Image / Video / Audio Generation · descript.comDescript
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“(b) as part of our research datasets to analyze, maintain, train, and improve our voice technology, and other technology, and for other research and development and data analysis purpose, provided that if we add your Training Audio to our research datasets, we first de-identify the data so it is no longer associated with your account;”
Watch: audit rights dpa residency
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
The policy acknowledges cross-border transfers to lower-protection jurisdictions but only commits to unspecified 'steps', without naming SCCs, BCRs, or other mechanisms, creating uncertainty for EEA/UK/Swiss users.
Restricts the Mac App license to a non-transferable right to use the app only on Apple devices owned or controlled by the user, as permitted by Apple App Store Terms of Service Usage Rules, limiting the scope of permitted use.
Enumerates restrictions on the license, prohibiting sublicensing, resale, reverse engineering, decompilation, and other unauthorized uses — restricting commercial exploitation and technical circumvention of the Descript Service.
Scores derived from 17 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Descript's terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
- Your outputs and prompts are explicitly yours — Descript's terms include affirmatively protective IP language.
- Data handling is conditional — 3 privacy or retention clauses warrant review before using Descript at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Descript's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 185 verified, verbatim-cited findings below — read the citations.
Based on 223 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 65 citationsstaticLast captured 2026-06-07
- Privacy PolicyVerified - read in full - 50 citationsstaticLast captured 2026-07-08
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Grants users a limited, nonexclusive, nontransferable, non-sublicensable, revocable license to access and use the Descript Service for personal or internal business purposes, defining the scope of permitted use.
" 5.1. License Grant. Subject to these Terms, we hereby grant to you a limited, nonexclusive, nontransferable, non-sub-licensable, revocable license to access and use the Descript Service for your own personal or internal business use."
Enumerates the specific legal bases under which the company processes personal data, including contractual necessity and legitimate interests, establishing the lawful grounds for processing obligations under GDPR.
" When we process your personal data we will only do so in the following situations: We need to use information about you to perform our responsibilities under our contract with you such as to process your transcriptions and provide the Ser..."
This is a major section heading that formally introduces and incorporates by reference the data retention provisions that follow.
" Account Information. You may update, correct or delete information provided to us in connection with the Descript Service at any time by contacting us at support@descript.com. If you wish to delete or deactivate your account, you can delet..."
Establishes the procedural requirements for authorized agents submitting privacy rights requests, including proof of authorization, restrictions on sharing sensitive information, and the possibility of verification contact with the data subject.
" If you are submitting a rights request as an authorized agent, you must submit proof of your authorization to make the request, such as a valid power of attorney or signed permission from the subject of the request. Please do not provide a..."
This segment incorporates Google's Privacy Policy and YouTube Terms of Service by reference for data processed via those integrations, provides users with a procedure to manage and revoke YouTube API data access via Google's security settings, and restricts Descript from using data obtained through the Google Workspace API integration for purposes beyond those permitted by the applicable API terms.
"Such use is subject to Google’s Privacy Policy located at http://www.google.com/policies/privacy/ and the YouTube Terms of Service located at https://www.youtube.com/t/terms . In addition to our normal procedures for managing and deleting s..."
This clause requires the user to represent and warrant compliance with U.S. export control and sanctions laws, imposing a legal compliance obligation by prohibiting use by persons in embargoed countries or on U.S. Government restricted party lists.
" Legal Compliance. You represent and warrant that (a) you are not located in a country that is subject to a U.S. Government embargo, or that has been designated by the U.S. Government as a “terrorist supporting” country, and (b) you are not..."
No specific time limits are given; 'legitimate business purposes' is a broad catch-all that could justify indefinite retention beyond what is strictly necessary.
"We store personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations."
The absence of specific retention periods or criteria makes it impossible for users to predict when their personal data (including sensitive media and voiceprints) will be deleted. This is a common GDPR/CPRA compliance concern.
"We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"Target advertisements to you on third-party properties as described below ;"
Use of platform data for off-platform behavioral advertising involves data sharing with ad networks and may constitute a 'sale' or 'sharing' of personal data under CCPA and similar laws, with associated opt-out rights.
