Skip to main content
Platform Review
PricingSign in
← All platforms
Developer / Coding · databricks.com

Databricks (DBRX / Foundation)

Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskMEDReviewed 2026-07-08
Creator: low · GRC: medium · Counsel: low
enterprise band
Severe
creator · pending
Dealbreaker · Training without opt-out
39 verified findings5 policy surfaces1/2 core docs verified

Partially verified: Privacy Policy assessed · Terms of Service pending. Everything below comes only from what was read in full.

Risk triage

Watch: audit rights dpa residency

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
20
medium
19
low
1/2
docs
Trains on your data?
Not yet assessed
no verified finding covers this surface yet
Who owns outputs?
Not yet assessed
no verified finding covers this surface yet
Commercial use?
Not yet assessed
no verified finding covers this surface yet
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →
Risk by role
Select a role to tailor the summary and reorder the findings below.

Scores derived from 28 enriched findings — same verbatim citations as below. AI-generated, not legal advice.

What this means for you
  • Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
  • Data handling is conditional — 5 privacy or retention clauses warrant review before using Databricks (DBRX / Foundation) at scale.

Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.

How to read this page: Overall risk rates what Databricks (DBRX / Foundation)'s own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Creator lens
NOT YET ASSESSED

IP/output assessment pending — terms of service not yet verified This lens receives a band only once its source document has been captured and read in full.

Know where this document lives? Point us to the URL or PDF and the pipeline will verify it.

Enterprise lens
Data use, retention, subprocessors, audit
SEVERE
Dealbreaker — Training without opt-out. Your inputs/outputs are used to train models and the policy provides no way to decline. see the clause

Based on 74 verified, verbatim-cited findings below — read the citations.

Automated assessment against a published rubric — not legal advice.

Partially verifiedDeveloper / Coding

Partially verified — Privacy Policy — Verified (read in full, 5 findings); Terms of Service — Capture under review. Findings below are from fully-read, verified documents only; remaining core documents are pending capture.

Why partial?

Needs review

A core policy document is captured but requires review before AIRIN can mark the corpus fully verified.

Document status
  • Privacy Policy
    Verified - read in full - 5 citationsstaticLast captured 2026-07-08
  • Terms of Service
    Completeness unconfirmedrendered
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Privacy & data use

Discloses that Databricks receives personal information from third-party sources including resellers, partners, event sponsors, social media platforms, and fraud detection services, and that such information may be combined with directly collected data, constituting a required disclosure of third-party data sourcing and data combination practices.

" We may obtain information about you from third-party sources, including resellers, distributors, business partners, event sponsors, security and fraud detection services, social media platforms, and publicly available sources. Examples of ..."
📍 “Information we receive from other sources”Jump to exact text →
plan language
Privacy & data use

Describes Databricks' practice of collecting specific categories of personal information (identifiers, employment data, account credentials, interaction data) from users, establishing what data is gathered and for what operational purposes, creating a disclosure obligation under applicable privacy law.

" When using our Services, we may collect certain information, such as: Identifiers: We collect your name, email address, phone number, postal address and country to administer your account and provide our Services to you; Professional/Emp..."
📍 “Information you provide”Jump to exact text →
plan language
Privacy & data use

This segment grants data subjects multiple rights including data portability, restriction or objection to processing, withdrawal of consent, and opt-out of profiling for significant decisions, and establishes the procedure for exercising these rights through an authorized agent or directly.

" Transfer of your information to a third party, where technically feasible Restriction or objection to certain uses of your information (e.g., opt out of marketing communications) The withdrawal of consent to processing your information f..."
📍 “Deletion of your information”Jump to exact text →
plan language
Privacy & data use

Defines the scope of the Privacy Notice, identifies the data controller (Databricks, Inc. and affiliates), and establishes what personal information and which services/contexts are covered, creating the foundational definitional framework for all subsequent obligations and rights.

