications as a specific method by which users provide personal data, establishing a data collection trigger.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" 2.3.1 To administer our site and for internal operations, including data security, troubleshooting, testing, statistical and survey purposes;"
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment permits processing of personal data for site administration, data security, troubleshooting, testing, and statistical purposes under the legitimate interests basis.

AI-generated interpretation, not legal advice.

Privacy & data use
FavorableHigh
" 3.2 If you wish not to receive such promotional e-mails, you may withdraw your consent at any time by contacting us as described in paragraph "Your rights" or follow the "unsubscribe" or instructions contained in the promotional communications you receive."
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment grants data subjects the right to withdraw consent and unsubscribe from promotional emails at any time, and describes the procedure for exercising that right.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
"You may occasionally receive emails from us. These may be marketing or other informational emails to you as our existing client. You have right to unsubscribe from our marketing emails, you may find the unsubscribe link in every email. In this case we will continue to send you only informational emails on our products and services necessary to provide you services under relevant contract between us (including without limitation information on the products, services, on your personal account status, updates on the operation of the Services). "
Privacy Policy › “EmailCommunications.”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment grants data subjects the right to unsubscribe from marketing emails and explains that informational emails related to contracted services will continue, establishing the scope of the company's ongoing communication permission and the data subject's opt-out right.

AI-generated interpretation, not legal advice.

Common questions about Albato's policies

Does Albato train its AI models on your data?
No training on your content by default — based on 1 verified finding from Albato's published policy. Informational only, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from Albato's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

21 verified clauses

Clauses in Albato's policies that work in your favour — commitments the platform made to you.

  • Privacy & data useads & tracking use
    You may occasionally receive emails from us. These may be marketing or other informational emails to you as our existing client. You have right to unsubscribe from our marketing emails, you may find the unsubscribe link in every email. In this case we will con…

    This segment grants data subjects the right to unsubscribe from marketing emails and explains that informational emails related to contracted services will continue, establishing the scope of the company's ongoing commun…

    📍 Privacy Policy › “EmailCommunications.”Jump to exact text →
  • Privacy & data use
    of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights…

    This clause grants data subjects the right to object to processing based on legitimate interests or for direct marketing purposes, while also noting the platform's ability to override objections based on compelling legit…

    📍 Privacy Policy › “Object to processing”Jump to exact text →
  • Audit rights, DPA & residency
    When we processes any personal data on your behalf, you are the controller and we are the Processor for the purposes of the Data Protection Legislation.We only will process that personal data only on your explicit instructions, notify you without undue delay o…

    This segment establishes that Albato acts as a data processor when processing customer personal data on the customer's behalf, obligating it to process only on explicit instructions, notify of breaches without undue dela…

    📍 Privacy Policy › “Customer personal data”Jump to exact text →
  • Privacy & data use
    of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initial…

    This clause grants data subjects the right to receive or transfer their personal data in a structured, machine-readable format, limited to data provided with consent or used to perform a contract, establishing data porta…

    📍 Privacy Policy › “Request the transfer”Jump to exact text →
  • Privacy & data use
    where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services…

    This clause grants data subjects the right to withdraw consent at any time while disclaiming that withdrawal does not affect the lawfulness of prior processing, and noting that withdrawal may limit available products or…

    📍 Privacy Policy › “Withdraw consent at any time”Jump to exact text →
  • Privacy & data usechildren's data
    We do not sell any products or services for purchase by children. If you are under 16, you may use our websites only with the involvement of your holder of parental responsibility. We do not knowingly collect personal information from children below 16 without…

    This segment imposes an obligation on users who provide third-party personal data to have notified those individuals of processing purposes, recipients, and access rights, and to have obtained all necessary consents, pla…

    📍 Privacy Policy › “Children”Jump to exact text →

+ 15 more verified clauses of this kind on this platform, cited in full in the report.

📋 Rules you must follow

0 verified clauses

What Albato requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

No user-conduct rule has been verified in Albato's published policies yet.

What the policies actually cover

7 topics
  • Product telemetry & usage tracking9 clauses
  • Advertising & tracking3 protective6 clauses
  • Sale or sharing of personal data1 protective1 clause
  • Children's data1 protective1 clause
  • Government & law-enforcement disclosure1 clause
  • Data shared with other AI providers1 protective3 clauses
  • Deletion rights & post-termination survival2 protective7 clauses

72 further verified clauses are cited on this page but not yet assigned a topic.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

385
clauses
24
patterns
24
stances
privacy sharing · 17ip ownership · 3data retention · 2legal burden · 2
data retentionLOWTerms of Service › “Major security measures”

The clause provides a deletion or time-bounded retention path.

