Grain
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“Each of us shall maintain all rights, title and interest in and to all our respective patents, inventions, copyrights, trademarks, domain names, trade secrets, know-how and any other intellectual property and/or proprietary rights (collectively, “Intellectual Property Rights”). The rights granted to You, Users and End-Users to use the Service under these…”
Partially verified: Terms of Service assessed · Privacy Policy pending. Everything below comes only from what was read in full.
Watch: confidentiality
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Affirms that each party retains all rights, title, and interest in their respective intellectual property; restricts the license granted to subscribers from conveying any additional rights in the Service or its associated IP; and reserves all rights, title, and interest in the Service to Grain, establishing the IP ownership framework.
While a deletion right is nominally offered, the extensive carve-outs (active account, multi-user context, legal/dispute/enforcement needs) substantially limit its practical effect. Users in multi-user accounts may find deletion of their interaction data effectively blocked indefinitely.
No fixed retention period is specified. The catch-all carve-outs (legal obligations, disputes, enforcement) are standard but, combined with the open-ended primary retention standard, provide users with minimal certainty about when their data will actually be deleted.
Scores derived from 38 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
- Data handling is conditional — 18 privacy or retention clauses warrant review before using Grain at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Grain's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 114 verified, verbatim-cited findings below — read the citations.
privacy assessment pending — privacy policy not yet verified This lens receives a band only once its source document has been captured and read in full.
Know where this document lives? Point us to the URL or PDF and the pipeline will verify it.
Automated assessment against a published rubric — not legal advice.
Partially verified — Privacy Policy — Capture under review; Terms of Service — Verified (read in full, 64 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Needs review
A core policy document is captured but requires review before AIRIN can mark the corpus fully verified.
- Privacy PolicyCompleteness unconfirmed
- Terms of ServiceVerified - read in full - 64 citationsLast captured 2026-08-07
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Grants subscribers a limited right to access and use the Service during the Subscription Term for internal business purposes consistent with their chosen Service Plan, and imposes on the subscriber an obligation to maintain compatible network connections and browser software.
" 2.1 During the Subscription Term and subject to compliance by You, Users, and End-Users with these Terms, You have the limited right to access and use the Service consistent with the Service Plan You subscribe to for Your internal business..."
Describes the personal information collected during account registration (name, address, phone, email, credit card), notes an exception for free-trial users not required to provide credit card data, and discloses use of a third-party intermediary for credit card management, creating collection obligations and an exception.
" Account and Registration Information: If you are Subscriber or User, we ask for and collect Personal Information about you and your Users such as name, address, phone number, email address, and credit card information of the Subscriber, a..."
Unilateral amendment rights with only commercially reasonable notice efforts — not guaranteed advance notice — allows terms to change materially without explicit user consent beyond continued use. The non-waiver clause preserves Grain's ability to enforce previously unenforced provisions at any time.
"Grain may elect to change or supplement the terms of this Agreement from time to time at its sole discretion. Grain will exercise commercially reasonable business efforts to provide notice to You of any material changes to this Agreement. G..."
Defines 'Processing/To Process' with respect to Personal Data, and defines 'Service' to include video conversation workflow tools and the API; these definitions directly scope data processing obligations and the boundaries of the licensed service.
" Processing/To Process: means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultati..."
Establishes that Additional Terms for specific features or functionality are incorporated into the Terms upon activation by the customer or an administrator, and that in case of conflict, Additional Terms control over the base Terms.
"In those instances, We will notify You of such Additional Terms prior to the activation of these features or functionality and the activation of these features or functionality in Your Account will be considered acceptance of the Additional..."
Obligates the customer, Users, and End-Users to comply with U.S. export control and economic sanctions laws, and restricts access to or use of the Service from prohibited jurisdictions or by prohibited persons or entities.
" The Service and other Software or components of the Service which Grain may provide or make available to You, Users or End-Users may be subject to U.S. export control and economic sanctions laws. You agree to comply with all such laws and ..."
Carves out circumstances beyond Grain's reasonable control (force majeure including acts of God, government, terror, technical failures, DDoS attacks) as exceptions to Grain's service availability obligations, and permits suspension upon detection of malicious software.
" circumstances beyond Our reasonable control, such as, but not limited to, acts of God, acts of government, acts of terror or civil unrest, technical failures beyond Our reasonable control (including, without limitation, inability to access..."
The aggregate liability cap tied to prior subscription payments creates a ceiling that may be very low relative to actual harm. For free-tier users this cap would effectively be zero. Combined with the consequential damages waiver in 9.1, practical recovery is severely constrained.