" This Privacy Notice explains how Databricks, Inc. and its affiliates (“ Databricks ”, “ we ”, “ our ”, and “ us ”) collects, uses, discloses and otherwise processes your personal information (also known as personal data) in connection with..."
📍 “Privacy Notice”Jump to exact text →
plan language
Data retention

The retention policy lacks defined time limits and relies on open-ended categories such as 'legitimate business purposes.' This makes it difficult for users to predict when their data will be deleted and may be inconsistent with data minimization principles under GDPR.

"Databricks retains the personal information described in this Privacy Notice for as long as you use our Services, as may be required by law (for example, to comply with applicable legal tax or accounting requirements), as necessary for othe..."
Location: exact-text link only — source has no section structureJump to exact text →
plan language
Subprocessors & data sharing

Broad asset-transfer carve-out allows disclosure of personal data to prospective acquirers during diligence, prior to any completed transaction. Users have no apparent right to object or opt out of this sharing. This is a standard but notable risk clause.

"Business Transactions: we may engage in transactions with other companies involving the sale of assets or parts of our business. We may disclose your information as part of, or in contemplation of, such transactions. If a portion of or all ..."
Location: exact-text link only — source has no section structureJump to exact text →
plan language
Subprocessors & data sharing

Permits disclosure of personal information for legal compliance, protection of Databricks' or Customers' rights and property, safety of the public, and with user consent, establishing the legal bases and conditions under which third-party disclosure is authorized.

" when authorized by law or we deem necessary in good faith to comply with legal process; when required to protect and defend the rights or property of Databricks or our Customers, including the security of our Sites, products and services (..."
📍 “How We Disclose Your Information”Jump to exact text →
plan language
Subprocessors & data sharing

This segment (continuation of third-party services notice) reinforces that information submitted to third-party services is outside the scope of this Privacy Notice and encourages users to review third-party terms, limiting Databricks' liability for third-party data handling.

" Our Services may contain links to third-party websites, applications, services, or social networks (including co-branded websites or products that are maintained by one of our business partners). We may also make available certain features..."
📍 “Third-Party Services”Jump to exact text →

