Skip to main content
Platform Review
PricingSign in
← All platforms
Workflow & Automation · cignara.com

Cignara

Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskLOWReviewed 2026-07-20
Creator: low · GRC: low · Counsel: low
Benchmark

No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.

Exhibit A · Privacy Policy · verbatim

• We collect information you give us, information about how you use the Service, and information from a small number of vendors that help us run our business. • We use information to operate, secure, and improve the Service, to communicate with you, and to meet legal obligations. • We do NOT sell your personal information, and we do NOT use customer

highest-risk verified finding on training use — tap for the citation
27 verified findings6 policy surfaces1/1 core docs verified

Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.

Risk triage

Watch: subprocessors data sharing

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
1
medium
5
low
1/1
docs
Trains on your data?
No training on your content by default
from 3 cited findings
Who owns outputs?
Not yet assessed
no verified finding covers this surface yet
Commercial use?
Not yet assessed
no verified finding covers this surface yet
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →

How to read this page: Overall risk rates what Cignara's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Partially verifiedWorkflow & Automation

Partially verified — Privacy Policy — Verified (read in full, 27 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.

Why partial?

Terms not yet captured

AIRIN has not yet captured a gate-verified Terms of Service document for this platform.

Document status
  • Privacy Policy
    Verified - read in full - 27 citationsstaticLast captured 2026-07-20
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Training on your content

Summary bullet expressly states that the company does NOT sell personal information and does NOT use customer conversation data to train foundation or third-party large language models — a protective restriction prohibiting both sale of data and training use of customer conversation data.

" • We collect information you give us, information about how you use the Service, and information from a small number of vendors that help us run our business. • We use information to operate, secure, and improve the Service, to communicate..."
📍 Privacy Policy › “SUMMARY”Jump to exact text →
plan language
Training on your content

States that customer conversation data is processed only under the customer's instructions and solely to provide the Service, maintain security, and comply with law; expressly prohibits use of that data to train foundation or third-party large language models and states vendors are contractually prohibited from doing the same — protective restriction against training use, user-favorable.

" 2.4 Customer conversation data. Where Cignara processes voice, chat, transcript, or related conversation data on behalf of a customer, we do so as a data processor under that customer's instructions and the written contract between us. We ..."
plan language
Privacy & data use

Defines the scope and parties of the Policy — identifying the controller entity, the services covered, and the categories of persons to whom the Policy applies — establishing the foundational definitions for all downstream obligations and rights.

" This Privacy Policy ("Policy") describes how ShopAdvisor Inc., a Delaware corporation doing business as "Cignara" ("Cignara," "we," "us," or "our"), collects, uses, shares, and protects personal information in connection with cignara.com a..."
📍 Privacy Policy › “Last updated: June 2026”Jump to exact text →
plan language
Privacy & data use

Enumerates the specific categories of personal information collected directly from users — identifiers, communications, account credentials, and recruiting information — defining the scope of personal data subject to the Policy's obligations.

" • Identifiers — name, business email, phone number, job title, company name, country. • Communications — the content of messages you send us, including via forms, email, chat, voicemail, or calendar invites. • Account credentials — sign-in..."
plan language
Privacy & data use

Restricts the Service to business users and prohibits knowing collection of personal information from children under 16, while establishing a procedure for reporting and deleting any such data if inadvertently collected.

" The Service is intended for business users and is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact ..."
📍 § 12 (CHILDREN'S PRIVACY)Jump to exact text →
plan language
Subprocessors & data sharing

Enumerates the specific third-party source categories — service vendors, public sources, and referring customers or partners — defining where indirectly received personal information originates.

" • Service vendors who help us deliver the Service (for example, cloud-infrastructure providers, communications vendors, and analytics or marketing partners). • Publicly available sources, including business directories and social-media pro..."
plan language
Subprocessors & data sharing

Enumerates the circumstances under which personal information may be shared with third parties without consent — legal compliance, enforcement of agreements, fraud and security response, and protection of rights and safety — defining the permissible scope of compelled or protective disclosures.

