Workflow & Automation · coral.cohere.comCohere Coral
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“You agree that any suggestion or idea provided by you (such suggestions or ideas, “ Feedback ”) will not be treated as confidential, and nothing in these Terms of Use will restrict our right to use, profit from, disclose, publish or otherwise exploit any Feedback, without compensation to you. You grant to us a worldwide, royalty-free, fully paid, perpetual,…”
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Inputs and outputs retention is explicitly scoped to Enterprise Users at 30 days. Trial Users and Researchers receive no defined retention period for inputs/outputs and are told the platform is 'not intended' for personal data, with remediation only available via email request—creating compliance risk for those tiers.
GDPR and CCPA both require defined retention periods proportionate to purpose. Indefinite retention of opt-out records and open-ended log retention ('several months or years') may not satisfy data minimisation and storage limitation principles under GDPR Art. 5(1)(e). The policy is scoped to California residents but reflects general practice.
The absence of a defined retention schedule, combined with litigation-hold carve-outs and multi-purpose use of the same data category, gives Cohere broad discretion to retain data for extended and indeterminate periods.
How to read this page: Overall risk rates what Cohere Coral's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 339 verified, verbatim-cited findings below — read the citations.
Based on 373 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 174 citationsstatic-revalidatedLast captured 2026-08-07
- Terms of ServiceVerified - read in full - 133 citationsLast captured 2026-08-07
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Establishes the California consumer right to receive detailed disclosures about categories of personal information collected, sources, business purposes, third-party disclosures, and categories of information sold or shared, as required by the CCPA.
" Inform you about the categories of personal information we have collected about you in the preceding 12 months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal infor..."
Under GDPR Art. 14, individuals must be informed when personal data is collected from third parties. Processing data acquired from external sources for marketing under legitimate interests (rather than consent) is permissible but requires a careful balancing test and transparency obligations. Users have a right to object under Art. 21.
"Section 2.4 (Marketing): Sending communications to existing customers or prospects; book demos; using non-essential cookies/tracking technologies (as detailed in Section 9); identifying and communicating with new prospects. Business co..."
This segment obligates Cohere to collect and use business contact information and passwords for account creation and administration, and payment information for billing, while restricting users to provide only corporate payment information.
" We collect and use business contact information (name, business email address) and a password you select to create and administer your account and facilitate access to the Platform. To move from a Trial User to an Enterprise User, you will..."
Imposes an obligation on the user to maintain current, complete, and accurate billing account information and to promptly notify Cohere of cancellations or security breaches, including unauthorized disclosure of credentials.
" You must provide current, complete and accurate information for your billing account. You must promptly update all information to keep your billing account current, complete and accurate (such as a change in billing address, credit card nu..."
Disclaims Cohere's guarantee that the Cohere Solution is free of viruses, malicious code, or other destructive properties, and places responsibility on the user for implementing security safeguards and bearing costs of any damage to their systems.
" The downloading and viewing of Content is done at your own risk. We do not guarantee or warrant that the Cohere Solution is compatible with your computer system or mobile device or that the Cohere Solution, or any links from the Cohere Sol..."
Restricts the user from using the Cohere Solution in violation of the Terms of Use, Subscription Agreement, Responsible Use Guidelines, applicable law, or third-party license agreements, and requires prior written permission for any use beyond accessing the software and services provided.
" You will not use the Cohere Solution in violation of these Terms of Use, any applicable Subscription Agreement, the Responsible Use Guidelines or any other responsible use guidelines we provide to you or are posted on the Cohere Website, o..."
Acknowledges that SDK updates may cause device-to-server communication and record usage metrics, imposing a disclosure obligation on Cohere and creating a data-collection implication relevant to privacy and data use.
" You acknowledge that we may from time to time issue updated or upgraded versions of the Cohere Software Development Kit (SDK). We will not automatically update or upgrade the version of the SDK that you are then currently using on your dev..."
Prohibits using the Cohere Solution to distribute or publish solicitations for funds, advertising for goods or services, or promoting websites, and restricts use of paid advertising platforms to promote links to Cohere's domain or trademarks.