AI-generated interpretation, not legal advice.
"(b) You understand that due to the nature of the Generative Tools, Output you generate may not be unique, and it is possible that the Generative Tools may generate the same or similar Output for other users if the Inputs are similar. You also understand and acknowledge that the copyright status of the generated Output may not be clear and that the use of such Generative Tools may affect your ability to obtain or enforce any intellectual property rights in or to the Output. "
This segment disclaims that Output may not be unique and may be generated for other users, and warns that the copyright status of generated Output is uncertain, thereby limiting user expectations regarding exclusivity and enforceability of intellectual property rights in Output.
AI-generated interpretation, not legal advice.
"(b) as part of our research datasets to analyze, maintain, train, and improve our voice technology, and other technology, and for other research and development and data analysis purpose, provided that if we add your Training Audio to our research datasets, we first de-identify the data so it is no longer associated with your account;"
This segment grants Descript permission to include user voice recordings in research datasets for analyzing, maintaining, training, and improving voice and other technology, subject to the condition that data is de-identified before being added to research datasets.
AI-generated interpretation, not legal advice.
"(e) You also acknowledge and agree that we and any vendors, contractors, or other third parties who provide any artificial intelligence technologies or services used to provide the Generative Tools (collectively “Third-Party Providers”), may access and use your Input and Output in order to create and operate Descript and as otherwise permitted under these Terms. This includes use by Descript to train, improve, and develop its models and technologies (unless you have opted out of such use) and the Descript Service and for other research and development purposes. However, our agreements with Third-Party Providers prohibits them from using such Inputs and Outputs to train their models. "
This segment grants Descript and Third-Party Providers permission to access and use user Input and Output to train, improve, and develop models and the Descript Service, subject to an opt-out mechanism and limitations imposed by agreements with Third-Party Providers.
AI-generated interpretation, not legal advice.
"(a) We may use your Project and your other User Content for the purpose of providing the Descript Service. We automatically process your Projects, but that does not involve human access to your Projects unless: (i) you ask or otherwise give permission for us to do so (e.g., for the purpose of providing customer support or if you allow us to use your data to help improve the Descript Service); (ii) you request our White Glove Service – which uses humans (who are subject to confidentiality obligations) to create the transcriptions; (iii) we or third parties are otherwise authorized to access the Projects under these Terms (including as provided in Section 8.4); or (iv) we are required to do so by law."
This segment establishes that Descript processes Projects automatically without human access except in specified circumstances including user consent, White Glove Service requests, or legal authorization, thereby defining the conditions under which human access to user data is permitted.
AI-generated interpretation, not legal advice.
" 25.2 Premium Media Terms. Materials contained in Stock Photos, Stock Illustrations, Stock Footage, Stock Backgrounds, and Stock Music that are made available through the Descript Service as Premium Media are provided by Storyblocks (the “Storyblocks Materials”) and are subject to the Storyblocks EULA, which provides for commercial use of such Storyblocks Materials, and includes certain model releases for such use, in accordance with the terms of the EULA. Additional content libraries (the “Additional Libraries”) are not subject to this license, may not be available for commercial use without a license, and may require that you obtain model clearance. WE MAKE NO REPRESENTATIONS OR WARRANTIES OF ANY KIND, AND DISCLAIM ALL LIABILITY, REGARDING YOUR USE OF THE STORYBLOCKS MATERIALS OR THE ADDITIONAL LIBRARIES, AND YOU AGREE TO LOOK SOLELY TO STORYBLOCKS IN THE EVENT OF ANY CLAIM REGARDING ANY USE OF THE STORYBLOCKS MATERIALS."
This clause incorporates by reference the Storyblocks EULA governing Premium Media (Stock Photos, Illustrations, Footage, Backgrounds, and Music), grants commercial use rights for Storyblocks Materials subject to that EULA, and restricts commercial use of Additional Libraries not covered by that license, establishing both a permission and a restriction on commercial exploitation of licensed content.