" (a) to comply with applicable law, legal process, or lawful government requests; (b) to enforce our Terms of Use and other agreements; (c) to detect, prevent, or address fraud, security, compliance, or technical issues; or (d) to protect t..."
plan language
Subprocessors & data sharing

States that in a business transfer personal information may be transferred and requires the receiving entity to honor the Policy; also states the company does not sell or share personal information for cross-context behavioral advertising — combining a protective restriction on behavioral advertising with a binding obligation on successor entities.

" 6.3 Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will require the receiving entity to hon..."
Conflicting provisions (1)
  • Clause B states personal information is shared 'only as described below' (listing service vendors), while Clause A describes additional, distinct scenarios for sharing personal information (business transfers, with consent) that are not included in Clause B's description.

    " 6.3 Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will require the receiving entity to honor this Policy with respect to information transferred to it. 6.4 With your consent. We may share personal information for any other purpose disclosed to you at the time of collection or with your consent. We do not sell or "share" personal information for cross-context behavioral advertising as defined under California law."
    " We share personal information only as described below. 6.1 Service vendors and sub-processors. We rely on a limited number of trusted vendors who help us operate the Service, including cloud-infrastructure providers, communications vendors, model and speech vendors, analytics and customer-support tools, billing vendors, and security and compliance vendors. These vendors are contractually bound to use personal information only to perform services for us and to maintain appropriate security and confidentiality. A current list of material sub-processors used for the production Service can be made available to customers on request to compliance@cignara.com . We provide customers with notice of changes to our sub-processor list as required under the relevant data processing agreement. 6.2 Legal compliance and protection. We may disclose personal information when we believe in good faith that disclosure is required:"
    Within one document

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 1
Tier-specific - 0
Total citations - 27
Severity
Surface
Document
Tier
Subprocessors & data sharing
High
" We share personal information only as described below. 6.1 Service vendors and sub-processors. We rely on a limited number of trusted vendors who help us operate the Service, including cloud-infrastructure providers, communications vendors, model and speech vendors, analytics and customer-support tools, billing vendors, and security and compliance vendors. These vendors are contractually bound to use personal information only to perform services for us and to maintain appropriate security and confidentiality. A current list of material sub-processors used for the production Service can be made available to customers on request to compliance@cignara.com . We provide customers with notice of changes to our sub-processor list as required under the relevant data processing agreement. 6.2 Legal compliance and protection. We may disclose personal information when we believe in good faith that disclosure is required:"
§ 6 (SHARING OF INFORMATION)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Limits sharing of personal information to described circumstances; identifies categories of service vendors and sub-processors relied upon; states these vendors are contractually bound to use personal information only to perform services and to maintain appropriate security and confidentiality; and indicates a list of material sub-processors can be made available — establishing obligations on sub-processors and a disclosure mechanism.

AI-generated interpretation, not legal advice.

Training on your content
High
" • We collect information you give us, information about how you use the Service, and information from a small number of vendors that help us run our business. • We use information to operate, secure, and improve the Service, to communicate with you, and to meet legal obligations. • We do NOT sell your personal information, and we do NOT use customer conversation data to train foundation or third-party large language models. • We retain personal information only as long as needed for the purposes described in this Policy, subject to legal-hold obligations. • You have rights over your personal information, including access, correction, deletion, portability, and objection, described in Section 9. • Questions? Email compliance@cignara.com ."
Privacy Policy › “SUMMARY”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Summary bullet expressly states that the company does NOT sell personal information and does NOT use customer conversation data to train foundation or third-party large language models — a protective restriction prohibiting both sale of data and training use of customer conversation data.

AI-generated interpretation, not legal advice.

Training on your content
High
" 2.4 Customer conversation data. Where Cignara processes voice, chat, transcript, or related conversation data on behalf of a customer, we do so as a data processor under that customer's instructions and the written contract between us. We handle that data only to provide the Service, to maintain security, and to comply with law. We do not use that data to train foundation or third-party large language models, and our vendors are contractually prohibited from doing the same. 2.5 Sensitive information. We do not seek to collect sensitive categories of personal information (such as health, biometric, financial-account, or government-ID data) about visitors to our website. Where customers deploy the Service to handle conversations that may include sensitive information, our processing of that information is governed by the contract with the customer and any applicable data-processing addendum."
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

States that customer conversation data is processed only under the customer's instructions and solely to provide the Service, maintain security, and comply with law; expressly prohibits use of that data to train foundation or third-party large language models and states vendors are contractually prohibited from doing the same — protective restriction against training use, user-favorable.

