CRM & Content Operations · forethought.aiForethought AI
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
Partially verified: Privacy Policy assessed · Terms of Service pending. Everything below comes only from what was read in full.
Watch: audit rights dpa residency
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
The open-ended reference to 'any country where Zendesk or its service providers maintain facilities' means users cannot rely on a fixed data residency commitment; relevant for GDPR and cross-border compliance.
Vague retention standards without concrete timeframes make it difficult for users to exercise rights or predict when their data will be deleted; the broad exception categories can justify indefinite retention.
As a data processor under GDPR Art. 28, Forethought's obligations run primarily to the controller (business customer), not the data subject. End users have fewer direct rights against processors, and this clause explicitly redirects privacy inquiries away from Forethought.
Scores derived from 6 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Forethought AI's training terms are conditional — check the tier, opt-out, and enterprise exceptions before relying on protection.
- Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
- Data handling is conditional — 3 privacy or retention clauses warrant review before using Forethought AI at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Forethought AI's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredIP/output assessment pending — terms of service not yet verified This lens receives a band only once its source document has been captured and read in full.
Know where this document lives? Point us to the URL or PDF and the pipeline will verify it.
Based on 76 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Partially verified — Privacy Policy — Verified (read in full, 64 findings); Terms of Service — Capture under review. Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Needs review
A core policy document is captured but requires review before AIRIN can mark the corpus fully verified.
- Privacy PolicyVerified - read in full - 64 citationsstaticLast captured 2026-07-08
- Terms of ServiceCompleteness unconfirmedpdf text
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
As a data processor under GDPR Art. 28, Forethought's obligations run primarily to the controller (business customer), not the data subject. End users have fewer direct rights against processors, and this clause explicitly redirects privacy inquiries away from Forethought.
"In general, Forethought sells its product and services to business customers. As a result, for much of the personal information we process through our product and services, we act as the data processor or sub-processor when processing perso..."
Reserves the right to update or modify the policy at any time without prior notice, establishes the procedure of updating the 'Last Updated' date, and commits to using reasonable efforts to notify users of material changes to information use or disclosure practices.
" The Services and our business may change from time to time. As a result, at times it may be necessary for Forethought to make changes to this Policy, in which case we will update the “Last Updated” date at the top of this Privacy. Forethou..."
Defines Forethought Technologies, Inc. and Zendesk, Inc. as joint data controllers of personal information, establishing the legal entities bearing data controller responsibilities and obligations under applicable privacy law.
" Forethought Technologies, Inc. and Zendesk, Inc. are the joint data controllers of your personal information as described in this Policy, unless otherwise specified. Forethought has developed an intelligent information-retrieval and quest..."
Describes the procedure for supplemental 'just-in-time' disclosures and clarifies that the Policy does not apply to third-party websites or non-Forethought services, thereby delimiting the scope of Forethought's privacy obligations and users' rights under this document.
" In connection with the provision of specific Services, we may provide additional “just-in-time” disclosures or additional information about our data processing practices. These notices may supplement this Policy or clarify Forethought’s pr..."
Incorporates U.S. state privacy law frameworks (including CCPA) by reference, defines 'personal information' to include 'sensitive personal information' as defined under CCPA, and establishes the disclosure obligations for the preceding 12-month collection and sharing activities.
" This section applies if you are a resident of California, Colorado, Connecticut, Virginia, Utah or another U.S. state that has passed a privacy law that requires specific privacy notice disclosures (‘ resident ’ or ‘ residents ’). For purp..."
Defines account access credentials (username, password, public keys, API tokens) as a sensitive category of personal information collected, as required under CCPA sensitive personal information disclosure obligations.
" Account access credentials* such as your username, password, public keys or API tokens "
Specifies the categories of personal information (contact, professional, marketing, authentication) that Forethought collects when users interact with its services, establishing both the scope of collection and the implicit obligation to handle such data in accordance with the Policy.
" When you visit our websites and apps, use our products or services, subscribe to marketing or one of our newsletters, request a demo, fill out our forms, visit our offices, register for an event or webinar, complete a survey, and/or otherw..."
Permits Forethought to process personal information for event management, webinar registration, office visitor registration, and non-disclosure agreement management, relying on contract performance and legitimate interests as legal bases.
