Workflow & Automation · apten.aiApten
Graded against 808 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Establishes a retention obligation requiring that personal information be kept only as long as necessary for stated purposes or as required or permitted by law, sets an upper limit tied to account duration, and mandates deletion or anonymization when no ongoing legitimate business need or legal basis for retention exists.
Defines device data as information about the user's hardware used to access the services, enumerating specific data points (IP address, proxy server, device and application IDs, location, browser type, hardware model, internet service provider, mobile carrier, operating system, system configuration), establishing the scope of device-level automatic data collection.
Discloses that AI Products are provided through named third-party AI Service Providers and that user input, output, and personal information will be shared with and processed by those providers; also imposes a restriction on users prohibiting use of AI Products in violation of any AI Service Provider's terms or policies.
How to read this page: Overall risk rates what Apten's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 57 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 57 citationsLast captured 2026-07-19
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Establishes that the company only processes personal information when a valid legal basis exists — such as consent, legal compliance, contractual necessity, rights protection, or legitimate interests — and describes consent-based processing conditions applicable to users in certain regions, creating a restriction on processing without a recognized basis.
" In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with servic..."
Lists multiple specific exceptions permitting processing without consent, including insurance claims, identifying injured or deceased persons, financial abuse prevention, situations where consent would compromise information accuracy, and disclosures required by law, all framed as narrow carve-outs from the general consent requirement.
" If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim For identifying injured, ill, or deceased persons and communicating with next of kin If we have reasonable grounds..."
Defines Category H as audio, electronic, sensory, or similar information including images and recordings and discloses that this category is not collected.
" H. Audio, electronic, sensory, or similar information Images and audio, video or call recordings created in connection with our business activities NO "
Defines Category I as professional or employment-related information and discloses that this category is not collected.
" I. Professional or employment-related information Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us NO "
Grants California residents the right, under a named state statute, to request once annually and at no cost information about categories of personal information disclosed to third parties for direct marketing purposes, and the identities of those third parties, with a specified submission procedure.
" California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal informat..."
Establishes a retention obligation requiring that personal information be kept only as long as necessary for stated purposes or as required or permitted by law, sets an upper limit tied to account duration, and mandates deletion or anonymization when no ongoing legitimate business need or legal basis for retention exists.
" In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purpo..."
States that personal information may be disclosed to service providers under written contracts, incorporates by reference the sharing section, permits use of personal information for internal business research and technological development, and affirmatively represents that no personal information has been disclosed, sold, or shared with third parties for business or commercial purposes — a protective statement limiting third-party data sharing.
" We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, "WHEN AND WITH WHOM DO WE SH..."
Imposes an obligation on the company to adhere to the Google API Services User Data Policy, including its Limited Use requirements, when handling information received from Google APIs — restricting how that data may be used to the bounds of a third-party policy.
" Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements."
Clause A explicitly states that user data 'will be shared' with AI Service Providers (third parties), while Clause B states that the company 'has not disclosed, sold, or shared' any personal information to third parties, creating opposing claims about the same data practice.
" We provide the AI Products through third-party service providers ("AI Service Providers"), including Anthropic and OpenAI. As outlined in this Privacy Notice, your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products for purposes outlined in "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider."
" We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information. We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information."
Defines device data as information about the user's hardware used to access the services, enumerating specific data points (IP address, proxy server, device and application IDs, location, browser type, hardware model, internet service provider, mobile carrier, operating system, system configuration), establishing the scope of device-level automatic data collection.
AI-generated interpretation, not legal advice.
" In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible."
Establishes a retention obligation requiring that personal information be kept only as long as necessary for stated purposes or as required or permitted by law, sets an upper limit tied to account duration, and mandates deletion or anonymization when no ongoing legitimate business need or legal basis for retention exists.
AI-generated interpretation, not legal advice.
" We provide the AI Products through third-party service providers ("AI Service Providers"), including Anthropic and OpenAI. As outlined in this Privacy Notice, your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products for purposes outlined in "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider."
Discloses that AI Products are provided through named third-party AI Service Providers and that user input, output, and personal information will be shared with and processed by those providers; also imposes a restriction on users prohibiting use of AI Products in violation of any AI Service Provider's terms or policies.
AI-generated interpretation, not legal advice.
" We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information. We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers."
States that personal information may be disclosed to service providers under written contracts, incorporates by reference the sharing section, permits use of personal information for internal business research and technological development, and affirmatively represents that no personal information has been disclosed, sold, or shared with third parties for business or commercial purposes — a protective statement limiting third-party data sharing.
AI-generated interpretation, not legal advice.
" We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information ."
States that personal information may be shared in specific situations with specific third parties and cross-references the fuller sharing section, defining the general scope of the company's disclosure practices.
AI-generated interpretation, not legal advice.
" In Short: We may share information in specific situations described in this section and/or with the following third parties. We may need to share your personal information in the following situations: Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company."Permalink to this finding →
Permits the company to share or transfer personal information with another company in connection with a merger, asset sale, financing, or acquisition, including during negotiation stages of such transactions.