" use the Cohere Solution or any part thereof to distribute, promote or otherwise publish any material containing any solicitation for funds, advertising or solicitation for goods or services, promoting any website, or use any paid advertisi..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"If you sign up through Cohere to receive special offers regarding products and services from our partners, you authorize us to share your email address and other Personal Information (as defined below) you authorize with the partner whose offer you wish to receive. If you request these special offers, you acknowledge the partner may also send you future offers that may interest you. You can opt out of future communications from Cohere by contacting us in the manner described below; you can unsubscribe from future partner communications by following their unsubscribe and opt out instructions. You do not have to agree to participate in these offers in order to use the Cohere Solution. You understand that Cohere may receive financial remuneration in exchange for sharing your email address and other Personal Information you authorize with partners if you choose to sign up for an offer."
This clause reveals that Cohere can monetize user personal information (email and other PI) by sharing it with partners in exchange for financial remuneration. Although framed as opt-in for special offers, this constitutes a data sale/sharing arrangement that may implicate regulations like CCPA.
AI-generated interpretation, not legal advice.
"The SDK (including any updates or upgrades) may: (i) cause your device to communicate with our servers to deliver the functionality described in the SDK description or through new features as they are introduced, and to record usage metrics; (ii) affect preferences or data stored on your device; and (iii) collect Personal Information as set out in our Privacy Policy ."
SDK-level data collection including usage metrics and personal information creates telemetry obligations users may not anticipate. Affected users are primarily API/developer tier consumers who integrate the SDK into their own products.
AI-generated interpretation, not legal advice.
"IN THE EVENT THAT THERE IS AN INTERRUPTION OR DISRUPTION IN ANY OF THE SERVICES OFFERED BY COHERE FOR WHATEVER REASON, EVEN IF COHERE HAS BEEN MADE AWARE OF AN ISSUE THAT COULD RESULT IN OR IS LIKELY TO RESULT IN AN INTERRUPTION OR DISRUPTION OF SERVICES, TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, COHERE WILL NOT BE REQUIRED TO ISSUE A REFUND FOR ANY PURCHASE MADE BY YOU."
This clause explicitly excludes refund obligations even in cases of known, foreseeable disruptions. Paid subscribers bear full financial risk of service unavailability.
AI-generated interpretation, not legal advice.
"Section 2.4 (Marketing): Sending communications to existing customers or prospects; book demos; using non-essential cookies/tracking technologies (as detailed in Section 9); identifying and communicating with new prospects. Business contact information, context about your company and information such as your name, business email, job title, company, and specific products and services you may be interested in about you or your company that we receive from third-party sources. Consent: For communications you sign up to or request, or where we use cookies or similar technologies (other than necessary cookies which cannot be turned off), we process your data based on your consent. Legitimate Interests: We otherwise process your data based on our legitimate interests in promoting our products and services and maintaining customer relationships. "
Under GDPR Art. 14, individuals must be informed when personal data is collected from third parties. Processing data acquired from external sources for marketing under legitimate interests (rather than consent) is permissible but requires a careful balancing test and transparency obligations. Users have a right to object under Art. 21.
AI-generated interpretation, not legal advice.
" Without limiting the foregoing, under no circumstances will any of the Cohere Parties be held liable for any delay or failure in performance resulting directly or indirectly from acts of nature, forces, or causes beyond our or their reasonable control, including, without limitation, Internet failures, computer equipment failures, telecommunication equipment failures, other equipment failures, electrical power failures, strikes, labour disputes, riots, insurrections, civil disturbances, shortages of labour or materials, fires, floods, storms, explosions, pandemics, acts of God, war, governmental actions, orders of domestic or foreign courts or tribunals, or non-performance of third parties. "
Excuses Cohere Parties from liability for delays or failures in performance caused by events beyond their reasonable control, including force majeure events such as natural disasters, Internet failures, strikes, pandemics, and government actions.
AI-generated interpretation, not legal advice.
"Choice of Law . Except as restricted by applicable law, these Terms of Use will be governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein (without giving effect to any principles of conflicts of law), and such laws apply to your access to or use of the Cohere Solution notwithstanding your physical location. You will only use the Cohere Solution in jurisdictions where the Cohere Solution may lawfully be used. Except as restricted by applicable law, you hereby consent to the exclusive jurisdiction and venue of courts in Toronto, Ontario in all disputes arising out of or relating to the use of the Cohere Solution. This choice of jurisdiction does not prevent us from seeking injunctive relief with respect to a violation of intellectual property rights or confidentiality obligations in any appropriate jurisdiction."
Mandatory venue in Toronto creates practical barriers for international users pursuing claims. The asymmetric injunctive relief carve-out favors Cohere by allowing forum shopping for IP/confidentiality enforcement.
AI-generated interpretation, not legal advice.