AI-generated interpretation, not legal advice.
"(c) Although we are constantly striving to improve the Descript Services and the quality and accuracy of Output, you acknowledge that artificial intelligence and machine learning technologies are rapidly evolving and may produce Output that is inaccurate, unreliable, inappropriate, infringing, or otherwise unsuitable or that does not meet your expectations. "
This segment disclaims accuracy, reliability, and suitability of AI-generated Output, acknowledging the evolving nature of AI technology and warning users that Output may be inaccurate, inappropriate, or infringing, thereby limiting Descript's liability for Output quality.
AI-generated interpretation, not legal advice.
" Note with Respect to the Use of Project Information: Notwithstanding the foregoing, we protect the information contained in the Projects you create using the Descript Service (the "Projects") as confidential information, and limit our use thereof, in accordance with the confidentiality obligations set forth in our Terms of Service. The Descript Service automatically processes your Projects, but it does not involve human access to your Projects unless: 1) you provide your consent; or 2) we are required to do so by law. We may also use your Projects to analyze and improve the Descript Service. You can opt out of having your Projects used to improve the Descript Service by disabling the Share Data with Descript setting ( article here ). Note with Respect to AI Speakers: When you use AI Speakers, we record your voice and use it to create a voice model for the purpose of providing the Descript Service. We may also use and store other training data associated with AI Speakers as part of our research datasets to analyze, maintain, and improve our technology, including our voice technology, and for other research and development and data analysis purposes. However, before doing so, we disassociate the data from your account. In addition, we may have our employees and contractors listen to audio samples of your original and your AI Speakers recordings to test their quality and Descript employees may use your AI Voice to create a series of non-defamatory utterances, solely for internal, quality assurance purposes. "
This segment restricts Descript's use of user-created Projects by designating them as confidential information subject to confidentiality obligations in the Terms of Service, limiting human access to Projects unless user consent is given or legally required, while permitting automated processing and use for service improvement, thereby establishing a confidentiality restriction on project data access and use.
AI-generated interpretation, not legal advice.
" Scope of License. The license granted to you is limited to a non-transferable license to use the Mac App on any iPhone, iPod touch or iPad that you own or control as permitted by the Usage Rules set forth in the Apple App Store Terms of Service."
Restricts the Mac App license to a non-transferable right to use the app only on Apple devices owned or controlled by the user, as permitted by Apple App Store Terms of Service Usage Rules, limiting the scope of permitted use.
AI-generated interpretation, not legal advice.
" 5.2. Restrictions and Limitations. Such license does not include the right to: (a) license, sublicense, sell, resell, rent, transfer, assign, distribute or otherwise commercially exploit or make the Descript Service, or any portion thereof, available to any third party, except as expressly permitted herein and subject to the terms set forth in these Terms; (b) reverse engineer, disassemble, or decompile the App or any other software required for use in connection with Descript or otherwise attempt to discover the source code for, or any trade secrets related to, the App or the Descript Service; (c) remove any copyright, trademark or other proprietary notices from Descript, or any component thereof; (d) modify, alter or create any derivative works of the Descript Service or any component thereof; (e) reproduce or distribute the App or Descript Service or copy any ideas, features, functions, or content thereof, except as expressly permitted under these Terms; or (f) use the Descript Service, or any component thereof, for any purposes other than as expressly permitted herein. All rights not expressly granted in these Terms are reserved by us."
Enumerates restrictions on the license, prohibiting sublicensing, resale, reverse engineering, decompilation, and other unauthorized uses — restricting commercial exploitation and technical circumvention of the Descript Service.
AI-generated interpretation, not legal advice.
" information from a financial institution; (h) consists of Training Audio you are not authorized to use and share with Descript or that attempts to clone or imitate the voice of a non-consenting speaker using our technology; (i) impersonates, or misrepresents your affiliation with, any person or entity; (j) contains any unsolicited promotions, political campaigning, advertising or solicitations; (k) in our sole judgment, is objectionable, restricts or inhibits any other person from using or enjoying the Descript Service; or (l) that would otherwise expose us or any third party to liability, special regulations, or harm of any kind. "
Restricts specific categories of prohibited User Content, including unauthorized Training Audio and content that clones non-consenting speakers' voices, impersonation, spam, and other harmful content — imposing content moderation obligations on users.
