Bolt (StackBlitz)
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“Except for your pre-existing rights and this license granted to you, StackBlitz owns the text, photographs, videos, visual interfaces, interactive features, graphics, design, compilation, computer code, products, software and all other elements and components of the Site and Services (“StackBlitz Content”), excluding your content. StackBlitz owns the…”
Watch: Commercial use
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
This segment enumerates further restrictions: prohibiting use of automated tools, sublicensing access, non-commercial use except for Teams/Enterprise subscribers, and circumvention of access controls, directly limiting how users may interact with the Services.
This clause creates an exception to deletion obligations by acknowledging that residual copies may persist in backups, logs, or archival systems for a limited period, while restricting their use to security, fraud prevention, or legal compliance purposes only.
Caps total aggregate liability of StackBlitz and its suppliers/licensors at amounts paid by the user in the twelve months preceding the claim, regardless of the legal theory, and incorporates a California-resident-specific exception, establishing the monetary ceiling for all claims.
Scores derived from 72 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Bolt (StackBlitz)'s terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
- Your outputs and prompts are explicitly yours — Bolt (StackBlitz)'s terms include affirmatively protective IP language.
- Data handling is conditional — 5 privacy or retention clauses warrant review before using Bolt (StackBlitz) at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Bolt (StackBlitz)'s own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 128 verified, verbatim-cited findings below — read the citations.
Based on 136 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 79 citationsstaticLast captured 2026-06-08
- Terms of ServiceVerified - read in full - 31 citationsstaticLast captured 2026-06-08
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
This segment enumerates further restrictions: prohibiting use of automated tools, sublicensing access, non-commercial use except for Teams/Enterprise subscribers, and circumvention of access controls, directly limiting how users may interact with the Services.
"StackBlitz Content as part of a database or other work; (ii) use any automated tool (e.g., robots, spiders) to access or use our Services or to store, copy, modify, distribute, or resell any StackBlitz Content; (iii) rent, lease, or sublice..."
Grants commercial StackBlitz plan customers permission to integrate the WebContainer API subject to a 500-session-per-month usage cap, and restricts exceeding that limit without obtaining a commercial license, thereby establishing a tier-specific entitlement and restriction.
"Customers with active commercial StackBlitz plans may integrate the StackBlitz WebContainer API on their website, subject to a usage limitation of 500 sessions per month. Customers may not exceed this limit without a commercial license; ple..."
This segment is a continuation of segment 23, reiterating the restriction on users submitting sensitive personal information through the platform, reinforcing the prohibition on processing special category data.
" Bolt does not intentionally collect or process special categories of personal data (such as health information, biometric data, precise location data, or government-issued identifiers). Users should not submit sensitive personal informatio..."
Establishes that users accessing the site from outside the United States bear sole responsibility for compliance with applicable local and U.S. laws (including export/import regulations), and restricts use by residents of U.S.-embargoed countries, creating a compliance obligation and access restriction tied to jurisdiction.
" The Site and Services are controlled and operated from StackBlitz’s office in the United States. StackBlitz makes no representations that the Site or Services are appropriate or available for use in other locations. Those who access or use..."
This segment establishes the procedure for providing and maintaining payment information, specifies that payment will be automatically charged on a monthly basis until cancellation, and sets out the cancellation procedure via written notice to StackBlitz by email or physical mail.
" If the Services are provided for a fee, you will need to provide StackBlitz with valid payment information. All payment information that you provide to StackBlitz in connection with a purchase of the Services must be accurate, valid, compl..."
This segment establishes user obligations to comply with pricing and payment terms for paid Services, grants StackBlitz the right to modify fees and add new charges, specifies when fee changes take effect, and reserves StackBlitz's right to lock accounts for non-payment.
" The Services may be provided for a fee or other charge. If you elect to use paid aspects of the Services, you agree to the pricing and payment terms listed on the Site, which StackBlitz may update from time to time. StackBlitz may add new ..."
