Skip to main content
Platform Review
PricingSign in
← All platforms
Workflow & Automation · bubblelab.ai

Bubble Lab

Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskLOWReviewed 2026-08-14
Creator: low · GRC: low · Counsel: low
Benchmark

No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.

Exhibit A · Privacy Policy · verbatim

We may aggregate, anonymize, or de-identify information so that it no longer reasonably identifies any individual or, where applicable, any single Customer (“Aggregated & De-Identified Information”). Aggregated & De-Identified Information is not personal information. We may use, retain, reproduce, modify, combine, commercialize, license, sell, transfer,

highest-risk verified finding on commercial use — tap for the citation
20 verified findings7 policy surfaces1/1 core docs verified

Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.

Risk triage

Watch: Privacy and data use

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
2
medium
0
low
1/1
docs
Trains on your data?
Not yet assessed
no verified finding covers this surface yet
Who owns outputs?
Not yet assessed
no verified finding covers this surface yet
Commercial use?
Commercial use allowed
from 1 cited finding
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →

How to read this page: Overall risk rates what Bubble Lab's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Partially verifiedWorkflow & Automation

Partially verified — Privacy Policy — Verified (read in full, 20 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.

Why partial?

Terms not yet captured

AIRIN has not yet captured a gate-verified Terms of Service document for this platform.

Document status
  • Privacy Policy
    Verified - read in full - 20 citationsstaticLast captured 2026-08-14
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Privacy & data use

Defines the scope of the policy by identifying the controller ('Bubble Lab, Inc.'), the covered services, the site, and the role of Customers as organizations whose members' data Bubble Lab processes — establishing the processing relationship and entities subject to the policy.

" This Privacy Policy explains how Bubble Lab, Inc. (“Bubble Lab,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the Bubble Lab Communities platform, dashboards, automations, AI features, and relat..."
📍 Privacy Policy › “Overview & Scope”Jump to exact text →
plan language
Privacy & data use

Identifies the legal bases Bubble Lab relies on when acting as a controller under applicable data-protection frameworks (contract performance, legitimate interests, consent, legal obligation), enumerates individual rights including access, rectification, erasure, restriction, portability, and objection as well as the right to lodge a complaint with a supervisory authority, and clarifies that where Bubble Lab acts as processor the Customer is the controller.

" Where the GDPR or UK GDPR applies and Bubble Lab acts as a controller, we rely on legal bases including performance of a contract, our legitimate interests (such as operating, securing, and improving the Services and our business), consent..."
📍 Privacy Policy › “EEA, UK & Switzerland”Jump to exact text →
plan language
Data retention

Sets out Bubble Lab's retention obligations: information is retained as long as needed for service provision, legal compliance, dispute resolution, and agreement enforcement; Customer data is retained per the customer agreement with a limited post-termination period for export before deletion, subject to legal, security, and backup requirements; and aggregated/de-identified information may be retained and used indefinitely.

" We retain information for as long as needed to provide the Services, operate our business, and comply with our legal obligations, resolve disputes, and enforce our agreements. We retain information we process on behalf of a Customer in acc..."
📍 Privacy Policy › “Data Retention”Jump to exact text →

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 2
Tier-specific - 0
Total citations - 20
Severity
Surface
Document
Tier
Privacy & data use
High
" Effective June 16, 2026 Bubble Lab, Inc. In short: We collect the information needed to run your community and our platform, we use it to operate and improve our Services and models, and we may share it with the providers and partners that make the Services work. We may also create aggregated and de-identified data that we can use, license, or sell for any purpose. This summary is for convenience only; the full Policy below governs."
Privacy Policy › “Privacy Policy”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Summary clause defining the document's overall scope: states information is collected to run the platform and improve services and models, may be shared with providers, and that aggregated/de-identified data may be used, licensed, or sold for any purpose; explicitly notes the full policy governs and this summary is for convenience, incorporating the remainder of the document by reference.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" California residents have rights to know, access, correct, and delete personal information, to opt out of the “sale” or “sharing” of personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. We may disclose certain categories of personal information to third parties and may engage in activity that is treated as a “sale” or “sharing” of personal information under California law. To opt out of the sale or sharing of your personal information, or to exercise any of your rights, email us at hello@bubblelab.ai with the subject line “Privacy Request,” or use any opt-out preference signal your browser supports. We do not knowingly sell or share the personal information of individuals we know to be under 16. Aggregated & De-Identified Information is not personal information and is not subject to these requests."
Privacy Policy › “California (CCPA/CPRA)”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-08-14- View source
Permalink to this finding →
Automated analysis

