CRM & Content Operations · iterable.comIterable
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“Your Proprietary Rights. As between you and Iterable, you own all rights, title and interest in and to all Customer Data. You understand and allow Iterable (i) the rights provided under these Terms to provide you the selected Services and (ii) to use your logo and name as appropriate on the Iterable website(s) and certain marketing materials.”
Watch: indemnity liability
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Excludes Iterable's liability for indirect, incidental, punitive, and consequential damages including loss of profits, data, and Customer Data, with a jurisdictional carve-out for limitations not permitted by local law.
Restricts users from transmitting communications designed to obtain unauthorized account or private information, prohibits security violations, and disclaims Iterable liability for service failures caused by Customer Data or third-party equipment, establishing user responsibility for all account activity.
Restricts processing of special/sensitive categories of personal data and criminal conviction data to circumstances permitted by applicable legislation or with explicit consent, and limits other processing to legal compliance obligations.
Scores derived from 62 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Your outputs and prompts are explicitly yours — Iterable's terms include affirmatively protective IP language.
- Data handling is conditional — 3 privacy or retention clauses warrant review before using Iterable at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Iterable's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 129 verified, verbatim-cited findings below — read the citations.
Based on 188 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 103 citationsstaticLast captured 2026-08-24
- Terms of ServiceVerified - read in full - 16 citationsstaticLast captured 2026-08-24
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Defines the purpose of the Privacy Notice as governing how Iterable processes personal data in connection with its business, Site, and Services; establishes the document's legal scope and defines the key term 'personal data' as used throughout.
" This Privacy Notice sets out how Iterable processes your personal data (or personal information or similar under other data legislation around the world – referred to only as “personal data” in this Privacy Notice) in connection with our b..."
Describes the use of click-through URLs and cookies on behalf of Customers to track End User interest and measure communications effectiveness, clarifies that Iterable places cookies but the Customer controls the data, and states the legal basis (legitimate interest), establishing processing obligations and controller/processor roles.
"Please see our Cookie Policy for further information, including details of our third-party partners.In some of our email messages, on behalf of our Customer, we use a “click-through URL” linked to certain websites administered by us or on o..."
Disclaims Iterable's control over and responsibility for third-party websites and services linked from its Site, and limits the Privacy Notice's applicability to interactions with those third parties.
" This Privacy Notice only applies to personal data processed by us through your use of our Site and/or in connection with our business operations. However, from time to time, our Site may contain links to third-party websites and services. ..."
Grants California consumers the right to know about personal information collected about them by the business, as secured by CCPA.
" The right to know about the personal information a business collects about them "
Obliges Iterable to collect and process Contact and Identity Data of contacts within engaged service organizations, specifying the legal basis (performing contractual obligations) and purposes (managing relationships, receiving and providing services).
" Receipt of services If we have engaged an organisation to provide us or our Customer with services (for example, IT support or financial advice), we will collect and process your personal data (including Contact and Identity Data) if you a..."
Defines key terms used throughout the notice: 'Customer,' 'End User,' 'Iterable Platform,' 'Services,' and 'Site'; these definitions determine the scope of data processing obligations, rights, and restrictions throughout the document.
" “Customer” refers to an organisation who is a customer of Iterable; “End User” refers to our Customer’s end users; “Iterable Platform” means the business to business cross channel marketing platform that Iterable provides to its Custom..."
States that the Privacy Notice is intended to meet GDPR (EU and UK) requirements and references the CCPA and Country Specific Provisions section; incorporates regulatory frameworks by reference and establishes compliance obligations under those regimes.
" Finally, this Privacy Notice is intended to meet the requirements of the Regulation (EU) 2016/79 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (known as “GDPR”), a..."
Obliges Iterable to retain copies of personal information for business or legal purposes (billing, legal, litigation) and to delete that information when it is no longer needed and legally permissible to do so.
" In some circumstances we are required to hold onto a copy of your personal information for business or legal purposes, this can include billing, technical support, law enforcement or litigation. When we no longer need this information we w..."
