Workflow & Automation · getauctor.comAuctor
Graded against 808 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Imposes an obligation to retain data only as long as necessary to fulfill stated purposes or as required by law, and a further obligation to ensure secure deletion using secure data-wiping methods when data is no longer needed — user-favorable retention limitation.
Grants users the right to control tracking technologies by refusing cookies via browser settings, and provides an opt-out mechanism for disclosure of personal information to unaffiliated third parties for promotional purposes via email request, establishing user control rights over data use and sharing.
Discloses that certain enumerated categories of personal information, as categorized by a named consumer records statute, may be disclosed to service providers, establishing the scope of categorical data sharing with processors.
How to read this page: Overall risk rates what Auctor's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 107 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 107 citationsstaticLast captured 2026-08-24
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Introduces the framework by which the company identifies legitimate interests as a basis for collecting, using, disclosing, and otherwise processing personal information, and signals the enumeration of specific business purposes and corresponding legitimate interests.
" Where we collect, use, disclose and otherwise process your information based on legitimate interests, we rely on the legitimate interests as set forth below. We use your personal information for the following business purposes and base..."
Grants permission to receive end-customer personal information from business customers for the purpose of providing the Services.
" • Receive end‑customer information from our business customers to provide the Services;"
Establishes the procedure for exercising the enumerated rights: submission by email, confirmation of receipt within ten business days, identity verification, response within a reasonable time at minimal or no cost, and notification if the request cannot be facilitated.
" To exercise any applicable PIPEDA rights, please submit a request by emailing us at [email protected] . We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timefram..."
Establishes the procedure for exercising ARCO Rights: submission by email, a 10-business-day confirmation obligation, identity requirements, and that only the data subject or a legal representative may submit requests, with possible verification steps.
" To exercise any applicable LFPDPPP rights, please submit a request by emailing us at [email protected] . We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timefra..."
Establishes the obligation to communicate a denial decision and its reasons within 20 business days, and informs the individual of the right to file a complaint with a named governmental body within 15 days of receiving the response.
" If we deny your request, we will communicate such decision to you, as well as the reasons for the denial, within 20 business days. If you believe that your rights have been violated, you may file a data protection request with the M..."
Permits processing of personal information for performing client services including account maintenance, customer service, transaction processing, identity verification, and payment processing, identified as the legitimate interest supporting the preceding business purpose.
" Legitimate Interest: Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactio..."
Permits processing of personal information for client services including account servicing, communications, and relationship management as legitimate interest, and identifies managing the customer relationship and notifying of updated terms or privacy policies as an additional business purpose.
" Legitimate Interest: Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactio..."
Permits processing of personal information using data analytics to improve services, products, marketing, and customer relationships, identifying tailoring and improving products as a legitimate interest, and identifies making suggestions and recommendations about goods or services as an additional business purpose.
"For example, we may send you a survey or questionnaire to understand your experience in purchasing from us. Business Purpose: To use data analytics to improve services/products/marketing/customer relationships and experiences Legitim..."
Clause A directs users to the 'Ministry of Anti-Corruption and Good Governance' for rights violations, while Clause B directs them to their 'local Privacy Commissioner’s Office' for dissatisfaction with a decision, creating confusion about the correct appeal body.
" If we deny your request, we will communicate such decision to you, as well as the reasons for the denial, within 20 business days. If you believe that your rights have been violated, you may file a data protection request with the Ministry of Anti-Corruption and Good Governance within fifteen (15) days of receipt of our response. If you have any questions regarding our policies and practices, you may contact our DPO at [email protected] . "
" The exact nature and scope of these rights vary by province. To exercise any applicable Canadian provincial privacy rights, please submit a request by emailing us at [email protected] . We may request additional information from you in order to verify your identity and facilitate your request. If we are unable to complete your request, we will notify you in writing. If you are dissatisfied with our decision regarding your request, you may contact your local Privacy Commissioner’s Office. We may transfer your personal information outside of Canada. In such cases, we will employ reasonable data security measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, or disclosure. If you have any questions regarding how we handle cross-border data transfers, please contact our DPO at [email protected] . "
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information: Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. Disclosure of Your Information for Third-Party Advertising. If you do not want us to share your personal information with unaffiliated or non-agent third parties for promotional purposes, you can opt-out by sending us an email with your request to [email protected] . We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI's website. "
Grants users the right to control tracking technologies by refusing cookies via browser settings, and provides an opt-out mechanism for disclosure of personal information to unaffiliated third parties for promotional purposes via email request, establishing user control rights over data use and sharing.