Defines rights available to residents of a specific jurisdiction — including rights to know, access, correct, delete personal information, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination — and discloses that Bubble Lab may engage in activity treated as 'sale' or 'sharing' under that jurisdiction's law, with an opt-out contact mechanism provided.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" The Services are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it."
Privacy Policy › “Children's Privacy”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-08-14- View source
Permalink to this finding →
Automated analysis

Restricts collection of personal information from individuals under 18, states the services are directed only to businesses and adults, and commits to deleting any inadvertently collected children's data upon notification — a protective restriction prohibiting knowing collection of minors' data.

AI-generated interpretation, not legal advice.

Commercial use
High
" We may aggregate, anonymize, or de-identify information so that it no longer reasonably identifies any individual or, where applicable, any single Customer (“Aggregated & De-Identified Information”). Aggregated & De-Identified Information is not personal information. We may use, retain, reproduce, modify, combine, commercialize, license, sell, transfer, and otherwise disclose Aggregated & De-Identified Information for any lawful purpose, in our sole discretion and without restriction or obligation to you. This includes, without limitation: developing, training, and improving our products, models, and analytics; creating and offering insights, benchmarks, trend reports, indices, and other data products and analytics — including to, or jointly with, third parties; and marketing, research, and other commercial purposes. As between you and Bubble Lab, we own all Aggregated & De-Identified Information and all derivative works, insights, and intellectual property created from it. Where required by law, we will maintain and use such information only in de-identified or aggregated form, will not attempt to re-identify it except as permitted by law, and will require recipients to comply with applicable de-identification obligations."
Privacy Policy › “Aggregated & De-Identified Information”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Grants Bubble Lab an unrestricted, perpetual permission to use, retain, reproduce, modify, combine, commercialize, license, sell, transfer, and disclose aggregated and de-identified information for any lawful purpose at its sole discretion, including for training and improving models and products, with no obligation to users or Customers.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" We use information for the following purposes: To provide, operate, maintain, secure, and support the Services and the Site. To power core features, including member onboarding, matchmaking and introductions, AI-powered search and chat, the member directory, analytics, reporting, and automations. To process transactions, manage accounts, and communicate with you about the Services. To personalize, analyze, measure, and improve the Services, and to develop new products, features, workflows, models, and offerings. To develop, train, fine-tune, evaluate, and improve our algorithms, models, machine-learning systems, matching logic, and analytics , including by using the information described above as training and reference data. To produce insights, benchmarks, and research, including across communities and Customers. For safety, fraud prevention, security, troubleshooting, and to enforce our agreements. For marketing and promotional communications (subject to your choices and applicable law), and to measure the effectiveness of our communications. To comply with legal obligations and to establish, exercise, or defend legal claims."
Privacy Policy › “How We Use Information”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Grants Bubble Lab broad permission to use collected information for providing, operating, securing, improving, and personalizing the Services, processing transactions, developing new products, and explicitly for developing, training, fine-tuning, evaluating, and improving algorithms, models, and machine-learning systems.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" We and our providers use cookies and similar technologies to keep you signed in, remember preferences, understand usage, and improve the Site and Services. You can control cookies through your browser settings; disabling some cookies may affect how the Site or Services function. We honor recognized opt-out preference signals where required by applicable law."
Privacy Policy › “Cookies & Tracking”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

