Braze
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
““ Affiliate ” shall mean, with respect to a party, any entity, whether incorporated or not, that directly or indirectly controls, is controlled by, or is under common control with such party or its corporate parent, where “control” (or variants of it) shall mean the direct or indirect ownership or control of more than 50% of the voting interests of the…”
Watch: indemnity liability
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
This clause caps each party's liability per incident to fees paid in the relevant twelve-month term and caps aggregate liability to total fees paid, limiting the financial remedy available to either party arising out of the agreement under any legal theory.
This segment limits the indemnifying party's liability by designating the mutual indemnification provisions as the sole and exclusive remedy for both parties with respect to the categories of claims described in the indemnification section, precluding additional remedies for covered claims.
This segment establishes Braze's data retention obligation, requiring retention of Personal Data only for so long as there is a legitimate business need, and specifies the criteria for determining appropriate retention periods including purpose, sensitivity, risk, and applicable law.
Scores derived from 36 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
- Data handling is conditional — 8 privacy or retention clauses warrant review before using Braze at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Braze's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 83 verified, verbatim-cited findings below — read the citations.
Based on 94 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 27 citationsstaticLast captured 2026-07-03
- Privacy PolicyVerified - read in full - 49 citationsstaticLast captured 2026-07-10
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
This segment defines the scope and applicability of the California-specific section, incorporating the CCPA definition of Personal Information and specifying exclusions from that section's coverage.
" PART VI. IMPORTANT INFORMATION FOR CALIFORNIA RESIDENTS If you are a California resident, this section applies to you in addition to the rest of the Privacy Policy. It provides more detail on how we collect, use and disclose Personal Inf..."
This segment discloses the categories of Personal Information collected from California residents and the third parties to whom it may be disclosed for business purposes, satisfying CCPA transparency obligations regarding data collection and sharing practices.
" 6.2 CATEGORIES OF PERSONAL DATA THAT WE COLLECT AND THIRD PARTIES TO WHOM THE DATA MAY BE DISCLOSED This chart describes our practices currently in use and in use during the past 12 months. The chart summarizes the Personal Information we..."
This segment defines 'Restricted Information' (government IDs, PHI, financial account data) and 'SDK,' establishing the categories of highly sensitive data whose submission to the Services is prohibited, directly limiting data use and processing rights.
" “ Restricted Information ” shall mean: (i) social security numbers, passport numbers, military numbers, voter numbers, driver’s license numbers, taxpayer numbers, or other government identification numbers; (ii) Protected Health Informatio..."
This segment defines the scope of the Privacy Policy, identifying Braze as a 'Data Controller' for its own marketing/business purposes, clarifying what is in and out of scope, and establishing that data is treated as belonging to individuals in a business capacity.
" 1.3 SCOPE OF THIS POLICY What is in Scope? This Privacy Policy applies to Braze, where we determine the purposes and means of the processing of Personal Data for our marketing or business purposes (further details below) and in such cap..."
This segment describes the categories of individuals from whom Braze collects Personal Data (prospects, customers, training participants, business partners, vendors, etc.) and the contexts in which collection occurs, defining the scope of data subjects covered by the policy.
" 2.1 DATA COLLECTION The Personal Data that Braze collects will be determined by your interaction with Braze, our partners, Braze publications and other sources. How and where do we collect data? Braze collects Personal Data from prospe..."
This segment identifies the sources from which Braze collects Personal Data, including directly from individuals, publicly available sources, business partners, defining the data collection channels subject to this policy.
" Braze collects Personal Data from a variety of sources, such as from: The Individual who is the subject of such Personal Data, including in their use of the Websites and the Services; Publicly available sources, such as an individual’s s..."
This segment enumerates the specific purposes for which Braze processes Personal Data, including understanding prospects, securing websites/services, and providing and maintaining services, establishing the permissible legal bases and uses for collected data.
" 2.2 PURPOSES OF PROCESSING Braze collects Personal Data for several purposes, including: Enabling us to understand and engage with those who are interested in learning about our products, services, content, and company-related initiative..."
This segment enumerates the types of Personal Data Braze may collect, including name, contact information, industry, employer, event attendance, and communications, establishing the categories of data subject to the policy's obligations.
" Braze affiliates. What type of data do we collect? Personal Data that we may collect includes, but is not limited to: Name and job title; Contact information such as email address, business phone number, and business address; Industr..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" 2.1 DATA COLLECTION The Personal Data that Braze collects will be determined by your interaction with Braze, our partners, Braze publications and other sources. How and where do we collect data? Braze collects Personal Data from prospects, customers, participants at our trainings, certifications and events, business partners and vendors (if they are natural persons), their respective employees, advisors, and/or consultants, along with the data of whomever our customers have authorized to use free and/or paid versions of Braze's services under a main subscription agreement or equivalent (the “Services” ) on their behalf (collectively, “Individuals” ), who: Visit www.braze.com , Braze Bonfire and other websites owned and/or operated by Braze (collectively, the “Websites” ); Visit our offices; Receive/send communications from/to us, including via mail, email, phone call, Slack, chat features of our Websites, support tickets, SMS, MMS or other digital messages; Use our Services as an authorized user (for example, an employee of one of our customers who has been given a login to access our Services) ( "Dashboard User" ); Register for, attend and/or otherwise take part in our events, webinars, contests, trainings and certification courses; Download or otherwise engage with Braze content and publications, such as viewing our videos, reading content on our Websites, or interacting with our chat bot; Submit requests for an action, support or information; Participate in meetings or events; Engage with our resellers or partners; Work at partners or suppliers of Braze and interact with our company in the course of doing business or contemplating doing business with us; or Otherwise directly interact with Braze. "
This segment describes the categories of individuals from whom Braze collects Personal Data (prospects, customers, training participants, business partners, vendors, etc.) and the contexts in which collection occurs, defining the scope of data subjects covered by the policy.
