Skip to main content
Platform Review
PricingSign in
← All platforms
Developer / Coding · bolt.new

Bolt (StackBlitz)

Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskHIGHReviewed 2026-06-08
Creator: medium · GRC: high · Counsel: high
creator band
Severe
enterprise · Severe
Dealbreaker · Third-party sublicensing
Exhibit A · Terms of Service · verbatim

Except for your pre-existing rights and this license granted to you, StackBlitz owns the text, photographs, videos, visual interfaces, interactive features, graphics, design, compilation, computer code, products, software and all other elements and components of the Site and Services (“StackBlitz Content”), excluding your content. StackBlitz owns the

cited by the third-party sublicensing dealbreaker — tap for the citation
110 verified findings13 policy surfaces2/2 core docs verified
Risk triage

Watch: Commercial use

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
34
medium
76
low
2/2
docs
Trains on your data?
Training possible — conditions or opt-outs apply
from 2 cited findings
Who owns outputs?
You own your outputs
from 2 cited findings
Commercial use?
Commercial use allowed — with conditions
from 3 cited findings
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →
Risk by role
Select a role to tailor the summary and reorder the findings below.

Scores derived from 72 enriched findings — same verbatim citations as below. AI-generated, not legal advice.

What this means for you
  • Bolt (StackBlitz)'s terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
  • Your outputs and prompts are explicitly yours — Bolt (StackBlitz)'s terms include affirmatively protective IP language.
  • Data handling is conditional — 5 privacy or retention clauses warrant review before using Bolt (StackBlitz) at scale.

Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.

How to read this page: Overall risk rates what Bolt (StackBlitz)'s own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Creator lens
Your prompts, your outputs, your IP
SEVERE
Dealbreaker — Third-party sublicensing. Rights in your content can be passed on to third parties beyond service operation. see the clause · and another

Based on 128 verified, verbatim-cited findings below — read the citations.

Enterprise lens
Data use, retention, subprocessors, audit
SEVERE
Dealbreaker — Third-party sublicensing. Rights in your content can be passed on to third parties beyond service operation. see the clause · and another

Based on 136 verified, verbatim-cited findings below — read the citations.

Automated assessment against a published rubric — not legal advice.

Fully verifiedDeveloper / Coding

Fully verified — complete core corpus captured and read in full.

Document status
  • Privacy Policy
    Verified - read in full - 79 citationsstaticLast captured 2026-06-08
  • Terms of Service
    Verified - read in full - 31 citationsstaticLast captured 2026-06-08
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Commercial use

This segment enumerates further restrictions: prohibiting use of automated tools, sublicensing access, non-commercial use except for Teams/Enterprise subscribers, and circumvention of access controls, directly limiting how users may interact with the Services.

"StackBlitz Content as part of a database or other work; (ii) use any automated tool (e.g., robots, spiders) to access or use our Services or to store, copy, modify, distribute, or resell any StackBlitz Content; (iii) rent, lease, or sublice..."
📍 Terms of Service › “Services (collectively, “StackBlitz Content”) or compile or collect any”Jump to exact text →
plan language
Commercial use

Grants commercial StackBlitz plan customers permission to integrate the WebContainer API subject to a 500-session-per-month usage cap, and restricts exceeding that limit without obtaining a commercial license, thereby establishing a tier-specific entitlement and restriction.

"Customers with active commercial StackBlitz plans may integrate the StackBlitz WebContainer API on their website, subject to a usage limitation of 500 sessions per month. Customers may not exceed this limit without a commercial license; ple..."
📍 Terms of Service › “COMMERCIAL USAGE”Jump to exact text →
plan language
Privacy & data use

This segment is a continuation of segment 23, reiterating the restriction on users submitting sensitive personal information through the platform, reinforcing the prohibition on processing special category data.

" Bolt does not intentionally collect or process special categories of personal data (such as health information, biometric data, precise location data, or government-issued identifiers). Users should not submit sensitive personal informatio..."
📍 Article C (Sensitive Personal Information)Jump to exact text →
plan language
Moderation & enforcement

Establishes that users accessing the site from outside the United States bear sole responsibility for compliance with applicable local and U.S. laws (including export/import regulations), and restricts use by residents of U.S.-embargoed countries, creating a compliance obligation and access restriction tied to jurisdiction.

