Workflow & Automation · compyle.aiCompyle
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Establishes an obligation to retain personal information only as long as necessary for stated purposes, permits longer retention when required or permitted by law, and requires deletion or anonymization once a legitimate business need no longer exists — with secure isolation as a fallback where deletion is not possible.
Discloses that technical information (IP address, browser characteristics, device info, OS, referring URLs, approximate location, usage data) is automatically collected by the company and its service providers when users visit the Site, and states the purposes for that collection (operating, securing, and understanding use of the Services).
Discloses that online data partners or vendors use cookies and similar technologies to associate site activity with personal information (including email) they or others hold, enabling marketing communications to those addresses; also provides an opt-out mechanism — operative disclosure of third-party data sharing and user right to opt out.
How to read this page: Overall risk rates what Compyle's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 31 citationsstaticLast captured 2026-07-28
- Terms of ServiceVerified - read in full - 0 citationsLast captured 2026-07-28
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Identifies the categories of personal information (name, work email, company, role, business information, message contents) collected when users request a demo, contact the company, or register — establishing the company's data collection practice as an operative disclosure of personal data use.
" We collect information you voluntarily provide, including when you: Request a demo or contact us. We collect your name, work email address, company, role, and information about your business (such as project volume), along with the cont..."
Discloses that collected information is used to identify and contact businesses and business contacts who have shown interest in the Services, including through the visitor identification service — operative disclosure of a commercial data use purpose.
"Identify and contact businesses and business contacts who have shown interest in our Services, including visitors identified through the service described in Section 1;"
Establishes an obligation to retain personal information only as long as necessary for stated purposes, permits longer retention when required or permitted by law, and requires deletion or anonymization once a legitimate business need no longer exists — with secure isolation as a fallback where deletion is not possible.
"We keep personal information only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. For example, we retain demo-request and business-contact informati..."
Discloses that the company uses a visitor identification service on the Site to identify businesses and business contacts interested in its Services — operative disclosure of a third-party data-sharing arrangement.
"We use a visitor identification service on the Site to help us understand which businesses and business contacts are interested in our Services. In connection with this service:"
Specifies categories of information received through the visitor identification service (name, business email, job title, company, professional profile) and limits person-level identification through this service to visitors located in a particular geographic area — operative disclosure with a geographic scope limitation.
"The information we receive through this service may include a visitor's name, business email address, job title, company, and professional profile (such as a LinkedIn profile). Person-level identification through this service applies only..."
Discloses that personal information may be shared or transferred in connection with a merger, financing, acquisition, or sale of the business — operative disclosure of a data-sharing trigger event.
" Business transfers. We may share or transfer information in connection with a merger, financing, acquisition, or sale of all or a portion of our business."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"When you visit the Site, we and our service providers automatically collect certain technical information, such as your IP address, browser and device characteristics, operating system, referring URLs, approximate location derived from your IP address, and information about how and when you use the Site (such as pages viewed and date/time stamps). We use this information to operate and secure the Services and to understand how they are used."
Discloses that technical information (IP address, browser characteristics, device info, OS, referring URLs, approximate location, usage data) is automatically collected by the company and its service providers when users visit the Site, and states the purposes for that collection (operating, securing, and understanding use of the Services).
AI-generated interpretation, not legal advice.
"We keep personal information only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. For example, we retain demo-request and business-contact information while it remains relevant to an actual or prospective business relationship, and account information for as long as an account remains active. When we no longer have an ongoing legitimate business need to process personal information, we delete or anonymize it, or, where that is not possible, securely store it and isolate it from further processing until deletion is possible."
Establishes an obligation to retain personal information only as long as necessary for stated purposes, permits longer retention when required or permitted by law, and requires deletion or anonymization once a legitimate business need no longer exists — with secure isolation as a fallback where deletion is not possible.
AI-generated interpretation, not legal advice.
"When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout ."
Discloses that online data partners or vendors use cookies and similar technologies to associate site activity with personal information (including email) they or others hold, enabling marketing communications to those addresses; also provides an opt-out mechanism — operative disclosure of third-party data sharing and user right to opt out.
AI-generated interpretation, not legal advice.
"The Compyle platform offers products, features, and tools powered by artificial intelligence ("AI Products"). We provide AI Products through third-party AI service providers, currently Anthropic and Google Cloud AI. Input you provide to AI Products, the output generated, and associated personal information are processed by these providers on our behalf, subject to our agreements with them, to enable your use of the AI Products. You must not use the AI Products in a way that violates the terms or policies of any AI service provider."