" Managing events: We use data to plan and host events or webinars for which you have registered or that you attend, including sending related communications to you, to perform our contract with you or in reliance on our legitimate interests..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"In general, Forethought sells its product and services to business customers. As a result, for much of the personal information we process through our product and services, we act as the data processor or sub-processor when processing personal information. This means that it is our business customers that control what personal information we collect and how we use it. If you have privacy related questions or concerns about the privacy practices of or the choices the relevant business customer has made to share or collect your personal information with us, please contact the relevant business customer directly or review their privacy policies."Permalink to this finding →
As a data processor under GDPR Art. 28, Forethought's obligations run primarily to the controller (business customer), not the data subject. End users have fewer direct rights against processors, and this clause explicitly redirects privacy inquiries away from Forethought.
AI-generated interpretation, not legal advice.
"We use data to analyze trends to identify future opportunities for the development, promotion, and improvement of our Services, in reliance on our legitimate interests in developing and improving our Services, or where required, with your consent. For example, we use data, often in a de-identified form, to develop new features, capabilities, or products, improve the user experience, assess capability requirements, and identify customer opportunities."Permalink to this finding →
Under GDPR Art. 6(1)(f), legitimate interests can justify processing without consent, but users retain a right to object. The clause's framing means users are not automatically opted out of this use.
AI-generated interpretation, not legal advice.
"we collect through our interactions with you to conduct marketing research, advertise to you, provide personalized information about us on and off our websites, and to provide other personalized content based on your activities and interests to the extent it is necessary for our legitimate interest in advertising our Services, or where necessary, to the extent that you have provided your prior consent. Please see the “Your Privacy Rights” section below to learn how you can control the processing of your personal information by Forethought for personalized advertising. For these purposes, we may link or combine information about you with other personal information we get from third parties, to help understand your needs and provide you with better and more personalized service or content."Permalink to this finding →
Use of 'legitimate interest' as a basis for advertising and data combination is a weaker protection for users than consent-based processing; users may not be aware their data is enriched with third-party information for targeted advertising.
AI-generated interpretation, not legal advice.
"We are not responsible for the privacy or data security practices of our business customers, which may differ from those set forth in this Policy."Permalink to this finding →
This disclaimer limits Forethought's liability for downstream data handling by its customers. Under GDPR, a processor is not absolved of all obligations, but this clause signals Forethought will not proactively police customer data practices.
AI-generated interpretation, not legal advice.
" We use your personal information for a variety of purposes and on the legal bases described in this Policy or disclosed to you in our Services, including: Improving and developing the Services: We use data to analyze trends to identify future opportunities for the development, promotion, and improvement of our Services, in reliance on our legitimate interests in developing and improving our Services, or where required, with your consent. For example, we use data, often in a de-identified form, to develop new features, capabilities, or products, improve the user experience, assess capability requirements, and identify customer opportunities. Securing the Services: We process data by tracking use of our websites and services for the purposes of maintaining the safety and security of our Services, including verifying accounts and activity, investigating suspicious activity, and enforcing our terms and policies, in reliance on our legitimate interest in promoting the safety and security of our Services, systems and applications and in protecting our rights and the rights of others. Handling contact and user requests: If you fill out a web form or request support, if you contact us by other means, including via a phone call, we use your data to perform our contract with you or if we do not have a contract directly with you, in reliance on our legitimate interests in fulfilling your requests and communicating with you. "Permalink to this finding →
Grants Forethought permission to use personal data (often in de-identified form) to analyze trends, develop new features, improve user experience, and assess service capabilities, relying on legitimate interests or consent; this directly addresses use of data for product improvement and development including AI/ML training purposes.
AI-generated interpretation, not legal advice.
" Sending marketing communications: We use data we collect to send promotional communications, including product recommendations, and other non-transactional communications (e.g. marketing newsletters, telemarketing calls, SMS, or push notifications) about Forethought according to your marketing preferences. This may include information about our products, promotions, or events as necessary for our legitimate interest in conducting direct marketing, or to the extent you have provided your prior consent. Please see the “Your Privacy Rights” section, below, to learn how you can control the processing of your personal information by Forethought for marketing purposes. Displaying advertising and relevant offers: We use data we collect through our interactions with you to conduct marketing research, advertise to you, provide personalized information about us on and off our websites, and to provide other personalized content based on your activities and interests to the extent it is necessary for our legitimate interest in advertising our Services, or where necessary, to the extent that you have provided your prior consent. Please see the “Your Privacy Rights” section below to learn how you can control the processing of your personal information by Forethought for personalized advertising. For these purposes, we may link or combine information about you with other personal information we get from third parties, to help understand your needs and provide you with better and more personalized service or content. "Permalink to this finding →
Permits Forethought to use collected data to send promotional and marketing communications (including newsletters, telemarketing, SMS, push notifications) based on legitimate interests or user consent, and provides a reference to user controls over such processing.