" Your interactions with organizations and/or individuals found on or through the Cohere Solution, including payment and delivery of goods and services, and any other terms, conditions, warranties or representations associated with such dealings, are solely between you and such organizations and/or individuals. You agree that to the fullest extent permitted by applicable law Cohere is not responsible or liable for any loss or damage of any sort incurred as the result of any such dealings."
Limits Cohere's liability for any loss or damage arising from user interactions with third-party organizations or individuals found through the Cohere Solution, establishing that such dealings are solely between the user and the third party to the fullest extent permitted by law.
AI-generated interpretation, not legal advice.
"Cohere reserves the right, at its own cost, to assume the exclusive defence and control of any matter otherwise subject to indemnification by you, in which event you will fully cooperate with us in asserting any available defences."
This control-and-cooperation clause means users may lose strategic control over litigation affecting them while remaining financially responsible for the outcome.
AI-generated interpretation, not legal advice.
" Please note that certain information may be exempt from such requests under California law. For example, we need certain information to maintain an account, so we may reject a deletion request for that information if you still wish for us to maintain the account."
Identifies exceptions under California law to deletion requests, explicitly permitting Cohere to reject deletion of information necessary to maintain an active account.
AI-generated interpretation, not legal advice.
"We may also receive information about you or your company from third-party sources to support the marketing and sale of our products. This includes using data enrichment services, marketing vendors, and publicly available sources to identify business prospects who may be interested in our products. The information we receive may include your name, business email, job title, company, and types of products you may be interested in."
Third-party sourced personal data collection for marketing and sales targeting. Individuals may not be aware their data is being processed by Cohere. This is a common but notable privacy risk, particularly under GDPR.
AI-generated interpretation, not legal advice.
"Business Transactions: We may transfer any information we have about you as an asset in connection with a proposed or completed merger, acquisition, or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Cohere or as part of a corporate reorganization or other change in corporate control."
Standard M&A clause but covers insolvency/bankruptcy scenarios and 'any information,' meaning user prompts, outputs, and personal data could pass to an unknown acquirer without user consent.
AI-generated interpretation, not legal advice.
"Enterprise Users of the Platform can consult retention practices for inputs and outputs on the Platform here . Retention of inputs and outputs on the Platform is generally 30 days for Enterprise Users. For Trial Users and Researchers, the Platform is not intended to process personal information. If personal information is inadvertently included in an input, deletion can be requested by emailing privacy@cohere.com as set out below."
Inputs and outputs retention is explicitly scoped to Enterprise Users at 30 days. Trial Users and Researchers receive no defined retention period for inputs/outputs and are told the platform is 'not intended' for personal data, with remediation only available via email request—creating compliance risk for those tiers.
AI-generated interpretation, not legal advice.
"It is our policy not to retain California personal information after we determine it is no longer necessary for the purposes set out in this Policy or as otherwise required to meet legal or business requirements. Retention will depend on the context and purpose for which the information was collected. For example, (i) we retain records of email opt-outs indefinitely; and (ii) we may retain server logs reflecting California traffic to our website for several months or years for security purposes."
GDPR and CCPA both require defined retention periods proportionate to purpose. Indefinite retention of opt-out records and open-ended log retention ('several months or years') may not satisfy data minimisation and storage limitation principles under GDPR Art. 5(1)(e). The policy is scoped to California residents but reflects general practice.
AI-generated interpretation, not legal advice.
"We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to meet business or legal requirements, and as otherwise permitted or required by applicable law, including litigation holds. We may collect and use the same category of personal information for different purposes and in different contexts, and because rules differ by jurisdiction, there is not typically a fixed retention period that will always apply to a particular category of personal information."
The absence of a defined retention schedule, combined with litigation-hold carve-outs and multi-purpose use of the same data category, gives Cohere broad discretion to retain data for extended and indeterminate periods.
AI-generated interpretation, not legal advice.
"Vendors and Service Providers: We may transfer (or otherwise make available) all categories of personal information we collect to third-party companies that provide services to us or on our behalf. We use vendors and service providers for services such as cloud computing and data storage, advertising and analytics; communications; and customer support and management. Our vendors and service providers may be located in the U.S., Canada, or other foreign jurisdictions. Please refer to International Transfers to learn more. Users of the Platform or Cohere APIs can also consult our list of sub-processors ."
Broad data sharing with third-party service providers across multiple categories (cloud, analytics, advertising, support). No restriction on the categories of data shared with vendors, and international transfers are permitted subject to a referenced but unquoted transfer mechanism.