AI-generated interpretation, not legal advice.
" 6.3 THE SALE AND SHARING OF PERSONAL INFORMATION Like many companies, Braze uses services that employ cookies and other technologies to collect Personal Information (including the identifiers and internet activity information described in the table above) about your use of our Websites and other online services over time, which helps us to deliver behavioral advertising. In addition, we may provide your contact details to our marketing or advertising vendors for the placement of behavioral advertising. Our use of some of these services constitutes the “sale” or “sharing” of Personal Information as defined under the CCPA. You may opt-out of such sales or sharing by clicking on the "Do Not Sell or Share my Personal Information" link in the footer of our Websites and following the instructions therein. You can also opt-out of advertising cookies by visiting our Cookie Consent Manager . You can also opt out of advertising cookies by enabling Global Privacy Control ( “GPC” ) in your web browser or browser extension, which we recognize to the extent required by applicable law. Enabling GPC will automatically set your cookie settings to opt out of the sharing of Personal Information for behavioral advertising. If you choose to use GPC, you will need to turn it on for each supported browser or browser extension you use. Other than GPC, we do not recognize any “do not track” signals. You can opt out of other types of behavioral advertising that are not associated with cookies by visiting our Marketing Communications Preference Center. "
This segment discloses that Braze's use of certain advertising cookies and sharing of contact details with marketing vendors constitutes the 'sale' or 'sharing' of Personal Information under the CCPA, establishing the commercial use of personal data for behavioral advertising purposes and triggering CCPA opt-out rights.
AI-generated interpretation, not legal advice.
" Braze collects Personal Data from a variety of sources, such as from: The Individual who is the subject of such Personal Data, including in their use of the Websites and the Services; Publicly available sources, such as an individual’s social media account, online communities, forums, blogs or chat rooms; Our business partners;"
This segment identifies the sources from which Braze collects Personal Data, including directly from individuals, publicly available sources, business partners, defining the data collection channels subject to this policy.
AI-generated interpretation, not legal advice.
" 2.2 PURPOSES OF PROCESSING Braze collects Personal Data for several purposes, including: Enabling us to understand and engage with those who are interested in learning about our products, services, content, and company-related initiatives; Ensuring the security of our Websites and Services by tracking use of our Websites and Services, enforcing our terms and policies, investigating and preventing fraudulent, suspicious or illegal activities, and preventing unauthorized access to the Services; Providing, operating, and maintaining the Services, including troubleshooting any technical issue or bug, billing and account management purposes; Responding to requests for action, support or information; Complying with our contractual obligation to provide technical and customer success support; Registering office visitors to maintain the security of our offices and to ensure the confidentiality of our business activities; Analyzing the use of and data within the Services and Websites for trend monitoring, marketing, advertising, business development, improvements, security, and ensuring the proper functioning of such Services and Websites; Marketing purposes; Sending marketing communications about us and our affiliates and partners, including information about our products, promotions or events via email and other channels; Facilitating personalized advertising campaigns;"
This segment enumerates the specific purposes for which Braze processes Personal Data, including understanding prospects, securing websites/services, and providing and maintaining services, establishing the permissible legal bases and uses for collected data.
AI-generated interpretation, not legal advice.
" Braze affiliates. What type of data do we collect? Personal Data that we may collect includes, but is not limited to: Name and job title; Contact information such as email address, business phone number, and business address; Industry; Employer; Marketing subscription status; Audio and video recordings and notes from meetings; Event attendance and preferences associated with in-person event attendance, such as dietary requirements; Trainings and certifications; Downloads or engagement with Braze reports and other publications; Communications that we exchange with you, including when you contact us with questions or feedback, through the support portal, email, calls to our support team, our chat features, social media, survey participation, or otherwise; Profile picture; Certain information in connection with the use of the Websites by visitors and the Services by Dashboard Users, and information about your interaction with other relevant third-party pages displaying Braze content, which may include: Device Data: information may include IP address (or proxy server), device and application identification numbers, location, browser type, Internet service provider and/or mobile carrier, and operating system and system configuration information; and Usage and Log Data: information about Dashboard Users' or website visitors' activity on the Websites and Services, including but not limited to the pages and files viewed, actions taken, conversations through our chat features, searches, account configuration information, date/time stamps associated with usage, log files and metadata containing, associated with or referencing Dashboard Users' data."
This segment enumerates the types of Personal Data Braze may collect, including name, contact information, industry, employer, event attendance, and communications, establishing the categories of data subject to the policy's obligations.
AI-generated interpretation, not legal advice.
" 3.1 Fees. Customer shall pay all fees specified in all Order Forms hereunder. Except as otherwise specified herein or in an Order Form, (i) fees are based on the Services subscription(s) purchased and not actual usage; (ii) payment obligations are non-cancelable; (iii) fees paid are non-refundable, except pursuant to Section 9.4 (Termination for Cause); and (iv) the subscription entitlement(s) purchased cannot be decreased during the relevant Subscription Term. 3.2 Invoicing and Payment. Except as otherwise provided, all fees are quoted and payable in United States dollars. Fees for Services will be invoiced electronically: (i) in advance, and (ii) monthly in arrears for excess usage, if applicable, and in both cases, in accordance with the applicable Order Form. Customer is responsible for maintaining complete and accurate billing and contact information. 3.3 Overdue Payments. Braze may impose late fees as contemplated in each Order Form. If Customer’s account is 30 days or more overdue, Braze may, in addition to any of its other rights or remedies, upon written notice, suspend Customer’s access to the Services and provision of any associated services until such amounts are paid in full. If Customer’s account is 60 days or more overdue, with prior written notice, Braze may terminate this Agreement and any or all outstanding Order Forms and Customer shall not be entitled to a refund of any prepaid fees, but shall remain obligated to pay unpaid fees owed, even if not yet invoiced, including any overages to entitlements, all as set forth on Customer's Order Forms. "
This segment obligates Customer to pay all fees specified in Order Forms, establishes that fees are subscription-based rather than usage-based, makes payment obligations non-cancelable and fees non-refundable (except for termination for cause), and prohibits decreasing subscription entitlements mid-term.