AI-generated interpretation, not legal advice.
"We reserve the right to delete or block access to any User Content at any time and for any reason in its sole discretion, including if it receives any notices or otherwise believes that such User Content may be in violation of these Terms or may otherwise violate the rights of, or cause any harm or liability of any kind to, us or any third party."
The 'sole discretion' standard with 'any reason' language means there is no procedural protection for users whose content is removed. There is no requirement for prior notice, explanation, or appeal. Combined with the absence of a stated appeals process, this creates significant risk of arbitrary content removal.
AI-generated interpretation, not legal advice.
"We store personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations."
No specific time limits are given; 'legitimate business purposes' is a broad catch-all that could justify indefinite retention beyond what is strictly necessary.
AI-generated interpretation, not legal advice.
"We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations."
The absence of specific retention periods or criteria makes it impossible for users to predict when their personal data (including sensitive media and voiceprints) will be deleted. This is a common GDPR/CPRA compliance concern.
AI-generated interpretation, not legal advice.
"If you wish to delete or deactivate your account, you can delete your Descript account in your account settings ( article here ), but note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period of time."
The broad exception for 'legitimate business purposes' alongside retention of cached and archived copies means users cannot fully erase their data footprint upon account deletion.
AI-generated interpretation, not legal advice.
"we have disclaimed all warranties of any kind with respect to the Mac App, and therefore, there are no warranties applicable to the Mac App."
A blanket disclaimer of all warranties (express and implied) removes standard consumer protections such as implied warranties of merchantability and fitness for a particular purpose, to the maximum extent permitted by law.
AI-generated interpretation, not legal advice.
" We may also disclose aggregated or anonymized information that does not directly identify you. Please note that any Projects that are designated as “public” or any other information you post in a public area of the Descript Service may be publicly viewable, including any information about you that may be contained in such Project, and will no longer be treated as confidential."
This clause creates an exception to confidentiality protections for aggregated or anonymized information and for Projects designated as public, establishing that such information loses confidential status and may be publicly viewable, which is an operative exception to the platform's general non-disclosure obligations.
AI-generated interpretation, not legal advice.
"We obtain information from other sources. For example, we may collect information from social networks, advertising networks, internet service providers, and data analytics providers. This information includes handles, content, and other information shared with us through third-party features that you use on the Descript Service or posted on social media pages (such as our social media page or other pages accessible to us)."
Data flows from external sources into Descript's user profiles, compounding the personal data picture. Users may not be aware that off-platform behavioral data is being combined with their Descript account data.
AI-generated interpretation, not legal advice.
Common questions about Descript's policies
- Does Descript train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 5 verified findings from Descript's published policy. Informational only, not legal advice.
- Who owns the content you create with Descript?
- You own outputs — with license carve-outs — based on 2 verified findings from Descript's published policy. Informational only, not legal advice.
- Can you use Descript's output commercially?
- Commercial use allowed — with conditions — based on 3 verified findings from Descript's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Descript's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
17 verified clausesClauses in Descript's policies that work in your favour — commitments the platform made to you.