AI-generated interpretation, not legal advice.
"We use data we collect through our interactions with you to conduct marketing research, advertise to you, provide personalized information about us on and off our websites, and to provide other personalized content based on your activities and interests to the extent it is necessary for our legitimate interest in advertising our Services, or where necessary, to the extent that you have provided your prior consent. Please see the “Your Privacy Rights” section below to learn how you can control the processing of your personal information by Forethought for personalized advertising. For these purposes, we may link or combine information about you with other personal information we get from third parties, to help understand your needs and provide you with better and more personalized service or content."Permalink to this finding →
Combining first-party behavioral data with third-party data for off-site advertising using legitimate interests as the lawful basis is a contested practice under GDPR and ePrivacy rules. Users must proactively exercise rights to opt out.
AI-generated interpretation, not legal advice.
"In carrying out these purposes, we combine data we collect from different contexts or that we obtain from third parties to give you a more seamless, consistent, and personalized experience, to make informed business decisions, and for other legitimate purposes."Permalink to this finding →
Cross-context data combination and open-ended 'legitimate purposes' language provides little specificity about what user data is combined or how, increasing profiling risk.
AI-generated interpretation, not legal advice.
"Forethought will retain your personal information for as long as is necessary for the purposes it was collected, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly. We determine the appropriate retention period for personal information based on the amount, nature and sensitivity of your personal information processed, the potential risk of harm from unauthorized use or disclosure of your personal information and whether we can achieve the purposes of the processing through other means, as well as applicable legal requirements (such as applicable statutes of limitation)."Permalink to this finding →
Vague retention standards without concrete timeframes make it difficult for users to exercise rights or predict when their data will be deleted; the broad exception categories can justify indefinite retention.
AI-generated interpretation, not legal advice.
"We may disclose your personal information to third parties for legitimate purposes subject to this Policy, including as follows: with our affiliates within the Zendesk corporate group (including our parent company, Zendesk, Inc.) to the extent such disclosure of personal information is necessary for integrated customer support, marketing, technical operations, and group-wide account management purposes. with your affiliated customer responsible for your access to the Services if you use our services as an authorized user, to the extent this is necessary including for verifying accounts and activity, investigating suspicious activity, or enforcing our terms and policies. with our contracted vendors, consultants, and other third parties who provide services to us such as IT and system administration and hosting, research and analytics, marketing, customer support, and data enrichment for the purposes described above."
Sharing with parent company (Zendesk), the user's affiliated employer, and third-party data enrichment vendors expands the circle of data recipients significantly; users may not know who ultimately holds their data.
AI-generated interpretation, not legal advice.
"in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction, or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets to another company. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of personal information to an unaffiliated third party."
M&A carve-outs are standard but represent a material risk — data could pass to a company with very different privacy practices; 'reasonable efforts to notify' does not require consent or advance notice.
AI-generated interpretation, not legal advice.
"We maintain primary data centers in the United States. Personal information may be stored and processed in your region or the United States. As we integrate our services, your data may be migrated from Forethought’s legacy infrastructure to the Zendesk AWS infrastructure and processed in any country where Zendesk or its service providers maintain facilities."
The open-ended reference to 'any country where Zendesk or its service providers maintain facilities' means users cannot rely on a fixed data residency commitment; relevant for GDPR and cross-border compliance.
AI-generated interpretation, not legal advice.
" Forethought Technologies, Inc. and Zendesk, Inc. are the joint data controllers of your personal information as described in this Policy, unless otherwise specified. Forethought has developed an intelligent information-retrieval and question-answering engine for the enterprise. Agatha provides the following services:"
Defines Forethought Technologies, Inc. and Zendesk, Inc. as joint data controllers of personal information, establishing the legal entities bearing data controller responsibilities and obligations under applicable privacy law.
AI-generated interpretation, not legal advice.