Discloses that AI Products are provided through named third-party AI service providers, that user inputs, generated outputs, and associated personal information are processed by those providers on the company's behalf under agreements with them, and restricts users from using AI Products in violation of those providers' terms or policies — operative disclosure of subprocessor data sharing arrangement for AI processing with a user-facing restriction.
AI-generated interpretation, not legal advice.
" We may share personal information in the following circumstances: Service providers. We share information with vendors that perform services on our behalf, such as website hosting and infrastructure, data storage, internal communications and notifications, visitor identification (as described in Section 1), and AI processing (as described in Section 4), in each case under agreements that restrict how they may use it."
Discloses categories of service providers with whom personal information is shared (hosting, infrastructure, data storage, communications, visitor identification, AI processing) and states that sharing is governed by agreements restricting how providers may use the information — operative disclosure of subprocessor arrangements with a protective contractual restriction noted.
AI-generated interpretation, not legal advice.
"We do not sell personal information in exchange for money. Our use of visitor identification technology, as described in Section 1, may be considered "sharing" or use for "targeted advertising" under certain U.S. state privacy laws. You may opt out at any time using the link in Section 1 or by contacting us."
States that the company does not sell personal information for money (a protective restriction), while acknowledging that use of visitor identification technology may constitute 'sharing' or use for 'targeted advertising' under certain laws, and provides an opt-out mechanism — protective restriction on sale of personal data combined with disclosure of a potentially regulated data practice and user right to opt out.
AI-generated interpretation, not legal advice.
" We do not collect or process sensitive personal information."
States that sensitive personal information is not collected or processed — a protective restriction limiting the company's data collection practices in a user-favorable direction.
AI-generated interpretation, not legal advice.
" B. Personal information under the California Customer Records statute (e.g., name, contact information) YES "
Discloses that the company collects personal information falling under the California Customer Records category, including name and contact information.
AI-generated interpretation, not legal advice.
" C. Protected classification characteristics NO "
Discloses that protected classification characteristics are not collected — a factual representation limiting the scope of data collection.
AI-generated interpretation, not legal advice.
"SmartAppetite Corporation ("Compyle," "we," "us," or "our") provides an AI platform for Environmental Due Diligence. This Privacy Policy describes how we collect, use, and share information when you visit our website at https://compyle.ai (the "Site"), use any of our products and services that link to this Privacy Policy (together with the Site, the "Services"), or otherwise interact with us, including at marketing events."
Defines the entity ('SmartAppetite Corporation' doing business as 'Compyle'), the nature of the platform (AI for Environmental Due Diligence), the scope of the Privacy Policy (Site, Services, interactions), and describes the policy's purpose as explaining how information is collected, used, and shared — establishing scope and definitions for the document.
AI-generated interpretation, not legal advice.
" We collect information you voluntarily provide, including when you: Request a demo or contact us. We collect your name, work email address, company, role, and information about your business (such as project volume), along with the contents of your messages to us."
Identifies the categories of personal information (name, work email, company, role, business information, message contents) collected when users request a demo, contact the company, or register — establishing the company's data collection practice as an operative disclosure of personal data use.
AI-generated interpretation, not legal advice.
" Register for or use the Compyle platform. We collect account information such as your name, email address, and login credentials, and the information you submit through the platform."
Identifies account information (name, email, login credentials) and platform-submitted information collected during platform registration or use — operative disclosure of personal data collection scope.
AI-generated interpretation, not legal advice.
"The Site uses cookies and similar technologies. Our visitor identification partner sets first-party cookies (with names beginning with _reb2b ) that are used to recognize visitors and link visits to professional profiles as described above. These cookies have lifetimes ranging from one second to one year and do not themselves store personal information. The Site does not currently use third-party advertising cookies or general-purpose analytics cookies."
Describes the visitor identification partner's first-party cookies, their naming convention, lifetimes (one second to one year), purpose (recognizing visitors and linking visits to professional profiles), and confirms they do not store personal information themselves; also states the Site does not use third-party advertising cookies or general-purpose analytics cookies — operative disclosure of cookie practices including a protective restriction on advertising cookies.
AI-generated interpretation, not legal advice.
"Most browsers let you refuse or delete cookies through their settings. The Site also honors the Global Privacy Control ("GPC") signal: when your browser sends GPC, we do not load our visitor identification technology for your visit. Because no uniform standard for older "Do Not Track" signals has been adopted, we do not respond to DNT signals. To opt out of visitor identification at any time, use the opt-out link in Section 1."