- Confidentiality
“9.2 Confidentiality. Except as otherwise provided in these Terms, we treat your Projects and the User Content contained therein (including audio and video files and written documents) as your "Confidential Information" in accordance with the terms of this Sect…”
This segment establishes Descript's obligation to treat user Projects and User Content as Confidential Information, prohibiting use beyond Permitted Purposes and disclosure to third parties except those with a need-to-kn…
📍 § 9.2Jump to exact text → - Moderation & enforcementterms can change anytime
“We may make changes to these Terms from time to time. The “Last Updated” date indicates when these Terms were last changed. If we make future changes, we will provide you with notice of such changes, for instance by sending an email, providing a notice through…”
Establishes the procedure for amending the Terms, including notice requirements (email, in-service notice, or date update), effective date of amendments, and the user's obligation to stop using the service if they disagr…
- Terms changes: advance notice promised
📍 Terms of Service › “Last Updated: February 25, 2025”Jump to exact text → - Governing law & disputesarbitration & class-action waiver
“Opt-Out - You have the right to opt out of binding arbitration within 30 days of the date you first accepted the terms of this Section 20 by writing to us at Attn: Legal, 375 Alabama St. Suite 300, San Francisco, CA 94110 US, Telephone Number:(415) 231-7449 E-…”
Grants users the right to opt out of binding arbitration within 30 days of first acceptance by providing written notice with specified information to the company's legal department, with the consequence that disputes wil…
📍 § 19Jump to exact text → - Privacy & data usesensitive data (biometric/location/health)
“If you are submitting a rights request as an authorized agent, you must submit proof of your authorization to make the request, such as a valid power of attorney or signed permission from the subject of the request. Please do not provide any sensitive personal…”
Establishes the procedural requirements for authorized agents submitting privacy rights requests, including proof of authorization, restrictions on sharing sensitive information, and the possibility of verification conta…
📍 Privacy Policy › “Authorized Agents”Jump to exact text → - Privacy & data use
“If you have a concern about our processing of personal data that we are not able to resolve, you have the right to lodge a complaint with the data privacy authority where you reside. Contact details for your Data ProtectionAuthority can be found using the link…”
Grants EEA/UK/Swiss data subjects the right to lodge a complaint with their national Data Protection Authority and provides specific contact links for EEA, UK, and Swiss supervisory authorities, constituting a legally re…
📍 Privacy Policy › “Questions or Complaints”Jump to exact text → - Privacy & data use
“You have the right to (1) request to know more about and access your personal information, (2) request deletion of your personal information, and (3) request correction of inaccurate personal information. Contact us to exercise these rights. We may verify you…”
Grants users the legal right to request access to, deletion of, and correction of their personal information, and establishes a procedure for exercising those rights including verification and appeal mechanisms.
📍 Privacy Policy › “Access, Correction, and Deletion”Jump to exact text →
+ 11 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
8 verified clausesWhat Descript requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcementconduct restrictions
“8.3 User Conduct Rules. In using the Descript Service, you must at all times comply with all applicable laws, rules and regulations. All rights not expressly granted in these Terms are reserved by us. You are solely responsible for your conduct while using the…”
Obligates users to comply with applicable laws when using the service and prohibits specified conduct including interference with other users' enjoyment — establishing behavioral restrictions and reserving all rights not…
📍 § 8.3Jump to exact text → - Commercial useconduct restrictions
“5.2. Restrictions and Limitations. Such license does not include the right to: (a) license, sublicense, sell, resell, rent, transfer, assign, distribute or otherwise commercially exploit or make the Descript Service, or any portion thereof, available to any th…”
Enumerates restrictions on the license, prohibiting sublicensing, resale, reverse engineering, decompilation, and other unauthorized uses — restricting commercial exploitation and technical circumvention of the Descript…
📍 § 5.2Jump to exact text → - Moderation & enforcement
“Ownership of the Descript Service, and all content and materials contained therein other than any User Content (as defined below), are owned solely by us or our licensees and are protected by U.S. and international copyright laws. No title to or ownership of t…”
Establishes that Descript owns all content and materials in the service (excluding User Content), that no title transfers to users, and restricts use of Descript's trademarks — defining IP ownership boundaries and tradem…
📍 § 6 (Ownership; Trademarks)Jump to exact text → - Moderation & enforcement
“Where the Training Audio consists of submitted audio rather than a Consent Statement that you record, you agree that you will only submit audio of Consenting Speakers who have authorized you to submit their audio and to create and use their AI Voice. You furth…”
This segment prohibits submission of unauthorized third-party voice recordings as training data, deceptive Consent Statements, or impersonation in Consent Statements, and imposes a representation and warranty that submit…