AI-generated interpretation, not legal advice.

Training on your content
High
" We design our Service to keep customer data within the customer's own logical environment. Specifically:"
§ 5 (AI TRAINING AND CUSTOMER DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Introduces the AI training section by stating the company designs the Service to keep customer data within the customer's own logical environment, establishing a protective architectural restriction — user-favorable.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" 9.1 California residents. If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), including the right to know, the right to delete, the right to correct, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising your rights. As noted above, we do not sell or share personal information for cross-context behavioral advertising. 9.2 EU, UK, and Swiss residents. You have rights under the EU/UK GDPR and the Swiss FADP, as described in this section. You may also lodge a complaint with your local supervisory authority. 9.3 How to exercise your rights. To exercise any of these rights, contact us at compliance@cignara.com . We may need to verify your identity before responding. We will respond within the time period required by applicable law. If you are an end user whose data is processed by Cignara on behalf of a customer, please direct your request to that customer, who is the controller of your data; we will support the customer in responding."
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Specifies additional rights for identified resident categories — including the right to know, delete, correct, limit use of sensitive personal information, and freedom from discrimination for exercising rights; reaffirms no sale or sharing for cross-context behavioral advertising; and incorporates rights under multiple named legal frameworks for other resident groups — extending and specifying rights by jurisdiction.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" The Service is intended for business users and is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact compliance@cignara.com so we can delete it."
§ 12 (CHILDREN'S PRIVACY)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Restricts the Service to business users and prohibits knowing collection of personal information from children under 16, while establishing a procedure for reporting and deleting any such data if inadvertently collected.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" 6.3 Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will require the receiving entity to honor this Policy with respect to information transferred to it. 6.4 With your consent. We may share personal information for any other purpose disclosed to you at the time of collection or with your consent. We do not sell or "share" personal information for cross-context behavioral advertising as defined under California law."
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

States that in a business transfer personal information may be transferred and requires the receiving entity to honor the Policy; also states the company does not sell or share personal information for cross-context behavioral advertising — combining a protective restriction on behavioral advertising with a binding obligation on successor entities.

AI-generated interpretation, not legal advice.

Audit rights / DPA / residency
High
" Cignara is headquartered in the United States, and the Service may be operated from data-center regions in the United States and other jurisdictions. When we transfer personal information across borders, we rely on appropriate safeguards as required by applicable law, including European Commission Standard Contractual Clauses, the UK International Data Transfer Addendum, and equivalent mechanisms. Where customers select a specific region for their deployment under a separate written agreement, we process customer conversation data within that region as agreed."
§ 10 (INTERNATIONAL DATA TRANSFERS)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