AI-generated interpretation, not legal advice.
" 8.1 Limitation of Liability. TO THE EXTENT PERMITTED BY APPLICABLE LAW, NEITHER PARTY’S LIABILITY WITH RESPECT TO ANY SINGLE INCIDENT ARISING OUT OF OR RELATED TO THIS AGREEMENT WILL EXCEED THE AMOUNT PAID OR PAYABLE BY CUSTOMER HEREUNDER IN RESPECT OF THE TWELVE-MONTH TERM IN WHICH THE INCIDENT GIVING RISE TO LIABILITY OCCURRED, PROVIDED THAT IN NO EVENT SHALL EITHER PARTY’S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, EXCEED THE TOTAL AMOUNT PAID BY CUSTOMER HEREUNDER. THE ABOVE LIMITATIONS WILL NOT LIMIT CUSTOMER’S PAYMENT OBLIGATIONS HEREUNDER. 8.2 Exclusion of Indirect Damages. IN NO EVENT SHALL EITHER PARTY HAVE ANY LIABILITY TO THE OTHER PARTY FOR ANY LOST PROFITS OR BUSINESS OPPORTUNITIES, LOSS OF USE, LOSS OF REVENUE, LOSS OF GOODWILL, BUSINESS INTERRUPTION, LOSS OF DATA OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE, CONSEQUENTIAL OR COVER DAMAGES OF ANY KIND OR NATURE HOWEVER CAUSED AND, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, WHETHER OR NOT THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE FOREGOING DISCLAIMER WILL NOT APPLY TO THE EXTENT PROHIBITED BY LAW."
This clause caps each party's liability per incident to fees paid in the relevant twelve-month term and caps aggregate liability to total fees paid, limiting the financial remedy available to either party arising out of the agreement under any legal theory.
AI-generated interpretation, not legal advice.
" 7.4 Exclusive Remedy. This “Mutual Indemnification” section states the indemnifying party’s sole liability to, and the indemnified party’s exclusive remedy against, the other party for any type of Claim described in this Section."
This segment limits the indemnifying party's liability by designating the mutual indemnification provisions as the sole and exclusive remedy for both parties with respect to the categories of claims described in the indemnification section, precluding additional remedies for covered claims.
AI-generated interpretation, not legal advice.
" Some of the information described above is collected through our Websites and our Services using logs, cookies and/or other tracking technologies. To read more about the cookies and tracking technologies we use, please visit our Cookie Policy . You can manage your cookie consent preferences by visiting our Cookie Consent Manager . We also use session replay technology provided by third-party vendors to record the interactions and Personal Data of Dashboard Users and visitors to certain Websites, such as our learning management system. We and such third-party vendors may use information from these recordings, which may include the Usage and Log Data detailed above. Personal Data within these recordings may be processed for the purposes outlined in Section 2.2 (Purposes of Processing). Such recordings do not include Personal Data for which Braze is a Data Processor. We also collect and process technical logs containing metadata and log files of information submitted to and used within the Services, which may contain personal data of end users, for analytical, security and troubleshooting purposes as further described in Section 2.2 (Purposes of Processing)."
This segment discloses that Braze uses cookies, tracking technologies, and session replay technology provided by third-party vendors to record interactions and Personal Data of users, identifying subprocessors involved in data collection and linking to the Cookie Policy for further detail.
AI-generated interpretation, not legal advice.
" Carrying out internal training and research; Sending messages to Dashboard Users about technical alerts, updates, security notifications, and educational, administrative or transactional communications; and Complying and assisting with legal obligations, judicial proceedings, court orders and legal processes, pursuing remedies available to us and limiting our damages, responding to lawful requests and pursuing internal investigations. Where we need to collect and process Personal Data by law, or under a contract we have entered into with you, and you fail to provide the required Personal Data when requested, we may not be able to comply with our legal obligations or perform our contract with you. If you provide us with Personal Data relating to another person, you confirm that you have informed them of our identity, the purposes (as set out above) for which their Personal Data will be used, and that you have obtained their consent prior to sharing their Personal Data with us."
This segment continues listing processing purposes including internal training, communications to users, and legal compliance, and imposes an obligation that failure to provide required Personal Data may prevent Braze from performing its contractual obligations.
AI-generated interpretation, not legal advice.
" 4.5 CHAT TECHNOLOGIES We use chat technologies provided by third-party vendors that employ cookies and software code to operate the chat features you can use to communicate with us through our Websites. We and such third-party vendors may monitor, record and use information from your interactions with our Websites. This information includes details you have shared through online chats, data on sections of the Website you have visited, your IP address and your general geographic information (e.g., city, state). This Personal Data may be processed for the purposes outlined in Section 2.2 (Purposes of Processing)."
This segment discloses that Braze uses third-party chat technology vendors who may monitor, record, and use personal interaction data including chat content, IP address, and geographic information, identifying subprocessors and the data they collect.
AI-generated interpretation, not legal advice.
" PART V. LEGAL BASIS FOR PROCESSING PERSONAL DATA If you are from a region that requires us to have a legal basis for processing your Personal Data, our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which we collect it. However, we will normally collect Personal Data from you only where we have your consent to do so, where we need the Personal Data to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect Personal Data from you or may otherwise need the Personal Data to protect your vital interests or those of another person."