" Certain Services (in particular, our apps) may request permission to access your location. Where you grant this permission, we will collect information about your location using GPS, wireless, or Bluetooth technology. You can control access to precise location information through your mobile device settings. We also may look up your IP address to determine your general location."
Describes Forethought's collection of precise location data (GPS, wireless, Bluetooth) subject to user permission, and notes the user's right to control access through device settings; establishes both the data collection practice and the user's right to restrict it.
AI-generated interpretation, not legal advice.
" Professional or employment-related information such as your employer name, address, job title, department or job role, resume, desired pay, education and work history "
Defines the category of professional or employment-related information collected, including employer name, job title, resume, and work history, as part of the CCPA-mandated personal information disclosure table.
AI-generated interpretation, not legal advice.
" This section applies if you are a resident of California, Colorado, Connecticut, Virginia, Utah or another U.S. state that has passed a privacy law that requires specific privacy notice disclosures (‘ resident ’ or ‘ residents ’). For purposes of this section, references to “personal information” shall include “sensitive personal information,” as these terms are defined under the California Consumer Privacy Act (‘ CCPA ’). In the preceding 12 months, we collected and (where indicated below) disclosed for a business purpose the following categories of personal information and sensitive personal information (denoted by *) about residents:"
Incorporates U.S. state privacy law frameworks (including CCPA) by reference, defines 'personal information' to include 'sensitive personal information' as defined under CCPA, and establishes the disclosure obligations for the preceding 12-month collection and sharing activities.
AI-generated interpretation, not legal advice.
" Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is no uniform way that browsers communicate the “Do Not Track” signal, the website does not currently interpret, respond to or alter its practices when it receives “Do Not Track” signals. To learn more about “do not track” signals, you can visit http://www.allaboutdnt.com/ . To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/ ."
Disclaims any obligation to interpret or respond to Do Not Track browser signals, explaining that the website does not currently alter its data collection practices in response to such signals due to lack of a uniform standard.
AI-generated interpretation, not legal advice.
" When you visit our websites and apps, use our products or services, subscribe to marketing or one of our newsletters, request a demo, fill out our forms, visit our offices, register for an event or webinar, complete a survey, and/or otherwise use our Services, we ask you to provide certain personal information. This may include: Contact information (such as your name, email address, address or phone number) Professional information (such as your employer name, address, job title, department or job role); Marketing information (such as your contact preferences); Authentication information (such as your username, password, public keys or API tokens); Payment information (such as your bank account, credit or debit card information, and billing address); Applicant information if you apply for a job with Forethought (such as your resume, desired pay, education and work history, whether you are over the age of 18, and visa status. You also may choose to provide your gender, ethnicity, veteran status, disability status, and links to your website, blog, portfolio, or LinkedIn profile); and Online content (which includes personal information disclosed by you on message boards, chat features, and other services or platforms to which you are able to post information and materials, including third party services and platforms). If you ever communicate directly with us, we will maintain a record of those communications and responses. Providing your personal information is optional, but it may be necessary for certain services or features, such as webinar registration, to access content such as whitepapers or to activate or access an app. In such cases, if you do not provide your personal information, we may not be able to fulfil your request."
Specifies the categories of personal information (contact, professional, marketing, authentication) that Forethought collects when users interact with its services, establishing both the scope of collection and the implicit obligation to handle such data in accordance with the Policy.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Forethought AI's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
6 verified clausesClauses in Forethought AI's policies that work in your favour — commitments the platform made to you.