Describes user options for managing cookies (browser settings), the company's honoring of the Global Privacy Control signal (by not loading visitor identification technology when the signal is sent), its non-response to older Do Not Track signals, and directs users to an opt-out link for visitor identification — establishing procedural mechanisms for user control over data collection.
AI-generated interpretation, not legal advice.
" We use the information we collect to: Provide, operate, maintain, and secure the Services; Respond to your demo requests, questions, and other inquiries;"
Lists purposes for which collected information is used: providing, operating, maintaining, and securing the Services; responding to demo requests and inquiries — operative disclosure of data use purposes.
AI-generated interpretation, not legal advice.
"Identify and contact businesses and business contacts who have shown interest in our Services, including visitors identified through the service described in Section 1;"
Discloses that collected information is used to identify and contact businesses and business contacts who have shown interest in the Services, including through the visitor identification service — operative disclosure of a commercial data use purpose.
AI-generated interpretation, not legal advice.
" Evaluate and improve the Services, including by analyzing usage trends; Prevent fraud and abuse and protect the security of the Services; and Comply with legal obligations and enforce our legal rights."
Discloses additional purposes for data use: evaluating and improving the Services through usage analysis, preventing fraud and abuse, securing the Services, and complying with legal obligations and enforcing legal rights — operative disclosure of data use purposes including security and compliance.
AI-generated interpretation, not legal advice.
" Communications: you may opt out of communications from us at any time by using the unsubscribe mechanism in a message or by emailing founders@compyle.ai ."
Establishes the user's right to opt out of communications at any time via an unsubscribe mechanism or email contact — operative user right to withdraw from marketing communications.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Compyle's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Compyle's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Compyle's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Compyle requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Compyle's published policies yet.
What the policies actually cover
0 topicsNone of Compyle's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“6. Your Choices Visitor identification: opt out at https://app.retention.com/optout . Communications: you may opt out of communications from us at any time by using the unsubscribe mechanism in a message or by emailing founders@compyle.ai . Cookies: manage or delete cookies through your browser settings. Access, correction, and deletion: contact us to review, update, or delete personal information we hold about yo...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“8. Feedback If you send us any question, comment, suggestion, idea, or other feedback about the Services ("Feedback"), you grant us a perpetual, irrevocable, worldwide, royalty-free license to use, reproduce, modify, and otherwise exploit the Feedback for any lawful purpose, without acknowledgment or compensation to you. You represent that any Feedback you submit is original to you or that you have the necessary r...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We keep personal information only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. For example, we retain demo-request and business-contact information while it remains relevant to an actual or prospective business relationship, and account information for as long as an account remains active. When we no longer have an ongoing...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Exceptions The following Disputes are not subject to the provisions above concerning informal negotiations and binding arbitration: (a) any Dispute seeking to enforce or protect, or concerning the validity of, a party's intellectual property rights; (b) any claim for injunctive or other equitable relief, including for unauthorized use or access; and (c) any individual claim within the jurisdiction of a small claim...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“The Services are not tailored to comply with industry-specific regulations such as HIPAA or FISMA; if your use would be subject to such laws, you may not use the Services. 3. Fees and Platform Agreements Access to the Compyle platform is provided under separate written agreements between us and your organization (such as order forms, pilot agreements, or master services agreements). We do not currently offer self-...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | worsens | HIGH | 1 |
| All applicable tiers | data retention | conditional | MEDIUM | 1 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 1 |
| All applicable tiers | privacy data use | worsens | HIGH | 4 |
| All applicable tiers | prompt ownership | conditional | MEDIUM | 1 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 3 |
| Free | data retention | conditional | MEDIUM | 3 |
| Standard | governing law disputes | worsens | HIGH | 1 |
| Team / Business | commercial use | worsens | HIGH | 3 |
| Team / Business | data retention | conditional | MEDIUM | 3 |
| Team / Business | privacy data use | conditional | MEDIUM | 1 |
| Team / Business | prompt ownership | worsens | HIGH | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“We provide AI Products through third-party AI service providers, currently Anthropic and Google Cloud AI. Input you provide to AI Products, the output generated, and associated personal information are processed by these providers on our behalf, subject to our agreements with them, to enable your use of the AI Products. You must not use the AI Products in a way that violates the terms or policies of any AI service provider. 5. How We Share Information We may share personal information in the following circumstances: Service providers. We share information with vendors that perform services on our behalf, such as website hosting and infrastructure, data storage, internal communications and notifications, visitor identification (as described in Section 1), and AI processing (as described in Section 4), in each case under agreements that restrict how they may use it. Business transfers. We may share or transfer information in connection with a merger, financing, acquisition, or sale of all or a portion of our business. Legal. We may disclose information where required by law or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others. We do not sell personal information in exchange for money. Our use of visitor identification technology, as described in Section 1, may be considered "sharing" or use for "targeted advertising" under certain U.S. state privacy laws. You may opt out at any time using the link in Section 1 or by contacting us.”Before citation