This segment establishes the legal bases for processing Personal Data for individuals in regions requiring such justification, including consent, contract performance, and legitimate interests, defining the conditions under which Braze may lawfully process data.
AI-generated interpretation, not legal advice.
" 2.2 PURPOSES OF PROCESSING Braze collects Personal Data for several purposes, including: Enabling us to understand and engage with those who are interested in learning about our products, services, content, Braze careers and company-related initiatives; Ensuring the security of our Websites and Services by tracking use of our Websites and Services, enforcing our terms and policies, investigating and preventing fraudulent, suspicious or illegal activities, and preventing unauthorized access to the Services; Providing, operating, and maintaining the Services, including troubleshooting any technical issue or bug, billing and account management purposes; Responding to requests for action, support or information; Complying with our contractual obligation to provide technical and customer success support; Registering office visitors to maintain the security of our offices and to ensure the confidentiality of our business activities; Analyzing the use of and data within the Services and Websites for trend monitoring, marketing, advertising, business development, improvements, security, and ensuring the proper functioning of such Services and Websites; Marketing purposes; Sending marketing communications about us and our affiliates and partners, including information about our products, promotions, career opportunities or events via email and other channels; Facilitating personalized advertising campaigns; Promoting our products, promotions, career opportunities or events on internal and external platforms, including social media;"
Sets out the purposes for which Braze collects and processes personal data, including engagement with prospects, security enforcement, providing and maintaining services, and troubleshooting, defining the lawful bases of processing activity.
AI-generated interpretation, not legal advice.
" 2.1 DATA COLLECTION The Personal Data that Braze collects or receives will be determined by your interaction with Braze, our partners, Braze publications and other sources. How and where do we collect data? Braze collects and receives Personal Data from prospects, customers, participants at our trainings, certifications and events, business partners and vendors (if they are natural persons), their respective employees, advisors, and/or consultants, along with the data of whomever our customers have authorized to use free and/or paid versions of Braze's services under a main subscription agreement or equivalent (the “Services” ) on their behalf (collectively, “Individuals” ), who: Visit www.braze.com , Braze Bonfire , the Braze Support Portal and other websites owned and/or operated by Braze (collectively, the “Websites” ); Visit our offices; Receive/send communications from/to us, including via mail, email, phone call, Slack, chat features on our Websites, support tickets, SMS, MMS or other digital messages; Use our Services as an authorized user (for example, an employee of one of our customers who has been given a login to access our Services) ( "Dashboard User" ); Register for, attend and/or otherwise take part in our events, webinars, contests, trainings and certification courses; Download or otherwise engage with Braze content and publications, such as viewing our videos, reading content on our Websites, or interacting with our chat bots, avatars or AI agents; Submit requests for an action, support or information; Participate in meetings or events; Engage with our resellers or partners; Work at partners or suppliers of Braze and interact with our company in the course of doing business or contemplating doing business with us; or Otherwise"
Defines the categories of individuals and entities from whom Braze collects or receives personal data, including prospects, customers, training participants, business partners, vendors, and authorized users of free or paid services, establishing the data collection perimeter.
AI-generated interpretation, not legal advice.
" Braze affiliates. What type of data do we collect? Personal Data that we may collect includes, but is not limited to: Name and job title; Contact information such as email address, business phone number, and business address; Industry; Employer; Marketing subscription status; Audio and video recordings and notes from meetings; Event attendance and preferences associated with in-person event attendance, such as dietary requirements; Photo and video footage of your participation in events; Trainings and certifications; Downloads or engagement with Braze reports and other publications; Communications that we exchange with you, including when you contact us with questions or feedback, through the support portal, email, calls to our support team, our chatbot, avatar and AI agent features, social media, survey participation, or otherwise; Profile picture; Certain information in connection with the use of the Websites by visitors and the Services by Dashboard Users, and information about your interaction with other relevant third-party pages displaying Braze content, which may include: Device Data: information may include IP address (or proxy server), device and application identification numbers, location, browser type, Internet service provider and/or mobile carrier, and operating system and system configuration information; and Usage and Log Data: information about Dashboard Users' or website visitors' activity on the Websites and Services, including but not limited to the pages and files viewed, actions taken, conversations through our chat and forum features, searches, account configuration information, date/time stamps associated with usage, log files and metadata containing, associated with or referencing Dashboard Users' data."
Defines the categories of personal data collected, including names, contact information, industry, employer, marketing preferences, recordings, event attendance, training records, and communications, establishing the types of data subject to the policy.
AI-generated interpretation, not legal advice.
" Some of the information described above is collected through our Websites and our Services using logs, cookies and/or other tracking technologies. To read more about the cookies and tracking technologies we use, please visit our Cookie Policy . You can manage your cookie consent preferences by visiting our Cookie Consent Manager . We use session replay technology provided by third-party vendors to record the interactions and Personal Data of Dashboard Users and visitors to certain Websites, such as our learning management system and www.braze.com . We and such third-party vendors may use information from these recordings, which may include the Usage and Log Data detailed above. Personal Data within these recordings may be processed for the purposes outlined in Section 2.2 (Purposes of Processing). Such recordings do not include Personal Data for which Braze is a Data Processor. We collect and process technical logs containing metadata and log files of information submitted to and used within the Services, which may contain personal data of end users, for analytical, security and troubleshooting purposes as further described in Section 2.2 (Purposes of Processing). Braze uses artificial intelligence and machine learning to help operate, secure, and improve the business activities described in Section 2.2 (Purposes of Processing) (for example, website chatbots and support assistance). Depending on the use case, this processing may involve Personal Data as described in this Policy; in other cases we use de‑identified or aggregated information. We maintain human oversight and do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects."