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 20
Tier-specific - 0
Total citations - 39
Severity
Surface
Document
Tier
Privacy & data use
CautionHigh
"We may also use the information we collect automatically (for example, IP address, and unique device identifiers) to identify the same unique person across Services to provide a more seamless and personalized experience to you."
Location: exact-text link only - source has no section structureJump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Linking identifiers across services to build a unified user profile is a significant privacy practice. Users may not anticipate that their activity across different Databricks services is being correlated.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
"Information posted in public forums ### Certain features of our Services make it possible for you to post content publicly or viewable by other users, such as through the Databricks Community or through other public forums. Any information you post openly in these ways will be available for viewing and use by other users of these Services, as well as Databricks, and potentially accessible through third-party search engines. "
“Information posted in public forums”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Users who post in public forums grant effective unrestricted access to that content by Databricks, other users, and the broader internet via search indexing. This is relevant for any sensitive information inadvertently disclosed in community posts.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
"It may also include information about your activities in connection with the Platform Services and Applications, such as the pages or features you access or use, the time spent on those pages or features, search terms entered, commands executed, information about the types and size of files analyzed via the Platform Services, and other statistical information relating to your use of the these services. We collect Usage Data to provide, support and operate the Services, for network and information security, to better understand how our Platform Services and Applications are used, and to improve our products and services more generally. We may also use the information we collect automatically (for example, IP address, and unique device identifiers) to identify the same unique person across Services to provide a more seamless and personalized experience to you. The types of data collection tools we use may change over time as technology evolves. You can learn more about our use of cookies and similar tools, as well as how to opt out of certain data collection, by visiting our Cookie Notice ."
“Information we collect automatically”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Discloses collection of usage data from Platform Services and Applications (pages accessed, time spent, search terms, file analysis information) and identifies the purposes for which such usage data is processed, including service operation, security, and improvement.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" Sales and Marketing for sales phone calls for training and coaching purposes, quality assurance and administration (in accordance with applicable laws), including to analyze sales calls using analytics tools to gain better insights into our interactions with customers; to tailor and send you newsletters, emails and other content to promote our products and services (you can always unsubscribe from our marketing emails by clicking here ) and to allow third-party partners (like our event sponsors) to send you marketing communications about their services, in accordance with your preferences and applicable law;"
“How We Use Your Information”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Permits Databricks to use personal data for sales call analysis, marketing communications, and sharing with third-party event sponsors for their marketing purposes, subject to user preferences and applicable law, establishing the lawful basis and scope of marketing-related data use.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" Certain features of our Services make it possible for you to post content publicly or viewable by other users, such as through the Databricks Community or through other public forums. Any information you post openly in these ways will be available for viewing and use by other users of these Services, as well as Databricks, and potentially accessible through third-party search engines. Accordingly, please take care when using these features and do not provide personal information that you would not want made available in these ways."
“Information posted in public forums”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Continues the public-forums disclosure warning, clarifying that publicly posted content is available to Databricks, other users, and search engines, reinforcing the absence of privacy protection for such data and advising caution.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" We use standard automated data collection tools, such as cookies, web beacons, tracking pixels, tags, and similar tools, to collect Internet and device activity information about how people use our Sites and interact with our emails. For example, when you visit our Sites we (or an authorized third party) may collect certain information from you or your device. This may include information about your computer or device (such as operating system, device identifier, browser language, and Internet Protocol (IP) address), and information about your activities on our Sites (such as how you came to our Sites, access times, the links you click on, browsing behavior, clicks and cursor movements, and other statistical information). We use this information to help us understand how you are using our Sites and how to better provide the Sites to you. We may also use web beacons and pixels in our emails. For example, we may place a pixel in our emails that notifies us when you click on a link in the email. We use these technologies to improve our communications and our overall Services. We may also use your IP address to derive your general location information. When you use our Platform Services or other Applications, we automatically collect certain information about how you are using those services (“Usage Data”). While most Usage Data is not personal information, it may include information about your account (such as User ID, email address, or Internet Protocol (IP) address) and information about your computer or device (such as browser type and operating system). "
“Information we collect automatically”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Details the specific categories of device and browsing information automatically collected when users visit Sites, including IP addresses and behavioral data, fulfilling the notice obligation to identify the types of data gathered through automated means.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" Online Advertising for online advertising purposes; for example, to display and measure advertising on third-party websites;"
“How We Use Your Information”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Permits Databricks to use personal data for online advertising purposes including displaying and measuring ads on third-party websites, disclosing this as a lawful processing purpose.

AI-generated interpretation, not legal advice.

Moderation & enforcement
CautionHigh
" Databricks may change this Privacy Notice from time to time. We will post any changes on this page and, if we make material changes, provide a more prominent notice (for example, by adding a statement to the website landing page, providing notice through the Platform Services login screen, or by emailing you). You can see the date on which the latest version of this Privacy Notice was posted below. If you disagree with any changes to this Privacy Notice, you should stop using the Services and deactivate your Databricks account."
“Changes to this Notice”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

This segment establishes Databricks' procedure for amending the Privacy Notice, including the obligation to post changes and provide prominent notice for material changes, and grants users the implicit right to discontinue service use if they disagree with changes, functioning as a unilateral modification mechanism.

AI-generated interpretation, not legal advice.

Data retention
High
"Databricks retains the personal information described in this Privacy Notice for as long as you use our Services, as may be required by law (for example, to comply with applicable legal tax or accounting requirements), as necessary for other legitimate business or commercial purposes described in this Privacy Notice (for example, to resolve disputes or enforce our agreements), or as otherwise communicated to you. "
Location: exact-text link only - source has no section structureJump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

The retention policy lacks defined time limits and relies on open-ended categories such as 'legitimate business purposes.' This makes it difficult for users to predict when their data will be deleted and may be inconsistent with data minimization principles under GDPR.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
"Business Transactions: we may engage in transactions with other companies involving the sale of assets or parts of our business. We may disclose your information as part of, or in contemplation of, such transactions. If a portion of or all of our assets are transferred to a third party in connection with such transactions, your information may be among the transferred assets, including in the course of activities leading up to such transactions (e.g., transaction diligence)."
Location: exact-text link only - source has no section structureJump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Broad asset-transfer carve-out allows disclosure of personal data to prospective acquirers during diligence, prior to any completed transaction. Users have no apparent right to object or opt out of this sharing. This is a standard but notable risk clause.