"NOTWITHSTANDING ANYTHING TO THE CONTRARY IN THESE TERMS, GRAIN’S AGGREGATE LIABILITY TO YOU OR ANY THIRD PARTY ARISING OUT OF THESE TERMS OR OTHERWISE IN CONNECTION WITH ANY SUBSCRIPTION TO, OR USE OR EMPLOYMENT OF THE SERVICE, SHALL IN NO ..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"We use the information we collect about you (including Personal Information, to the extent applicable) to (a) provide, operate, maintain and improve the Services; (b) enable you to access and use the Services; (c) process and complete transactions, and send you related information, including purchase confirmations and invoices; (d) send transactional messages, including responses to your comments, questions, and requests; provide customer service and support; and send you technical notices, updates, security alerts, and support and administrative messages; (e) send promotional communications, such as providing you with information about products and services, features, surveys, newsletters, offers, promotions, contests, and events; and provide other news or information about us and our partners; (f) process and deliver contest or sweepstakes entries and rewards; (g) monitor and analyze trends, usage, and activities in connection with the Websites and Services and for marketing or advertising purposes; (h) investigate and prevent fraudulent transactions, unauthorized access to the Services, and other illegal activities; (i) personalize the Websites and Services, including by providing features or advertisements that match your interests and preferences; and (j) comply with our legal obligations, including our obligations related to personal data protection."
The enumerated uses extend well beyond core service delivery into marketing, advertising, and partner communications. Users cannot selectively opt out of individual uses under this clause; the breadth of purposes (a)–(j) increases risk of unwanted data use.
AI-generated interpretation, not legal advice.
"We collect and retain, Personal Information and other information you upload, provide, or create while using the Service ("User-Generated Information"), including information related to: Meeting title, invitation content, participants, meeting link, date, time and duration. We collect activity recorded in the meeting (such as joining or leaving), including activity related to third-party integrations, together with the date, time, person engaged in the activity, and other participants in the meeting with the date, time, duration, and quality ratings that you provide. Message content, sender and recipients, date, and time. If you use a feature of the Services that allows for recordings, we collect and store information from you that you provide in connection with such use and through such recordings, to the extent you provide it to us."
The policy confirms collection and retention of sensitive meeting and communications content but does not specify how long this data is retained or under what conditions it is deleted. Absence of a defined retention limit creates indefinite retention risk.
AI-generated interpretation, not legal advice.
"Your continued use of the Websites or the Services constitutes your agreement to be bound by such changes to this Policy. Your only remedy, if you do not accept the terms of this Policy, is to discontinue use of the Websites and the Services."
Unilateral amendment via continued-use acceptance is a standard but user-unfavourable mechanism. For a privacy policy specifically, this approach may conflict with GDPR requirements for a valid legal basis (particularly consent) when material changes affect how personal data is processed.
AI-generated interpretation, not legal advice.
"If you are a Subscriber or otherwise provide us with Personal Information in connection with your use of our Websites or Services, we will delete this information upon your request, provided that, notwithstanding such request, this information may be retained for as long as you maintain an account for our Services, or as needed to provide you with our Services (in particular for Accounts with multiple Users where we need to retain the interaction with Users who continue to use the Services), comply with our legal obligations, resolve disputes and enforce our agreements."
While a deletion right is nominally offered, the extensive carve-outs (active account, multi-user context, legal/dispute/enforcement needs) substantially limit its practical effect. Users in multi-user accounts may find deletion of their interaction data effectively blocked indefinitely.
AI-generated interpretation, not legal advice.
"We will retain Personal Information that we store and process on behalf of our Subscribers for as long as needed to provide the Services to our Subscribers. We will retain and use this Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements."
No fixed retention period is specified. The catch-all carve-outs (legal obligations, disputes, enforcement) are standard but, combined with the open-ended primary retention standard, provide users with minimal certainty about when their data will actually be deleted.
AI-generated interpretation, not legal advice.
"Following the termination or cancellation of Your subscription to the Service and/or Account, We reserve the right to delete all Your Data in the normal course of operation. Your Data cannot be recovered once Your Account is canceled."
The platform retains unilateral discretion ('reserve the right') on deletion timing, providing no committed data export window or grace period. The irrecoverability clause eliminates any practical remedy for users who fail to export prior to cancellation.
AI-generated interpretation, not legal advice.