AI-generated interpretation, not legal advice.
" We retain your data only for as long as necessary to fulfill the purposes outlined in this privacy policy or as required by law. When data is no longer needed, we ensure its secure deletion using secure data-wiping methods. "
Imposes an obligation to retain data only as long as necessary to fulfill stated purposes or as required by law, and a further obligation to ensure secure deletion using secure data-wiping methods when data is no longer needed — user-favorable retention limitation.
AI-generated interpretation, not legal advice.
" We may disclose the following categories of personal information, as categorized by CCPA, to our service providers:"
Discloses that certain enumerated categories of personal information, as categorized by a named consumer records statute, may be disclosed to service providers, establishing the scope of categorical data sharing with processors.
AI-generated interpretation, not legal advice.
" • Share necessary personal information with carriers, agents, customs brokers, final‑mile vendors, warehouse operators, insurers, IT/collaboration providers, and payment processors to perform the Services; and"
Permits sharing of personal information with named categories of third-party vendors (carriers, agents, customs brokers, final-mile vendors, warehouse operators, insurers, IT/collaboration providers, and payment processors) as necessary to perform the Services.
AI-generated interpretation, not legal advice.
" We do not sell or share your personal information, as such terms are defined by CCPA. "
Restricts the operator from selling or sharing personal information as those terms are defined under a named consumer privacy statute, constituting a user-protective prohibition on sale or sharing of personal data.
AI-generated interpretation, not legal advice.
" Transfer. We do not transfer or sell Google user data to third parties, including data brokers, advertisers, or information resellers, except (i) as necessary to provide or improve user-facing features and only with the user's consent; (ii) to comply with applicable law; or (iii) as part of a merger, acquisition, or sale of assets, with notice to affected users. Human access. We do not allow humans to read Google user data unless (i) we have obtained the user's affirmative agreement to view specific data; (ii) it is necessary for security purposes, such as investigating abuse; (iii) it is necessary to comply with applicable law; or (iv) the data has been aggregated and anonymized and is used for internal operations. Notwithstanding any other provision of this Privacy Policy, including provisions relating to advertising, marketing, or disclosure to third parties, the terms of this section govern our handling of Google user data and control in the event of any conflict. Transferring Personal Data to the U.S. Auctor AI is headquartered in the United States. By using our Services, you acknowledge that your personal information will be processed in the United States. We have implemented appropriate safeguards, including standard data protection clauses, to protect your data in accordance with GDPR and other relevant regulations. "
Restricts transfer or sale of Google user data to third parties, listing narrow exceptions (user consent for user-facing features, legal compliance, or merger/acquisition with notice), and prohibits human access to that data except under specified conditions such as affirmative user agreement or security investigations — user-favorable restrictions on data sharing and access.
AI-generated interpretation, not legal advice.
" • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties."
Restricts the company from charging different prices or rates, including through discounts or penalties, to users who exercise their privacy rights.
AI-generated interpretation, not legal advice.
" • Provide you with a different level or quality of goods or services."
Restricts the company from providing a different level or quality of goods or services to users who exercise their privacy rights.
AI-generated interpretation, not legal advice.
" • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services."
Restricts the company from suggesting to users that exercising privacy rights may result in different pricing, rates, or service quality.
AI-generated interpretation, not legal advice.