Discloses that personal data is collected through logs, cookies, and tracking technologies including session replay technology provided by third-party vendors, and directs individuals to the Cookie Policy for further information, creating an obligation of transparency and directing users to manage consent preferences.
AI-generated interpretation, not legal advice.
"If Customer terminates this Agreement for cause as described herein, Braze shall refund Customer any prepaid fees covering the remainder of the Subscription Term after the date of termination, net of any amounts still owed to Braze. In any event, Customer shall not be relieved of its obligation to pay any fees accrued or payable to Braze prior to the effective date of termination. If Braze terminates this Agreement for cause as described herein, Customer shall remain obligated to pay all fees owed for the remainder of the Subscription Term. 9.5 Surviving Provisions . Section 1 and Sections 3 through 10 shall survive any termination or expiration of this Agreement."
This clause creates mutual payment obligations upon termination: Braze must refund prepaid fees covering the post-termination remainder if Customer terminates for cause, while Customer remains obligated to pay all fees owed for the remainder of the Subscription Term if Braze terminates for cause, and fees accrued prior to termination remain due in all cases.
AI-generated interpretation, not legal advice.
" THIS MAIN SUBSCRIPTION AGREEMENT GOVERNS ANY SERVICES PROVIDED BY BRAZE TO CUSTOMER. BRAZE, INC. ("BRAZE") MAY UPDATE THESE TERMS FROM TIME TO TIME AND BY CONTINUING TO USE ANY SERVICES PROVIDED BY BRAZE, CUSTOMER AGREES TO COMPLY WITH THESE TERMS AS UPDATED. In consideration of the mutual covenants and agreements contained herein and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the parties agree as follows:"
This segment establishes the operative agreement scope (all services provided by Braze to Customer), Braze's right to update terms unilaterally, and Customer's obligation to comply with updated terms by continuing to use services, creating a binding obligation on the Customer upon continued use.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Braze's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
18 verified clausesClauses in Braze's policies that work in your favour — commitments the platform made to you.
- Moderation & enforcementauto-renewal & cancel window
“9.1 Term of Agreement . This Agreement commences on the Effective Date and continues until all Order Forms entered into hereunder have terminated or expired pursuant to the terms hereof and subject to Sections 9.3 and 9.4 below. 9.2 Term of Subscriptions . Un…”
This clause establishes the commencement date and duration of the agreement and subscriptions, specifies automatic renewal for equal successive periods, and requires Braze to provide sixty days' prior notice before autom…
- Auto-renew cancel window: 30 days before term end
📍 § 9.1Jump to exact text → - Indemnity & liabilityindemnity direction
“7.1 Indemnification by Braze. Subject to Section 8 below, Braze shall defend, indemnify and hold Customer harmless from any damages, losses, costs, attorney fees and finally awarded judgements or for amounts paid by Customer under a settlement approved by Braz…”
This segment obligates Braze to defend, indemnify, and hold Customer harmless from third-party claims arising from Braze's breach of confidentiality obligations, gross negligence or willful misconduct, or infringement/mi…
📍 § 7.1Jump to exact text → - Confidentiality
“The Receiving Party shall use the same degree of care that it uses to protect the confidentiality of its own confidential information of like kind (but in no event less than reasonable care) to not use any Confidential Information of the Disclosing Party for a…”
This segment imposes an obligation on the Receiving Party to protect Confidential Information with at least the same degree of care as its own confidential information (no less than reasonable care), restricts use to pur…
📍 § 5.2Jump to exact text → - Audit rights, DPA & residency
“Braze will not be liable in any manner for any Restricted Information received from or on behalf of Customer in breach of this Agreement. 2.6 Protection of Customer Data . Braze will maintain administrative, physical and technical safeguards designed to prote…”
This segment disclaims Braze liability for improperly submitted Restricted Information and obligates Braze to maintain administrative, physical, and technical safeguards for Customer Data, while enumerating the limited p…
📍 § 2.5Jump to exact text → - Audit rights, DPA & residency
“3.1 PROCESSING OF PERSONAL DATA IN THE U.S. AND ELSEWHERE Braze, Inc. is located in the United States ( "U.S." ) and our group companies operate in Singapore, Germany, Japan, Canada, France, Australia, Indonesia, the United Kingdom ( "UK" ), Ireland, Romania,…”
This segment identifies the countries where Braze and its group companies operate and where Personal Data may be processed, disclosing international transfer destinations relevant to cross-border data transfer compliance…
📍 § 3.1Jump to exact text → - Confidentiality
“5.1 Definition of Confidential Information . As used herein, “ Confidential Information ” means all confidential and proprietary information of a party, or any of its Affiliates (“ Disclosing Party ”), disclosed to the other party, or any of its Affiliates, (“…”
This segment defines 'Confidential Information' to include all confidential and proprietary information marked as such or reasonably understood to be confidential, including information relating to the Services and busin…
📍 § 5.1Jump to exact text →
+ 12 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
4 verified clausesWhat Braze requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcementconduct restrictions
“10.1 Relationship of the Parties . The parties are independent contractors. This Agreement does not create a partnership, franchise, joint venture, agency, fiduciary, or employment relationship between the parties. 10.2 No Third-Party Beneficiaries . There ar…”
This clause defines the legal relationship between the parties as independent contractors, disclaims the formation of any partnership, joint venture, agency, or employment relationship, and incorporates Beta Service term…
📍 § 10.1Jump to exact text → - Moderation & enforcement
“sanctions or similar export restrictions (currently, Cuba, Iran, Syria, North Korea and the regions of Crimea, Luhansk and Donetsk in Ukraine), or (B) to or by anyone on the U.S. Treasury Department’s list of Specially Designated Nationals, the U.S. Department…”
This clause restricts Customer from using or exporting the services in violation of Export Control and Sanctions Laws, including to embargoed countries or prohibited persons, and makes compliance with such restrictions t…
📍 § 10.4Jump to exact text → - Moderation & enforcement
“the data contained therein; (d) attempt to gain unauthorized access to the Services or its related systems or networks; (e) use the Services to establish an individual’s eligibility for credit, employment or insurance; (f) access or provide access to a Dashboa…”
This segment restricts Customer from: tampering with data, gaining unauthorized access to Services, using Services for credit/employment/insurance eligibility determinations, providing competitive access, or submitting/c…
📍 § 2.5Jump to exact text → - Moderation & enforcement
“the Services in compliance with applicable laws except to the extent any breach of the Agreement by Customer causes Braze to be in violation of applicable law.”