" 2.9 From time to time, We may make Beta Services available to You at no charge. You may choose to try such Beta Services in Your sole discretion. Beta Services are intended for evaluation purposes and not for production use, are not supported, and may be subject to additional terms that will be presented to You. Beta Services are not considered “Services” under this Agreement; however, all restrictions, Our reservation of rights and Your obligations concerning the Service, and use of any Third Party Services shall apply equally to Your use of Beta Services. Unless otherwise stated, any Beta Services trial period will expire upon the earlier of one year from the trial start date or the date that a version of the Beta Services becomes generally available without the applicable Beta Services designation. We may discontinue Beta Services at any time in Our sole discretion and may never make them generally available. We will have no liability for any harm or damage arising out of or in connection with a Beta Service. 2.10 You are responsible for compliance with all recording laws. By using the recording capabilities available within the third party service providers authorized by you, you are giving Grain consent to store recordings for any or all meetings or video conferences that you join, if such recordings are stored in our systems. "
Describes Beta Services as available at no charge but not for production use, not supported, potentially subject to additional terms, and excluded from the definition of 'Services'; applies all restrictions and obligations of the main Terms to Beta Services, establishing a differentiated access tier with reduced rights.
AI-generated interpretation, not legal advice.
" Each of us shall maintain all rights, title and interest in and to all our respective patents, inventions, copyrights, trademarks, domain names, trade secrets, know-how and any other intellectual property and/or proprietary rights (collectively, “Intellectual Property Rights”). The rights granted to You, Users and End-Users to use the Service under these Terms do not convey any additional rights in the Service, or in any Intellectual Property Rights associated therewith. Subject only to limited rights to access and use the Service as expressly herein, all rights, title and interest in and to the Service and all hardware, software and other components of or used to provide the Service, including all related intellectual property rights, will remain with and belong exclusively to Grain. Grain shall have a royalty-free, worldwide, transferable, sub-licensable, irrevocable and perpetual license to incorporate into the Service or otherwise use any suggestions, enhancement requests, recommendations or other feedback We receive from You Users, or End-Users, or other third parties acting on Your behalf. Grain, and Grain’s other product and service names, and logos used or displayed on the Service are registered or unregistered trademarks of Grain (collectively, “Marks”), and You may only use such Marks to identify You as a Subscriber; provided You do not attempt, now or in the future, to claim any rights in the Marks, degrade the distinctiveness of the Marks, or use the Marks to disparage or misrepresent Grain, its services or products."
Affirms that each party retains all rights, title, and interest in their respective intellectual property; restricts the license granted to subscribers from conveying any additional rights in the Service or its associated IP; and reserves all rights, title, and interest in the Service to Grain, establishing the IP ownership framework.
AI-generated interpretation, not legal advice.
" Our servers automatically record certain information when you use the Service, including your IP address, operating system type and version, client version, IP addresses along the network path, and the MAC address of your internet connection. We also automatically record information about your usage of the Service, including actions taken, date and time, frequency, duration, quantity, quality, network connectivity, and performance information related to logins, clicks, messages, contacts, content shared, calls, use of video and screen sharing, meetings, cloud recording, and other feature usage information (“Usage Information”) Other information you upload, provide, or create while using the Service ("User-Generated Information"), as further detailed in the “User Generated Information” section below Personal information does not include “Usage Data” which we define as encoded or anonymized information or aggregated data we collect about a group or category of services, features or users which does not contain personally identifying information. Usage Data helps us understand trends in usage of the Service so that we can better consider new features or otherwise tailor the Service. In addition to collecting and using Usage Data ourselves, we may share Usage Data with third parties, including our customers, partners and service providers, for various purposes, including to help us better understand our customers’ needs and improve the Service as well as for advertising and marketing purposes. We do not share Usage Data with third parties in a way that would enable them to identify you personally."
States that servers automatically record specified technical and usage information when users use the Service, obligating the company's systems to collect and retain that data and disclosing the scope of automatic data collection.
AI-generated interpretation, not legal advice.
" We process your information for our legitimate interests and those of third parties. This means that we process your information for things like: Providing, operating; maintaining, and improving our Services; enabling you to access and use the Services; promoting the Services; sending promotional communications, monitoring and analyzing trends, usage, and activities in connection with the Websites and Services; investigating and preventing fraudulent transactions, unauthorized access to the Services, and other illegal activities; (i) personalizing the Websites and Services."
Enumerates specific processing activities permitted under the legitimate-interests legal ground, including operating services, sending promotional communications, monitoring trends, and preventing fraud, establishing the scope of lawful processing under that basis.
AI-generated interpretation, not legal advice.