AI-generated interpretation, not legal advice.
"The use of cookies for this purpose may be considered a “sale” or “sharing” under California privacy law."
This is a self-admission that advertising cookie practices may trigger CCPA/CPRA 'sale' or 'sharing' obligations. Users in California have opt-out rights, but non-California users may have fewer protections against the same data flows.
AI-generated interpretation, not legal advice.
" Except where prohibited by applicable law, we reserve the right to change any element of the Cohere Solution at any time, without notice. We may, at our discretion, suspend your access to or use of the Cohere Solution or any component thereof: (i) for scheduled maintenance; (ii) due to a force majeure event; (iii) if you are delinquent in your payment of fees to Cohere under any agreement; (iv) if Cohere believes in good faith that you have violated any provision of these Terms of Use, the Responsible Use Guidelines (as defined below) or any other responsible use guidelines we provide to you or are posted on the Cohere Website; (v) to address any emergency security concerns; or (vi) if required to do so by a regulatory body or as a result of a change in applicable law. "
This segment grants Cohere discretionary authority to suspend user access for enumerated reasons including payment delinquency, Terms of Use violations, and violations of Responsible Use Guidelines, constituting an enforcement mechanism with operative restrictions on user access.
AI-generated interpretation, not legal advice.
" IN THE EVENT THAT THERE IS AN INTERRUPTION OR DISRUPTION IN ANY OF THE SERVICES OFFERED BY COHERE FOR WHATEVER REASON, EVEN IF COHERE HAS BEEN MADE AWARE OF AN ISSUE THAT COULD RESULT IN OR IS LIKELY TO RESULT IN AN INTERRUPTION OR DISRUPTION OF SERVICES, TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, COHERE WILL NOT BE REQUIRED TO ISSUE A REFUND FOR ANY PURCHASE MADE BY YOU. AS SOON AS COHERE HAS IDENTIFIED THE CAUSE OF AN INTERRUPTION OR DISRUPTION, COHERE WILL USE REASONABLE EFFORTS TO RETURN SERVICE AS SOON AS REASONABLY POSSIBLE."
Limits Cohere's obligation to issue refunds for service interruptions or disruptions to the fullest extent permitted by law, while imposing a reasonable-efforts obligation on Cohere to restore service once the cause is identified.
AI-generated interpretation, not legal advice.
Common questions about Cohere Coral's policies
- Does Cohere Coral train its AI models on your data?
- No training on your content by default — based on 4 verified findings from Cohere Coral's published policy. Informational only, not legal advice.
- Who owns the content you create with Cohere Coral?
- You own your outputs — based on 3 verified findings from Cohere Coral's published policy. Informational only, not legal advice.
- Can you use Cohere Coral's output commercially?
- Commercial use allowed — with conditions — based on 7 verified findings from Cohere Coral's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Cohere Coral's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
41 verified clausesClauses in Cohere Coral's policies that work in your favour — commitments the platform made to you.
- Audit rights, DPA & residency
“Cohere is a Canadian company subject to Canadian federal privacy laws, and so personal information transferred from the UK or the EEA to Cohere in Canada is made pursuant to adequacy regulations (for the UK, see here ; for the EEA, see here ). To the extent Co…”
Explains the legal basis for transferring personal data from the UK and EEA to Canada via adequacy regulations, and imposes an obligation on Cohere to ensure further transfers to sub-processors and affiliates are protect…
📍 Privacy Policy › “International Transfers”Jump to exact text → - Audit rights, DPA & residency
“To the extent Cohere further transfers personal information to sub-processors or affiliates for the purpose of providing the Website, Cohere Products, or in the process of developing its models, such transfers are subject to and protected by appropriate securi…”
Data transfers to US-based infrastructure (GCP) and other sub-processors introduce cross-border transfer risk. Reliance on the EU-US Data Privacy Framework carries ongoing legal uncertainty (post-Schrems II landscape). T…
📍 Privacy Policy › “International Transfers”Jump to exact text → - Privacy & data use
“If your request is in relation to training data, please first review our Model Training Privacy Notice . As we explain in that notice, as an enterprise AI company, Cohere does not intentionally collect personal information for training purposes. We are likely…”
Describes the specific procedure for handling data subject rights requests relating to training data, references the Model Training Privacy Notice, discloses Cohere's policy of not intentionally collecting personal infor…
📍 Privacy Policy › “Your Choices and Rights”Jump to exact text → - Moderation & enforcementauto-renewal & cancel window
“If the amount to be charged to your billing account varies from the amount you preauthorized (other than due to the imposition or change in the amount of applicable sales taxes), you have the right to receive, and we will provide, notice of the amount to be ch…”
Grants the user the right to receive advance notice when the charged amount differs from the preauthorized amount, and permits Cohere to accumulate and submit charges as aggregate billing during or at the end of a billin…
Location: exact-text link only — source has no section structureJump to exact text → - Privacy & data usesale/sharing of personal data