This segment defines the scope of commercial use privileges, specifying they apply to active paid subscribers of commercial plans (Teams or Enterprise SaaS), are valid only during the active license period, and are revoked upon expiry or termination.
" This section outlines specific privileges granted to customers who maintain active paid subscriptions to our commercial plans (including StackBlitz Teams or Enterprise Software as a Service (SaaS) plans). These privileges are valid for the..."
Caps total aggregate liability of StackBlitz and its suppliers/licensors at amounts paid by the user in the twelve months preceding the claim, regardless of the legal theory, and incorporates a California-resident-specific exception, establishing the monetary ceiling for all claims.
" UNDER NO CIRCUMSTANCES WILL THE TOTAL LIABILITY OF US AND OUR SUPPLIERS AND LICENSORS OF ALL KINDS ARISING OUT OF OR RELATED TO YOUR USE OF THE SITE, THE SERVICES AND STACKBLITZ CONTENT (INCLUDING BUT NOT LIMITED TO WARRANTY CLAIMS), REGAR..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"StackBlitz Content as part of a database or other work; (ii) use any automated tool (e.g., robots, spiders) to access or use our Services or to store, copy, modify, distribute, or resell any StackBlitz Content; (iii) rent, lease, or sublicense your access to our Services to another person; (iv) use any Services or StackBlitz Content for any purpose except for your own personal use, unless you are operating under the StackBlitz Teams or Enterprise Plans, in which case you may use the Services and StackBlitz Content for commercial purposes in accordance with the terms of those plans; (v) circumvent or disable any digital rights management, usage rules, or other security features of our Services;"
This segment enumerates further restrictions: prohibiting use of automated tools, sublicensing access, non-commercial use except for Teams/Enterprise subscribers, and circumvention of access controls, directly limiting how users may interact with the Services.
AI-generated interpretation, not legal advice.
" We do not display third-party advertisements on our website. However, we may use web beacons or similar technologies to support retargeting or promotional campaigns on third-party platforms."
This segment states that Bolt does not display third-party advertisements on its website but may use web beacons for retargeting or promotional campaigns on third-party platforms, simultaneously restricting one form of advertising data use while disclosing a permitted alternative use involving third-party data sharing.
AI-generated interpretation, not legal advice.
" Backups and Residual Copies. Residual copies of personal information and user content may persist in backups, logs, or archival systems for a limited period following deletion or account termination. Such data will not be used for active processing except as necessary for security, fraud prevention, or legal compliance."
This clause creates an exception to deletion obligations by acknowledging that residual copies may persist in backups, logs, or archival systems for a limited period, while restricting their use to security, fraud prevention, or legal compliance purposes only.
AI-generated interpretation, not legal advice.
" This section outlines specific privileges granted to customers who maintain active paid subscriptions to our commercial plans (including StackBlitz Teams or Enterprise Software as a Service (SaaS) plans). These privileges are valid for the duration of the active commercial license and are revoked upon license expiry or termination."
This segment defines the scope of commercial use privileges, specifying they apply to active paid subscribers of commercial plans (Teams or Enterprise SaaS), are valid only during the active license period, and are revoked upon expiry or termination.
AI-generated interpretation, not legal advice.
" We may use AI Inputs and AI Outputs to operate, maintain, and improve the Services, including improving AI performance, reliability, and safety. Such use shall be on aggregated, anonymized, or de-identified data."
Grants Bolt permission to use AI Inputs and AI Outputs to operate, maintain, and improve the Services including AI performance, reliability, and safety, conditioned on the data being aggregated, anonymized, or de-identified, thereby permitting training use with a data-minimization constraint.
AI-generated interpretation, not legal advice.
"Customers with active commercial StackBlitz plans may integrate the StackBlitz WebContainer API on their website, subject to a usage limitation of 500 sessions per month. Customers may not exceed this limit without a commercial license; please contact StackBlitz at hello@stackblitz.com to discuss licensing."