"We collect and retain, Personal Information and other information you upload, provide, or create while using the Service ("User-Generated Information"), including information related to: Meeting title, invitation content, participants, meeting link, date, time and duration. We collect activity recorded in the meeting (such as joining or leaving), including activity related to third-party integrations, together with the date, time, person engaged in the activity, and other participants in the meeting with the date, time, duration, and quality ratings that you provide. Message content, sender and recipients, date, and time. If you use a feature of the Services that allows for recordings, we collect and store information from you that you provide in connection with such use and through such recordings, to the extent you provide it to us. This information may include Personal Information, if you provide us with Personal Information. Status information, for example about whether and when you are actively viewing a document. All messages and content you share in a meeting, including Personal Data about you or others, will be available to all other participants in that meeting. Our Websites may contain links to other websites and the information practices and the content of such other websites are governed by the privacy statements of such other websites. We encourage you to review the privacy statements of any such other websites to understand their information practices. "
Specifies that the company collects and retains personal information and user-generated content (meeting details, activity, messages) while using the Service, establishing retention and collection obligations over enumerated data types.
AI-generated interpretation, not legal advice.
" Account and Registration Information: If you are Subscriber or User, we ask for and collect Personal Information about you and your Users such as name, address, phone number, email address, and credit card information of the Subscriber, as well as certain related information like Subscriber company name and website name email address and name or alias from each User. If you sign-up for a free trial Account, you are not required to enter your credit card information unless and until you decide to continue with a paid subscription to our Services. A third-party intermediary is used to manage credit card processing. We refer to any information described above as “Account Information” for the purposes of this Policy. By voluntarily providing us with Account Information, you represent that you are the owner of such Personal Information or are otherwise authorized to provide it to us, specifically, if you as a Subscriber provide us Account Information related to the User, you represent that the User has not objected to such processing. Submissions by the Website Visitor: We ask for and collect Personal Information from you when you submit web forms on our Websites or as you use interactive features of the Websites, including, participation in surveys, contests, promotions, sweepstakes, requesting customer support, or communicating with us."
Describes the personal information collected during account registration (name, address, phone, email, credit card), notes an exception for free-trial users not required to provide credit card data, and discloses use of a third-party intermediary for credit card management, creating collection obligations and an exception.
AI-generated interpretation, not legal advice.
" Cookies and Other Tracking Technologies: We and our authorized partners use cookies and other information gathering technologies for a variety of purposes. These technologies may provide us with Personal Information, information about devices and networks you utilize to access our Websites, and other information regarding your interactions with our Websites. Web beacons, tags and scripts may be used on our Websites or in email or other electronic communications we send to you. These assist us in delivering cookies, counting visits to our Websites, understanding usage and campaign effectiveness and determining whether an email has been opened and acted upon. We may receive reports based on the use of these technologies by our third-party service providers on an individual and aggregated basis. We use Local Storage Objects (“LSOs”) such as HTML5 to store content information and preferences. Various browsers may offer their own management tools for removing HTML5 LSOs. Third parties with whom we partner to provide certain features on our Websites use LSOs such as HTML5 and Flash to collect and store information. Logs: As is true with most websites and services delivered over the Internet, we gather certain information and store it in log files when you interact with our Websites and Services. This information includes internet protocol (IP) addresses as well as browser type, internet service provider, URLs of referring/exit pages, operating system, date/time stamp, information you search for, locale and language preferences, identification numbers associated with your devices, your mobile carrier, and system configuration information. "
Discloses that the company and authorized partners use cookies and tracking technologies to collect personal information, device/network data, and interaction data, and describes purposes including delivering cookies, counting visits, and understanding usage, establishing a data-collection and sharing obligation with partners.
AI-generated interpretation, not legal advice.
"Occasionally, we connect Personal Information to information gathered in our log files as necessary to improve our Websites and Services. In such a case, we would treat the combined information in accordance with this Policy. Analytics: We collect analytics information when you use the Websites to help us improve them. We may also share anonymous data about your actions on our Websites with third-party service providers of analytics services."
States that personal information is occasionally linked to log-file data for website improvement and that anonymous analytics data may be shared with third-party analytics providers, establishing processing and data-sharing obligations and a commitment to treat combined data under the same policy.
AI-generated interpretation, not legal advice.
" IP addresses and other information collected passively such as cookies and tracking technologies (further described below), browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and administer the website and/or Products."
Defines passively collected technical and behavioral data categories (IP addresses, cookies, browser type, clickstream, etc.) and describes their use for trend analysis and website administration, creating an obligation/permission framework for that data processing.
AI-generated interpretation, not legal advice.
" If there are any material changes to this Policy, you will be notified by our posting of a prominent notice on Our Website. We encourage you to periodically review this page for the latest information on our privacy practices. Your continued use of the Websites or the Services constitutes your agreement to be bound by such changes to this Policy. Your only remedy, if you do not accept the terms of this Policy, is to discontinue use of the Websites and the Services."