Clause A states that legitimate interests can be a legal basis for online personal advertising, while Clause B primarily states consent is required for data collected via non-essential cookies, only allowing other bases in 'certain circumstances' without clarifying if advertising under legitimate interests falls into this exception, creating confusion about the default legal basis.
"Our legal basis for processing Please see the “Insight and analysis – Site” section above to learn about the legal basis that we rely on to collect data via the use of Cookies.Where we use your personal data to display online personal advertising to you, we rely on the consent that you have provided in respect of the collection of such data, or it is otherwise in our legitimate interests to promote our Site and Services to you.Our third party partners may rely on a different lawful basis in respect of their use of your personal data. Please read the privacy policy of the relevant third-party provider, as set out in our Cookie Policy and/or our Cookie preference centre. If we advertise to you on social media and other platforms We share your email address (usually in an encrypted or ‘hashed’ form) with third-party providers of social media platforms and other services, such as Facebook and LinkedIn and other similar platforms (“Social Platforms”), so that the third party providers can try to “match” your data with the data of their registered users of their Social Platforms. Where there is a successful match, we will display our advertising to you when you use the relevant Social Platform (e.g. on your LinkedIn newsfeed). This is known as “custom audience” advertising, because we “customise” the audience that we want to reach on the relevant service.Some of the advertising that you see may be personalised to you. The data that we use to personalise our advertising, such as your Profile Data and Behavioural Data, will not be provided to the third-party providers of the Social Platforms. "
"We may track click-through data to assist in determining interest in particular topics and measure the effectiveness of these communications.Our legal basis for processingWhere your data is collected through the use of non-essential cookies, we rely on consent to collect your personal data and for the onward processing purpose. Please see our Cookie Policy for further information, including details of our third-party partners.In certain circumstances, we may rely on another lawful basis when we use your personal data collected via the use of cookies. For example, where we use personal data collected through the use of analytics cookies to analyse how you use our Site, it is in our legitimate interest to use your personal data in such a way to improve our Site and Services. If you link to social media sites and interact with our social media pages If you click on one of the social media links on our Site or otherwise interact with our social media pages such as on Twitter, Linkedin or Instagram (including interacting with any ‘like’ or similar embedded features on our Site or social media accounts), we and the relevant social media platform may receive information relating to such interaction and may share your personal data in connection with this purpose, such as certain Behavioural Data and Technical Data. For more information about how we use this personal data, please see the “Site insight and analysis.” section above.The relevant social media platform may also be a controller in respect of the personal data that is collected via your use of our social media pages and may use that personal data for additional purposes. "
Within one documentClause A states that legitimate interests can be a legal basis for online personal advertising, while Clause B primarily states consent is required for data collected via non-essential cookies, only allowing other bases in 'certain circumstances' without clarifying if advertising under legitimate interests falls into this exception, creating confusion about the default legal basis.