Grants commercial StackBlitz plan customers permission to integrate the WebContainer API subject to a 500-session-per-month usage cap, and restricts exceeding that limit without obtaining a commercial license, thereby establishing a tier-specific entitlement and restriction.
AI-generated interpretation, not legal advice.
" Some browsers transmit “Do-Not-Track” signals. Because there is no industry-standard interpretation, Bolt does not currently respond to DNT signals. However, where required by applicable law, we recognize browser-based Global Privacy Control (GPC) signals as a valid request to opt out of certain data sharing or targeted advertising."
This clause disclaims any obligation to respond to DNT signals due to lack of industry-standard interpretation, while creating a conditional obligation to honor GPC signals as opt-out requests from certain data sharing or targeted advertising where required by applicable law.
AI-generated interpretation, not legal advice.
" Bolt does not sell personal information as defined under the CCPA. However, we may share limited identifiers or device information with advertising or analytics partners to support marketing or promotional campaigns. Where required by law, users may opt out of such sharing."
This clause disclaims the sale of personal information under the CCPA definition, while acknowledging the company may share limited identifiers or device information with advertising or analytics partners, and grants users the right to opt out of such sharing where required by law.
AI-generated interpretation, not legal advice.
" UNDER NO CIRCUMSTANCES WILL THE TOTAL LIABILITY OF US AND OUR SUPPLIERS AND LICENSORS OF ALL KINDS ARISING OUT OF OR RELATED TO YOUR USE OF THE SITE, THE SERVICES AND STACKBLITZ CONTENT (INCLUDING BUT NOT LIMITED TO WARRANTY CLAIMS), REGARDLESS OF THE FORUM AND REGARDLESS OF WHETHER ANY ACTION OR CLAIM IS BASED ON CONTRACT, TORT, OR OTHERWISE, EXCEED THE AMOUNTS, IF ANY, THAT YOU HAVE PAID TO US FOR YOUR USE OF THE SITE, THE SERVICES AND STACKBLITZ CONTENT IN THE TWELVE MONTH PERIOD IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO SUCH CLAIM OR ACTION. IN ADDITION, IF YOU ARE A CALIFORNIA RESIDENT, YOU WAIVE CALIFORNIA CIVIL CODE §1542, WHICH SAYS: A GENERAL RELEASE DOES NOT EXTEND TO CLAIMS WHICH THE CREDITOR DOES NOT KNOW OR SUSPECT TO EXIST IN HIS FAVOR AT THE TIME OF EXECUTING THE RELEASE, WHICH IF KNOWN BY HIM MUST HAVE MATERIALLY AFFECTED HIS SETTLEMENT WITH THE DEBTOR. BECAUSE SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU."
Caps total aggregate liability of StackBlitz and its suppliers/licensors at amounts paid by the user in the twelve months preceding the claim, regardless of the legal theory, and incorporates a California-resident-specific exception, establishing the monetary ceiling for all claims.
AI-generated interpretation, not legal advice.
" Depending on account type or plan, users may have the ability to limit or opt out of the use of AI Inputs and AI Outputs for model training or improvement, as described in product documentation or account settings."
Grants users a right to limit or opt out of the use of AI Inputs and AI Outputs for model training or improvement, contingent on the user's account type or plan and as described in product documentation or account settings, creating a tier-differentiated opt-out right.
AI-generated interpretation, not legal advice.
" We and our service providers use cookies, web beacons, and similar technologies to:"
This segment discloses that Bolt and its service providers use cookies, web beacons, and similar technologies, establishing the identity of parties engaged in tracking and the legal basis for such activity.
AI-generated interpretation, not legal advice.
" We use cookies, web beacons, and similar technologies to collect this information."
This segment discloses the technical means by which automatic data collection occurs (cookies, web beacons, similar technologies), establishing the legal basis for technology-mediated data collection and providing transparency as required by applicable privacy laws.
AI-generated interpretation, not legal advice.