States the company relies on appropriate safeguards for cross-border transfers of personal information, incorporating Standard Contractual Clauses, the UK International Data Transfer Addendum, and equivalent mechanisms; also commits to processing customer conversation data within a customer-selected region where agreed under a separate written agreement — establishing transfer mechanism obligations and regional data-residency commitments.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" This Privacy Policy ("Policy") describes how ShopAdvisor Inc., a Delaware corporation doing business as "Cignara" ("Cignara," "we," "us," or "our"), collects, uses, shares, and protects personal information in connection with cignara.com and the products, features, content, dashboards, and APIs we make available through it (collectively, the "Service"). This Policy applies to visitors to our website and to people who use the Service in a personal capacity, including prospective and existing customers, partners, applicants, and event attendees. When our customers deploy the Service to handle conversations with their own end users, those customers act as the data controller (or "business" under California law) for that end-user data, and Cignara processes that data on their behalf under a separate written agreement. Please contact the relevant customer for their own privacy practices."
Privacy Policy › “Last updated: June 2026”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Defines the scope and parties of the Policy — identifying the controller entity, the services covered, and the categories of persons to whom the Policy applies — establishing the foundational definitions for all downstream obligations and rights.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" 2.1 Information you give us. When you contact us, request a demo, sign up for an account, subscribe to a newsletter, attend an event, apply for a job, or otherwise interact with us, you may provide:"
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Defines the circumstances under which the company collects personal information directly from users and enumerates the interaction contexts triggering collection, establishing the definitional scope of voluntary data submission.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" • Identifiers — name, business email, phone number, job title, company name, country. • Communications — the content of messages you send us, including via forms, email, chat, voicemail, or calendar invites. • Account credentials — sign-in identifiers and authentication data for any account we provision for you. • Recruiting information — resume, work history, references, and other information you submit when applying for a role. "
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Enumerates the specific categories of personal information collected directly from users — identifiers, communications, account credentials, and recruiting information — defining the scope of personal data subject to the Policy's obligations.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" 2.2 Information collected automatically. When you visit cignara.com or interact with the Service, we automatically collect:"
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Defines the circumstances and means by which personal information is collected automatically when users visit the website or interact with the Service.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" (a) provide, operate, maintain, and support the Service; (b) authenticate users and prevent fraudulent, unauthorized, or illegal activity; (c) measure, monitor, and improve the Service, including performance, quality, and security; (d) respond to inquiries, requests for information, demos, sales conversations, and customer-support tickets; (e) send service-related communications, including security notices, billing notices, and policy updates; (f) with your consent or as otherwise permitted by law, send marketing communications about our products and events, from which you can unsubscribe at any time; (g) administer recruiting and consider applicants for employment; (h) comply with applicable laws, respond to lawful requests from authorities, and enforce our Terms of Use; and (i) protect the rights, property, and safety of Cignara, our customers, and the public. "
§ 3 (HOW WE USE INFORMATION)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Enumerates the specific purposes for which personal information may be used — including operating and improving the Service, authentication, fraud prevention, responding to inquiries, service communications, and, with consent, marketing — defining the scope of lawful processing activities.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" We maintain a written information-security program designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. Our controls include administrative, technical, and physical safeguards, including:"
§ 8 (DATA SECURITY)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

States the company maintains a written information-security program designed to protect personal information against unauthorized access, disclosure, alteration, or destruction using administrative, technical, and physical safeguards — establishing a security obligation.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" • encryption of data in transit using industry-standard protocols, and encryption of data at rest using industry-standard algorithms; • role-based access control with least-privilege defaults and mandatory multi-factor authentication for production systems; • continuous monitoring, logging, and alerting on production infrastructure; • secure software-development practices, code review, and vulnerability management; • vendor risk-management and contractual security requirements for sub-processors; and • incident-response procedures, including documented breach notification commitments. "
§ 8 (DATA SECURITY)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Enumerates specific security controls required under the information-security program — encryption in transit and at rest, role-based access control, multi-factor authentication, continuous monitoring, secure development practices, vendor risk management, and incident-response procedures — defining the operative security obligations.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Subject to applicable law, you have rights with respect to your personal information, which may include the right to:"
§ 9 (YOUR RIGHTS)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

States that subject to applicable law, users have enumerated rights with respect to their personal information, framing the conditional grant of individual rights.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" • access the personal information we hold about you; • correct inaccurate or incomplete personal information; • request deletion of personal information; • restrict or object to certain processing; • port personal information to another provider in a structured, commonly used, machine-readable format; • withdraw consent at any time where processing is based on consent (without affecting the lawfulness of prior processing); and • lodge a complaint with a supervisory authority. "
§ 9 (YOUR RIGHTS)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Enumerates specific individual rights — access, correction, deletion, restriction or objection to processing, portability in a structured machine-readable format, withdrawal of consent, and lodging complaints with a supervisory authority — defining the full set of rights granted to users under the Policy.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" • keep the website functioning (strictly necessary cookies); • remember preferences such as language and consent choices (preference cookies); • measure how visitors interact with the website so we can improve it (analytics cookies); and • where you have consented, support limited marketing activities (marketing cookies). "
§ 11 (COOKIES AND SIMILAR TECHNOLOGIES)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Defines the purposes for which cookies and similar technologies are used — site functionality, preference storage, analytics, and consented marketing — establishing the permissible use categories for data collected through these mechanisms.

AI-generated interpretation, not legal advice.