AI-generated interpretation, not legal advice.

Audit rights / DPA / residency
High
"Databricks may transfer your personal information to countries other than your country of residence. In particular, we may transfer your personal information to the United States and other countries where our affiliates, business partners and services providers are located. These countries may have different data protection laws to the country where you reside."
Location: exact-text link only - source has no section structureJump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Broad international transfer language covers affiliates, business partners, and service providers without enumerating specific countries beyond the US. Relies on SCCs and DPF as safeguards, but the scope of recipients is wide.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" We may obtain information about you from third-party sources, including resellers, distributors, business partners, event sponsors, security and fraud detection services, social media platforms, and publicly available sources. Examples of information that we receive from third parties include marketing and sales information (such as name, email address, phone number and similar contact information), and purchase, support and other information about your interactions with our Sites and Platform Services. We may combine such information with the information we receive and collect from and about you in ways consistent with this Privacy Notice."
“Information we receive from other sources”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Discloses that Databricks receives personal information from third-party sources including resellers, partners, event sponsors, social media platforms, and fraud detection services, and that such information may be combined with directly collected data, constituting a required disclosure of third-party data sourcing and data combination practices.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" When using our Services, we may collect certain information, such as: Identifiers: We collect your name, email address, phone number, postal address and country to administer your account and provide our Services to you; Professional/Employment-related information: We also collect information about your job title, role and company name; Account information: If you create an account on the Services, we will collect your authentication information used to access the Services; Customer service and other interaction information: We will collect information when you interact and communicate with us, for example, when you request information about our Platform Services, interact with our sales team or contact customer support, complete a survey, provide feedback or post comments, register for an event, or take part in marketing activities. We may keep a record of your communications with us and other information you disclose during the course of such communications (which may be stored as an audio file or a transcript); Commercial information: We keep records of your history of past purchases and transactions with us; Financial information: We collect information about your designated payment method(s), which may be collected by our third-party payment and billing service providers."
“Information you provide”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Describes Databricks' practice of collecting specific categories of personal information (identifiers, employment data, account credentials, interaction data) from users, establishing what data is gathered and for what operational purposes, creating a disclosure obligation under applicable privacy law.

AI-generated interpretation, not legal advice.

Privacy & data use
FavorableHigh
" If you are located in the European Economic Area, United Kingdom or Switzerland, the controller of your personal information is Databricks, Inc., 160 Spear Street, Suite 1300, San Francisco, CA 94105, United States. We only collect your personal information if we have a legal basis for doing so. The legal basis that we rely on depends on the personal information concerned and the specific context in which we collect it. Generally, we collect and process your personal information where: We need it to enter into or perform a contract with you, such as to provide you with the Platform Services, respond to your request, or provide you with customer support; We need to process your personal information to comply with a legal obligation (such as to comply with applicable legal, tax and accounting requirements) or to protect the vital interests of you or other individuals; You give us your consent, such as to receive certain marketing communications; or Where we have a legitimate interest, such as to respond to your requests and inquiries, to ensure the security of the Services, to detect and prevent fraud, to maintain, customize and improve the Services, to promote Databricks and our Services, and to defend our interests and rights. You have a right to lodge a complaint with your local data protection authority regarding our data processing activities."
“Information for EU, UK, and Swiss Users”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

This segment identifies Databricks, Inc. as the data controller for EU/UK/Swiss users and imposes an obligation to collect personal information only where a legal basis exists, listing lawful bases including contractual necessity, thereby defining the lawful processing framework under GDPR and equivalent laws.

AI-generated interpretation, not legal advice.

