CambioML
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Establishes an obligation to retain personal information only as long as necessary for service provision, legal obligations, or rights protection, and to promptly process or delete information when it is no longer needed or upon user request, with retention periods determined by specified factors.
Grants users the right to access a copy of their personal information, understand its use and disclosure history, and request transfer of specific data in a standardized machine-readable format to themselves or a designated third party.
Introduces the categories of third parties with whom the company may share necessary information in order to provide the Services, framing the subsequent enumerated sharing scenarios.
How to read this page: Overall risk rates what CambioML's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 46 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 46 citationsstaticLast captured 2026-08-12
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Establishes an obligation to retain personal information only as long as necessary for service provision, legal obligations, or rights protection, and to promptly process or delete information when it is no longer needed or upon user request, with retention periods determined by specified factors.
" We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal r..."
Introduces the category of legal compliance scenarios under which information may be shared with advisors, regulatory bodies, or government agencies, serving as a header for the enumerated legal sharing triggers that follow.
" Legal Compliance Scenarios : Sharing information with advisors, regulatory bodies, or government agencies in the following situations:"
Grants permission to share information in response to legal and regulatory requirements, court orders, or government requests.
" Responding to legal and regulatory requirements, court orders, or government requests"
Imposes an obligation to adhere to lawful data transfer mechanisms, including named standard contractual clauses and relevant local addenda, when transferring personal data internationally, ensuring appropriate protection during cross-border processing by the company and its partners.
" To support global business operations, we and our partners may transfer, store, and process your personal information worldwide (including in the European Union, United Kingdom, and United States). For residents of the European Union, Swit..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Right to Access Information and Data Portability : You have the right to obtain a copy of your personal information that we hold, understand how we use and disclose your information, and how we have processed your data in the past. You can also request that we provide specific information in a standardized, commonly used machine-readable format and transfer it to you or a third party you designate."
Grants users the right to access a copy of their personal information, understand its use and disclosure history, and request transfer of specific data in a standardized machine-readable format to themselves or a designated third party.
AI-generated interpretation, not legal advice.
" We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal requirements, and security factors to determine retention periods. When information is no longer needed or you request deletion, we will promptly process it. We are committed to respecting your control over your personal data while meeting our business needs."
Establishes an obligation to retain personal information only as long as necessary for service provision, legal obligations, or rights protection, and to promptly process or delete information when it is no longer needed or upon user request, with retention periods determined by specified factors.
AI-generated interpretation, not legal advice.
" To provide the Services, we may need to share necessary information with the following categories of third parties:"
Introduces the categories of third parties with whom the company may share necessary information in order to provide the Services, framing the subsequent enumerated sharing scenarios.
AI-generated interpretation, not legal advice.
" Service Supporters : Disclosure of necessary personal information to third-party service providers who assist in providing the Services."
Grants permission to disclose necessary personal information to third-party service providers who assist in delivering the Services, establishing a subprocessor sharing basis.
AI-generated interpretation, not legal advice.
" When necessary, we will share your information with trusted third parties and service providers to provide services, meet legal requirements, and achieve other purposes detailed later in this policy."
Grants the company permission to share user information with trusted third parties and service providers when necessary to provide services, meet legal requirements, and other purposes described later in the policy.
AI-generated interpretation, not legal advice.
" We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes."
Prohibits selling or sharing personal information with third parties for targeted advertising purposes, and states this prohibition has also applied historically to information of individuals under 16 — user-favorable restriction on commercial data sharing.
AI-generated interpretation, not legal advice.
" To optimize your user experience, we need to process your personal information. If you do not wish to have your personal information processed as described in this policy, or if you are under 18 years of age, please stop using our Services."
Restricts access to users who consent to personal information processing as described, and expressly excludes users under 18 years of age from using the Services, conditioning continued use on acceptance of processing terms.
AI-generated interpretation, not legal advice.
" Our Services are designed for adults and not intended for children. We do not knowingly solicit or collect personal information from children. According to our Terms of Service, all users must be at least 18 years old to use our Services. If you discover that we have collected personal information from minors without guardian consent, please contact us immediately, and we will promptly delete the relevant data."
Restricts the service to adults aged 18 and over, prohibits knowingly collecting personal information from children, and imposes an obligation to promptly delete any such data collected without guardian consent upon notification — protective of minors' data.
AI-generated interpretation, not legal advice.
" Please note that the above rights are not absolute and may only apply in specific situations or may be reasonably refused."
Limits the scope of the rights described in preceding segments by clarifying they are not absolute and may only apply in specific situations or be reasonably refused.
AI-generated interpretation, not legal advice.
" Disclosure at Your Request : When you explicitly instruct or contractually stipulate disclosure."
Defines an exception permitting disclosure of personal information when the user explicitly instructs or contractually stipulates such disclosure, carving out user-directed sharing from general disclosure restrictions.
AI-generated interpretation, not legal advice.