This segment establishes the procedure for notifying users of material policy changes via website notice, sets the consequence of continued use as acceptance of changes, and specifies that the only remedy for non-acceptance is discontinuation of services — creating both a binding obligation on the user and a limitation on available remedies.
AI-generated interpretation, not legal advice.
" Upon request, we will provide you with information about whether we hold and otherwise process, or process on behalf of a third party, any of your Personal Information. To request this information please contact us at privacy@grain.co. Subscribers to our Services may update or change their Account Information by editing their profile or organization record or by contacting privacy@grain.co for more detailed instructions. To make a request to have Personal Information maintained by us returned to you or removed, please email privacy@grain.co. Requests to access, change, or remove your information will be handled within thirty 30 days. An individual who seeks access to, or who seeks to correct, amend, or delete inaccuracies in Personal Information stored or processed by us on behalf of a Subscriber should direct his/her query to the Subscriber (the data controller). Upon receipt of a request from one of our Subscribers for us to remove the data, we will respond to their request within thirty (30) days. We will retain Personal Information that we store and process on behalf of our Subscribers for as long as needed to provide the Services to our Subscribers. We will retain and use this Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. If you are a Subscriber or otherwise provide us with Personal Information in connection with your use of our Websites or Services, we will delete this information upon your request, provided that, notwithstanding such request, this information may be retained for as long as you maintain an account for our Services, or as needed to provide you with our Services (in particular for Accounts with multiple Users where we need to retain the interaction with Users who continue to"
Grants users the right to request information about whether their personal data is held or processed, to update account information, and to request return or deletion of personal information, providing a procedure (contacting privacy@grain.co) for exercising these rights.
AI-generated interpretation, not legal advice.
" We may assign or transfer this Policy, as well as your account and related information and data, including any Personal Information, to any person or entity that acquires all or substantially all of our business, stock or assets, or with whom we merge."
Permits the company to assign or transfer the privacy policy, user accounts, and personal information to any acquirer of the business or in a merger, establishing a data-transfer right in the context of business transactions.
AI-generated interpretation, not legal advice.
Common questions about Grain's policies
- Can you use Grain's output commercially?
- Commercial use allowed — with conditions — based on 1 verified finding from Grain's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Grain's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
5 verified clausesClauses in Grain's policies that work in your favour — commitments the platform made to you.
- Confidentiality
“3.1 Subject to the express permissions of these Terms, You and Grain will protect each other’s Confidential Information from unauthorized use, access or disclosure in the same manner as each protects its own Confidential Information, but with no less than reas…”
Imposes mutual obligations on both Grain and the subscriber to protect each other's Confidential Information from unauthorized use, access, or disclosure using at least reasonable care, and restricts use of Confidential…
📍 § 3.1Jump to exact text → - Subprocessors & data sharing
“6.4 Unless otherwise stated, Our charges do not include any taxes, levies, duties or similar governmental assessments, including value-added, sales, use or withholding taxes assessable by any local, state, provincial or foreign jurisdiction (collectively “Taxe…”
Establishes that Grain's charges exclude taxes and that subscribers are responsible for paying applicable taxes except those based on Grain's income; obligates subscribers to pay taxes invoiced by Grain and describes the…
📍 § 6.3Jump to exact text → - Privacy & data usechildren's data
“We do not knowingly collect any Personal Information from children under the age of 16. If you are under the age of 16, please do not use or submit any Personal Information through our Websites or Services. We encourage parents and legal guardians to monitor t…”
Restricts the company from knowingly collecting personal information from children under 16, prohibits such children from submitting data, and establishes a procedure for reporting suspected violations, creating a compli…
- Designated security contact: privacy@grain.co
📍 § 13 (CHILDREN’S PERSONAL INFORMATION)Jump to exact text → - Privacy & data use
“We may ask for your agreement to process your information for specific purposes and you have the right to withdraw your consent at any time. For example, we ask for your consent to publish your testimonial, if it includes your identification. If you wish to wi…”
Grants users the right to withdraw consent for processing at any time and provides a procedure (contacting privacy@grain.co) for exercising that right, while noting a consent-based processing example (testimonials with i…
- Designated security contact: privacy@grain.co
📍 § 7 (LEGAL GROUNDS FOR PROCESSING)Jump to exact text → - Privacy & data useads & tracking use
“We offer those who provide personal contact information a means to choose how we use the information provided. You can opt-out of receiving marketing and non-transactional communications by clicking on the “unsubscribe” link located on the bottom of our market…”
Grants users the right to opt out of marketing and non-transactional communications by unsubscribing via email link or contacting privacy@grain.co, establishing a user right and a corresponding procedure.