"Our legal basis for processing Please see the “Insight and analysis – Site” section above to learn about the legal basis that we rely on to collect data via the use of Cookies.Where we use your personal data to display online personal advertising to you, we rely on the consent that you have provided in respect of the collection of such data, or it is otherwise in our legitimate interests to promote our Site and Services to you.Our third party partners may rely on a different lawful basis in respect of their use of your personal data. Please read the privacy policy of the relevant third-party provider, as set out in our Cookie Policy and/or our Cookie preference centre. If we advertise to you on social media and other platforms We share your email address (usually in an encrypted or ‘hashed’ form) with third-party providers of social media platforms and other services, such as Facebook and LinkedIn and other similar platforms (“Social Platforms”), so that the third party providers can try to “match” your data with the data of their registered users of their Social Platforms. Where there is a successful match, we will display our advertising to you when you use the relevant Social Platform (e.g. on your LinkedIn newsfeed). This is known as “custom audience” advertising, because we “customise” the audience that we want to reach on the relevant service.Some of the advertising that you see may be personalised to you. The data that we use to personalise our advertising, such as your Profile Data and Behavioural Data, will not be provided to the third-party providers of the Social Platforms. "
"We may track click-through data to assist in determining interest in particular topics and measure the effectiveness of these communications.Our legal basis for processingWhere your data is collected through the use of non-essential cookies, we rely on consent to collect your personal data and for the onward processing purpose. Please see our Cookie Policy for further information, including details of our third-party partners.In certain circumstances, we may rely on another lawful basis when we use your personal data collected via the use of cookies. For example, where we use personal data collected through the use of analytics cookies to analyse how you use our Site, it is in our legitimate interest to use your personal data in such a way to improve our Site and Services. If you link to social media sites and interact with our social media pages If you click on one of the social media links on our Site or otherwise interact with our social media pages such as on Twitter, Linkedin or Instagram (including interacting with any ‘like’ or similar embedded features on our Site or social media accounts), we and the relevant social media platform may receive information relating to such interaction and may share your personal data in connection with this purpose, such as certain Behavioural Data and Technical Data. For more information about how we use this personal data, please see the “Site insight and analysis.” section above.The relevant social media platform may also be a controller in respect of the personal data that is collected via your use of our social media pages and may use that personal data for additional purposes. "
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" If you register and access an account on the Iterable Platform You will be required to register an account with us in order to gain access to the Iterable Platform. Account applicants will need to complete the registration form, providing all required Identity Data, Contact Data, Registration Data. We will use this data in order to process your registration. Once the account is registered, we will process your Account Data, Registration Data and Profile Data to identify you when you log in to your account and access secure areas of the Iterable Platform. Our legal basis for processingIt is necessary for us to use your personal data to perform our obligations in accordance with any contract that we may have with our Customer, or it is in our legitimate interest to use personal data in such a way to ensure that we provide access to the Iterable Platform in a secure and effective way and so that we can make improvements to the Iterable Platform. End User data insight and analysis We may, acting on our own behalf and on behalf of our Customers, collect data about End Users in connection with the provision of our Services to carry out insight and analysis on an anonymised and/or aggregate basis so that we can improve our Services (and customise content on our Services) and better understand how our Services are used by End Users. The data that is collected includes Behavioural Data and Technical Data, Iterable Platform Data and certain Profile Data. "
Describes the obligation to collect and process Identity Data, Contact Data, and Registration Data during account registration, and Account/Registration/Profile Data for ongoing platform access, including the legal basis (contractual necessity), establishing binding processing obligations for platform users.
AI-generated interpretation, not legal advice.
" Iterable may terminate or suspend any and all Services immediately, without prior notice or liability, if you breach any of the terms or conditions of this Agreement. Upon any such termination, your right to use the Services will immediately cease. All provisions of this Agreement which by their nature should survive termination shall survive termination, including, without limitation, ownership provisions, indemnity, limitation of liability and warranty disclaimer."
Establishes Iterable's right to immediately terminate or suspend Services for breach without notice, specifies that user access rights cease upon termination, and identifies survival provisions including ownership, indemnity, liability limitations, and warranty disclaimers that persist post-termination.
AI-generated interpretation, not legal advice.
" In some circumstances we are required to hold onto a copy of your personal information for business or legal purposes, this can include billing, technical support, law enforcement or litigation. When we no longer need this information we will delete the information if we are legally able to. "
Obliges Iterable to retain copies of personal information for business or legal purposes (billing, legal, litigation) and to delete that information when it is no longer needed and legally permissible to do so.
AI-generated interpretation, not legal advice.
"For all other purposes described in this section, we will rely on our obligation to comply with law (including any court order) to process such personal data.We will not process any special (or sensitive) categories of personal data or personal data relating to criminal convictions or offences except where we are able to do so under applicable legislation or with the individual’s explicit consent. "
Restricts processing of special/sensitive categories of personal data and criminal conviction data to circumstances permitted by applicable legislation or with explicit consent, and limits other processing to legal compliance obligations.
AI-generated interpretation, not legal advice.