" To support global business operations, we and our partners may transfer, store, and process your personal information worldwide (including in the European Union, United Kingdom, and United States). For residents of the European Union, Switzerland, or the United Kingdom, we strictly adhere to lawful data transfer mechanisms, such as the European Commission's Standard Contractual Clauses and relevant local regulations (such as the UK's International Data Transfer Addendum), ensuring your personal data receives appropriate protection during cross-border transfers."
Imposes an obligation to adhere to lawful data transfer mechanisms, including named standard contractual clauses and relevant local addenda, when transferring personal data internationally, ensuring appropriate protection during cross-border processing by the company and its partners.
AI-generated interpretation, not legal advice.
" We use your basic information to create and maintain your account, which is necessary for fulfilling our contract with you."
Grants permission to use basic user information to create and maintain accounts, characterizing this processing as necessary for contractual performance.
AI-generated interpretation, not legal advice.
" To provide you with services, we use your basic information, communication content, application information, browser and device information, service usage data, and other information you submit to us, which is also necessary for fulfilling our contract with you."
Grants permission to use multiple data categories (basic information, communication content, device/browser data, usage data, and other submitted information) to provide services, characterizing this processing as necessary for contractual performance.
AI-generated interpretation, not legal advice.
" Right to Complain : You have the right to file a complaint with your local data protection authority."
Grants users the right to file a complaint with their local data protection authority, providing an external enforcement avenue independent of the company.
AI-generated interpretation, not legal advice.
" We primarily collect and use your information to:"
Introduces the primary stated purposes for which information is collected and used, serving as a forward-reference summary to enumerated purposes that follow.
AI-generated interpretation, not legal advice.
" Cambio Corp. (hereinafter referred to as "we," "us," "our") has established this Privacy Policy to explain how we collect, use, disclose, and protect your information when you use our software-as-a-service products provided through the Energent.ai . These services include related software, applications, and websites (collectively referred to as the "Services")."
Defines the identity of the data controller ('Cambio Corp.'), the scope of the policy (collection, use, disclosure, protection of information), and the covered services ('Energent.ai' platform, related software, applications, and websites), establishing foundational definitions for the remainder of the document.
AI-generated interpretation, not legal advice.
" By using our Services, you acknowledge that you have read and agree to all terms of this Privacy Policy. If you do not agree to these terms, please immediately cease using or accessing our applications. We strongly recommend that you read this policy in detail before taking any action."
Imposes a user obligation of acceptance: by using the Services the user is deemed to have read and agreed to the policy; instructs non-consenting users to cease use immediately, creating a binding consent mechanism as a condition of access.
AI-generated interpretation, not legal advice.
" We collect personal information that you provide to us (including basic information such as first name, last name, email address, password), user content (any personal information collected when you use our Services, including information provided in inputs, file uploads, feedback, or outputs), and communication content (any communications we exchange, including chatbot interface communications, survey responses, or feedback)."
Defines the categories of personal information actively collected from users: basic account information, user content (inputs, uploads, feedback, outputs), and communication content (chatbot communications, surveys, feedback), establishing the scope of data collection.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from CambioML's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in CambioML's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in CambioML's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat CambioML requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in CambioML's published policies yet.
What the policies actually cover
0 topicsNone of CambioML's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal requirements, and security factors to determine retention periods. When information is no longer needed or you request deletion, we will promptly process it. We are committed to r...”Open source citation
The clause provides a deletion or time-bounded retention path.
“We retain your personal information for 30 days. Once this retention period ends, we begin deleting the information from our systems. The deletion process may take up to an additional 30 days to complete. We may retain information for longer only when required by law or when necessary to establish, exercise, or defend legal claims.”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal requirements, and security factors to determine retention periods. When information is no longer needed or you request deletion, we will promptly process it. We are committed to r...”Open source citation
The clause permits sale of personal data or information.
“We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.”Open source citation
The clause permits sale of personal data or information.
“We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | improves | LOW | 1 |
| All applicable tiers | privacy data use | worsens | HIGH | 5 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 7 |
| Team / Business | data retention | conditional | MEDIUM | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“Right to Access Information and Data Portability : You have the right to obtain a copy of your personal information that we hold, understand how we use and disclose your information, and how we have processed your data in the past. You can also request that we provide specific information in a standardized, commonly used machine-readable format and transfer it to you or a third party you designate.”Before citation
“We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.”Before citation
“To provide the Services, we may need to share necessary information with the following categories of third parties:”After citation
retention improved from medium/indefinite or necessity based to low/deletion or time bound.
“We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal requirements, and security factors to determine retention periods. When information is no longer needed or you request deletion, we will promptly process it. We are committed to respecting your control over your personal data while meeting our business needs.”Before citation
“We retain your personal information for 30 days. Once this retention period ends, we begin deleting the information from our systems. The deletion process may take up to an additional 30 days to complete. We may retain information for longer only when required by law or when necessary to establish, exercise, or defend legal claims.”After citation
Latest stance: sale or sell on privacy data use
“We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“To provide the Services, we may need to share necessary information with the following categories of third parties:”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Service Supporters : Disclosure of necessary personal information to third-party service providers who assist in providing the Services.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-12· verified 2026-08-12
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
75 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of CambioML's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified CambioML's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from CambioML's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.