📍 § 9.3Jump to exact text → - Moderation & enforcement
“information from a financial institution; (h) consists of Training Audio you are not authorized to use and share with Descript or that attempts to clone or imitate the voice of a non-consenting speaker using our technology; (i) impersonates, or misrepresents y…”
Restricts specific categories of prohibited User Content, including unauthorized Training Audio and content that clones non-consenting speakers' voices, impersonation, spam, and other harmful content — imposing content m…
📍 § 8.1Jump to exact text →
+ 3 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
17 topics- Product telemetry & usage tracking5 clauses
- Advertising & tracking1 protective6 clauses
- Sensitive data (biometric, location, health)2 protective2 clauses
- Government & law-enforcement disclosure1 clause
- Data shared with other AI providers1 clause
- Does not train on your content1 protective1 clause
- Trains by default, opt-out available4 clauses
- Arbitration & class-action waiver3 protective8 clauses
- Damages & liability cap6 clauses
- Indemnity direction2 protective2 clauses
- Terms can change at any time1 protective2 clauses
- Deletion rights & post-termination survival1 clause
- Feedback ownership1 clause
- Attribution requirements1 clause
- Human review of your content1 clause
- Breach-notification promises1 clause
- Conduct restrictions3 obligations4 clauses
68 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, Privacy Policy › “Data Retention” addresses how long content is retained, and the Privacy Policy, Privacy Policy › “Use of Information” addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The Terms of Service, § 8.4 describes rights the platform takes in user content, and the Privacy Policy, Privacy Policy › “Third parties when compelled by” describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Verified retention clauses point in different directions: the Privacy Policy, Privacy Policy › “Data Retention” describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “Your Choices” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits commercial or business use.
“25.2 Premium Media Terms. Materials contained in Stock Photos, Stock Illustrations, Stock Footage, Stock Backgrounds, and Stock Music that are made available through the Descript Service as Premium Media are provided by Storyblocks (the “Storyblocks Materials”) and are subject to the Storyblocks EULA, which provides for commercial use of such Storyblocks Materials, and includes certain model releases for such use,...”Open source citation
The clause permits commercial or business use.
“Additional content libraries (the “Additional Libraries”) are not subject to this license, may not be available for commercial use without a license, and may require that you obtain model clearance.”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | improves | LOW | 2 |
| All applicable tiers | data retention | worsens | HIGH | 1 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 15 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 1 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 3 |
| All applicable tiers | output ownership | improves | LOW | 1 |
| All applicable tiers | tier differences | worsens | HIGH | 3 |
| Free | indemnity liability | conditional | MEDIUM | 1 |
| Free | output ownership | worsens | HIGH | 3 |
| Free | prompt ownership | worsens | HIGH | 3 |
| Free | training use | worsens | HIGH | 5 |
| Pro / Paid | commercial use | improves | LOW | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“As described in the “ Note with Respect to Advertising and Analytics ” section above, we process personal information to understand and improve your experience with our Site and to serve you advertisements on non-Descript properties. These activities may result in us selling or sharing identifiers, internet or other electronic network activity information, and inferences with our advertising partners (including social media platforms) so our advertising partners can show ads that are targeted to your interests on other platforms. These activities may be considered targeted advertising under certain laws. You can disable these technologies as described in the Your Choices section above. You may need to renew your opt-out choice if you use a different browser or device to access our Site, or if you clear your cookies. We do not “share” or “sell” any other categories of personal information nor do we knowingly “sell” or “share” personal information about consumers under the age of 16.”Before citation
“5.2. Restrictions and Limitations. Such license does not include the right to: (a) license, sublicense, sell, resell, rent, transfer, assign, distribute or otherwise commercially exploit or make the Descript Service, or any portion thereof, available to any third party, except as expressly permitted herein and subject to the terms set forth in these Terms; (b) reverse engineer, disassemble, or decompile the App or any other software required for use in connection with Descript or otherwise attempt to discover the source code for, or any trade secrets related to, the App or the Descript Service; (c) remove any copyright, trademark or other proprietary notices from Descript, or any component thereof; (d) modify, alter or create any derivative works of the Descript Service or any component thereof; (e) reproduce or distribute the App or Descript Service or copy any ideas, features, functions, or content thereof, except as expressly permitted under these Terms; or (f) use the Descript Service, or any component thereof, for any purposes other than as expressly permitted herein. All rights not expressly granted in these Terms are reserved by us.