“Inform you about the categories of personal information we have collected about you in the preceding 12 months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categ…”
Establishes the California consumer right to receive detailed disclosures about categories of personal information collected, sources, business purposes, third-party disclosures, and categories of information sold or sha…
📍 Privacy Policy › “Correct certain personal information we have about you; and”Jump to exact text → - Indemnity & liabilitydamages/liability cap
“THE LAWS OF CERTAIN JURISDICTIONS, WHICH MAY INCLUDE QUEBEC, DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN LEGAL WARRANTIES, CONDITIONS OR REPRESENTATIONS. IF THESE LAWS APPLY TO YOU, SOME OR ALL OF THE EXCLUSIONS OR LIMITATIONS IN THESE TERMS OF USE (IN…”
Creates a jurisdictional exception noting that certain laws, including those of Quebec, may prevent the exclusion or limitation of certain legal warranties and conditions, meaning some disclaimers or limitations may not…
Location: exact-text link only — source has no section structureJump to exact text →
+ 35 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
37 verified clausesWhat Cohere Coral requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcement
“send, upload, collect, transmit, store, use, post, publish, or otherwise communicate on the Cohere Solution any data, information, pictures, videos, audio or other materials or content that: (i) contains any computer viruses, worms, malicious code, or any soft…”
Restricts users from communicating content that contains malware, content they have no lawful right to share, false or misleading material, impersonation, or harmful content (defamatory, harassing, threatening, etc.) thr…
Location: exact-text link only — source has no section structureJump to exact text → - Moderation & enforcementconduct restrictions
“You will not use the Cohere Solution in violation of these Terms of Use, any applicable Subscription Agreement, the Responsible Use Guidelines or any other responsible use guidelines we provide to you or are posted on the Cohere Website, or of any applicable l…”
Restricts the user from using the Cohere Solution in violation of the Terms of Use, Subscription Agreement, Responsible Use Guidelines, applicable law, or third-party license agreements, and requires prior written permis…
Location: exact-text link only — source has no section structureJump to exact text → - Moderation & enforcement
“You must provide current, complete and accurate information for your billing account. You must promptly update all information to keep your billing account current, complete and accurate (such as a change in billing address, credit card number, or credit card…”
Imposes an obligation on the user to maintain current, complete, and accurate billing account information and to promptly notify Cohere of cancellations or security breaches, including unauthorized disclosure of credenti…
Location: exact-text link only — source has no section structureJump to exact text → - Moderation & enforcementconduct restrictions
“comply with all applicable laws and regulations, including, but not limited to, all intellectual property, data and privacy laws. Except as authorized by applicable law, you agree not to export, re-export or transfer the Cohere Solution or any part thereof to…”
Imposes an obligation to comply with all applicable laws including intellectual property, data, privacy, and export control laws, and restricts export or transfer of the Cohere Solution to sanctioned countries, persons,…
Location: exact-text link only — source has no section structureJump to exact text → - Moderation & enforcementconduct restrictions
“attempt to gain unauthorized access to the Cohere Solution, or bypass any measures we may use to prevent or restrict access to the Cohere Solution, attempt to circumvent the intended features, functionality or limitations of the Cohere Solution, or otherwise u…”
Restricts users from attempting to gain unauthorized access to the Cohere Solution, bypassing access controls, circumventing intended functionality or limitations, or exploiting the Solution for timesharing, service bure…
Location: exact-text link only — source has no section structureJump to exact text →
+ 32 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
15 topics- Product telemetry & usage tracking1 protective18 clauses
- Advertising & tracking9 protective22 clauses
- Sale or sharing of personal data4 protective9 clauses
- Sensitive data (biometric, location, health)1 protective2 clauses
- Children's data1 protective1 clause
- Government & law-enforcement disclosure4 clauses
- Data shared with other AI providers2 clauses
- Does not train on your content1 protective1 clause
- Damages & liability cap1 protective8 clauses
- Indemnity direction6 clauses
- Terms can change at any time1 protective4 clauses
- Deletion rights & post-termination survival1 protective4 clauses
- Auto-renewal & cancel window1 protective2 clauses
- Breach-notification promises1 clause
- Conduct restrictions24 obligations24 clauses