" The Site and Services are controlled and operated from StackBlitz’s office in the United States. StackBlitz makes no representations that the Site or Services are appropriate or available for use in other locations. Those who access or use..."
📍 Terms of Service › “LEGAL NOTICES”Jump to exact text →
plan language
Moderation & enforcement

This segment establishes the procedure for providing and maintaining payment information, specifies that payment will be automatically charged on a monthly basis until cancellation, and sets out the cancellation procedure via written notice to StackBlitz by email or physical mail.

" If the Services are provided for a fee, you will need to provide StackBlitz with valid payment information. All payment information that you provide to StackBlitz in connection with a purchase of the Services must be accurate, valid, compl..."
📍 Terms of Service › “PAID SERVICES”Jump to exact text →
plan language
Moderation & enforcement

This segment establishes user obligations to comply with pricing and payment terms for paid Services, grants StackBlitz the right to modify fees and add new charges, specifies when fee changes take effect, and reserves StackBlitz's right to lock accounts for non-payment.

" The Services may be provided for a fee or other charge. If you elect to use paid aspects of the Services, you agree to the pricing and payment terms listed on the Site, which StackBlitz may update from time to time. StackBlitz may add new ..."
📍 Terms of Service › “PAID SERVICES”Jump to exact text →
tier-specific
Tier differences

This segment defines the scope of commercial use privileges, specifying they apply to active paid subscribers of commercial plans (Teams or Enterprise SaaS), are valid only during the active license period, and are revoked upon expiry or termination.

" This section outlines specific privileges granted to customers who maintain active paid subscriptions to our commercial plans (including StackBlitz Teams or Enterprise Software as a Service (SaaS) plans). These privileges are valid for the..."
📍 Terms of Service › “COMMERCIAL USAGE”Jump to exact text →
plan language
Indemnity & liability

Caps total aggregate liability of StackBlitz and its suppliers/licensors at amounts paid by the user in the twelve months preceding the claim, regardless of the legal theory, and incorporates a California-resident-specific exception, establishing the monetary ceiling for all claims.

" UNDER NO CIRCUMSTANCES WILL THE TOTAL LIABILITY OF US AND OUR SUPPLIERS AND LICENSORS OF ALL KINDS ARISING OUT OF OR RELATED TO YOUR USE OF THE SITE, THE SERVICES AND STACKBLITZ CONTENT (INCLUDING BUT NOT LIMITED TO WARRANTY CLAIMS), REGAR..."
📍 Terms of Service › “STACKBLITZ, ITS AFFILIATES, AGENTS, DIRECTORS, EMPLOYEES, SUPPLIERS AND”Jump to exact text →

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 34
Tier-specific - 1
Total citations - 110
Severity
Surface
Document
Tier
Commercial use
CautionHigh
"StackBlitz Content as part of a database or other work; (ii) use any automated tool (e.g., robots, spiders) to access or use our Services or to store, copy, modify, distribute, or resell any StackBlitz Content; (iii) rent, lease, or sublicense your access to our Services to another person; (iv) use any Services or StackBlitz Content for any purpose except for your own personal use, unless you are operating under the StackBlitz Teams or Enterprise Plans, in which case you may use the Services and StackBlitz Content for commercial purposes in accordance with the terms of those plans; (v) circumvent or disable any digital rights management, usage rules, or other security features of our Services;"
Terms of Service › “Services (collectively, “StackBlitz Content”) or compile or collect any”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment enumerates further restrictions: prohibiting use of automated tools, sublicensing access, non-commercial use except for Teams/Enterprise subscribers, and circumvention of access controls, directly limiting how users may interact with the Services.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" We do not display third-party advertisements on our website. However, we may use web beacons or similar technologies to support retargeting or promotional campaigns on third-party platforms."
§ 4 (Cookies, Web Beacons, and Tracking Technologies)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment states that Bolt does not display third-party advertisements on its website but may use web beacons for retargeting or promotional campaigns on third-party platforms, simultaneously restricting one form of advertising data use while disclosing a permitted alternative use involving third-party data sharing.