Privacy & data use
FavorableHigh
"If an appeal right is applicable to you, we will let you know in our response to you. As described above, we may also process personal information that has been submitted by a Customer to our Platform Services. If your personal information has been submitted to the Platform Services by or on behalf of a Databricks Customer and you wish to exercise your privacy rights, please direct your request to the relevant Customer. Notice of Right to Opt Out of Data "Sales" and "Targeted Adverting" If you are a U.S. resident and depending on the state in which you live, you may have the right to opt out of the "sale" of your personal information or the disclosure of your personal information for purposes of online targeted advertising (our online advertising activities are explained further in our Cookie Notice ). We do not "sell" personal information in the traditional sense of exchanging information for monetary payment. However, because the definitions of “sale” and “targeted advertising" under applicable law may include the disclosure of your information (which includes your Identifiers and Internet and device activity) to certain types of advertising and marketing partners, we provide the right to opt out of these activities. You may opt out of these activities based on cookies and similar online identifiers by visiting our “Your Privacy Choices“ link on our website footer or by enabling a browser-based opt-out signal, which we will also comply with where legally required. "
“Deletion of your information”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

This segment establishes the procedure for handling appeal rights and directs data subjects whose information was submitted by a Databricks Customer to direct privacy rights requests to that Customer rather than Databricks, and notifies U.S. residents of the right to opt out of data 'sales' and targeted advertising.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" Personalization and Service Improvement to personalize your experience when using our Services; to measure your use of and improve Services, and to develop new products and services; to generate and analyze statistical information about how our Sites and Platform Services are used in the aggregate;"
“How We Use Your Information”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Permits use of personal data for personalization, service measurement, improvement, new product development, and aggregate statistical analysis of Site and Platform usage, establishing these as lawful processing purposes.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" To Communicate with You to send you notifications about the Services, including technical notices, updates, security alerts, administrative messages and invoices; to respond to your questions, comments, and requests, including to keep in contact with you regarding the products and services you use; to contact you to conduct surveys, receive your feedback, conduct audits, and for market research purposes;"
“How We Use Your Information”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Describes Databricks' use of personal data to send service notifications, respond to user inquiries, and conduct surveys and audits, disclosing the communication-related processing purposes for which personal information is used.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" when authorized by law or we deem necessary in good faith to comply with legal process; when required to protect and defend the rights or property of Databricks or our Customers, including the security of our Sites, products and services (including the Platform Services); or when necessary to protect the personal safety, property or other rights of the public, Databricks or our Customers; With your consent: when you instruct us to do so or where you have consented to the disclosure of your information with third parties; or Business Transactions: we may engage in transactions with other companies involving the sale of assets or parts of our business. "
“How We Disclose Your Information”Jump to exact text →
Source: other- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Permits disclosure of personal information for legal compliance, protection of Databricks' or Customers' rights and property, safety of the public, and with user consent, establishing the legal bases and conditions under which third-party disclosure is authorized.

AI-generated interpretation, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from Databricks (DBRX / Foundation)'s own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

12 verified clauses

Clauses in Databricks (DBRX / Foundation)'s policies that work in your favour — commitments the platform made to you.

  • Privacy & data use
    Transfer of your information to a third party, where technically feasible Restriction or objection to certain uses of your information (e.g., opt out of marketing communications) The withdrawal of consent to processing your information for certain purposes t…

    This segment grants data subjects multiple rights including data portability, restriction or objection to processing, withdrawal of consent, and opt-out of profiling for significant decisions, and establishes the procedu…

    📍 “Deletion of your information”Jump to exact text →
  • Audit rights, DPA & residency
    Databricks complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Databricks has certified to the U.S. Dep…

    This segment establishes Databricks' binding obligation to comply with the EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. DPF, including certification of adherence to DPF Principles for processing personal…

    📍 “Data Privacy Framework Notice”Jump to exact text →
  • Audit rights, DPA & residency
    Databricks may transfer your personal information to countries other than your country of residence. In particular, we may transfer your personal information to the United States and other countries where our affiliates, business partners and services provider…

    Discloses that Databricks may transfer personal data internationally (including to the US), acknowledges that destination countries may have different data protection standards, and states that appropriate safeguards (in…