199 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, § 4 (Safeguards, Retention, and Privacy Governance) addresses how long content is retained, and the Privacy Policy, Section 2.3 addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The Terms of Service, § 16 (Feedback) describes rights the platform takes in user content, and the Terms of Service describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Verified retention clauses point in different directions: the Privacy Policy, § 4 (Safeguards, Retention, and Privacy Governance) describes broad or open-ended retention, while the Privacy Policy, § 4 (Safeguards, Retention, and Privacy Governance) describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to meet business or legal requirements, and as otherwise permitted or required by applicable law, including litigation holds. We may collect and use the same category of personal information for different purposes and in different contexts, and because rules differ by jurisdiction, there is not typicall...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to meet business or legal requirements, and as otherwise permitted or required by applicable law, including litigation holds. We may collect and use the same category of personal information for different purposes and in different contexts, and because rules differ by jurisdiction, there is not typicall...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to meet business or legal requirements, and as otherwise permitted or required by applicable law, including litigation holds. We may collect and use the same category of personal information for different purposes and in different contexts, and because rules differ by jurisdiction, there is not typicall...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to meet business or legal requirements, and as otherwise permitted or required by applicable law, including litigation holds. We may collect and use the same category of personal information for different purposes and in different contexts, and because rules differ by jurisdiction, there is not typicall...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Subject to these Terms of Use, we grant you a non-exclusive, non-transferable, non-sublicensable and revocable licence to use the Cohere Solution in accordance with these Terms of Use.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | worsens | HIGH | 4 |
| All applicable tiers | indemnity liability | worsens | HIGH | 2 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 13 |
| All applicable tiers | output ownership | improves | LOW | 2 |
| All applicable tiers | privacy data use | worsens | HIGH | 11 |
| All applicable tiers | prompt ownership | improves | LOW | 1 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 2 |
| Free | confidentiality | worsens | HIGH | 3 |
| Free | prompt ownership | worsens | HIGH | 4 |
| Free | training use | worsens | HIGH | 4 |
| Team / Business | data retention | conditional | MEDIUM | 4 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
content ownership worsened from low/user retains rights to high/platform claims or reserves rights.
“upload and disseminate only data to which you own all required rights under law and do so only consistent with applicable law;”Before citation
“We reserve the right to correct any errors or mistakes that any Payment Processor makes even if it has already requested or received payment.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“If you are an agent making a request on behalf of a consumer, we reserve the right to take steps to verify that you are authorized to make that request, which may include requiring you to provide us with written proof such as a notarized authentication letter or a legally sufficient power of attorney signed by the data subject pursuant to California Probate Code sections 4121 to 4130, or other written authorization acceptable to us. We also may require the consumer to verify their identity directly with us where permitted. We are not responsible for the security risks of this or any other arrangements that a consumer may have with an agent. For clarity, this is not permission for any user to disclose their login credentials to an agent or any third party. Such disclosure is prohibited and is not required for an agent to make requests under this Notice.”Before citation
“advertise to, or solicit, any user to buy or sell any third party products or services, or use any information obtained from the Cohere Solution in order to contact, advertise to, solicit, or sell to any user without their prior express consent;”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“To our knowledge, we do not “sell” or “share” the personal information of individuals under 16 years of age.”Before citation
“If you sign up through Cohere to receive special offers regarding products and services from our partners, you authorize us to share your email address and other Personal Information (as defined below) you authorize with the partner whose offer you wish to receive. If you request these special offers, you acknowledge the partner may also send you future offers that may interest you. You can opt out of future communications from Cohere by contacting us in the manner described below; you can unsubscribe from future partner communications by following their unsubscribe and opt out instructions. You do not have to agree to participate in these offers in order to use the Cohere Solution. You understand that Cohere may receive financial remuneration in exchange for sharing your email address and other Personal Information you authorize with partners if you choose to sign up for an offer. Once you sign up for an offer, you can change your mind at any time, but if the partner or Cohere has already relied on your authorization to share your email or other Personal Information for a particular offer, any action already taken cannot be undone.”After citation
legal burden changed from medium/liability limited to medium/indemnity.
“TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL WE OR OUR PARENTS, SUBSIDIARIES OR AFFILIATES AND OUR AND THEIR RESPECTIVE OFFICERS, DIRECTORS, SHAREHOLDERS, EMPLOYEES, CONTRACTORS, AGENTS, LICENSORS, LICENSEES AND SERVICE PROVIDERS AND ITS AND THEIR SUCCESSORS AND ASSIGNS (COLLECTIVELY, THE “ COHERE PARTIES ”), BE LIABLE, WHETHER BASED ON WARRANTY, CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR ANY OTHER LEGAL THEORY, FOR ANY DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR LOST PROFITS, LOSS OF USE, LOSS OF DATA, PERSONAL INJURY, FINES, FEES, PENALTIES OR OTHER LIABILITIES (COLLECTIVELY, “ LOSSES ”), IN EACH CASE, WHETHER OR NOT WE WERE ADVISED OR SHOULD HAVE KNOWN OF THE POSSIBILITY OF SUCH DAMAGES, RESULTING FROM OR RELATED TO THE COHERE SOLUTION OR THE INABILITY TO MAKE USE OF THE COHERE SOLUTION, OR THESE TERMS OF USE, INCLUDING, FOR CLARITY, ANY LOSSES RESULTING FROM THE ACCESS, COLLECTION, USE, PROCESSING, STORING, DISCLOSING OR TRANSMITTING OF API DATA OR FINETUNING DATA BY THIRD PARTIES. IF YOU ARE DISSATISFIED WITH ANY PORTION OF THE COHERE SOLUTION, YOUR SOLE AND EXCLUSIVE REMEDY IS TO DISCONTINUE USE OF THE COHERE SOLUTION.”Before citation
“You will defend, indemnify and hold harmless the Cohere Parties from and against any claims, causes of action, demands, recoveries, losses, damages, fines, penalties or other costs or expenses of any kind or nature including reasonable legal and accounting fees, arising out of or in connection with:”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“We do not sell personal information for monetary compensation. However, our disclosures of business contact information, device and online information, professional information and geolocation information (as described above) to our advertising, marketing, and related analytics providers or partners (via cookies and tracking technologies) may qualify a “sale” or “sharing” of personal information under the CCPA.”Before citation
“If you are an agent making a request on behalf of a consumer, we reserve the right to take steps to verify that you are authorized to make that request, which may include requiring you to provide us with written proof such as a notarized authentication letter or a legally sufficient power of attorney signed by the data subject pursuant to California Probate Code sections 4121 to 4130, or other written authorization acceptable to us. We also may require the consumer to verify their identity directly with us where permitted. We are not responsible for the security risks of this or any other arrangements that a consumer may have with an agent. For clarity, this is not permission for any user to disclose their login credentials to an agent or any third party. Such disclosure is prohibited and is not required for an agent to make requests under this Notice.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“If you sign up through Cohere to receive special offers regarding products and services from our partners, you authorize us to share your email address and other Personal Information (as defined below) you authorize with the partner whose offer you wish to receive. If you request these special offers, you acknowledge the partner may also send you future offers that may interest you. You can opt out of future communications from Cohere by contacting us in the manner described below; you can unsubscribe from future partner communications by following their unsubscribe and opt out instructions. You do not have to agree to participate in these offers in order to use the Cohere Solution. You understand that Cohere may receive financial remuneration in exchange for sharing your email address and other Personal Information you authorize with partners if you choose to sign up for an offer. Once you sign up for an offer, you can change your mind at any time, but if the partner or Cohere has already relied on your authorization to share your email or other Personal Information for a particular offer, any action already taken cannot be undone.”Before citation
“To our knowledge, we do not “sell” or “share” the personal information of individuals under 16 years of age.”After citation