📍 § 9 (CHOICE AND COMMUNICATIONS PREFERENCES)Jump to exact text →
📋 Rules you must follow
3 verified clausesWhat Grain requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcement
“160.103; (l) use the Service to knowingly post transmit, upload, link to, send or store any viruses, malware, Trojan horses, time bombs, or any other similar harmful software (“Malicious Software”); or (m) try to use, or use the Service in violation of these T…”
Prohibits use of the Service to store or transmit malicious software and requires compliance with these Terms; also imposes on subscribers the obligation to ensure Users and End-Users comply with the Terms and that all a…
📍 § 2.3Jump to exact text → - Moderation & enforcementconduct restrictions
“The Service and other Software or components of the Service which Grain may provide or make available to You, Users or End-Users may be subject to U.S. export control and economic sanctions laws. You agree to comply with all such laws and regulations as they r…”
Obligates the customer, Users, and End-Users to comply with U.S. export control and economic sanctions laws, and restricts access to or use of the Service from prohibited jurisdictions or by prohibited persons or entitie…
📍 § 12 (EXPORT COMPLIANCE AND USE RESTRICTIONS)Jump to exact text → - Moderation & enforcement
“of any person’s privacy rights; (f) use the Service to send unsolicited or unauthorized junk mail, videos, spam, pyramid schemes or other forms of duplicative or unsolicited messages; (g) use the Service to store or transmit files, materials, data, text, audio…”
Enumerates prohibited uses of the Service including violations of privacy rights, sending spam, infringing intellectual property, disrupting service integrity, and reverse engineering source code, constituting use restri…
📍 § 2.3Jump to exact text →
What the policies actually cover
11 topics- Product telemetry & usage tracking5 clauses
- Advertising & tracking1 protective6 clauses
- Children's data1 protective1 clause
- Government & law-enforcement disclosure4 clauses
- Damages & liability cap6 clauses
- Terms can change at any time6 clauses
- Deletion rights & post-termination survival4 clauses
- Auto-renewal & cancel window1 clause
- Feedback ownership1 clause
- Breach-notification promises1 clause
- Conduct restrictions1 obligation2 clauses
27 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Verified retention clauses point in different directions: the Terms of Service, § 9 (CHOICE AND COMMUNICATIONS PREFERENCES) describes broad or open-ended retention, while the Terms of Service, § 9 (CHOICE AND COMMUNICATIONS PREFERENCES) describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause provides a deletion or time-bounded retention path.
“Upon request, we will provide you with information about whether we hold and otherwise process, or process on behalf of a third party, any of your Personal Information. To request this information please contact us at privacy@grain.co. Subscribers to our Services may update or change their Account Information by editing their profile or organization record or by contacting privacy@grain.co for more detailed instru...”Open source citation
The clause provides a deletion or time-bounded retention path.
“Upon request, we will provide you with information about whether we hold and otherwise process, or process on behalf of a third party, any of your Personal Information. To request this information please contact us at privacy@grain.co. Subscribers to our Services may update or change their Account Information by editing their profile or organization record or by contacting privacy@grain.co for more detailed instru...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“You agree that any dispute, claim, or controversy between you and Grain arising in connection with or relating in any way to these Agreements or to your relationship with Grain as a user of the Services (whether based in contract, tort, statute, fraud, misrepresentation, or any other legal theory, and whether the claims arise during or after the termination of the Agreements) will be determined by mandatory bindin...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“18. ARBITRATION”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“You agree that any dispute, claim, or controversy between you and Grain arising in connection with or relating in any way to these Agreements or to your relationship with Grain as a user of the Services (whether based in contract, tort, statute, fraud, misrepresentation, or any other legal theory, and whether the claims arise during or after the termination of the Agreements) will be determined by mandatory bindin...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | conditional | MEDIUM | 1 |
| All applicable tiers | confidentiality | conditional | MEDIUM | 1 |
| All applicable tiers | data retention | improves | LOW | 3 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 6 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 7 |
| All applicable tiers | privacy data use | worsens | HIGH | 9 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 4 |
| Api | subprocessors data sharing | conditional | MEDIUM | 1 |
| Free | indemnity liability | conditional | MEDIUM | 1 |
| Free | prompt ownership | worsens | HIGH | 2 |
| Free | subprocessors data sharing | worsens | HIGH | 4 |
| Pro / Paid | privacy data use | conditional | MEDIUM | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“We never sell your data. It's simple: Your personal information and calls are not for sale. Ever.”Before citation