AI-generated interpretation, not legal advice.

Data retention
CautionHigh
" Backups and Residual Copies. Residual copies of personal information and user content may persist in backups, logs, or archival systems for a limited period following deletion or account termination. Such data will not be used for active processing except as necessary for security, fraud prevention, or legal compliance."
§ 11 (Data Retention)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause creates an exception to deletion obligations by acknowledging that residual copies may persist in backups, logs, or archival systems for a limited period, while restricting their use to security, fraud prevention, or legal compliance purposes only.

AI-generated interpretation, not legal advice.

Tier differences
CautionHigh
" This section outlines specific privileges granted to customers who maintain active paid subscriptions to our commercial plans (including StackBlitz Teams or Enterprise Software as a Service (SaaS) plans). These privileges are valid for the duration of the active commercial license and are revoked upon license expiry or termination."
Terms of Service › “COMMERCIAL USAGE”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines the scope of commercial use privileges, specifying they apply to active paid subscribers of commercial plans (Teams or Enterprise SaaS), are valid only during the active license period, and are revoked upon expiry or termination.

AI-generated interpretation, not legal advice.

Training on your content
CautionHigh
" We may use AI Inputs and AI Outputs to operate, maintain, and improve the Services, including improving AI performance, reliability, and safety. Such use shall be on aggregated, anonymized, or de-identified data."
Privacy Policy › “Use of AI Content”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Grants Bolt permission to use AI Inputs and AI Outputs to operate, maintain, and improve the Services including AI performance, reliability, and safety, conditioned on the data being aggregated, anonymized, or de-identified, thereby permitting training use with a data-minimization constraint.

AI-generated interpretation, not legal advice.

Commercial use
CautionHigh
"Customers with active commercial StackBlitz plans may integrate the StackBlitz WebContainer API on their website, subject to a usage limitation of 500 sessions per month. Customers may not exceed this limit without a commercial license; please contact StackBlitz at hello@stackblitz.com to discuss licensing."
Terms of Service › “COMMERCIAL USAGE”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Grants commercial StackBlitz plan customers permission to integrate the WebContainer API subject to a 500-session-per-month usage cap, and restricts exceeding that limit without obtaining a commercial license, thereby establishing a tier-specific entitlement and restriction.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" Some browsers transmit “Do-Not-Track” signals. Because there is no industry-standard interpretation, Bolt does not currently respond to DNT signals. However, where required by applicable law, we recognize browser-based Global Privacy Control (GPC) signals as a valid request to opt out of certain data sharing or targeted advertising."
§ 12 (Do-Not-Track Signals)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause disclaims any obligation to respond to DNT signals due to lack of industry-standard interpretation, while creating a conditional obligation to honor GPC signals as opt-out requests from certain data sharing or targeted advertising where required by applicable law.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
CautionHigh
" Bolt does not sell personal information as defined under the CCPA. However, we may share limited identifiers or device information with advertising or analytics partners to support marketing or promotional campaigns. Where required by law, users may opt out of such sharing."
§ 14 (U.S. State Privacy Rights)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause disclaims the sale of personal information under the CCPA definition, while acknowledging the company may share limited identifiers or device information with advertising or analytics partners, and grants users the right to opt out of such sharing where required by law.

AI-generated interpretation, not legal advice.