" Legitimate interests, such as improving the Services, ensuring security, preventing fraud, and understanding usage trends, provided such interests are not overridden by your rights;"
Identifies 'legitimate interests' as a legal basis, specifying improving the Services, security, fraud prevention, and usage analysis as qualifying interests, and conditioning reliance on this basis on those interests not being overridden by individual rights.
AI-generated interpretation, not legal advice.
" StackBlitz may, without prior notice to you, revise these Terms and any other information contained in this Site. When we do, we will revise the “last updated” date given above. It is your responsibility to review these Terms frequently and to remain informed of any changes to them. The then-current version of these Terms will supersede all earlier versions. You agree that your continued use of our Services after such changes have been published on the Site will constitute your acceptance of such revised Terms. StackBlitz may also make improvements or changes in the Services described in this Site at any time without notice."
This segment establishes StackBlitz's right to revise the Terms without prior notice, sets the procedure for communicating changes via the 'last updated' date, places responsibility on the user to review changes, and deems continued use as acceptance of revised Terms.
AI-generated interpretation, not legal advice.
" Upon receipt of notice as described above, StackBlitz will take whatever action, in its sole discretion, it deems appropriate, including removal of the alleged infringing material from the website."
Disclaims any specific action obligation upon receipt of a copyright notice by reserving StackBlitz's sole discretion to determine the appropriate response, including removal of alleged infringing material, thereby limiting users' expectations of a mandatory remedy.
AI-generated interpretation, not legal advice.
" Abuse or Policy Violations. If an account is suspended or terminated due to abuse of the Services or violation of applicable terms or policies, we may permanently disable the account and delete associated data, subject to applicable legal requirements."
This clause grants the company permission to permanently disable accounts and delete associated data when accounts are suspended or terminated due to abuse or policy violations, subject to applicable legal requirements.
AI-generated interpretation, not legal advice.
" If the Services are provided for a fee, you will need to provide StackBlitz with valid payment information. All payment information that you provide to StackBlitz in connection with a purchase of the Services must be accurate, valid, complete and current information. Your payment information will be automatically charged or billed on a monthly basis for the Services until you provide StackBlitz with a notice of cancellation. You may cancel at any time by sending written notice to StackBlitz via electronic mail to hello@stackblitz.com or physical mail to 2443 Fillmore St #380-7122, San Fransisco, CA 94115; provided, however, any fees already processed or paid by you for the Services are not refundable or pro-rated in the event you cancel prior to the end of the month. You agree to pay any and all charges for the Services incurred by your credit card, debit card or other payment method used in connection with the purchase of the Services at the price in effect when the charges were incurred by you. In addition, you will pay any applicable taxes relating to the charges or fees associated with your purchase of the Services."
This segment establishes the procedure for providing and maintaining payment information, specifies that payment will be automatically charged on a monthly basis until cancellation, and sets out the cancellation procedure via written notice to StackBlitz by email or physical mail.
AI-generated interpretation, not legal advice.
" The Services may be provided for a fee or other charge. If you elect to use paid aspects of the Services, you agree to the pricing and payment terms listed on the Site, which StackBlitz may update from time to time. StackBlitz may add new services for additional fees and charges, or amend fees and charges for existing services, at any time and in its sole discretion. Any changes in fees or charges shall become effective in the billing cycle following notice of such change to you as provided in these Terms. StackBlitz may lock your account for non-payment at any time. In addition to the amount due for the Services, delinquent accounts or chargebacks will be charged with fees or charges that are incidental to the collection of delinquent accounts or chargebacks including, but not limited to, collection fees or convenience fees or any other third parties’ charges. You agree StackBlitz may contact you by electronic mail at the address provided by you to StackBlitz with respect to any delinquent accounts."
This segment establishes user obligations to comply with pricing and payment terms for paid Services, grants StackBlitz the right to modify fees and add new charges, specifies when fee changes take effect, and reserves StackBlitz's right to lock accounts for non-payment.
AI-generated interpretation, not legal advice.
Common questions about Bolt (StackBlitz)'s policies
- Does Bolt (StackBlitz) train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 2 verified findings from Bolt (StackBlitz)'s published policy. Informational only, not legal advice.