" • If we are unable to verify the identity of the data subject or legal representative."
Specifies an exception allowing denial of a rights request where the identity of the data subject or legal representative cannot be verified.
AI-generated interpretation, not legal advice.
" • If we do not hold personal data about the data subject."
Specifies an exception allowing denial of a rights request where the organization does not hold personal data about the data subject.
AI-generated interpretation, not legal advice.
" • If complying with the request would harm the rights of a third party."
Specifies an exception allowing denial of a rights request where compliance would harm the rights of a third party.
AI-generated interpretation, not legal advice.
" • If complying with the request would be contrary to a legal impediment or resolution from a competent authority."
Specifies an exception allowing denial of a rights request where compliance would be contrary to a legal impediment or resolution from a competent authority.
AI-generated interpretation, not legal advice.
" • If the request has already been carried out."
Specifies an exception allowing denial of a rights request where the same request has already been carried out.
AI-generated interpretation, not legal advice.
" Use. We use Google user data solely to provide and improve user-facing features that are prominent in the Auctor application. We do not use Google user data for any other purpose, including serving advertising (such as personalized, retargeted, or interest-based advertising) or determining creditworthiness or for lending purposes."
Restricts use of Google user data solely to providing and improving user-facing features prominent in the application, and prohibits its use for advertising (including personalized, retargeted, or interest-based advertising) or for determining creditworthiness or lending purposes — user-protective restriction on purpose limitation for this data category.
AI-generated interpretation, not legal advice.
" Unless required or permitted by law, we will use your personal information only for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to receive an explanation of how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal information for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so. Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law. "
Restricts use of personal information to the purposes for which it was originally collected, allowing compatible secondary use only with explanation available on request, and requiring notification and legal-basis disclosure before processing for unrelated purposes; also notes processing may occur without knowledge or consent where permitted by law.
AI-generated interpretation, not legal advice.
" Auctor AI does not knowingly collect information from children under the age of 13. If we become aware that we have collected personal information from a child without parental consent, we will take steps to remove such information from our servers. If you believe that we have collected personal information from your child under the age of 13, please contact us at [email protected] . "
Restricts knowing collection of personal information from children under 13 and imposes an obligation to remove such information if collected without parental consent, with a contact mechanism for parents — user-favorable protective restriction.
AI-generated interpretation, not legal advice.
" Welcome to Auctor AI, Inc. d/b/a Auctor AI (“Auctor” or “we” or “us” or “our”). We understand that you value your personal privacy and take it seriously. This privacy policy outlines Auctor’s policies and practices regarding the collection, use, storage, and protection of your personal data. This privacy policy applies to information that we may collect from you or that you may provide when you visit our Website (https://getauctor.com) (our “Website”) or when you use the Auctor AI web application (our “App”) (collectively, our “Services”). It does not apply to information collected by any third parties, including through any application or content that may link to or be accessible from or on our Services. Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is to not use our Services. By accessing or using our Services, you agree to the terms outlined in this policy. We are committed to maintaining the confidentiality and security of your information and will update this policy as necessary to reflect changes in our practices or regulatory requirements. Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates. CCPA NOTICE: We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”). "
Defines the company's identity, the scope of the privacy policy (collection, use, storage, and protection of personal data), and the Services to which it applies (Website and App), establishing the foundational definitions and scope boundaries for all downstream obligations.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Auctor's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Auctor's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Auctor's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Auctor requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Auctor's published policies yet.
What the policies actually cover
0 topicsNone of Auctor's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain your data only for as long as necessary to fulfill the purposes outlined in this privacy policy or as required by law. When data is no longer needed, we ensure its secure deletion using secure data-wiping methods. ”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain your data only for as long as necessary to fulfill the purposes outlined in this privacy policy or as required by law. When data is no longer needed, we ensure its secure deletion using secure data-wiping methods. ”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“ To exercise any applicable LFPDPPP rights, please submit a request by emailing us at [email protected] . We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact [email protected] . In submitting a request, please ensure that you clearly identify the specific right to be invoked. Only you or a legal represent...”Open source citation
The clause permits sale of personal data or information.