Indemnity & liability
High
" UNDER NO CIRCUMSTANCES WILL THE TOTAL LIABILITY OF US AND OUR SUPPLIERS AND LICENSORS OF ALL KINDS ARISING OUT OF OR RELATED TO YOUR USE OF THE SITE, THE SERVICES AND STACKBLITZ CONTENT (INCLUDING BUT NOT LIMITED TO WARRANTY CLAIMS), REGARDLESS OF THE FORUM AND REGARDLESS OF WHETHER ANY ACTION OR CLAIM IS BASED ON CONTRACT, TORT, OR OTHERWISE, EXCEED THE AMOUNTS, IF ANY, THAT YOU HAVE PAID TO US FOR YOUR USE OF THE SITE, THE SERVICES AND STACKBLITZ CONTENT IN THE TWELVE MONTH PERIOD IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO SUCH CLAIM OR ACTION. IN ADDITION, IF YOU ARE A CALIFORNIA RESIDENT, YOU WAIVE CALIFORNIA CIVIL CODE §1542, WHICH SAYS: A GENERAL RELEASE DOES NOT EXTEND TO CLAIMS WHICH THE CREDITOR DOES NOT KNOW OR SUSPECT TO EXIST IN HIS FAVOR AT THE TIME OF EXECUTING THE RELEASE, WHICH IF KNOWN BY HIM MUST HAVE MATERIALLY AFFECTED HIS SETTLEMENT WITH THE DEBTOR. BECAUSE SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU."
Terms of Service › “STACKBLITZ, ITS AFFILIATES, AGENTS, DIRECTORS, EMPLOYEES, SUPPLIERS AND”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Caps total aggregate liability of StackBlitz and its suppliers/licensors at amounts paid by the user in the twelve months preceding the claim, regardless of the legal theory, and incorporates a California-resident-specific exception, establishing the monetary ceiling for all claims.

AI-generated interpretation, not legal advice.

Training on your content
FavorableHigh
" Depending on account type or plan, users may have the ability to limit or opt out of the use of AI Inputs and AI Outputs for model training or improvement, as described in product documentation or account settings."
Privacy Policy › “Customer Control”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Grants users a right to limit or opt out of the use of AI Inputs and AI Outputs for model training or improvement, contingent on the user's account type or plan and as described in product documentation or account settings, creating a tier-differentiated opt-out right.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" We and our service providers use cookies, web beacons, and similar technologies to:"
§ 4 (Cookies, Web Beacons, and Tracking Technologies)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment discloses that Bolt and its service providers use cookies, web beacons, and similar technologies, establishing the identity of parties engaged in tracking and the legal basis for such activity.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" We use cookies, web beacons, and similar technologies to collect this information."
Privacy Policy › “IP address,”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment discloses the technical means by which automatic data collection occurs (cookies, web beacons, similar technologies), establishing the legal basis for technology-mediated data collection and providing transparency as required by applicable privacy laws.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" Legitimate interests, such as improving the Services, ensuring security, preventing fraud, and understanding usage trends, provided such interests are not overridden by your rights;"
§ 6 (Legal Basis)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Identifies 'legitimate interests' as a legal basis, specifying improving the Services, security, fraud prevention, and usage analysis as qualifying interests, and conditioning reliance on this basis on those interests not being overridden by individual rights.

AI-generated interpretation, not legal advice.

Moderation & enforcement
High
" StackBlitz may, without prior notice to you, revise these Terms and any other information contained in this Site. When we do, we will revise the “last updated” date given above. It is your responsibility to review these Terms frequently and to remain informed of any changes to them. The then-current version of these Terms will supersede all earlier versions. You agree that your continued use of our Services after such changes have been published on the Site will constitute your acceptance of such revised Terms. StackBlitz may also make improvements or changes in the Services described in this Site at any time without notice."
Terms of Service › “OVERVIEW”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment establishes StackBlitz's right to revise the Terms without prior notice, sets the procedure for communicating changes via the 'last updated' date, places responsibility on the user to review changes, and deems continued use as acceptance of revised Terms.

AI-generated interpretation, not legal advice.

Moderation & enforcement
High
" Upon receipt of notice as described above, StackBlitz will take whatever action, in its sole discretion, it deems appropriate, including removal of the alleged infringing material from the website."
Terms of Service › “COPYRIGHT POLICY”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Disclaims any specific action obligation upon receipt of a copyright notice by reserving StackBlitz's sole discretion to determine the appropriate response, including removal of alleged infringing material, thereby limiting users' expectations of a mandatory remedy.

AI-generated interpretation, not legal advice.

Moderation & enforcement
NeutralHigh
" Abuse or Policy Violations. If an account is suspended or terminated due to abuse of the Services or violation of applicable terms or policies, we may permanently disable the account and delete associated data, subject to applicable legal requirements."
§ 11 (Data Retention)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause grants the company permission to permanently disable accounts and delete associated data when accounts are suspended or terminated due to abuse or policy violations, subject to applicable legal requirements.