- Privacy & data usesale/sharing of personal data
“Right to Data Portability: You have a right to request a copy of your personal information in a structured, commonly used and machine-readable format and gives you the right to transmit the data to another controller without hindrance. Right to Object: You ha…”
Grants users specific rights including data portability, the right to object to processing, and the right to opt out of targeted advertising, constituting actionable legal entitlements users may exercise against the plat…
📍 § 11 (Your Privacy Rights and Choices)Jump to exact text → - Privacy & data use
“Depending on where you live, you may have some or all of the rights listed below in relation to information that we have collected about you. Note that a number of these rights only apply in certain circumstances, and all of these rights may be limited by law.…”
Enumerates the data subject rights available depending on jurisdiction, while also imposing limitations on those rights by law, trade secret, intellectual property, public interest, or legal retention requirements, there…
📍 § 11 (Your Privacy Rights and Choices)Jump to exact text → - Privacy & data use
“Depending on your location, you may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provid…”
Establishes the procedural requirements for using an authorized agent to exercise privacy rights, including proof of authorization and identity verification, and describes the appeals process for contested decisions on r…
📍 § 11 (Your Privacy Rights and Choices)Jump to exact text → - Privacy & data usesale/sharing of personal data
“Forethought does not rent or sell any personal information . If you are under the age of 18, reside in California, and have a registered account with any of our websites, you have the right to request removal of unwanted data that you publicly post on our web…”
Restricts Forethought from renting or selling personal information, grants California minors the right to request removal of publicly posted data, establishes a procedure for submitting removal requests, and disclaims co…
📍 Privacy Policy › “Selling and/or Sharing of Personal Information”Jump to exact text → - Privacy & data usechildren's data
“Our Services are not intended for children under 18 years of age. We do not knowingly collect, use, or disclose personal information from children under 18. If you are a parent or guardian and you learn that your child has provided us with personal information…”
Restricts the collection, use, or disclosure of personal information from children under 18, and imposes an obligation on parents/guardians to contact the company if they discover their child has provided data, establish…
📍 § 10 (Children’s Personal Information)Jump to exact text → - Data retentiondeletion rights & post-termination survival
“After expiry of the applicable retention periods, your personal information will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further u…”
The carve-out for technically undeletable data is a common but meaningful limitation on deletion rights; the standard 'appropriate measures' is vague and unverifiable by users.
📍 § 8Jump to exact text →
📋 Rules you must follow
0 verified clausesWhat Forethought AI requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Forethought AI's published policies yet.
What the policies actually cover
9 topics- Product telemetry & usage tracking5 clauses
- Advertising & tracking4 clauses
- Sale or sharing of personal data2 protective4 clauses
- Sensitive data (biometric, location, health)3 clauses
- Children's data1 protective1 clause
- Government & law-enforcement disclosure1 clause
- Terms can change at any time1 clause
- Deletion rights & post-termination survival1 protective3 clauses
- Breach-notification promises1 clause
41 further verified clauses are cited on this page but not yet assigned a topic.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits sale of personal data or information.
“Forethought does not rent or sell any personal information . If you are under the age of 18, reside in California, and have a registered account with any of our websites, you have the right to request removal of unwanted data that you publicly post on our websites. To request removal of such data, submit your request in writing to us using the contact information provided below, and Forethought will ensure the dat...”Open source citation
The clause permits sale of personal data or information.
“Forethought does not rent or sell any personal information . If you are under the age of 18, reside in California, and have a registered account with any of our websites, you have the right to request removal of unwanted data that you publicly post on our websites. To request removal of such data, submit your request in writing to us using the contact information provided below, and Forethought will ensure the dat...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction, or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets to another company. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of personal information to an unaffiliated third party.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We may disclose your personal information to third parties for legitimate purposes subject to this Policy, including as follows: with our affiliates within the Zendesk corporate group (including our parent company, Zendesk, Inc.) to the extent such disclosure of personal information is necessary for integrated customer support, marketing, technical operations, and group-wide account management purposes. with your ...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“to (i) comply with laws or to respond to lawful requests and legal process, (ii) protect the rights and property of Forethought and our agents, customers, and others, including to enforce our agreements, policies, and terms of use, or (iii) in an emergency, to protect the personal safety of Forethought, its customers, or any person. in connection with or during negotiation of any merger, financing, acquisition, ba...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | worsens | HIGH | 5 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 3 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 4 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“We automatically collect certain device and usage information when you use or interact with our Services. The information we collect includes: Information about the products or services you looked at or searched for and the Services you used, including time spent and other statistical information. Details about your computers, devices, applications, and networks, including internet protocol (IP) address, cookie identifiers, mobile carrier, Bluetooth device IDs, mobile device ID, mobile advertising identifiers, MAC address, IMEI, Advertiser IDs, and other device identifiers that are automatically assigned to your computer or device when you access the Internet, browser type and language, language preferences, battery level, on/off status, geo-location information, hardware type, operating system, Internet service provider, pages that you visit before and after using the Services, the date and time of your visit, the amount of time you spend on each page, information about the links you click and pages you view within the Services, and other actions taken through use of the Services such as preferences). We may collect this information through our Services or through other methods of web analysis. Details about your Internet, app, or network usage (including URLs or domain names of websites you visit, information about the applications installed on your device, or traffic data). Performance information, crash logs, and other aggregate or statistical information. We collect this information through our Services and through other technologies, such as cookies, web beacons, and clear gifs. For more information, review our Cookie Policy .”