States that Bubble Lab and its providers use cookies and similar technologies for sign-in, preferences, analytics, and service improvement; notes user ability to control cookies via browser settings and states Bubble Lab honors recognized opt-out preference signals where required by applicable law.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" This Privacy Policy explains how Bubble Lab, Inc. (“Bubble Lab,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the Bubble Lab Communities platform, dashboards, automations, AI features, and related services (collectively, the “Services”), and our websites, including communities.bubblelab.ai (the “Site”). Bubble Lab provides community-operations infrastructure to organizations that run private professional communities (each, a “Customer”). When we process information about a Customer's members, partners, sponsors, or contacts on the Customer's behalf, the Customer generally directs that processing and is responsible for its own privacy practices. In that role we act as a service provider or processor, and this Policy describes our own practices. If you are a member of a community that uses Bubble Lab, please also review that community's own privacy notice, and direct requests about your data to the community first (see Your Rights & Choices ). By using the Services or the Site, you acknowledge that you have read and understood this Policy. If you do not agree, do not use the Services. Your use of the Services is also governed by our Terms of Service ."
Privacy Policy › “Overview & Scope”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Defines the scope of the Privacy Policy, identifying the controller ('Bubble Lab, Inc.'), the services covered, and the dual role of Bubble Lab as both a controller and a processor when handling Customer members' data, establishing the foundational definitions for subsequent obligations.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Account & contact information — name, email, phone, company, role, password, and similar details when you create an account, request a demo, or contact us. Billing information — billing contact and transaction records. Payment card details are handled by our payment processors, not stored by us. Content you submit — community, member, partner, sponsor, vendor, and speaker records; profile fields; messages; files; survey responses; and other content you upload, import, or generate through the Services. Communications — messages, support requests, and feedback you send us."
Privacy Policy › “Information you provide”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Defines the categories of user-provided information collected (account/contact details, billing records, submitted content, communications), establishing the scope of personal data collection and noting payment card details are not stored by Bubble Lab.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" We may obtain and enrich information from third-party platforms and publicly available sources, including professional networks (such as LinkedIn and X), public web pages, data-enrichment providers, and integration partners, and combine it with other information we hold to build and improve profiles, matching, search, analytics, and the Services generally."
Privacy Policy › “Information from third-party sources”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Grants Bubble Lab permission to obtain, enrich, and combine information from third-party platforms and publicly available sources with existing data to build and improve profiles, matching, search, analytics, and the Services generally.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Usage & device data — IP address, device and browser type, pages and features used, referring URLs, timestamps, and diagnostic logs. Cookies & similar technologies — used for authentication, preferences, analytics, and to operate and improve the Site and Services (see Cookies & Tracking )."
Privacy Policy › “Information collected automatically”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Defines the categories of automatically collected technical data (usage/device data, cookies and similar technologies) and their purposes (authentication, preferences, analytics, service operation and improvement).

AI-generated interpretation, not legal advice.

Privacy & data use
High
" This Privacy Policy explains how Bubble Lab, Inc. (“Bubble Lab,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the Bubble Lab Communities platform, dashboards, automations, AI features, and related services (collectively, the “Services”), and our websites, including communities.bubblelab.ai (the “Site”). Bubble Lab provides community-operations infrastructure to organizations that run private, paid professional communities (each, a “Customer”). When we process information about a Customer's members, partners, sponsors, or contacts on the Customer's behalf, the Customer generally directs that processing and is responsible for its own privacy practices. In that role we act as a service provider or processor, and this Policy describes our own practices. If you are a member of a community that uses Bubble Lab, please also review that community's own privacy notice, and direct requests about your data to the community first (see Your Rights & Choices ). By using the Services or the Site, you acknowledge that you have read and understood this Policy. If you do not agree, do not use the Services. Your use of the Services is also governed by our Terms of Service ."
Privacy Policy › “Overview & Scope”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-08-14- View source
Permalink to this finding →
Automated analysis

Defines the scope of the policy by identifying the controller ('Bubble Lab, Inc.'), the covered services, the site, and the role of Customers as organizations whose members' data Bubble Lab processes — establishing the processing relationship and entities subject to the policy.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" To operate a Customer's community, we process member and partner data the Customer provides or authorizes us to access, which may include names, contact details, professional background, company and role, interests, asks, expertise, fundraising status, engagement history, and connected messaging content (for example, from Slack, Discord, or WhatsApp workspaces the Customer connects)."
Privacy Policy › “Information processed on behalf of Customers”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-08-14- View source
Permalink to this finding →
Automated analysis