Common questions about Cignara's policies

Does Cignara train its AI models on your data?
No training on your content by default — based on 3 verified findings from Cignara's published policy. Informational only, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from Cignara's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

0 verified clauses

Clauses in Cignara's policies that work in your favour — commitments the platform made to you.

No protective clause has been verified in Cignara's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.

📋 Rules you must follow

0 verified clauses

What Cignara requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

No user-conduct rule has been verified in Cignara's published policies yet.

What the policies actually cover

0 topics

None of Cignara's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.

Cross-clause notes

Cross-reference

Two verified clauses intersect on the same subject matter: the Privacy Policy, § 7 (DATA RETENTION) addresses how long content is retained, and the Privacy Policy, § 5 (AI TRAINING AND CUSTOMER DATA) addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.

Automated cross-reference against the published rubric — not legal advice.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

30
clauses
8
patterns
8
stances
privacy sharing · 5training use · 3
privacy sharingHIGHPrivacy Policy › “SUMMARY”

The clause permits sale of personal data or information.

• We collect information you give us, information about how you use the Service, and information from a small number of vendors that help us run our business. • We use information to operate, secure, and improve the Service, to communicate with you, and to meet legal obligations. • We do NOT sell your personal information, and we do NOT use customer conversation data to train foundation or third-party large langua...
Open source citation
privacy sharingHIGH§ 6.3

The clause permits sale of personal data or information.

6.3 Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will require the receiving entity to honor this Policy with respect to information transferred to it. 6.4 With your consent. We may share personal information for any other purpose disclosed to you at the time of colle...
Open source citation
privacy sharingHIGH§ 9.1

The clause permits sale of personal data or information.

9.1 California residents. If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), including the right to know, the right to delete, the right to correct, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising your rights. As noted above, we do not s...
Open source citation
privacy sharingMEDIUM§ 5 (AI TRAINING AND CUSTOMER DATA)

The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.

• We do not use customer conversation data, customer-provided knowledge bases, or any other customer content to train, fine-tune, or improve foundation or third-party large language models. • Our vendors that provide model inference, speech-to-text, text-to-speech, or telephony are contractually required to process customer data only on our instructions and not to use it for their own training or other purposes. •...
Open source citation
privacy sharingMEDIUM§ 6 (SHARING OF INFORMATION)

The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.

We share personal information only as described below. 6.1 Service vendors and sub-processors. We rely on a limited number of trusted vendors who help us operate the Service, including cloud-infrastructure providers, communications vendors, model and speech vendors, analytics and customer-support tools, billing vendors, and security and compliance vendors. These vendors are contractually bound to use personal info...
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tiersprivacy data useworsensHIGH1
All applicable tierssubprocessors data sharingconditionalMEDIUM1
All applicable tierstraining useconditionalMEDIUM2
Governmenttraining useimprovesLOW1
Team / Businesssubprocessors data sharingworsensHIGH1
Team / Businesstraining useworsensHIGH2

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

Jul 20, 2026data sharingHIGH

Latest stance: sale or sell on privacy data use

9.1 California residents. If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), including the right to know, the right to delete, the right to correct, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising your rights. As noted above, we do not sell or share personal information for cross-context behavioral advertising. 9.2 EU, UK, and Swiss residents. You have rights under the EU/UK GDPR and the Swiss FADP, as described in this section. You may also lodge a complaint with your local supervisory authority. 9.3 How to exercise your rights. To exercise any of these rights, contact us at compliance@cignara.com . We may need to verify your identity before responding. We will respond within the time period required by applicable law. If you are an end user whose data is processed by Cignara on behalf of a customer, please direct your request to that customer, who is the controller of your data; we will support the customer in responding.
Open timeline citation
Jul 20, 2026data sharingHIGH

Latest stance: sale or sell on training use

• We collect information you give us, information about how you use the Service, and information from a small number of vendors that help us run our business. • We use information to operate, secure, and improve the Service, to communicate with you, and to meet legal obligations. • We do NOT sell your personal information, and we do NOT use customer conversation data to train foundation or third-party large language models. • We retain personal information only as long as needed for the purposes described in this Policy, subject to legal-hold obligations. • You have rights over your personal information, including access, correction, deletion, portability, and objection, described in Section 9. • Questions? Email compliance@cignara.com .
Open timeline citation
Jul 20, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on training use