- Who owns the content you create with Bolt (StackBlitz)?
- You own your outputs — based on 2 verified findings from Bolt (StackBlitz)'s published policy. Informational only, not legal advice.
- Can you use Bolt (StackBlitz)'s output commercially?
- Commercial use allowed — with conditions — based on 3 verified findings from Bolt (StackBlitz)'s published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Bolt (StackBlitz)'s own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
19 verified clausesClauses in Bolt (StackBlitz)'s policies that work in your favour — commitments the platform made to you.
- Prompt ownershipdeletion rights & post-termination survival
“You are solely responsible for any content and other material that you submit, publish, transmit, or display on, through, or with our Site or Services. In addition, you agree to provide notices and obtain any consents, if necessary, related to your use of the…”
This segment places sole responsibility on the user for content submitted through the Services, requires users to obtain necessary consents for personal data processing, asserts user ownership over their data, and explic…
📍 Terms of Service › “USE POLICIES”Jump to exact text → - Privacy & data use
“To protect privacy and security, we may take steps to verify your identity before fulfilling your request. Requests may be subject to certain exceptions or limitations permitted by applicable law. Authorized agents may submit requests on behalf of individuals…”
This clause establishes identity verification procedures before fulfilling data subject requests, acknowledges that requests may be subject to legal exceptions or limitations, allows authorized agents to submit requests…
📍 § 13 (European Union and United Kingdom Privacy Rights)Jump to exact text → - Privacy & data usesale/sharing of personal data
“Residents of certain U.S. states, including California, may have rights under applicable privacy laws, such as the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). These rights may include the right to know, access, correct, del…”
This clause identifies the privacy rights available to residents of certain U.S. states under laws such as the CCPA and CPRA, including rights to know, access, correct, delete, obtain a copy of personal information, and…
📍 § 14 (U.S. State Privacy Rights)Jump to exact text → - Data retentiondeletion rights & post-termination survival
“Voluntary Account Closure. When an account is voluntarily closed, the account and associated data enter an inactive or expired state. We will delete or anonymize such data within a commercially reasonable period following account closure not to exceed thirty d…”
This clause obligates the company to delete or anonymize account data within a commercially reasonable period not exceeding thirty days following voluntary account closure, subject to enumerated exceptions including back…
📍 § 11 (Data Retention)Jump to exact text → - Privacy & data usesensitive data (biometric/location/health)
“Bolt does not intentionally collect or process special categories of personal data (such as health information, biometric data, precise location data, or government-issued identifiers). Users should not submit sensitive personal information in prompts, code, o…”
This segment is a continuation of segment 23, reiterating the restriction on users submitting sensitive personal information through the platform, reinforcing the prohibition on processing special category data.
📍 Article C (Sensitive Personal Information)Jump to exact text → - Commercial use
“Customers with active commercial StackBlitz plans may 1) incorporate hyperlinks on their websites to the Site or specific projects on StackBlitz, and 2) integrate and use the StackBlitz Software Development Kit (SDK) and embed the StackBlitz Editor within thei…”
This segment grants active commercial plan customers the specific permissions to incorporate hyperlinks to StackBlitz on their websites and to integrate and embed the StackBlitz SDK and Editor within their websites.