AI-generated interpretation, not legal advice.

Moderation & enforcement
NeutralHigh
" If the Services are provided for a fee, you will need to provide StackBlitz with valid payment information. All payment information that you provide to StackBlitz in connection with a purchase of the Services must be accurate, valid, complete and current information. Your payment information will be automatically charged or billed on a monthly basis for the Services until you provide StackBlitz with a notice of cancellation. You may cancel at any time by sending written notice to StackBlitz via electronic mail to hello@stackblitz.com or physical mail to 2443 Fillmore St #380-7122, San Fransisco, CA 94115; provided, however, any fees already processed or paid by you for the Services are not refundable or pro-rated in the event you cancel prior to the end of the month. You agree to pay any and all charges for the Services incurred by your credit card, debit card or other payment method used in connection with the purchase of the Services at the price in effect when the charges were incurred by you. In addition, you will pay any applicable taxes relating to the charges or fees associated with your purchase of the Services."
Terms of Service › “PAID SERVICES”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment establishes the procedure for providing and maintaining payment information, specifies that payment will be automatically charged on a monthly basis until cancellation, and sets out the cancellation procedure via written notice to StackBlitz by email or physical mail.

AI-generated interpretation, not legal advice.

Moderation & enforcement
NeutralHigh
" The Services may be provided for a fee or other charge. If you elect to use paid aspects of the Services, you agree to the pricing and payment terms listed on the Site, which StackBlitz may update from time to time. StackBlitz may add new services for additional fees and charges, or amend fees and charges for existing services, at any time and in its sole discretion. Any changes in fees or charges shall become effective in the billing cycle following notice of such change to you as provided in these Terms. StackBlitz may lock your account for non-payment at any time. In addition to the amount due for the Services, delinquent accounts or chargebacks will be charged with fees or charges that are incidental to the collection of delinquent accounts or chargebacks including, but not limited to, collection fees or convenience fees or any other third parties’ charges. You agree StackBlitz may contact you by electronic mail at the address provided by you to StackBlitz with respect to any delinquent accounts."
Terms of Service › “PAID SERVICES”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment establishes user obligations to comply with pricing and payment terms for paid Services, grants StackBlitz the right to modify fees and add new charges, specifies when fee changes take effect, and reserves StackBlitz's right to lock accounts for non-payment.

AI-generated interpretation, not legal advice.

Common questions about Bolt (StackBlitz)'s policies

Does Bolt (StackBlitz) train its AI models on your data?
Training possible — conditions or opt-outs apply — based on 2 verified findings from Bolt (StackBlitz)'s published policy. Informational only, not legal advice.
Who owns the content you create with Bolt (StackBlitz)?
You own your outputs — based on 2 verified findings from Bolt (StackBlitz)'s published policy. Informational only, not legal advice.
Can you use Bolt (StackBlitz)'s output commercially?
Commercial use allowed — with conditions — based on 3 verified findings from Bolt (StackBlitz)'s published policy. Informational only, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from Bolt (StackBlitz)'s own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

19 verified clauses

Clauses in Bolt (StackBlitz)'s policies that work in your favour — commitments the platform made to you.

  • Prompt ownershipdeletion rights & post-termination survival
    You are solely responsible for any content and other material that you submit, publish, transmit, or display on, through, or with our Site or Services. In addition, you agree to provide notices and obtain any consents, if necessary, related to your use of the…

    This segment places sole responsibility on the user for content submitted through the Services, requires users to obtain necessary consents for personal data processing, asserts user ownership over their data, and explic…

    📍 Terms of Service › “USE POLICIES”Jump to exact text →
  • Privacy & data use
    To protect privacy and security, we may take steps to verify your identity before fulfilling your request. Requests may be subject to certain exceptions or limitations permitted by applicable law. Authorized agents may submit requests on behalf of individuals…

    This clause establishes identity verification procedures before fulfilling data subject requests, acknowledges that requests may be subject to legal exceptions or limitations, allows authorized agents to submit requests…