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may disclose your personal information to third parties for legitimate purposes subject to this Policy, including as follows: with our affiliates within the Zendesk corporate group (including our parent company, Zendesk, Inc.) to the extent such disclosure of personal information is necessary for integrated customer support, marketing, technical operations, and group-wide account management purposes. with your affiliated customer responsible for your access to the Services if you use our services as an authorized user, to the extent this is necessary including for verifying accounts and activity, investigating suspicious activity, or enforcing our terms and policies. with our contracted vendors, consultants, and other third parties who provide services to us such as IT and system administration and hosting, research and analytics, marketing, customer support, and data enrichment for the purposes described above. with sponsors of events or promotions for which you register. For example, if you attend an event or webinar organized by us, or download or access materials on our website, we may disclose your data with sponsors of the event. If required by applicable law, you can consent to such disclosure via the registration form or by allowing your attendee badge to be scanned at a sponsor booth. In these circumstances, your information will be subject to the sponsors’ privacy statements. If you do not want your information disclosed, you can choose to not opt in upon registration or elect to not have your badge scanned, or you can opt out according to the “Your Privacy Rights” section below.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“to (i) comply with laws or to respond to lawful requests and legal process, (ii) protect the rights and property of Forethought and our agents, customers, and others, including to enforce our agreements, policies, and terms of use, or (iii) in an emergency, to protect the personal safety of Forethought, its customers, or any person. in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction, or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets to another company. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of personal information to an unaffiliated third party.”Open timeline citation
Latest stance: sale or sell on privacy data use
“Forethought does not rent or sell any personal information . If you are under the age of 18, reside in California, and have a registered account with any of our websites, you have the right to request removal of unwanted data that you publicly post on our websites. To request removal of such data, submit your request in writing to us using the contact information provided below, and Forethought will ensure the data is not publicly displayed on our websites, however, please note that data may not be completely or comprehensively removed from systems due to regulatory or legal requirements.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction, or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets to another company. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of personal information to an unaffiliated third party.”Open timeline citation
Latest stance: sale or sell on privacy data use
“Forethought does not rent or sell any personal information . If you are under the age of 18, reside in California, and have a registered account with any of our websites, you have the right to request removal of unwanted data that you publicly post on our websites. To request removal of such data, submit your request in writing to us using the contact information provided below, and Forethought will ensure the data is not publicly displayed on our websites, however, please note that data may not be completely or comprehensively removed from systems due to regulatory or legal requirements.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may disclose your personal information to third parties for legitimate purposes subject to this Policy, including as follows: with our affiliates within the Zendesk corporate group (including our parent company, Zendesk, Inc.) to the extent such disclosure of personal information is necessary for integrated customer support, marketing, technical operations, and group-wide account management purposes. with your affiliated customer responsible for your access to the Services if you use our services as an authorized user, to the extent this is necessary including for verifying accounts and activity, investigating suspicious activity, or enforcing our terms and policies. with our contracted vendors, consultants, and other third parties who provide services to us such as IT and system administration and hosting, research and analytics, marketing, customer support, and data enrichment for the purposes described above. with sponsors of events or promotions for which you register. For example, if you attend an event or webinar organized by us, or download or access materials on our website, we may disclose your data with sponsors of the event. If required by applicable law, you can consent to such disclosure via the registration form or by allowing your attendee badge to be scanned at a sponsor booth. In these circumstances, your information will be subject to the sponsors’ privacy statements. If you do not want your information disclosed, you can choose to not opt in upon registration or elect to not have your badge scanned, or you can opt out according to the “Your Privacy Rights” section below.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“to (i) comply with laws or to respond to lawful requests and legal process, (ii) protect the rights and property of Forethought and our agents, customers, and others, including to enforce our agreements, policies, and terms of use, or (iii) in an emergency, to protect the personal safety of Forethought, its customers, or any person. in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction, or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets to another company. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of personal information to an unaffiliated third party.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-08· verified 2026-07-08
- Terms of Service:Last captured 2026-08-21· verified 2026-06-07verified once — no re-scan in 96 days
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 321 fewer findings this quarter vs last (38 vs 359). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Forethought AI's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Forethought AI's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Forethought AI's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.