• Backups of deleted data are stored for 1 months
Open source citation
data retentionLOWTerms of Service › “Major security measures”

The clause provides a deletion or time-bounded retention path.

• Backups of deleted data are stored for 1 months
Open source citation
ip ownershipHIGHPrivacy Policy › “Disclosure of information to third parties”

The clause appears to reserve or claim ownership rights for the platform.

● In the event we are acquired by or merged with a third party entity or undergo another change of control, we reserve the right to transfer information to a successor entity. In this event, we will notify you by electronic means before information about you is transferred and becomes subject to a different privacy policy.
Open source citation
ip ownershipHIGHPrivacy Policy › “Disclosure of information to third parties”

The clause appears to reserve or claim ownership rights for the platform.

● In the event we are acquired by or merged with a third party entity or undergo another change of control, we reserve the right to transfer information to a successor entity. In this event, we will notify you by electronic means before information about you is transferred and becomes subject to a different privacy policy.
Open source citation
ip ownershipHIGHPrivacy Policy › “Disclosure of information to third parties”

The clause appears to reserve or claim ownership rights for the platform.

● In the event we are acquired by or merged with a third party entity or undergo another change of control, we reserve the right to transfer information to a successor entity. In this event, we will notify you by electronic means before information about you is transferred and becomes subject to a different privacy policy.
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tiersaudit rights dpa residencyconditionalMEDIUM1
All applicable tiersdata retentionimprovesLOW2
All applicable tiersindemnity liabilityconditionalMEDIUM2
All applicable tiersprivacy data useworsensHIGH10
All applicable tierssubprocessors data sharingworsensHIGH9

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

worsenedhigh materialityJul 19Aug 14, 2026

data sharing worsened from medium/third party or vendor sharing to high/sale or sell.

Before · medium
The Parties agree that the Processor has Controller’s general authorization to use services of Subprocessors from the list indicated in Schedule 5 hereto. The processor may change the said list with 30 days prior written notice to the Controller. In case the Controller reasonably objects to the changes to the Subprocessors list, with provision of reasonable concerns as to the personal data security, then the sole and exclusive remedy for the Controller shall be termination of the License Agreement for convenience with 15 days prior written notice.
Before citation
After · high
We do not rent, sell, or share personal information about you with other people or non-affiliated companies without your consent except to provide products or services you've requested, when we have your permission, or under the following circumstances:
After citation
improvedhigh materialityJul 19Jul 19, 2026

data sharing improved from high/sale or sell to medium/third party or vendor sharing.

Before · high
We do not rent, sell, or share personal information about you with other people or non-affiliated companies without your consent except to provide products or services you've requested, when we have your permission, or under the following circumstances:
Before citation
After · medium
The Parties agree that the Processor has Controller’s general authorization to use services of Subprocessors from the list indicated in Schedule 5 hereto. The processor may change the said list with 30 days prior written notice to the Controller. In case the Controller reasonably objects to the changes to the Subprocessors list, with provision of reasonable concerns as to the personal data security, then the sole and exclusive remedy for the Controller shall be termination of the License Agreement for convenience with 15 days prior written notice.
After citation
worsenedhigh materialityJun 17Jul 19, 2026

data sharing worsened from medium/third party or vendor sharing to high/sale or sell.

Before · medium
The Parties agree that the Processor has Controller’s general authorization to use services of Subprocessors from the list indicated in Schedule 5 hereto. The processor may change the said list with 30 days prior written notice to the Controller. In case the Controller reasonably objects to the changes to the Subprocessors list, with provision of reasonable concerns as to the personal data security, then the sole and exclusive remedy for the Controller shall be termination of the License Agreement for convenience with 15 days prior written notice.
Before citation
After · high
We do not rent, sell, or share personal information about you with other people or non-affiliated companies without your consent except to provide products or services you've requested, when we have your permission, or under the following circumstances:
After citation
improvedhigh materialityJul 8Jul 19, 2026

data sharing improved from high/sale or sell to medium/third party or vendor sharing.

Before · high
We do not rent, sell, or share personal information about you with other people or non-affiliated companies without your consent except to provide products or services you've requested, when we have your permission, or under the following circumstances:
Before citation
After · medium
of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
After citation
worsenedhigh materialityJun 17Jun 28, 2026

data sharing worsened from medium/third party or vendor sharing to high/sale or sell.