This segment imposes an obligation on Braze to provide Services in compliance with applicable laws, with a carve-out where Customer's breach causes Braze's non-compliance, allocating legal compliance responsibility betwe…
📍 § 2.3Jump to exact text →
What the policies actually cover
14 topics- Product telemetry & usage tracking2 clauses
- Advertising & tracking2 protective6 clauses
- Sale or sharing of personal data2 protective4 clauses
- Sensitive data (biometric, location, health)1 protective2 clauses
- Children's data1 protective1 clause
- Government & law-enforcement disclosure2 clauses
- Damages & liability cap3 clauses
- Indemnity direction1 protective3 clauses
- Terms can change at any time1 clause
- Deletion rights & post-termination survival2 clauses
- Auto-renewal & cancel window1 protective1 clause
- Feedback ownership1 clause
- Breach-notification promises1 protective1 clause
- Conduct restrictions1 obligation1 clause
46 further verified clauses are cited on this page but not yet assigned a topic.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause limits liability or disclaims warranties.
“8.1 Limitation of Liability. TO THE EXTENT PERMITTED BY APPLICABLE LAW, NEITHER PARTY’S LIABILITY WITH RESPECT TO ANY SINGLE INCIDENT ARISING OUT OF OR RELATED TO THIS AGREEMENT WILL EXCEED THE AMOUNT PAID OR PAYABLE BY CUSTOMER HEREUNDER IN RESPECT OF THE TWELVE-MONTH TERM IN WHICH THE INCIDENT GIVING RISE TO LIABILITY OCCURRED, PROVIDED THAT IN NO EVENT SHALL EITHER PARTY’S AGGREGATE LIABILITY ARISING OUT OF OR ...”Open source citation
The clause limits liability or disclaims warranties.
“To the extent permitted by applicable law, Braze will have no liability for any such suspension made in good faith. Unless this Agreement has been terminated, Braze will restore Customer or Dashboard User access to the Services following resolution of the breach. 2.8 Third-Party Providers. Customers may elect to use a third-party provider chosen by Customer whose service or functionality interoperates with the Ser...”Open source citation
The clause requires defense, indemnity, or hold-harmless obligations.
“7.1 Indemnification by Braze. Subject to Section 8 below, Braze shall defend, indemnify and hold Customer harmless from any damages, losses, costs, attorney fees and finally awarded judgements or for amounts paid by Customer under a settlement approved by Braze in writing, arising from any claims, demands, suits or proceedings made or brought by a third party (“ Claims ”) against Customer alleging (a) a breach by ...”Open source citation
The clause requires defense, indemnity, or hold-harmless obligations.
“7.2 Indemnification by Customer . Subject to Section 8 below, Customer shall defend, indemnify and hold Braze harmless from any damages, losses, costs, attorney fees and finally awarded judgements or for amounts paid by Braze under a settlement approved by Customer in writing, arising from any Claims against Braze alleging (a) violation of applicable law arising from Customer’s use of the Services or the SDK in br...”Open source citation
The clause limits liability or disclaims warranties.
“6.1 Braze Warranties . Braze represents and warrants that the functionality and overall security of the Services will not be materially decreased during a Subscription Term. In the event of a breach of this Section 6.1, Customer’s exclusive remedy shall be as provided in the “Termination for Cause” section below. 6.2 Disclaimer . EXCEPT AS OTHERWISE SPECIFICALLY PROVIDED HEREIN, TO THE MAXIMUM EXTENT PERMITTED BY ...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | worsens | HIGH | 2 |
| All applicable tiers | data retention | conditional | MEDIUM | 1 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 3 |
| All applicable tiers | privacy data use | worsens | HIGH | 7 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 5 |
| Government | privacy data use | conditional | MEDIUM | 1 |
| Government | subprocessors data sharing | conditional | MEDIUM | 2 |
| Pro / Paid | indemnity liability | conditional | MEDIUM | 4 |
| Team / Business | commercial use | conditional | MEDIUM | 3 |
| Team / Business | confidentiality | conditional | MEDIUM | 2 |
| Team / Business | privacy data use | conditional | MEDIUM | 14 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 4 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“5.1 Definition of Confidential Information . As used herein, “ Confidential Information ” means all confidential and proprietary information of a party, or any of its Affiliates (“ Disclosing Party ”), disclosed to the other party, or any of its Affiliates, (“ Receiving Party ”) that is marked or designated as “Confidential” and/or “Proprietary”, or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure, including, without limitation, all information and data relating to the provision of the Services, a party’s business and marketing plans, technology and technical information, product designs, and business processes. The terms and conditions of this Agreement are the Confidential Information of both parties, the pricing and other terms reflected in all Order Forms hereunder are the Confidential Information of Braze, and the Customer Data is the Confidential Information of Customer. Confidential Information (except for Customer Data) shall not include any information that: (i) is or becomes generally known to the public without breach of any obligation owed to the Disclosing Party or any third party; (ii) was known to the Receiving Party prior to its disclosure by the Disclosing Party; (iii) was independently developed by the Receiving Party; or (iv) is received from a third party without breach of any obligation owed to the Disclosing Party. 5.2 Confidentiality .”Before citation
“While our Website and Services are not directed to children under the age of 16, we are required to inform you that we have no actual knowledge that we have sold or shared the Personal Information of California residents under 16 years of age.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“The Receiving Party shall use the same degree of care that it uses to protect the confidentiality of its own confidential information of like kind (but in no event less than reasonable care) to not use any Confidential Information of the Disclosing Party for any purpose outside the scope of this Agreement, and except as otherwise authorized by the Disclosing Party in writing, to limit access to Confidential Information of the Disclosing Party to those of its and its Affiliates’ employees, contractors and agents (“ Representatives ”) who need such access for purposes consistent with this Agreement and who are subject to written confidentiality obligations with the Receiving Party containing protections no less stringent than those contained herein. Notwithstanding the foregoing, each party may disclose the existence and terms of this Agreement, in confidence, to a potential purchaser of or successor to any portion of such party’s business resulting from the reorganization, spin-off, or sale of all or a portion of all of the assets of any business, division, or group of such party, and Braze may disclose the terms of this Agreement to Customer’s Affiliates in connection with the procurement of the Services by such Affiliates. Receiving Party shall be liable for any breach of this Section 5 by its Representatives. Except as otherwise provided herein, neither party shall disclose the terms of this Agreement or any Order Form to any third party other than its Representatives without the other party’s prior written consent.”Before citation