Defines the categories of member and partner personal data processed on a Customer's behalf, including names, contact details, professional background, interests, engagement history, and connected messaging content from third-party platforms the Customer connects — establishing the scope of processor-role data handling.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, to object to certain processing, and to opt out of certain sharing. To exercise these rights, contact us at hello@bubblelab.ai . If you are a community member: the community you belong to (our Customer) generally controls the data we process about you. Please direct your requests to that community; we will assist them as a service provider and, where appropriate, forward your request."
Privacy Policy › “Your Rights & Choices”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-08-14- View source
Permalink to this finding →
Automated analysis

Grants users location-dependent rights to access, correct, delete, port, restrict processing, object to certain processing, and opt out of certain sharing; establishes the procedure for exercising these rights by contacting Bubble Lab; and clarifies that for community members the Customer controls the data and requests should be directed to that Customer, with Bubble Lab acting as service provider and forwarding requests where appropriate.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Where the GDPR or UK GDPR applies and Bubble Lab acts as a controller, we rely on legal bases including performance of a contract, our legitimate interests (such as operating, securing, and improving the Services and our business), consent where required, and compliance with legal obligations. You may have rights to access, rectify, erase, restrict, port, and object to processing, and to lodge a complaint with your supervisory authority. Where we process personal data on a Customer's behalf, that Customer is the controller and you should contact them."
Privacy Policy › “EEA, UK & Switzerland”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-08-14- View source
Permalink to this finding →
Automated analysis

Identifies the legal bases Bubble Lab relies on when acting as a controller under applicable data-protection frameworks (contract performance, legitimate interests, consent, legal obligation), enumerates individual rights including access, rectification, erasure, restriction, portability, and objection as well as the right to lodge a complaint with a supervisory authority, and clarifies that where Bubble Lab acts as processor the Customer is the controller.

AI-generated interpretation, not legal advice.

Data retention
High
" We retain information for as long as needed to provide the Services, operate our business, and comply with our legal obligations, resolve disputes, and enforce our agreements. We retain information we process on behalf of a Customer in accordance with our agreement with that Customer; following termination, we may retain such information for a limited period to allow export, after which we may delete it subject to legal, security, operational, and routine backup-retention requirements. Aggregated & De-Identified Information may be retained and used indefinitely."
Privacy Policy › “Data Retention”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-08-14- View source
Permalink to this finding →
Automated analysis

Sets out Bubble Lab's retention obligations: information is retained as long as needed for service provision, legal compliance, dispute resolution, and agreement enforcement; Customer data is retained per the customer agreement with a limited post-termination period for export before deletion, subject to legal, security, and backup requirements; and aggregated/de-identified information may be retained and used indefinitely.

AI-generated interpretation, not legal advice.

Indemnity & liability
High
" We use commercially reasonable technical and organizational measures designed to protect information from unauthorized access, disclosure, alteration, and loss. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential."
Privacy Policy › “Security”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-08-14- View source
Permalink to this finding →
Automated analysis

Disclaims absolute security by stating that commercially reasonable measures are used but no transmission or storage method is completely secure and no guarantee of absolute security is made; also assigns responsibility for account credential confidentiality to the user — limiting Bubble Lab's liability for security failures.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" To operate a Customer's community, we process member and partner data the Customer provides or authorizes us to access, which may include names, contact details, professional background, company and role, interests, asks, expertise, fundraising status, engagement history, and connected messaging content (for example, from Slack, Discord, or WhatsApp workspaces the Customer connects)."
Privacy Policy › “Information processed on behalf of Customers”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Defines the categories of member and partner data processed on behalf of Customers, including names, contact details, professional background, engagement history, and connected messaging content from third-party platforms, establishing the scope of Bubble Lab's processor-role data handling.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" We may obtain and enrich information from third-party platforms and publicly available sources, including professional networks (such as LinkedIn and X), public web pages, data-enrichment providers, and integration partners, and combine it with other information we hold to build and improve profiles, matching, search, analytics, and the Services generally."
Privacy Policy › “Information from third-party sources”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-08-14- View source
Permalink to this finding →
Automated analysis

Permits Bubble Lab to obtain, enrich, and combine data from third-party platforms, public web pages, data-enrichment providers, and integration partners with other held information to build and improve profiles, matching, search, analytics, and the services — disclosing external data sourcing and combination practices.