AI-generated interpretation, not legal advice.
" If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim For identifying injured, ill, or deceased persons and communicating with next of kin If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced If the collection is solely for journalistic, artistic, or literary purposes If the information is publicly available and is specified by the regulations"
Lists multiple specific exceptions permitting processing without consent, including insurance claims, identifying injured or deceased persons, financial abuse prevention, situations where consent would compromise information accuracy, and disclosures required by law, all framed as narrow carve-outs from the general consent requirement.
AI-generated interpretation, not legal advice.
" Some of the information may be considered "special" or "sensitive" in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We do not process sensitive personal information."
Expressly states that no information is collected from third parties, restricting the company's data sourcing to information provided directly by the user — user-favorable limitation on data collection scope.
AI-generated interpretation, not legal advice.
" We do not collect any information from third parties."
Expressly prohibits collection of any information from third parties, confirming a user-favorable restriction on third-party data sourcing.
AI-generated interpretation, not legal advice.
" This Privacy Notice for Apten, Inc ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you: Visit our website at https://apten.ai , or any website of ours that links to this Privacy Notice Engage with us in other related ways, including any sales, marketing, or events Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at founders@apten.ai ."
Defines the scope of the privacy notice by identifying the controller entity, the categories of processing activities covered (access, collect, store, use, share), and the services and contexts to which the notice applies, establishing the foundational scope for all subsequent obligations.
AI-generated interpretation, not legal advice.
" K. Inferences drawn from collected personal information Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual's preferences and characteristics NO "
Defines Category K as inferences drawn from collected personal information to create individual profiles or summaries and discloses that this category is not collected.
AI-generated interpretation, not legal advice.
" Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings)."
Defines log and usage data as server-collected diagnostic and performance information stored in log files, enumerating specific data points (IP address, device info, browser type, activity timestamps, pages viewed, searches, feature use, system activity, error reports), establishing the scope of server-side automatic data collection.
AI-generated interpretation, not legal advice.
" In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests. If you are located in Canada, this section applies to you. We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time. In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example: If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way"Permalink to this finding →
Establishes that the company only processes personal information when a valid legal basis exists — such as consent, legal compliance, contractual necessity, rights protection, or legitimate interests — and describes consent-based processing conditions applicable to users in certain regions, creating a restriction on processing without a recognized basis.
AI-generated interpretation, not legal advice.
" If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below. However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent."
Grants users the right to withdraw consent to processing at any time by contacting the company, while clarifying that withdrawal does not affect the lawfulness of processing conducted prior to withdrawal or processing based on lawful grounds other than consent.
AI-generated interpretation, not legal advice.
" You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes."
Grants users the right to unsubscribe from marketing and promotional communications at any time via email unsubscribe links or direct contact, while preserving the company's ability to send non-marketing, service-related communications necessary for account administration.
AI-generated interpretation, not legal advice.
" A. Identifiers Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name YES "
Defines Category A personal information as identifiers including contact details, IP addresses, and account names, and confirms this category is collected.
AI-generated interpretation, not legal advice.
" B. Personal information as defined in the California Customer Records statute Name, contact information, education, employment, employment history, and financial information YES "
Defines Category B personal information as defined under a referenced state customer records statute, covering name, contact, education, employment history, and financial information, and confirms this category is collected.
AI-generated interpretation, not legal advice.
" C. Protected classification characteristics under state or federal law Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data NO "
Defines Category C as protected classification characteristics such as gender, age, race, and ethnicity and discloses that this category is not collected.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Apten's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Apten's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Apten's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Apten requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Apten's published policies yet.
What the policies actually cover
0 topicsNone of Apten's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this not...”Open source citation
The clause permits sale of personal data or information.
“In Short: We do not knowingly collect data from or market to children under 18 years of age. We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services...”Open source citation
The clause permits sale of personal data or information.
“We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and de...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information .”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configurati...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | worsens | HIGH | 2 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 2 |
| Team / Business | data retention | conditional | MEDIUM | 1 |
| Team / Business | subprocessors data sharing | worsens | HIGH | 3 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information .”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“In Short: We may share information in specific situations described in this section and/or with the following third parties. We may need to share your personal information in the following situations: Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We provide the AI Products through third-party service providers ("AI Service Providers"), including Anthropic and OpenAI. As outlined in this Privacy Notice, your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products for purposes outlined in "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.”Open timeline citation
Latest stance: sale or sell on privacy data use
“In Short: We do not knowingly collect data from or market to children under 18 years of age. We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at founders@apten.ai .”Open timeline citation
Latest stance: sale or sell on subprocessors data sharing
“We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information. We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information. We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.”Open timeline citation
Latest stance: indefinite or necessity based on data retention
“In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-19· verified 2026-07-19verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
61 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Apten's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Apten's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Apten's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.