📍 Terms of Service › “COMMERCIAL USAGE”Jump to exact text →
+ 13 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
8 verified clausesWhat Bolt (StackBlitz) requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcementconduct restrictions
“You will not use our Site to: (i) upload, post, email, or otherwise transmit any material that contains unlawful, harmful, threatening, abusive, harassing, tortious, defamatory, vulgar, obscene, libelous, invasive of another’s privacy, hateful, or racially, et…”
This segment enumerates prohibited uses of the Site, including uploading unlawful, harmful, or objectionable material, impersonating others, and transmitting material without the right to do so, establishing conduct rest…
📍 Terms of Service › “USE POLICIES”Jump to exact text → - Moderation & enforcement
“Certain parts of our Services, including account management features, may be password-restricted to registered users or other authorized persons. You agree that you are entirely responsible for maintaining the confidentiality of your password, and agree to not…”
This segment obligates registered users to maintain the confidentiality of their passwords, to notify StackBlitz of any compromise, and to accept full responsibility for all account activities, imposing security and acco…
📍 Terms of Service › “RESTRICTED AREAS OF THE SERVICES”Jump to exact text → - Commercial useconduct restrictions
“StackBlitz Content as part of a database or other work; (ii) use any automated tool (e.g., robots, spiders) to access or use our Services or to store, copy, modify, distribute, or resell any StackBlitz Content; (iii) rent, lease, or sublicense your access to o…”
This segment enumerates further restrictions: prohibiting use of automated tools, sublicensing access, non-commercial use except for Teams/Enterprise subscribers, and circumvention of access controls, directly limiting h…
📍 Terms of Service › “Services (collectively, “StackBlitz Content”) or compile or collect any”Jump to exact text → - Moderation & enforcement
“The Site and Services are controlled and operated from StackBlitz’s office in the United States. StackBlitz makes no representations that the Site or Services are appropriate or available for use in other locations. Those who access or use the Site or Services…”
Establishes that users accessing the site from outside the United States bear sole responsibility for compliance with applicable local and U.S. laws (including export/import regulations), and restricts use by residents o…
📍 Terms of Service › “LEGAL NOTICES”Jump to exact text → - Moderation & enforcementconduct restrictions
“You must comply with all applicable laws when using our Site or Services. Except as may be expressly permitted by applicable law, or as StackBlitz may authorize expressly in writing, you will not, and will not permit anyone else to: (i) store, copy, modify, di…”
This segment establishes a compliance obligation with applicable laws and begins enumerating specific restrictions on user conduct, including prohibitions on storing, copying, modifying, distributing, or reselling StackB…
📍 Terms of Service › “RESTRICTIONS”Jump to exact text →
+ 3 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
15 topics- Product telemetry & usage tracking9 clauses
- Advertising & tracking1 protective6 clauses
- Sale or sharing of personal data1 protective2 clauses
- Sensitive data (biometric, location, health)1 protective1 clause
- Government & law-enforcement disclosure2 clauses
- Data shared with other AI providers3 clauses
- Trains by default, opt-out available2 clauses
- Damages & liability cap3 clauses
- Indemnity direction1 clause
- Terms can change at any time3 clauses
- Deletion rights & post-termination survival2 protective6 clauses
- Auto-renewal & cancel window1 clause
- Feedback ownership1 clause
- Breach-notification promises1 clause
- Conduct restrictions4 obligations4 clauses
65 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, § 11 (Data Retention) addresses how long content is retained, and the Privacy Policy, Privacy Policy › “Customer Control” addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The Privacy Policy, Privacy Policy › “Customer Control” describes a way to decline model training, and the Terms of Service, Terms of Service › “COMMERCIAL USAGE” states that terms differ by plan or tier. Whether the opt-out applies on every tier is determined by those clauses together — read both before relying on the opt-out.