    📍 “International Users and Transfers”Jump to exact text →
  • Privacy & data useads & tracking use
    We may periodically send you marketing communications that promote our products and the Services consistent with your choices. You may opt out from receiving such communications, either by following the unsubscribe instructions in the communication you receive…

    This segment grants users the right to opt out of marketing communications by unsubscribing, while also establishing a restriction that service-related communications (e.g., subscription, security notices) may still be s…

    📍 “Opt out of marketing”Jump to exact text →
  • Audit rights, DPA & residency
    Databricks complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Databricks has certified to the U.S. Dep…

    Reliance on DPF is a legitimate transfer mechanism post-Schrems II, though its long-term legal durability remains subject to CJEU oversight. Users in scope gain enforcement rights via the DPF arbitration panel.

    📍 “Data Privacy Framework Notice”Jump to exact text →
  • Moderation & enforcementterms can change anytime
    Databricks may change this Privacy Notice from time to time. We will post any changes on this page and, if we make material changes, provide a more prominent notice (for example, by adding a statement to the website landing page, providing notice through the P…

    This segment establishes Databricks' procedure for amending the Privacy Notice, including the obligation to post changes and provide prominent notice for material changes, and grants users the implicit right to discontin…

    • Terms changes: advance notice promised
    📍 “Changes to this Notice”Jump to exact text →

+ 6 more verified clauses of this kind on this platform, cited in full in the report.

📋 Rules you must follow

0 verified clauses

What Databricks (DBRX / Foundation) requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

No user-conduct rule has been verified in Databricks (DBRX / Foundation)'s published policies yet.

What the policies actually cover

6 topics
  • Product telemetry & usage tracking8 clauses
  • Advertising & tracking2 protective5 clauses
  • Sale or sharing of personal data1 clause
  • Children's data1 protective1 clause
  • Government & law-enforcement disclosure2 clauses
  • Terms can change at any time1 protective1 clause

21 further verified clauses are cited on this page but not yet assigned a topic.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

166
clauses
39
patterns
39
stances
privacy sharing · 37training use · 2
privacy sharingHIGH“Deletion of your information”

The clause permits sale of personal data or information.

Notice of Right to Opt Out of Data "Sales" and "Targeted Adverting" If you are a U.S. resident and depending on the state in which you live, you may have the right to opt out of the "sale" of your personal information or the disclosure of your personal information for purposes of online targeted advertising (our online advertising activities are explained further in our Cookie Notice ). We do not "sell" personal i...
Open source citation
privacy sharingHIGH“Deletion of your information”

The clause permits sale of personal data or information.

If an appeal right is applicable to you, we will let you know in our response to you. As described above, we may also process personal information that has been submitted by a Customer to our Platform Services. If your personal information has been submitted to the Platform Services by or on behalf of a Databricks Customer and you wish to exercise your privacy rights, please direct your request to the relevant Cus...
Open source citation
privacy sharingHIGH

The clause permits sale of personal data or information.

Notice of Right to Opt Out of Data "Sales" and "Targeted Adverting" If you are a U.S. resident and depending on the state in which you live, you may have the right to opt out of the "sale" of your personal information or the disclosure of your personal information for purposes of online targeted advertising (our online advertising activities are explained further in our Cookie Notice ). We do not "sell" personal i...
Open source citation
privacy sharingHIGH

The clause permits sale of personal data or information.

If an appeal right is applicable to you, we will let you know in our response to you. As described above, we may also process personal information that has been submitted by a Customer to our Platform Services. If your personal information has been submitted to the Platform Services by or on behalf of a Databricks Customer and you wish to exercise your privacy rights, please direct your request to the relevant Cus...
Open source citation
privacy sharingHIGH“Deletion of your information”

The clause permits sale of personal data or information.