Before · medium
The Parties agree that the Processor has Controller’s general authorization to use services of Subprocessors from the list indicated in Schedule 5 hereto. The processor may change the said list with 30 days prior written notice to the Controller. In case the Controller reasonably objects to the changes to the Subprocessors list, with provision of reasonable concerns as to the personal data security, then the sole and exclusive remedy for the Controller shall be termination of the License Agreement for convenience with 15 days prior written notice.
Before citation
After · high
We do not rent, sell, or share personal information about you with other people or non-affiliated companies without your consent except to provide products or services you've requested, when we have your permission, or under the following circumstances:
After citation
Aug 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on audit rights dpa residency

“DPA” means this Data Processing Agreement and all Schedules; “Controller Personal Data” means any Personal Data processed by the Processor on behalf of the Controller pursuant to or in connection with the License Agreement; “EEA” means the European Economic Area; “EU Data Protection Laws” means EU Directive 95/46/EC, as transposed into domestic legislation of each Member State and as amended, replaced or superseded from time to time, including by the GDPR and laws implementing or supplementing the GDPR; “GDPR” means EU General Data Protection Regulation 2016/679; “Data Transfer” means: 1.1.7.1. a transfer of the Controller Personal Data from the Controller to the Processor; or 1.1.7.2. an onward transfer of the Controller Personal Data from the Processor to a Subcontractor, or between two establishments of the Processor, in each case, where such transfer would not be prohibited by Data Protection Laws (or by the terms of data transfer agreements put in place to address the data transfer restrictions of Data Protection Laws); “Services” means subscription services provided by the Provider to the Customer under the License agreement consisting in web-based, application integration and data linking service accessed through the Albato website. “Subprocessor” means any person appointed by or on behalf of Processor to process Personal Data on behalf of the Customer in connection with the License Agreement.
Open timeline citation
Aug 14, 2026data sharingHIGH

Latest stance: sale or sell on subprocessors data sharing

We do not rent, sell, or share personal information about you with other people or non-affiliated companies without your consent except to provide products or services you've requested, when we have your permission, or under the following circumstances:
Open timeline citation
Aug 14, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

● We may disclose your information to third parties when we reasonably believe we are obligated to do so by law, and in order to investigate, prevent, or take action regarding suspected or actual prohibited activities, including but not limited to, fraud and situations involving potential threats to the physical safety of any person. We may disclose or otherwise allow others access to your Personal Information pursuant to a legal request, such as a subpoena, legal proceedings, search warrant or court order, or in compliance with applicable laws, if we have a good faith belief that the law requires us to do so, with or without notice to you. Your details may also be disclosed to the police and law enforcement agencies for the purpose of fraud detection, crime prevention and national security.
Open timeline citation
Jul 19, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

“DPA” means this Data Processing Agreement and all Schedules; “Controller Personal Data” means any Personal Data processed by the Processor on behalf of the Controller pursuant to or in connection with the License Agreement; “EEA” means the European Economic Area; “EU Data Protection Laws” means EU Directive 95/46/EC, as transposed into domestic legislation of each Member State and as amended, replaced or superseded from time to time, including by the GDPR and laws implementing or supplementing the GDPR; “GDPR” means EU General Data Protection Regulation 2016/679; “Data Transfer” means: 1.1.7.1. a transfer of the Controller Personal Data from the Controller to the Processor; or 1.1.7.2. an onward transfer of the Controller Personal Data from the Processor to a Subcontractor, or between two establishments of the Processor, in each case, where such transfer would not be prohibited by Data Protection Laws (or by the terms of data transfer agreements put in place to address the data transfer restrictions of Data Protection Laws); “Services” means subscription services provided by the Provider to the Customer under the License agreement consisting in web-based, application integration and data linking service accessed through the Albato website. “Subprocessor” means any person appointed by or on behalf of Processor to process Personal Data on behalf of the Customer in connection with the License Agreement.
Open timeline citation

Capture recency

  • Privacy Policy:Last captured 2026-07-19· verified 2026-07-19
  • Terms of Service:Last captured 2026-07-19· verified 2026-07-19

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

↑ 842 more findings this quarter vs last (921 vs 79). First scan: June 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Albato's policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Know where the missing document lives?

We haven't yet verified Albato's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.

Every finding above is a verbatim quote from Albato's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.