Verified retention clauses point in different directions: the Privacy Policy, § 11 (Data Retention) describes broad or open-ended retention, while the Privacy Policy, § 11 (Data Retention) describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain personal information and user content for as long as necessary to provide the Services, support active accounts, comply with legal obligations, resolve disputes, and enforce our agreements. Active Accounts. Personal information and user content associated with an account are retained while the account remains active.”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Subject to these Terms, we grant to you a limited, personal, non-exclusive, non-transferable license to use our Services. If you are using our Services under the StackBlitz Teams or Enterprise Plans, this license includes the right to use our Services for commercial purposes. For all other uses, the license is limited to personal use and not for resale or further distribution. Your right to use our Services is lim...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Except for your pre-existing rights and this license granted to you, StackBlitz owns the text, photographs, videos, visual interfaces, interactive features, graphics, design, compilation, computer code, products, software and all other elements and components of the Site and Services (“StackBlitz Content”), excluding your content. StackBlitz owns the copyrights, trademarks, service marks, trade names and other int...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“We may provide you with a mechanism to provide feedback, suggestions, and ideas, if you choose, about our Site or Services (“Feedback”). You agree that we may, in our sole discretion, use the Feedback you provide to us in any way, including in future enhancements and modifications to our Site or Services. You hereby grant to us and our assigns a perpetual, worldwide, fully transferable, sublicensable, irrevocable,...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Except for your pre-existing rights and this license granted to you, StackBlitz owns the text, photographs, videos, visual interfaces, interactive features, graphics, design, compilation, computer code, products, software and all other elements and components of the Site and Services (“StackBlitz Content”), excluding your content. StackBlitz owns the copyrights, trademarks, service marks, trade names and other int...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | conditional | MEDIUM | 2 |
| All applicable tiers | indemnity liability | worsens | HIGH | 3 |
| All applicable tiers | privacy data use | worsens | HIGH | 3 |
| All applicable tiers | prompt ownership | worsens | HIGH | 1 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 2 |
| All applicable tiers | training use | worsens | HIGH | 2 |
| Api | tier differences | conditional | MEDIUM | 1 |
| Enterprise | commercial use | worsens | HIGH | 3 |
| Free | prompt ownership | worsens | HIGH | 3 |
| Free | subprocessors data sharing | worsens | HIGH | 3 |
| Pro / Paid | indemnity liability | conditional | MEDIUM | 1 |
| Pro / Paid | tier differences | conditional | MEDIUM | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“We share information with trusted service providers who perform services on our behalf, including hosting, analytics, billing, customer support, and AI processing. These providers are authorized to process information only as necessary to provide services to Bolt.”Open timeline citation
Latest stance: training with opt out on training use
“Depending on account type or plan, users may have the ability to limit or opt out of the use of AI Inputs and AI Outputs for model training or improvement, as described in product documentation or account settings.”Open timeline citation
Latest stance: training permitted on training use
“We may use AI Inputs and AI Outputs to operate, maintain, and improve the Services, including improving AI performance, reliability, and safety. Such use shall be on aggregated, anonymized, or de-identified data.”Open timeline citation
Latest stance: indefinite or necessity based on data retention
“We retain personal information and user content for as long as necessary to provide the Services, support active accounts, comply with legal obligations, resolve disputes, and enforce our agreements. Active Accounts. Personal information and user content associated with an account are retained while the account remains active.”Open timeline citation
Latest stance: sale or sell on privacy data use
“Bolt does not sell personal information as defined under the CCPA. However, we may share limited identifiers or device information with advertising or analytics partners to support marketing or promotional campaigns. Where required by law, users may opt out of such sharing.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Bolt does not sell personal information as defined under the CCPA. However, we may share limited identifiers or device information with advertising or analytics partners to support marketing or promotional campaigns. Where required by law, users may opt out of such sharing.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We share information with trusted service providers who perform services on our behalf, including hosting, analytics, billing, customer support, and AI processing. These providers are authorized to process information only as necessary to provide services to Bolt.”Open timeline citation
Latest stance: sublicensable or transferable on prompt ownership
“We may provide you with a mechanism to provide feedback, suggestions, and ideas, if you choose, about our Site or Services (“Feedback”). You agree that we may, in our sole discretion, use the Feedback you provide to us in any way, including in future enhancements and modifications to our Site or Services. You hereby grant to us and our assigns a perpetual, worldwide, fully transferable, sublicensable, irrevocable, royalty free license to use, reproduce, modify, create derivative works from, distribute, and display the Feedback in any manner any for any purpose, without in any media, software, or technology of any kind now existing or developed in the future, without any obligation to provide attribution or compensation to you or any third party.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days
- Terms of Service:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 23 more findings this quarter vs last (140 vs 117). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Bolt (StackBlitz)'s policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Bolt (StackBlitz)'s own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.