    📍 § 13 (European Union and United Kingdom Privacy Rights)Jump to exact text →
  • Privacy & data usesale/sharing of personal data
    Residents of certain U.S. states, including California, may have rights under applicable privacy laws, such as the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). These rights may include the right to know, access, correct, del…

    This clause identifies the privacy rights available to residents of certain U.S. states under laws such as the CCPA and CPRA, including rights to know, access, correct, delete, obtain a copy of personal information, and…

    📍 § 14 (U.S. State Privacy Rights)Jump to exact text →
  • Data retentiondeletion rights & post-termination survival
    Voluntary Account Closure. When an account is voluntarily closed, the account and associated data enter an inactive or expired state. We will delete or anonymize such data within a commercially reasonable period following account closure not to exceed thirty d…

    This clause obligates the company to delete or anonymize account data within a commercially reasonable period not exceeding thirty days following voluntary account closure, subject to enumerated exceptions including back…

    📍 § 11 (Data Retention)Jump to exact text →
  • Privacy & data usesensitive data (biometric/location/health)
    Bolt does not intentionally collect or process special categories of personal data (such as health information, biometric data, precise location data, or government-issued identifiers). Users should not submit sensitive personal information in prompts, code, o…

    This segment is a continuation of segment 23, reiterating the restriction on users submitting sensitive personal information through the platform, reinforcing the prohibition on processing special category data.

    📍 Article C (Sensitive Personal Information)Jump to exact text →
  • Commercial use
    Customers with active commercial StackBlitz plans may 1) incorporate hyperlinks on their websites to the Site or specific projects on StackBlitz, and 2) integrate and use the StackBlitz Software Development Kit (SDK) and embed the StackBlitz Editor within thei…

    This segment grants active commercial plan customers the specific permissions to incorporate hyperlinks to StackBlitz on their websites and to integrate and embed the StackBlitz SDK and Editor within their websites.

    📍 Terms of Service › “COMMERCIAL USAGE”Jump to exact text →

+ 13 more verified clauses of this kind on this platform, cited in full in the report.

📋 Rules you must follow

8 verified clauses

What Bolt (StackBlitz) requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

  • Moderation & enforcementconduct restrictions
    You will not use our Site to: (i) upload, post, email, or otherwise transmit any material that contains unlawful, harmful, threatening, abusive, harassing, tortious, defamatory, vulgar, obscene, libelous, invasive of another’s privacy, hateful, or racially, et…

    This segment enumerates prohibited uses of the Site, including uploading unlawful, harmful, or objectionable material, impersonating others, and transmitting material without the right to do so, establishing conduct rest…

    📍 Terms of Service › “USE POLICIES”Jump to exact text →
  • Moderation & enforcement
    Certain parts of our Services, including account management features, may be password-restricted to registered users or other authorized persons. You agree that you are entirely responsible for maintaining the confidentiality of your password, and agree to not…

    This segment obligates registered users to maintain the confidentiality of their passwords, to notify StackBlitz of any compromise, and to accept full responsibility for all account activities, imposing security and acco…

    📍 Terms of Service › “RESTRICTED AREAS OF THE SERVICES”Jump to exact text →
  • Commercial useconduct restrictions
    StackBlitz Content as part of a database or other work; (ii) use any automated tool (e.g., robots, spiders) to access or use our Services or to store, copy, modify, distribute, or resell any StackBlitz Content; (iii) rent, lease, or sublicense your access to o…

    This segment enumerates further restrictions: prohibiting use of automated tools, sublicensing access, non-commercial use except for Teams/Enterprise subscribers, and circumvention of access controls, directly limiting h…

    📍 Terms of Service › “Services (collectively, “StackBlitz Content”) or compile or collect any”Jump to exact text →
  • Moderation & enforcement
    The Site and Services are controlled and operated from StackBlitz’s office in the United States. StackBlitz makes no representations that the Site or Services are appropriate or available for use in other locations. Those who access or use the Site or Services…

    Establishes that users accessing the site from outside the United States bear sole responsibility for compliance with applicable local and U.S. laws (including export/import regulations), and restricts use by residents o…