AI-generated interpretation, not legal advice.

Common questions about Bubble Lab's policies

Can you use Bubble Lab's output commercially?
Commercial use allowed — based on 1 verified finding from Bubble Lab's published policy. Informational only, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from Bubble Lab's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

0 verified clauses

Clauses in Bubble Lab's policies that work in your favour — commitments the platform made to you.

No protective clause has been verified in Bubble Lab's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.

📋 Rules you must follow

0 verified clauses

What Bubble Lab requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

No user-conduct rule has been verified in Bubble Lab's published policies yet.

What the policies actually cover

0 topics

None of Bubble Lab's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

28
clauses
10
patterns
10
stances
privacy sharing · 10
privacy sharingHIGHPrivacy Policy › “Aggregated & De-Identified Information”

The clause permits sale of personal data or information.

We may aggregate, anonymize, or de-identify information so that it no longer reasonably identifies any individual or, where applicable, any single Customer (“Aggregated & De-Identified Information”). Aggregated & De-Identified Information is not personal information. We may use, retain, reproduce, modify, combine, commercialize, license, sell, transfer, and otherwise disclose Aggregated & De-Identified Information...
Open source citation
privacy sharingHIGHPrivacy Policy › “How We Share Information”

The clause permits sale of personal data or information.

We share information in the following circumstances: Service providers & subprocessors — hosting, storage, database, analytics, communications, payment, security, and similar vendors that process information on our behalf. AI and model providers — we may send content to third-party AI model and infrastructure providers to deliver AI-powered features. We use commercially reasonable efforts to engage providers that ...
Open source citation
privacy sharingHIGHPrivacy Policy › “Aggregated & De-Identified Information”

The clause permits sale of personal data or information.

We may aggregate, anonymize, or de-identify information so that it no longer reasonably identifies any individual or, where applicable, any single Customer (“Aggregated & De-Identified Information”). Aggregated & De-Identified Information is not personal information. We may use, retain, reproduce, modify, combine, commercialize, license, sell, transfer, and otherwise disclose Aggregated & De-Identified Information...
Open source citation
privacy sharingHIGHPrivacy Policy › “How We Share Information”

The clause permits sale of personal data or information.

We share information in the following circumstances: Service providers & subprocessors — hosting, storage, database, analytics, communications, payment, security, and similar vendors that process information on our behalf. AI and model providers — we may send content to third-party AI model and infrastructure providers to deliver AI-powered features. We use commercially reasonable efforts to engage providers that ...
Open source citation
privacy sharingHIGHPrivacy Policy › “California (CCPA/CPRA)”

The clause permits sale of personal data or information.

California residents have rights to know, access, correct, and delete personal information, to opt out of the “sale” or “sharing” of personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. We may disclose certain categories of personal information to third parties and may engage in activity that is treated as a “sale” or “sharing” o...
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tierscommercial useworsensHIGH2
All applicable tiersprivacy data useworsensHIGH4
Team / Businesssubprocessors data sharingworsensHIGH4

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

worsenedhigh materialityJul 19Aug 14, 2026

data sharing worsened from medium/third party or vendor sharing to high/sale or sell.

Before · medium
Effective June 16, 2026 Bubble Lab, Inc. In short: We collect the information needed to run your community and our platform, we use it to operate and improve our Services and models, and we may share it with the providers and partners that make the Services work. We may also create aggregated and de-identified data that we can use, license, or sell for any purpose. This summary is for convenience only; the full Policy below governs.
Before citation
After · high
California residents have rights to know, access, correct, and delete personal information, to opt out of the “sale” or “sharing” of personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. We may disclose certain categories of personal information to third parties and may engage in activity that is treated as a “sale” or “sharing” of personal information under California law. To opt out of the sale or sharing of your personal information, or to exercise any of your rights, email us at hello@bubblelab.ai with the subject line “Privacy Request,” or use any opt-out preference signal your browser supports. We do not knowingly sell or share the personal information of individuals we know to be under 16. Aggregated & De-Identified Information is not personal information and is not subject to these requests.
After citation
Aug 14, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