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“As described in the “ Note with Respect to Advertising and Analytics ” section above, we process personal information to understand and improve your experience with our Site and to serve you advertisements on nonDescript properties. These activities may result in us selling or sharing identifiers, internet or other electronic network activity information, and inferences with our advertising partners (including social media platforms) so our advertising partners can show ads that are targeted to your interests on other platforms. These activities may be considered targeted advertising under certain laws. You can disable these technologies as described in the Your Choices section above. You may need to renew your opt-out choice if you use a different browser or device to access our Site, or if you clear your cookies. We do not “share” or “sell” any other categories of personal information nor do we knowingly “sell” or “share” personal information about consumers under the age of 16.”Before citation
“(d) our employees, vendors, and contractors (including Amazon Mechanical Turk workers) may use your AI Voices to create a series of non-defamatory utterances, solely for internal quality assurance purposes.Other than as described above, only you, and people you explicitly share access with, will have access to generate synthesized audio using your AI Voice. We will not share your Training Audio or your AI Voice with third parties except as expressly described above and in our Privacy Policy .”After citation
Latest stance: third party or vendor sharing on privacy data use
“Descript is based in the United States and we process and store information in the U.S. Therefore, we and our service providers may transfer your information to, or store or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it.”Open timeline citation
Latest stance: training with opt out on training use
“Note with Respect to the Use of Project Information: Notwithstanding the foregoing, we protect the information contained in the Projects you create using the Descript Service (the "Projects") as confidential information, and limit our use thereof, in accordance with the confidentiality obligations set forth in our Terms of Service. The Descript Service automatically processes your Projects, but it does not involve human access to your Projects unless: 1) you provide your consent; or 2) we are required to do so by law. We may also use your Projects to analyze and improve the Descript Service. You can opt out of having your Projects used to improve the Descript Service by disabling the Share Data with Descript setting ( article here ). Note with Respect to AI Speakers: When you use AI Speakers, we record your voice and use it to create a voice model for the purpose of providing the Descript Service. We may also use and store other training data associated with AI Speakers as part of our research datasets to analyze, maintain, and improve our technology, including our voice technology, and for other research and development and data analysis purposes. However, before doing so, we disassociate the data from your account. In addition, we may have our employees and contractors listen to audio samples of your original and your AI Speakers recordings to test their quality and Descript employees may use your AI Voice to create a series of non-defamatory utterances, solely for internal, quality assurance purposes.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“As a general rule, we limit the circumstances in which we disclose your information to third parties and there is no human access to your Projects except as described above. However, in certain circumstances, as described below or as otherwise described in this Privacy Policy, we disclose personal information as follows: We disclose personal information to vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, including, but not limited to, third-party payment processors, advertising partners, and vendors who assist us in providing, developing, testing and improving the Descript Service and our technology; We may disclose personal information to legal authorities and others if we believe disclosure is in accordance with any applicable law, regulation or legal process, or as otherwise required by any applicable law, rule, or regulation or if we believe your actions are inconsistent with the spirit or language of our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of us or others; We disclose personal information to third parties who assist us with marketing; We may disclose personal information to our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests; We may disclose personal information in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business to another company; We may disclose personal information between and among us and our current and future parents, affiliates, and subsidiaries and other companies under common control and”Open timeline citation
Latest stance: indefinite or necessity based on data retention
“We store personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-06-07· verified 2026-06-07verified once — no re-scan in 96 days
- Privacy Policy:Last captured 2026-07-08· verified 2026-07-08
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 479 fewer findings this quarter vs last (50 vs 529). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Descript's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Descript's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.