If an appeal right is applicable to you, we will let you know in our response to you. As described above, we may also process personal information that has been submitted by a Customer to our Platform Services. If your personal information has been submitted to the Platform Services by or on behalf of a Databricks Customer and you wish to exercise your privacy rights, please direct your request to the relevant Cus...
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tiersprivacy data useworsensHIGH12
All applicable tierstraining useworsensHIGH2
Freedata retentionconditionalMEDIUM2
Freeprivacy data useconditionalMEDIUM2
Standardaudit rights dpa residencyconditionalMEDIUM1
Team / Businessaudit rights dpa residencyconditionalMEDIUM2
Team / Businessprivacy data useconditionalMEDIUM9
Team / Businesssubprocessors data sharingconditionalMEDIUM7
Team / Businesstraining useconditionalMEDIUM2

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

Jul 8, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

when authorized by law or we deem necessary in good faith to comply with legal process; when required to protect and defend the rights or property of Databricks or our Customers, including the security of our Sites, products and services (including the Platform Services); or when necessary to protect the personal safety, property or other rights of the public, Databricks or our Customers; With your consent: when you instruct us to do so or where you have consented to the disclosure of your information with third parties; or Business Transactions: we may engage in transactions with other companies involving the sale of assets or parts of our business.
Open timeline citation
Jul 8, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

Databricks may transfer your personal information to countries other than your country of residence. In particular, we may transfer your personal information to the United States and other countries where our affiliates, business partners and services providers are located. These countries may have different data protection laws to the country where you reside. Wherever we process your personal information, we take appropriate steps to ensure it is protected in accordance with this Privacy Notice and applicable data protection laws. The safeguards we use include implementing the European Commission’s Standard Contractual Clauses for transfers of personal information from the EEA or Switzerland between us and our business partners and service providers, and equivalent measures for transfers of personal information from the United Kingdom and other global jurisdictions with similar transfer requirements. Databricks also offers our Customers the ability to enter into a data processing addendum (DPA) that contains standard contractual clauses, for transfers between us and our Customers. We also make use of supplementary measures to ensure your information is adequately protected.
Open timeline citation
Jul 8, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on data retention

Transfer of your information to a third party, where technically feasible Restriction or objection to certain uses of your information (e.g., opt out of marketing communications) The withdrawal of consent to processing your information for certain purposes that were originally based on your consent Opt out of the processing of your personal information for profiling in furtherance of decisions that produce legal or similarly significant effects, if applicable If you (or an authorized agent acting on your behalf) wish to exercise any of your rights under applicable data protection laws, submit a request online by completing the request form here or by calling +1 833 338 0670, our toll-free hotline. We will respond to requests that we receive in accordance with applicable laws. Databricks may take certain steps to verify your request using information available to us, such as your email address or other information associated with your Databricks account, and if needed we may ask you to provide additional information for the purposes of verifying your request. Any information you provide to us for verification purposes will only be used to process and maintain a record of your request. If you have made a request to access, delete, or correct your personal information and we deny your request, depending on your place of residence you may have the ability to appeal our denial. You can exercise this right by contacting us at the contact details provided at the bottom of this Privacy Notice.
Open timeline citation
Jul 8, 2026data sharingHIGH

Latest stance: sale or sell on privacy data use

If an appeal right is applicable to you, we will let you know in our response to you. As described above, we may also process personal information that has been submitted by a Customer to our Platform Services. If your personal information has been submitted to the Platform Services by or on behalf of a Databricks Customer and you wish to exercise your privacy rights, please direct your request to the relevant Customer. Notice of Right to Opt Out of Data "Sales" and "Targeted Adverting" If you are a U.S. resident and depending on the state in which you live, you may have the right to opt out of the "sale" of your personal information or the disclosure of your personal information for purposes of online targeted advertising (our online advertising activities are explained further in our Cookie Notice ). We do not "sell" personal information in the traditional sense of exchanging information for monetary payment. However, because the definitions of “sale” and “targeted advertising" under applicable law may include the disclosure of your information (which includes your Identifiers and Internet and device activity) to certain types of advertising and marketing partners, we provide the right to opt out of these activities. You may opt out of these activities based on cookies and similar online identifiers by visiting our “Your Privacy Choices“ link on our website footer or by enabling a browser-based opt-out signal, which we will also comply with where legally required.
Open timeline citation
Jul 8, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