Effective June 16, 2026 Bubble Lab, Inc. In short: We collect the information needed to run your community and our platform, we use it to operate and improve our Services and models, and we may share it with the providers and partners that make the Services work. We may also create aggregated and de-identified data that we can use, license, or sell for any purpose. This summary is for convenience only; the full Policy below governs.
Open timeline citation
Aug 14, 2026data sharingHIGH

Latest stance: sale or sell on commercial use

We may aggregate, anonymize, or de-identify information so that it no longer reasonably identifies any individual or, where applicable, any single Customer (“Aggregated & De-Identified Information”). Aggregated & De-Identified Information is not personal information. We may use, retain, reproduce, modify, combine, commercialize, license, sell, transfer, and otherwise disclose Aggregated & De-Identified Information for any lawful purpose, in our sole discretion and without restriction or obligation to you. This includes, without limitation: developing, training, and improving our products, models, and analytics; creating and offering insights, benchmarks, trend reports, indices, and other data products and analytics — including to, or jointly with, third parties; and marketing, research, and other commercial purposes. As between you and Bubble Lab, we own all Aggregated & De-Identified Information and all derivative works, insights, and intellectual property created from it. Where required by law, we will maintain and use such information only in de-identified or aggregated form, will not attempt to re-identify it except as permitted by law, and will require recipients to comply with applicable de-identification obligations.
Open timeline citation
Aug 14, 2026data sharingHIGH

Latest stance: sale or sell on subprocessors data sharing

We share information in the following circumstances: Service providers & subprocessors — hosting, storage, database, analytics, communications, payment, security, and similar vendors that process information on our behalf. AI and model providers — we may send content to third-party AI model and infrastructure providers to deliver AI-powered features. We use commercially reasonable efforts to engage providers that support the operation and security of the Services. Within the community — information is shared inside a Customer's community as the Customer configures it (for example, surfacing a member profile or an introduction to other members or admins). Integration partners — third-party platforms you or a Customer connect (such as Slack, Google Workspace, Discord, WhatsApp, Luma, Stripe, and enrichment tools), subject to their own terms and policies. Affiliates & advisors — our corporate affiliates and professional advisors, under appropriate confidentiality obligations. Business transfers — in connection with a merger, acquisition, financing, corporate reorganization, or sale or transfer of all or part of our business or assets, information may be disclosed or transferred as part of that transaction or due diligence. Legal & safety — to comply with law, legal process, or government requests, and to protect the rights, property, safety, and security of Bubble Lab, our users, and others. With your direction or consent — when you or a Customer asks us to share information, or otherwise with consent. Aggregated & De-Identified Information — which we may share, license, or sell as described in Aggregated & De-Identified Information .
Open timeline citation
Aug 14, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

We share information in the following circumstances: Service providers & subprocessors — hosting, storage, database, analytics, communications, payment, security, and similar vendors that process information on our behalf. AI and model providers — we may send content to third-party AI model and infrastructure providers to deliver AI-powered features. We use commercially reasonable efforts to engage providers that support the operation and security of the Services. Within the community — information is shared inside a Customer's community as the Customer configures it (for example, surfacing a member profile or an introduction to other members or admins). Integration partners — third-party platforms you or a Customer connect (such as Slack, Google Workspace, Discord, WhatsApp, Luma, Stripe, and enrichment tools), subject to their own terms and policies. Affiliates & advisors — our corporate affiliates and professional advisors, under appropriate confidentiality obligations. Business transfers — in connection with a merger, acquisition, financing, corporate reorganization, or sale or transfer of all or part of our business or assets, information may be disclosed or transferred as part of that transaction or due diligence. Legal & safety — to comply with law, legal process, or government requests, and to protect the rights, property, safety, and security of Bubble Lab, our users, and others. With your direction or consent — when you or a Customer asks us to share information, or otherwise with consent. Aggregated & De-Identified Information — which we may share, license, or sell as described in Aggregated & De-Identified Information .
Open timeline citation

Capture recency

  • Privacy Policy:Last captured 2026-08-14· verified 2026-08-14

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

28 findings first captured First scan: July 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Bubble Lab's policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Know where the missing document lives?

We haven't yet verified Bubble Lab's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.

Every finding above is a verbatim quote from Bubble Lab's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.