“The Compyle platform offers products, features, and tools powered by artificial intelligence ("AI Products"). We provide AI Products through third-party AI service providers, currently Anthropic and Google Cloud AI. Input you provide to AI Products, the output generated, and associated personal information are processed by these providers on our behalf, subject to our agreements with them, to enable your use of the AI Products. You must not use the AI Products in a way that violates the terms or policies of any AI service provider.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“We do not sell personal information in exchange for money. Our use of visitor identification technology, as described in Section 1, may be considered "sharing" or use for "targeted advertising" under certain U.S. state privacy laws. You may opt out at any time using the link in Section 1 or by contacting us.”Before citation
“Privacy Policy — Compyle Skip to content Privacy Policy Last updated July 1, 2026 SmartAppetite Corporation ("Compyle," "we," "us," or "our") provides an AI platform for Environmental Due Diligence. This Privacy Policy describes how we collect, use, and share information when you visit our website at https://compyle.ai (the "Site"), use any of our products and services that link to this Privacy Policy (together with the Site, the "Services"), or otherwise interact with us, including at marketing events. If you do not agree with our policies and practices, please do not use the Services. Questions? Contact us at founders@compyle.ai . 1. Information We Collect Information you provide to us We collect information you voluntarily provide, including when you: Request a demo or contact us. We collect your name, work email address, company, role, and information about your business (such as project volume), along with the contents of your messages to us. Register for or use the Compyle platform. We collect account information such as your name, email address, and login credentials, and the information you submit through the platform. We do not collect or process sensitive personal information. Information collected automatically When you visit the Site, we and our service providers automatically collect certain technical information, such as your IP address, browser and device characteristics, operating system, referring URLs, approximate location derived from your IP address, and information about how and when you use the Site (such as pages viewed and date/time stamps).”After citation
Latest stance: third party or vendor sharing on prompt ownership
“The Compyle platform offers products, features, and tools powered by artificial intelligence ("AI Products"). We provide AI Products through third-party AI service providers, currently Anthropic and Google Cloud AI. Input you provide to AI Products, the output generated, and associated personal information are processed by these providers on our behalf, subject to our agreements with them, to enable your use of the AI Products. You must not use the AI Products in a way that violates the terms or policies of any AI service provider.”Open timeline citation
Latest stance: third party or vendor sharing on data retention
“When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout .”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We may share personal information in the following circumstances: Service providers. We share information with vendors that perform services on our behalf, such as website hosting and infrastructure, data storage, internal communications and notifications, visitor identification (as described in Section 1), and AI processing (as described in Section 4), in each case under agreements that restrict how they may use it.”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“Exceptions The following Disputes are not subject to the provisions above concerning informal negotiations and binding arbitration: (a) any Dispute seeking to enforce or protect, or concerning the validity of, a party's intellectual property rights; (b) any claim for injunctive or other equitable relief, including for unauthorized use or access; and (c) any individual claim within the jurisdiction of a small claims court. Any Dispute not subject to arbitration will be brought exclusively in the state or federal courts located in Delaware, and the parties consent to the personal jurisdiction of those courts. Class action waiver To the fullest extent permitted by law: (a) any proceeding to resolve a Dispute will be conducted only on an individual basis and not in a class, consolidated, or representative action; (b) no arbitration will be joined with any other proceeding; and (c) there is no right or authority for any Dispute to be arbitrated on a class-action basis or brought in a purported representative capacity on behalf of the general public or any other persons. 18. Electronic Communications and Signatures Visiting the Services, sending us emails, and completing online forms constitute electronic communications. You consent to receive electronic communications, and you agree that all agreements, notices, disclosures, and other communications we provide to you electronically satisfy any legal requirement that such communication be in writing.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-28· verified 2026-07-28
- Terms of Service:Last captured 2026-07-28· verified 2026-07-28verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
184 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Compyle's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Compyle's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.