BitBoard
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: subprocessors data sharing
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Defines 'Service Provider' as any natural or legal person who processes data on behalf of the Company, including third-party companies or individuals employed to facilitate, provide, or analyze the Service — establishes the category of entities that function as subprocessors or data processors.
Permits the Company to share personal information with Service Providers for the purpose of monitoring and analyzing Service usage and contacting users.
Permits the Company to share user information with affiliates (including parent companies, subsidiaries, and joint ventures), conditioned on requiring those affiliates to honor this Privacy Policy.
How to read this page: Overall risk rates what BitBoard's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 55 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 55 citationsstaticLast captured 2026-07-19
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Grants the Company permission to use Personal Data in connection with evaluating or conducting mergers, asset sales, restructurings, or similar transactions, including transfers of Personal Data as a business asset.
" For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of ..."
Permits the Company to share or transfer personal information in connection with business transactions such as mergers, asset sales, financing, or acquisitions.
" For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company."
Permits the Company to share user information with business partners in order to offer products, services, or promotions to the user.
" With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions."
States that the Company may be required to disclose Personal Data when compelled by law or in response to valid requests by public authorities such as courts or government agencies, describing a legally-driven disclosure obligation.
" Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency)."
Clause A states the service does not knowingly collect personally identifiable information from anyone under the age of 13, while Clause B describes a scenario where they may require and obtain parental consent to collect and use such information.
" Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers."
" If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used."
Defines 'Service Provider' as any natural or legal person who processes data on behalf of the Company, including third-party companies or individuals employed to facilitate, provide, or analyze the Service — establishes the category of entities that function as subprocessors or data processors.
AI-generated interpretation, not legal advice.
" With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You."
Permits the Company to share personal information with Service Providers for the purpose of monitoring and analyzing Service usage and contacting users.
AI-generated interpretation, not legal advice.
" With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us."
Permits the Company to share user information with affiliates (including parent companies, subsidiaries, and joint ventures), conditioned on requiring those affiliates to honor this Privacy Policy.
AI-generated interpretation, not legal advice.
" With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions."
Permits the Company to share user information with business partners in order to offer products, services, or promotions to the user.
AI-generated interpretation, not legal advice.
" Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so."
Establishes an exception to deletion rights, permitting the Company to retain certain information where there is a legal obligation or lawful basis to do so, limiting the scope of the user's deletion right.
AI-generated interpretation, not legal advice.
" Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority."
Definition delimiting a term that scopes downstream obligations; retained and linked.
AI-generated interpretation, not legal advice.
" Personal Data is any information that relates to an identified or identifiable individual."
Defines 'Personal Data' as any information relating to an identified or identifiable individual — a key definitional clause that determines the scope of personal data protections throughout the policy.
AI-generated interpretation, not legal advice.
" The Company may use Personal Data for the following purposes:"
Introductory clause enumerating that the Company may use Personal Data only for the listed purposes, establishing the scope of permissible data use as a bounded set of obligations/permissions.
AI-generated interpretation, not legal advice.
" To provide and maintain our Service, including to monitor the usage of our Service."
Grants the Company permission to use Personal Data for providing and maintaining the Service, including monitoring usage of the Service.
AI-generated interpretation, not legal advice.
" We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy."
States that the Company uses personal data to provide and improve the Service, and imposes on the user an agreement to collection and use of information by virtue of using the Service — creates a consent-based obligation tied to service use.
AI-generated interpretation, not legal advice.
" This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You."
Describes the scope and purpose of the privacy policy, defining it as governing collection, use, and disclosure of user information and referencing the user's privacy rights — serves as an incorporation and framing clause for downstream obligations.
AI-generated interpretation, not legal advice.
" Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit)."
Defines 'Usage Data' as automatically collected data generated by use of the Service or its infrastructure, such as page visit duration — a definitional clause that scopes what counts as Usage Data in operative collection provisions.
AI-generated interpretation, not legal advice.
" While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:"
States that while using the Service, the Company may ask users to provide personally identifiable information that can be used to contact or identify them, with a non-exhaustive list — establishes the Company's data collection practice and the categories of information subject to collection.
AI-generated interpretation, not legal advice.
" Usage Data is collected automatically when using the Service."
States that Usage Data is collected automatically when using the Service — establishes an automatic data collection practice as an operative disclosure to users.
AI-generated interpretation, not legal advice.
" Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data."
Enumerates specific types of Usage Data that may be collected, including IP address, browser type and version, pages visited, time and date of visit, time spent, unique device identifiers, and diagnostic data — specifies the scope of automatic data collection from desktop/web use.
AI-generated interpretation, not legal advice.
" When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device's unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data."
States that when the Service is accessed via a mobile device, the Company may automatically collect mobile-specific information including device type, unique ID, IP address, operating system, browser type, and other diagnostic data — discloses additional automatic data collection practices for mobile access.
AI-generated interpretation, not legal advice.
" We may also collect information that Your browser sends whenever You visit Our Service or when You access the Service by or through a mobile device."
States that the Company may also collect information sent by the user's browser when visiting the Service or accessing it via mobile — extends the scope of data collection to browser-transmitted information.
AI-generated interpretation, not legal advice.
" We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies We use include beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:"
States that the Company uses cookies and similar tracking technologies including beacons, tags, and scripts to track activity, store information, and improve and analyze the Service — discloses the use of multiple tracking mechanisms for data collection and service analysis.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from BitBoard's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in BitBoard's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in BitBoard's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat BitBoard requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in BitBoard's published policies yet.
What the policies actually cover
0 topicsNone of BitBoard's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Cross-clause notes
Verified retention clauses point in different directions: the Privacy Policy, Privacy Policy › “Retention of Your Personal Data” describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “Delete Your Personal Data” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 3 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on subprocessors data sharing
“Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-19· verified 2026-07-19verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
55 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of BitBoard's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified BitBoard's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from BitBoard's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.