    📍 Terms of Service › “LEGAL NOTICES”Jump to exact text →
  • Moderation & enforcementconduct restrictions
    You must comply with all applicable laws when using our Site or Services. Except as may be expressly permitted by applicable law, or as StackBlitz may authorize expressly in writing, you will not, and will not permit anyone else to: (i) store, copy, modify, di…

    This segment establishes a compliance obligation with applicable laws and begins enumerating specific restrictions on user conduct, including prohibitions on storing, copying, modifying, distributing, or reselling StackB…

    📍 Terms of Service › “RESTRICTIONS”Jump to exact text →

+ 3 more verified clauses of this kind on this platform, cited in full in the report.

What the policies actually cover

15 topics
  • Product telemetry & usage tracking9 clauses
  • Advertising & tracking1 protective6 clauses
  • Sale or sharing of personal data1 protective2 clauses
  • Sensitive data (biometric, location, health)1 protective1 clause
  • Government & law-enforcement disclosure2 clauses
  • Data shared with other AI providers3 clauses
  • Trains by default, opt-out available2 clauses
  • Damages & liability cap3 clauses
  • Indemnity direction1 clause
  • Terms can change at any time3 clauses
  • Deletion rights & post-termination survival2 protective6 clauses
  • Auto-renewal & cancel window1 clause
  • Feedback ownership1 clause
  • Breach-notification promises1 clause
  • Conduct restrictions4 obligations4 clauses

65 further verified clauses are cited on this page but not yet assigned a topic.

Cross-clause notes

Cross-reference

Two verified clauses intersect on the same subject matter: the Privacy Policy, § 11 (Data Retention) addresses how long content is retained, and the Privacy Policy, Privacy Policy › “Customer Control” addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.

Cross-referenceacross documents

The Privacy Policy, Privacy Policy › “Customer Control” describes a way to decline model training, and the Terms of Service, Terms of Service › “COMMERCIAL USAGE” states that terms differ by plan or tier. Whether the opt-out applies on every tier is determined by those clauses together — read both before relying on the opt-out.

Ambiguity — Caution

Verified retention clauses point in different directions: the Privacy Policy, § 11 (Data Retention) describes broad or open-ended retention, while the Privacy Policy, § 11 (Data Retention) describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.

Automated cross-reference against the published rubric — not legal advice.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

160
clauses
26
patterns
26
stances
ip license · 9privacy sharing · 6legal burden · 3tier conditionality · 3ip ownership · 2training use · 2
data retentionMEDIUM§ 11 (Data Retention)

The clause allows indefinite, perpetual, or necessity-based retention.

We retain personal information and user content for as long as necessary to provide the Services, support active accounts, comply with legal obligations, resolve disputes, and enforce our agreements. Active Accounts. Personal information and user content associated with an account are retained while the account remains active.
Open source citation
ip licenseHIGHTerms of Service › “LICENSE TO USE OUR SERVICES”

The clause includes sublicensable, transferable, or assignable rights.

Subject to these Terms, we grant to you a limited, personal, non-exclusive, non-transferable license to use our Services. If you are using our Services under the StackBlitz Teams or Enterprise Plans, this license includes the right to use our Services for commercial purposes. For all other uses, the license is limited to personal use and not for resale or further distribution. Your right to use our Services is lim...
Open source citation
ip licenseHIGHTerms of Service › “LICENSE TO USE OUR SERVICES”

The clause includes sublicensable, transferable, or assignable rights.

Except for your pre-existing rights and this license granted to you, StackBlitz owns the text, photographs, videos, visual interfaces, interactive features, graphics, design, compilation, computer code, products, software and all other elements and components of the Site and Services (“StackBlitz Content”), excluding your content. StackBlitz owns the copyrights, trademarks, service marks, trade names and other int...
Open source citation
ip licenseHIGHTerms of Service › “FEEDBACK”

The clause includes sublicensable, transferable, or assignable rights.