If an appeal right is applicable to you, we will let you know in our response to you. As described above, we may also process personal information that has been submitted by a Customer to our Platform Services. If your personal information has been submitted to the Platform Services by or on behalf of a Databricks Customer and you wish to exercise your privacy rights, please direct your request to the relevant Customer. Notice of Right to Opt Out of Data "Sales" and "Targeted Adverting" If you are a U.S. resident and depending on the state in which you live, you may have the right to opt out of the "sale" of your personal information or the disclosure of your personal information for purposes of online targeted advertising (our online advertising activities are explained further in our Cookie Notice ). We do not "sell" personal information in the traditional sense of exchanging information for monetary payment. However, because the definitions of “sale” and “targeted advertising" under applicable law may include the disclosure of your information (which includes your Identifiers and Internet and device activity) to certain types of advertising and marketing partners, we provide the right to opt out of these activities. You may opt out of these activities based on cookies and similar online identifiers by visiting our “Your Privacy Choices“ link on our website footer or by enabling a browser-based opt-out signal, which we will also comply with where legally required.
Open timeline citation
Jul 8, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on training use

We may disclose your personal information to third parties as follows: Affiliates: to our affiliates and subsidiaries for the purposes described in this Privacy Notice; Service Providers: to our service providers who assist us in providing the Services, such as billing, payment processing, customer support, sales and marketing, and data analysis, subject to appropriate contractual prohibitions on their use of your information. We also disclose information to service providers who assist us with detecting and preventing fraud, security threats or other illegal or malicious behavior, for example, Kount who provides fraud detection services where your personal information is processed by Kount in accordance with its Privacy Notice available at kount.com/legal/privacy-policy ; Third-Party Partners and Sponsors: to third-party business partners, such as resellers, distributors, and/or referral partners, who are involved in providing content, products or services to our prospects or Customers. We may also engage with third-party partners who are working with us to organize or sponsor an event to which you have registered to enable them to contact you about the event or their services (but only where we have a lawful basis to do so, such as your consent where required by applicable law); Online Advertising Partners: to online advertising providers that tailor online ads to your interests based on information they collect about your online activity over time and across different services (known as targeting online advertising); Sponsoring Organizations: to the organization that is sponsoring a training or certification program that you take through the Services (e.g., your employer), for example to notify them of your registration and course status; For legal purposes:
Open timeline citation
Jul 8, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

This Privacy Notice explains how Databricks, Inc. and its affiliates (“ Databricks ”, “ we ”, “ our ”, and “ us ”) collects, uses, discloses and otherwise processes your personal information (also known as personal data) in connection with the use of Databricks websites and applications, including software, that link to this Privacy Notice (collectively, the “Sites” and individually, “ Websites ” or “ Applications ”), our data processing platform products and services (the “Platform Services”) and in the usual course of business, such as in connection with our events, sales, and marketing activities (collectively, with Sites and Platform Services, “ Services ”). It also contains information about your choices and privacy rights. If you are a California resident, the California Consumer Privacy Act (“ CCPA ”) requires us to provide you with additional information regarding your rights with respect to your “personal information. This information is described in our Supplemental Privacy Notice to California Residents .
Open timeline citation
Jul 8, 2026model trainingHIGH

Latest stance: training permitted on training use

We use your personal information to provide, maintain, improve and update our Services. Our purposes for collecting your personal information include: To Provide the Services: to provide, maintain, deliver and update the Services; to create and maintain your Databricks account; for billing, payment, or account management; for example, to identify your account and correctly identify your usage of our products and services; to register and provide you with training and certification programs; to provide you with customer service and support;
Open timeline citation

Capture recency

  • Privacy Policy:Last captured 2026-07-08· verified 2026-07-08
  • Terms of Service:Last captured 2026-06-10· verified 2026-06-10verified once — no re-scan in 93 days

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

↓ 50 fewer findings this quarter vs last (60 vs 110). First scan: June 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Databricks (DBRX / Foundation)'s policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Know where the missing document lives?

We haven't yet verified Databricks (DBRX / Foundation)'s Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.

Every finding above is a verbatim quote from Databricks (DBRX / Foundation)'s own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.