• We do not use customer conversation data, customer-provided knowledge bases, or any other customer content to train, fine-tune, or improve foundation or third-party large language models. • Our vendors that provide model inference, speech-to-text, text-to-speech, or telephony are contractually required to process customer data only on our instructions and not to use it for their own training or other purposes. • Where we operate Cignara-managed model infrastructure, we may use de-identified, aggregated operational telemetry (for example, latency, error rates, throughput) to monitor and improve the Service, but not to train language models on customer content. • Where a customer separately opts in to a feature that uses their data to improve their own configuration of the Service (for example, an internal evaluation or fine-tune), we do so only for that customer's benefit, in accordance with the contract between us.
Open timeline citation
Jul 20, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

We share personal information only as described below. 6.1 Service vendors and sub-processors. We rely on a limited number of trusted vendors who help us operate the Service, including cloud-infrastructure providers, communications vendors, model and speech vendors, analytics and customer-support tools, billing vendors, and security and compliance vendors. These vendors are contractually bound to use personal information only to perform services for us and to maintain appropriate security and confidentiality. A current list of material sub-processors used for the production Service can be made available to customers on request to compliance@cignara.com . We provide customers with notice of changes to our sub-processor list as required under the relevant data processing agreement. 6.2 Legal compliance and protection. We may disclose personal information when we believe in good faith that disclosure is required:
Open timeline citation
Jul 20, 2026data sharingHIGH

Latest stance: sale or sell on subprocessors data sharing

6.3 Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will require the receiving entity to honor this Policy with respect to information transferred to it. 6.4 With your consent. We may share personal information for any other purpose disclosed to you at the time of collection or with your consent. We do not sell or "share" personal information for cross-context behavioral advertising as defined under California law.
Open timeline citation
Jul 20, 2026model trainingLOW

Latest stance: no training claim on training use

• We collect information you give us, information about how you use the Service, and information from a small number of vendors that help us run our business. • We use information to operate, secure, and improve the Service, to communicate with you, and to meet legal obligations. • We do NOT sell your personal information, and we do NOT use customer conversation data to train foundation or third-party large language models. • We retain personal information only as long as needed for the purposes described in this Policy, subject to legal-hold obligations. • You have rights over your personal information, including access, correction, deletion, portability, and objection, described in Section 9. • Questions? Email compliance@cignara.com .
Open timeline citation
Jul 20, 2026model trainingLOW

Latest stance: no training claim on training use

2.4 Customer conversation data. Where Cignara processes voice, chat, transcript, or related conversation data on behalf of a customer, we do so as a data processor under that customer's instructions and the written contract between us. We handle that data only to provide the Service, to maintain security, and to comply with law. We do not use that data to train foundation or third-party large language models, and our vendors are contractually prohibited from doing the same. 2.5 Sensitive information. We do not seek to collect sensitive categories of personal information (such as health, biometric, financial-account, or government-ID data) about visitors to our website. Where customers deploy the Service to handle conversations that may include sensitive information, our processing of that information is governed by the contract with the customer and any applicable data-processing addendum.
Open timeline citation
Jul 20, 2026model trainingHIGH

Latest stance: training permitted on training use

• We do not use customer conversation data, customer-provided knowledge bases, or any other customer content to train, fine-tune, or improve foundation or third-party large language models. • Our vendors that provide model inference, speech-to-text, text-to-speech, or telephony are contractually required to process customer data only on our instructions and not to use it for their own training or other purposes. • Where we operate Cignara-managed model infrastructure, we may use de-identified, aggregated operational telemetry (for example, latency, error rates, throughput) to monitor and improve the Service, but not to train language models on customer content. • Where a customer separately opts in to a feature that uses their data to improve their own configuration of the Service (for example, an internal evaluation or fine-tune), we do so only for that customer's benefit, in accordance with the contract between us.
Open timeline citation

Capture recency

  • Privacy Policy:Last captured 2026-07-20· verified 2026-07-20verified once — not yet re-verified

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

30 findings first captured First scan: July 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Cignara's policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Know where the missing document lives?

We haven't yet verified Cignara's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.

Every finding above is a verbatim quote from Cignara's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.