We may provide you with a mechanism to provide feedback, suggestions, and ideas, if you choose, about our Site or Services (“Feedback”). You agree that we may, in our sole discretion, use the Feedback you provide to us in any way, including in future enhancements and modifications to our Site or Services. You hereby grant to us and our assigns a perpetual, worldwide, fully transferable, sublicensable, irrevocable,...
Open source citation
ip licenseHIGHTerms of Service › “LICENSE TO USE OUR SERVICES”

The clause includes sublicensable, transferable, or assignable rights.

Except for your pre-existing rights and this license granted to you, StackBlitz owns the text, photographs, videos, visual interfaces, interactive features, graphics, design, compilation, computer code, products, software and all other elements and components of the Site and Services (“StackBlitz Content”), excluding your content. StackBlitz owns the copyrights, trademarks, service marks, trade names and other int...
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tiersdata retentionconditionalMEDIUM2
All applicable tiersindemnity liabilityworsensHIGH3
All applicable tiersprivacy data useworsensHIGH3
All applicable tiersprompt ownershipworsensHIGH1
All applicable tierssubprocessors data sharingworsensHIGH2
All applicable tierstraining useworsensHIGH2
Apitier differencesconditionalMEDIUM1
Enterprisecommercial useworsensHIGH3
Freeprompt ownershipworsensHIGH3
Freesubprocessors data sharingworsensHIGH3
Pro / Paidindemnity liabilityconditionalMEDIUM1
Pro / Paidtier differencesconditionalMEDIUM2

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

We share information with trusted service providers who perform services on our behalf, including hosting, analytics, billing, customer support, and AI processing. These providers are authorized to process information only as necessary to provide services to Bolt.
Open timeline citation
Jun 17, 2026model trainingMEDIUM

Latest stance: training with opt out on training use

Depending on account type or plan, users may have the ability to limit or opt out of the use of AI Inputs and AI Outputs for model training or improvement, as described in product documentation or account settings.
Open timeline citation
Jun 17, 2026model trainingHIGH

Latest stance: training permitted on training use

We may use AI Inputs and AI Outputs to operate, maintain, and improve the Services, including improving AI performance, reliability, and safety. Such use shall be on aggregated, anonymized, or de-identified data.
Open timeline citation
Jun 17, 2026retentionMEDIUM

Latest stance: indefinite or necessity based on data retention

We retain personal information and user content for as long as necessary to provide the Services, support active accounts, comply with legal obligations, resolve disputes, and enforce our agreements. Active Accounts. Personal information and user content associated with an account are retained while the account remains active.
Open timeline citation
Jun 17, 2026data sharingHIGH

Latest stance: sale or sell on privacy data use

Bolt does not sell personal information as defined under the CCPA. However, we may share limited identifiers or device information with advertising or analytics partners to support marketing or promotional campaigns. Where required by law, users may opt out of such sharing.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

Bolt does not sell personal information as defined under the CCPA. However, we may share limited identifiers or device information with advertising or analytics partners to support marketing or promotional campaigns. Where required by law, users may opt out of such sharing.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

We share information with trusted service providers who perform services on our behalf, including hosting, analytics, billing, customer support, and AI processing. These providers are authorized to process information only as necessary to provide services to Bolt.
Open timeline citation
Jun 17, 2026content licenseHIGH

Latest stance: sublicensable or transferable on prompt ownership

We may provide you with a mechanism to provide feedback, suggestions, and ideas, if you choose, about our Site or Services (“Feedback”). You agree that we may, in our sole discretion, use the Feedback you provide to us in any way, including in future enhancements and modifications to our Site or Services. You hereby grant to us and our assigns a perpetual, worldwide, fully transferable, sublicensable, irrevocable, royalty free license to use, reproduce, modify, create derivative works from, distribute, and display the Feedback in any manner any for any purpose, without in any media, software, or technology of any kind now existing or developed in the future, without any obligation to provide attribution or compensation to you or any third party.
Open timeline citation

Capture recency

  • Privacy Policy:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days
  • Terms of Service:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

↑ 23 more findings this quarter vs last (140 vs 117). First scan: June 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Bolt (StackBlitz)'s policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Every finding above is a verbatim quote from Bolt (StackBlitz)'s own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.