“Our servers automatically record certain information when you use the Service, including your IP address, operating system type and version, client version, IP addresses along the network path, and the MAC address of your internet connection. We also automatically record information about your usage of the Service, including actions taken, date and time, frequency, duration, quantity, quality, network connectivity, and performance information related to logins, clicks, messages, contacts, content shared, calls, use of video and screen sharing, meetings, cloud recording, and other feature usage information (“Usage Information”) Other information you upload, provide, or create while using the Service ("User-Generated Information"), as further detailed in the “User Generated Information” section below Personal information does not include “Usage Data” which we define as encoded or anonymized information or aggregated data we collect about a group or category of services, features or users which does not contain personally identifying information. Usage Data helps us understand trends in usage of the Service so that we can better consider new features or otherwise tailor the Service. In addition to collecting and using Usage Data ourselves, we may share Usage Data with third parties, including our customers, partners and service providers, for various purposes, including to help us better understand our customers’ needs and improve the Service as well as for advertising and marketing purposes. We do not share Usage Data with third parties in a way that would enable them to identify you personally.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“Our servers automatically record certain information when you use the Service, including your IP address, operating system type and version, client version, IP addresses along the network path, and the MAC address of your internet connection. We also automatically record information about your usage of the Service, including actions taken, date and time, frequency, duration, quantity, quality, network connectivity, and performance information related to logins, clicks, messages, contacts, content shared, calls, use of video and screen sharing, meetings, cloud recording, and other feature usage information (“Usage Information”) Other information you upload, provide, or create while using the Service ("User-Generated Information"), as further detailed in the “User Generated Information” section below Personal information does not include “Usage Data” which we define as encoded or anonymized information or aggregated data we collect about a group or category of services, features or users which does not contain personally identifying information. Usage Data helps us understand trends in usage of the Service so that we can better consider new features or otherwise tailor the Service. In addition to collecting and using Usage Data ourselves, we may share Usage Data with third parties, including our customers, partners and service providers, for various purposes, including to help us better understand our customers’ needs and improve the Service as well as for advertising and marketing purposes. We do not share Usage Data with third parties in a way that would enable them to identify you personally.”Before citation
“We never sell your data. It's simple: Your personal information and calls are not for sale. Ever.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“We never sell your data. It's simple: Your personal information and calls are not for sale. Ever.”Before citation
“Our servers automatically record certain information when you use the Service, including your IP address, operating system type and version, client version, IP addresses along the network path, and the MAC address of your internet connection. We also automatically record information about your usage of the Service, including actions taken, date and time, frequency, duration, quantity, quality, network connectivity, and performance information related to logins, clicks, messages, contacts, content shared, calls, use of video and screen sharing, meetings, cloud recording, and other feature usage information (“Usage Information”) Other information you upload, provide, or create while using the Service ("User-Generated Information"), as further detailed in the “User Generated Information” section below Personal information does not include “Usage Data” which we define as encoded or anonymized information or aggregated data we collect about a group or category of services, features or users which does not contain personally identifying information. Usage Data helps us understand trends in usage of the Service so that we can better consider new features or otherwise tailor the Service. In addition to collecting and using Usage Data ourselves, we may share Usage Data with third parties, including our customers, partners and service providers, for various purposes, including to help us better understand our customers’ needs and improve the Service as well as for advertising and marketing purposes. We do not share Usage Data with third parties in a way that would enable them to identify you personally.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“Cookies and Other Tracking Technologies: We and our authorized partners use cookies and other information gathering technologies for a variety of purposes. These technologies may provide us with Personal Information, information about devices and networks you utilize to access our Websites, and other information regarding your interactions with our Websites. Web beacons, tags and scripts may be used on our Websites or in email or other electronic communications we send to you. These assist us in delivering cookies, counting visits to our Websites, understanding usage and campaign effectiveness and determining whether an email has been opened and acted upon. We may receive reports based on the use of these technologies by our third-party service providers on an individual and aggregated basis. We use Local Storage Objects (“LSOs”) such as HTML5 to store content information and preferences. Various browsers may offer their own management tools for removing HTML5 LSOs. Third parties with whom we partner to provide certain features on our Websites use LSOs such as HTML5 and Flash to collect and store information. Logs: As is true with most websites and services delivered over the Internet, we gather certain information and store it in log files when you interact with our Websites and Services. This information includes internet protocol (IP) addresses as well as browser type, internet service provider, URLs of referring/exit pages, operating system, date/time stamp, information you search for, locale and language preferences, identification numbers associated with your devices, your mobile carrier, and system configuration information.”Before citation
“We never sell your data. It's simple: Your personal information and calls are not for sale. Ever.”After citation
Latest stance: arbitration or waiver on governing law disputes