“6.3 THE SALE AND SHARING OF PERSONAL INFORMATION Like many companies, Braze uses services that employ cookies and other technologies to collect Personal Information (including the identifiers and internet activity information described in the CCPA Chart) about your use of our Websites and other online services over time, which are provided to third parties for cross-context behavioral advertising. In addition, we may provide your contact details to our marketing or advertising vendors for cross-context behavioral advertising. This constitutes the “sale” or “sharing” of your Personal Information as defined under the CCPA. Braze provides several methods to opt out of selling or sharing. To opt out of all selling and sharing, you may click on the "Do Not Sell or Share my Personal Information" link in the footer of our Websites and follow the instructions therein. You can also opt out of advertising cookies by visiting our Cookie Consent Manager , or by enabling Global Privacy Control ( “GPC” ) in your web browser or browser extension, which we recognize to the extent required by applicable law. Enabling GPC will automatically set your cookie settings to opt out of the sharing of Personal Information for behavioral advertising. If you choose to use GPC, you will need to turn it on for each supported browser or browser extension you use. Other than GPC, we do not recognize any “do not track” signals. You can opt out of other types of behavioral advertising that are not associated with cookies by visiting our Marketing Communications Preference Center.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“6.3 THE SALE AND SHARING OF PERSONAL INFORMATION Like many companies, Braze uses services that employ cookies and other technologies to collect Personal Information (including the identifiers and internet activity information described in the table above) about your use of our Websites and other online services over time, which helps us to deliver behavioral advertising. In addition, we may provide your contact details to our marketing or advertising vendors for the placement of behavioral advertising. Our use of some of these services constitutes the “sale” or “sharing” of Personal Information as defined under the CCPA. You may opt-out of such sales or sharing by clicking on the "Do Not Sell or Share my Personal Information" link in the footer of our Websites and following the instructions therein. You can also opt-out of advertising cookies by visiting our Cookie Consent Manager . You can also opt out of advertising cookies by enabling Global Privacy Control ( “GPC” ) in your web browser or browser extension, which we recognize to the extent required by applicable law. Enabling GPC will automatically set your cookie settings to opt out of the sharing of Personal Information for behavioral advertising. If you choose to use GPC, you will need to turn it on for each supported browser or browser extension you use. Other than GPC, we do not recognize any “do not track” signals. You can opt out of other types of behavioral advertising that are not associated with cookies by visiting our Marketing Communications Preference Center.”Before citation
“2.4 Customer Responsibilities . Customer is responsible for all actions taken by Customer or its Dashboard Users in Customer’s account(s) and for Dashboard Users’ compliance with this Agreement. Customer shall: (a) have sole responsibility for the accuracy and legality of all Customer Data; (b) ensure that any user IDs, passwords, and other access credentials for the Services are kept strictly confidential and not shared with any unauthorized person; (c) promptly notify Braze of any breach of security or unauthorized use of its account; (d) use commercially reasonable attempts to comply with requests made by Braze to update various features or functionalities within the Services or the SDK to optimize performance of the Services or the SDK to customers generally; and (e) use the Services and the SDK in compliance with this Agreement, applicable Order Form(s), Braze’s Acceptable Use Policy available at: www.braze.com/aup , and all applicable laws and governmental regulations. Braze may, in its reasonable discretion, refuse to distribute Messages where the content of the Message, or the delivery of such Message to the recipient, in Braze’s reasonable opinion, violates the terms of this Agreement. Notwithstanding the foregoing, Braze has no obligation to review Message content or recipient addresses. 2.5 Use Guidelines . Customer shall use the Services solely for its and its Affiliates’ business purposes as contemplated by this Agreement and shall not: (a) license, sell, resell, lease, transfer, distribute, or otherwise commercially exploit or make the Services available to any third party; (b) send via, upload to, or store within the Services any Malicious Code; (c) interfere with, disrupt or threaten the security, stability, integrity or availability of the Services or”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“6.3 THE SALE AND SHARING OF PERSONAL INFORMATION Like many companies, Braze uses services that employ cookies and other technologies to collect Personal Information (including the identifiers and internet activity information described in the table above) about your use of our Websites and other online services over time, which helps us to deliver behavioral advertising. In addition, we may provide your contact details to our marketing or advertising vendors for the placement of behavioral advertising. Our use of some of these services constitutes the “sale” or “sharing” of Personal Information as defined under the CCPA. You may opt-out of such sales or sharing by clicking on the "Do Not Sell or Share my Personal Information" link in the footer of our Websites and following the instructions therein. You can also opt-out of advertising cookies by visiting our Cookie Consent Manager . You can also opt out of advertising cookies by enabling Global Privacy Control ( “GPC” ) in your web browser or browser extension, which we recognize to the extent required by applicable law. Enabling GPC will automatically set your cookie settings to opt out of the sharing of Personal Information for behavioral advertising. If you choose to use GPC, you will need to turn it on for each supported browser or browser extension you use. Other than GPC, we do not recognize any “do not track” signals. You can opt out of other types of behavioral advertising that are not associated with cookies by visiting our Marketing Communications Preference Center.”Before citation