Latest stance: liability limited on indemnity liability
“in the event of any failure of the Cohere Solution to conform to any applicable warranty, you may notify Apple, and Apple will refund the purchase price for the Cohere Solution (if any) to you. Except for the foregoing, to the maximum extent permitted by applicable law, Apple will have no other warranty obligation whatsoever with respect to the Cohere Solution, and any other claims, losses, liabilities, damages, costs or expenses attributable to any failure to conform to any warranty will be governed by these Terms of Use;”Open timeline citation
Latest stance: user retains rights on output ownership
“upload and disseminate only data to which you own all required rights under law and do so only consistent with applicable law;”Open timeline citation
Latest stance: third party or vendor sharing on training use
“TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL WE OR OUR PARENTS, SUBSIDIARIES OR AFFILIATES AND OUR AND THEIR RESPECTIVE OFFICERS, DIRECTORS, SHAREHOLDERS, EMPLOYEES, CONTRACTORS, AGENTS, LICENSORS, LICENSEES AND SERVICE PROVIDERS AND ITS AND THEIR SUCCESSORS AND ASSIGNS (COLLECTIVELY, THE “ COHERE PARTIES ”), BE LIABLE, WHETHER BASED ON WARRANTY, CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR ANY OTHER LEGAL THEORY, FOR ANY DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR LOST PROFITS, LOSS OF USE, LOSS OF DATA, PERSONAL INJURY, FINES, FEES, PENALTIES OR OTHER LIABILITIES (COLLECTIVELY, “ LOSSES ”), IN EACH CASE, WHETHER OR NOT WE WERE ADVISED OR SHOULD HAVE KNOWN OF THE POSSIBILITY OF SUCH DAMAGES, RESULTING FROM OR RELATED TO THE COHERE SOLUTION OR THE INABILITY TO MAKE USE OF THE COHERE SOLUTION, OR THESE TERMS OF USE, INCLUDING, FOR CLARITY, ANY LOSSES RESULTING FROM THE ACCESS, COLLECTION, USE, PROCESSING, STORING, DISCLOSING OR TRANSMITTING OF API DATA OR FINETUNING DATA BY THIRD PARTIES. IF YOU ARE DISSATISFIED WITH ANY PORTION OF THE COHERE SOLUTION, YOUR SOLE AND EXCLUSIVE REMEDY IS TO DISCONTINUE USE OF THE COHERE SOLUTION.”Open timeline citation
Latest stance: training permitted on training use
“YOU GRANT US A NONEXCLUSIVE, WORLDWIDE, ROYALTY-FREE, IRREVOCABLE, SUBLICENSABLE, AND FULLY PAID-UP RIGHT TO ACCESS, COLLECT, USE, PROCESS, STORE, DISCLOSE AND TRANSMIT ANY DATA, INFORMATION, CONTENT, RECORDS OR FILES (“ CONTENT ”) THAT YOU LOAD, SUBMIT, TRANSMIT TO OR ENTER INTO THE COHERE SOLUTION, OR THAT YOU OTHERWISE TRANSMIT TO COHERE IN CONNECTION WITH THESE TERMS OF USE (“ CUSTOMER DATA ”) TO: (I) PROVIDE THE COHERE SOLUTION; (II) EXERCISE ITS RIGHTS AND PERFORM ITS OBLIGATIONS UNDER THESE TERMS OF USE, INCLUDING ENSURING YOU ARE COMPLYING WITH THESE TERMS OF USE, THE RESPONSIBLE USE GUIDELINES AND ANY OTHER RESPONSIBLE USE GUIDELINES WE PROVIDE TO YOU OR ARE POSTED ON THE COHERE WEBSITE; AND (III) IMPROVE AND ENHANCE THE COHERE SOLUTION AND OUR OTHER OFFERINfGS AND BENCHMARK THE FOREGOING, INCLUDING BY SHARING API DATA AND FINETUNING DATA WITH THIRD PARTIES WHO MAY USE THE FINETUNING DATA AND API DATA TO PROVIDE SERVICES TO COHERE AND FOR OTHER PURPOSES PERMITTED UNDER THEIR TERMS AND CONDITIONS. FOR CLARITY AND NOTWITHSTANDING ANYTHING TO THE CONTRARY IN THESE TERMS OF USE, COHERE WILL NOT SHARE A CUSTOM MODEL WITH ANY THIRD PARTY BUT MAY SHARE FINETUNING DATA USED TO FINETUNE OR TRAIN A CUSTOM MODEL WITH THIRD PARTIES. THE TERM “ API DATA ” MEANS CUSTOMER DATA SUBMITTED BY YOU TO THE COHERE API. THE TERM “ FINETUNING DATA ” MEANS CUSTOMER DATA COMPRISED OF ANY TRAINING OR FINETUNING DATA SUBMITTED BY YOU TO THE COHERE SOLUTION. THE TERM “ CUSTOM MODEL ” MEANS AN AI-POWERED NEURAL NETWORK FOR NATURAL LANGUAGE PROCESSING BASED ON PARAMETERS THAT ARE TRAINED USING CUSTOMER DATA.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-07· verified 2026-08-07
- Terms of Service:Last captured 2026-08-07· verified 2026-08-07
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 229 more findings this quarter vs last (577 vs 348). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Cohere Coral's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Cohere Coral's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.