“You agree that any dispute, claim, or controversy between you and Grain arising in connection with or relating in any way to these Agreements or to your relationship with Grain as a user of the Services (whether based in contract, tort, statute, fraud, misrepresentation, or any other legal theory, and whether the claims arise during or after the termination of the Agreements) will be determined by mandatory binding individual (not class) arbitration. You and Grain further agree that the arbitrator shall have the exclusive power to rule on his or her own jurisdiction, including any objections with respect to the existence, scope or validity of the Arbitration Agreement or to the arbitrability of any claim or counterclaim. Arbitration is more informal than a lawsuit in court. THERE IS NO JUDGE OR JURY IN ARBITRATION, AND COURT REVIEW OF AN ARBITRATION AWARD IS LIMITED. There may be more limited discovery than in court. The arbitrator must follow this agreement and can award the same damages and relief as a court (including attorney fees), except that the arbitrator may not award any relief, including declaratory or injunctive relief, benefiting anyone but the parties to the arbitration. This arbitration provision will survive termination of the Agreements.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Our servers automatically record certain information when you use the Service, including your IP address, operating system type and version, client version, IP addresses along the network path, and the MAC address of your internet connection. We also automatically record information about your usage of the Service, including actions taken, date and time, frequency, duration, quantity, quality, network connectivity, and performance information related to logins, clicks, messages, contacts, content shared, calls, use of video and screen sharing, meetings, cloud recording, and other feature usage information (“Usage Information”) Other information you upload, provide, or create while using the Service ("User-Generated Information"), as further detailed in the “User Generated Information” section below Personal information does not include “Usage Data” which we define as encoded or anonymized information or aggregated data we collect about a group or category of services, features or users which does not contain personally identifying information. Usage Data helps us understand trends in usage of the Service so that we can better consider new features or otherwise tailor the Service. In addition to collecting and using Usage Data ourselves, we may share Usage Data with third parties, including our customers, partners and service providers, for various purposes, including to help us better understand our customers’ needs and improve the Service as well as for advertising and marketing purposes. We do not share Usage Data with third parties in a way that would enable them to identify you personally.”Open timeline citation
Latest stance: deletion or time bound on data retention
“Upon request, we will provide you with information about whether we hold and otherwise process, or process on behalf of a third party, any of your Personal Information. To request this information please contact us at privacy@grain.co. Subscribers to our Services may update or change their Account Information by editing their profile or organization record or by contacting privacy@grain.co for more detailed instructions. To make a request to have Personal Information maintained by us returned to you or removed, please email privacy@grain.co. Requests to access, change, or remove your information will be handled within thirty 30 days. An individual who seeks access to, or who seeks to correct, amend, or delete inaccuracies in Personal Information stored or processed by us on behalf of a Subscriber should direct his/her query to the Subscriber (the data controller). Upon receipt of a request from one of our Subscribers for us to remove the data, we will respond to their request within thirty (30) days. We will retain Personal Information that we store and process on behalf of our Subscribers for as long as needed to provide the Services to our Subscribers. We will retain and use this Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. If you are a Subscriber or otherwise provide us with Personal Information in connection with your use of our Websites or Services, we will delete this information upon your request, provided that, notwithstanding such request, this information may be retained for as long as you maintain an account for our Services, or as needed to provide you with our Services (in particular for Accounts with multiple Users where we need to retain the interaction with Users who continue to”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“When used in these Terms with the initial letters capitalized, in addition to terms defined elsewhere in these Terms, the following terms have the following meanings: Account: means all Grain accounts or instances created by or on behalf of Subscriber within the Service. API: means the application programming interfaces developed and enabled by Grain that permit Subscribers to access certain functionality provided by the Services. Beta Services: means a product, service or functionality provided by Grain that may be made available to You to try at Your option at no additional charge which is clearly designated as beta, pilot, limited release, non-production, early access, evaluation, labs or by a similar description. Confidential Information: means all information disclosed by You to Grain or by Grain to You which is in tangible form and labeled “confidential” (or with a similar legend) or which a reasonable person would understand to be confidential given the nature of the information and circumstances of disclosure. For purposes of these Terms, Your Data shall be deemed Confidential Information. Notwithstanding the foregoing, Confidential Information shall not include information that (a) was already known to the receiving party at the time of disclosure by the disclosing party; (b) was or is obtained by the receiving party by a third party not known by the receiving party to be under an obligation of confidentiality with respect to such information; (c) is or becomes generally available to the public other than by violation of these Terms; or (d) was or is independently developed by the receiving party without use of the disclosing party’s Confidential Information.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-07· verified 2026-08-07
- Terms of Service:Last captured 2026-08-07· verified 2026-08-07
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 2 fewer findings this quarter vs last (120 vs 122). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Grain's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Grain's Privacy Policy. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Grain's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.