“We do not sell or share your personal information, as such terms are defined by CCPA. ”Open source citation
The clause permits sale of personal data or information.
“Transfer. We do not transfer or sell Google user data to third parties, including data brokers, advertisers, or information resellers, except (i) as necessary to provide or improve user-facing features and only with the user's consent; (ii) to comply with applicable law; or (iii) as part of a merger, acquisition, or sale of assets, with notice to affected users. Human access. We do not allow humans to read Go...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | conditional | MEDIUM | 2 |
| All applicable tiers | privacy data use | worsens | HIGH | 5 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 3 |
| Standard | commercial use | worsens | HIGH | 2 |
| Standard | subprocessors data sharing | worsens | HIGH | 2 |
| Team / Business | privacy data use | worsens | HIGH | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information: Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. Disclosure of Your Information for Third-Party Advertising. If you do not want us to share your personal information with unaffiliated or non-agent third parties for promotional purposes, you can opt-out by sending us an email with your request to [email protected] . We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI's website. ”Before citation
“We do not sell or share your personal information, as such terms are defined by CCPA. ”After citation
Latest stance: third party or vendor sharing on privacy data use
“We may disclose the following categories of personal information, as categorized by CCPA, to our service providers:”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information: Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. Disclosure of Your Information for Third-Party Advertising. If you do not want us to share your personal information with unaffiliated or non-agent third parties for promotional purposes, you can opt-out by sending us an email with your request to [email protected] . We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI's website. ”Open timeline citation
Latest stance: sale or sell on commercial use
“Transfer. We do not transfer or sell Google user data to third parties, including data brokers, advertisers, or information resellers, except (i) as necessary to provide or improve user-facing features and only with the user's consent; (ii) to comply with applicable law; or (iii) as part of a merger, acquisition, or sale of assets, with notice to affected users. Human access. We do not allow humans to read Google user data unless (i) we have obtained the user's affirmative agreement to view specific data; (ii) it is necessary for security purposes, such as investigating abuse; (iii) it is necessary to comply with applicable law; or (iv) the data has been aggregated and anonymized and is used for internal operations. Notwithstanding any other provision of this Privacy Policy, including provisions relating to advertising, marketing, or disclosure to third parties, the terms of this section govern our handling of Google user data and control in the event of any conflict. Transferring Personal Data to the U.S. Auctor AI is headquartered in the United States. By using our Services, you acknowledge that your personal information will be processed in the United States. We have implemented appropriate safeguards, including standard data protection clauses, to protect your data in accordance with GDPR and other relevant regulations. ”Open timeline citation
Latest stance: third party or vendor sharing on commercial use
“Transfer. We do not transfer or sell Google user data to third parties, including data brokers, advertisers, or information resellers, except (i) as necessary to provide or improve user-facing features and only with the user's consent; (ii) to comply with applicable law; or (iii) as part of a merger, acquisition, or sale of assets, with notice to affected users. Human access. We do not allow humans to read Google user data unless (i) we have obtained the user's affirmative agreement to view specific data; (ii) it is necessary for security purposes, such as investigating abuse; (iii) it is necessary to comply with applicable law; or (iv) the data has been aggregated and anonymized and is used for internal operations. Notwithstanding any other provision of this Privacy Policy, including provisions relating to advertising, marketing, or disclosure to third parties, the terms of this section govern our handling of Google user data and control in the event of any conflict. Transferring Personal Data to the U.S. Auctor AI is headquartered in the United States. By using our Services, you acknowledge that your personal information will be processed in the United States. We have implemented appropriate safeguards, including standard data protection clauses, to protect your data in accordance with GDPR and other relevant regulations. ”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-24· verified 2026-08-24
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
180 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Auctor's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Auctor's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Auctor's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.