“2.4 Customer Responsibilities . Customer is responsible for all actions taken by Customer or its Dashboard Users in Customer’s account(s) and for Dashboard Users’ compliance with this Agreement. Customer shall: (a) have sole responsibility for the accuracy and legality of all Customer Data; (b) ensure that any user IDs, passwords, and other access credentials for the Services are kept strictly confidential and not shared with any unauthorized person; (c) promptly notify Braze of any breach of security or unauthorized use of its account; (d) use commercially reasonable attempts to comply with requests made by Braze to update various features or functionalities within the Services or the SDK to optimize performance of the Services or the SDK to customers generally; and (e) use the Services and the SDK in compliance with this Agreement, applicable Order Form(s), Braze’s Acceptable Use Policy available at: www.braze.com/aup , and all applicable laws and governmental regulations. Braze may, in its reasonable discretion, refuse to distribute Messages where the content of the Message, or the delivery of such Message to the recipient, in Braze’s reasonable opinion, violates the terms of this Agreement. Notwithstanding the foregoing, Braze has no obligation to review Message content or recipient addresses. 2.5 Use Guidelines . Customer shall use the Services solely for its and its Affiliates’ business purposes as contemplated by this Agreement and shall not: (a) license, sell, resell, lease, transfer, distribute, or otherwise commercially exploit or make the Services available to any third party; (b) send via, upload to, or store within the Services any Malicious Code; (c) interfere with, disrupt or threaten the security, stability, integrity or availability of the Services or”After citation
Latest stance: third party or vendor sharing on privacy data use
“Some of the information described above is collected through our Websites and our Services using logs, cookies and/or other tracking technologies. To read more about the cookies and tracking technologies we use, please visit our Cookie Policy . You can manage your cookie consent preferences by visiting our Cookie Consent Manager . We use session replay technology provided by third-party vendors to record the interactions and Personal Data of Dashboard Users and visitors to certain Websites, such as our learning management system and www.braze.com . We and such third-party vendors may use information from these recordings, which may include the Usage and Log Data detailed above. Personal Data within these recordings may be processed for the purposes outlined in Section 2.2 (Purposes of Processing). Such recordings do not include Personal Data for which Braze is a Data Processor. We collect and process technical logs containing metadata and log files of information submitted to and used within the Services, which may contain personal data of end users, for analytical, security and troubleshooting purposes as further described in Section 2.2 (Purposes of Processing). Braze uses artificial intelligence and machine learning to help operate, secure, and improve the business activities described in Section 2.2 (Purposes of Processing) (for example, website chatbots and support assistance). Depending on the use case, this processing may involve Personal Data as described in this Policy; in other cases we use de‑identified or aggregated information. We maintain human oversight and do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“2.3 DISCLOSURE OF INFORMATION TO THIRD PARTIES We may disclose Personal Data to the following types of third parties and for the following purposes: Braze Affiliates - We may disclose Personal Data to Braze corporate group affiliates in connection with customer or technical support, marketing, business development, operations, account management, events or webinars, for general business purposes, in order to protect, exercise, establish or defend legal rights, where we are legally required to do so and to receive professional advice. Partners - If you use our Websites to register for an event or webinar organized by one of our partners, we may disclose your Personal Data to these partners to process your registration and manage your participation in the event. In such instances, our partner will process the relevant Personal Data as a separate controller and the partner’s use and control over your Personal Data will be governed by their privacy policy. We may also disclose your Personal Data to technology and solutions partners in connection with customer or technical support, marketing, business development and account management, and to our partners for marketing and personalized advertising purposes. Vendors – We may disclose Personal Data to third party vendors and service providers for general business purposes and to support our internal operations, including IT solutions vendors, AI vendors, marketing vendors, advertising vendors, consultants, and professional advisers acting as processors or controllers, including lawyers, bankers, auditors and insurers.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may also disclose Personal Data where we believe it necessary in order to protect or exercise, establish or defend our legal rights. Online Communities - Any Personal Data or other information you choose to submit in communities, forums, blogs or chat rooms on our Websites may be read, collected and used by others who visit these forums, depending on your account settings. Law Enforcement - We may disclose Personal Data to a third party where we are legally required to do so in order to comply with any applicable law, regulation, legal process or governmental request, including government authorities, law enforcement and others. Corporate Transaction Participants - We may transfer Personal Data in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“4.5 CHAT TECHNOLOGIES We use chat technologies provided by third-party vendors that employ cookies and software code to operate the chat features you can use to communicate with us through our Websites. We and such third-party vendors may monitor, record and use information from your interactions with our Websites. This information includes details you have shared through online chats, data on sections of the Website you have visited, your IP address and your general geographic information (e.g., city, state). This Personal Data may be processed for the purposes outlined in Section 2.2 (Purposes of Processing).”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-07-03· verified 2026-07-03
- Privacy Policy:Last captured 2026-07-10· verified 2026-07-10
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 119 more findings this quarter vs last (185 vs 66). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Braze's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Braze's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.