" You are responsible for all of your (or any user you allow access to the Services) activity in connection with the Services. You may not post or transmit, or cause to be posted or transmitted, any communication designed or intended to obtain password, account, or private information from any Iterable user. Iterable will not be liable for any failures in the Services or other problems which are related to your Customer Data, content, or any equipment or service outside of Iterable’s facilities or control. You shall not use any part of the Services to violate the security of any computer network, crack passwords or security encryption codes, transfer or store material that is deemed threatening or obscene, or engage in any kind of illegal activity. You will not run Maillist, Listserv, any form of auto-responder, or spam on or through the Services. You will use the Services only in compliance with all applicable laws (including but not limited to policies and laws related to spamming, privacy, intellectual property, consumer and child protection, obscenity, or defamation). You represent, warrant and covenant that your use of the Services shall at all times comply with Iterable’s policies including but not limited to Anti-Spam Policy , as may be amended by Iterable from time to time, and you will not access or use third party mailing lists in connection with preparing or distributing email through the Services."
Restricts users from transmitting communications designed to obtain unauthorized account or private information, prohibits security violations, and disclaims Iterable liability for service failures caused by Customer Data or third-party equipment, establishing user responsibility for all account activity.
AI-generated interpretation, not legal advice.
" Exclusion of Indirect Damages. IN NO EVENT SHALL ITERABLE, ITS DIRECTORS, OFFICERS, SHAREHOLDERS, EMPLOYEES, MEMBERS, AGENTS AND REPRESENTATIVES BE LIABLE WITH RESPECT TO THE SERVICES FOR (A) ANY INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES OF ANY KIND; (B) DAMAGES FOR LOSS OF USE, PROFITS, DATA, IMAGES, CUSTOMER DATA OR OTHER INTANGIBLES; (C) DAMAGES FOR UNAUTHORIZED USE, NON-PERFORMANCE OF THE SITE, ERRORS OR OMISSIONS; OR (D) DAMAGES RELATED TO DOWNLOADING OR USING RESULTS. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATIONS AND EXCLUSIONS MAY NOT APPLY TO YOU."
Excludes Iterable's liability for indirect, incidental, punitive, and consequential damages including loss of profits, data, and Customer Data, with a jurisdictional carve-out for limitations not permitted by local law.
AI-generated interpretation, not legal advice.
"Please see the “Insight and analysis -Site” section above to learn more about how we personalise advertising to you. This activity is also subject to the privacy choices you have elected to make on such Social Platforms.Our legal basis for processingWe will only share your personal data with the third-party providers of the Social Platforms, so that we can advertise our Products and Services to you when you use those Platforms, where you have provided your consent. If we advertise to other people who share similar interests and characteristics to you We will provide your personal data to third-party providers of other services as described in the “If we advertise to you on social media and other platforms” and the “Insight and analysis – Site” sections. If you are a user of those third-party services, we may ask the third-party providers of those services to find other registered users of their services who share similar interests and characteristics to you, which will be based on information that the third party holds about you and its other registered users.This is known as “lookalike” audience advertising because we are trying to show our advertising to people who “look like” you. Please note that such activity is also subject to the privacy choices you have elected to make on such third-party services.Our legal basis for processingIt is in our legitimate interests to share your personal data with the third-party providers of other services so that we can advertise our Services to other individuals that use those services and share similar interests and characteristics with you, although where this activity is undertaken through the use of Cookies please see the “Insight, and analysis – Site” section above) to learn about the legal basis that we rely on. "
Restricts sharing of personal data with Social Platform providers for advertising purposes to situations where the data subject has consented, and describes sharing with third-party providers for lookalike advertising, establishing a consent-based restriction on data sharing with third parties.
AI-generated interpretation, not legal advice.
" Personal data you provide to us You may give us your personal data directly, for example, when you obtain services via our Site, contact us with enquiries, complete forms on our Site, subscribe to receive our marketing communications or provide feedback to us. We may also collect your data if we have attended an event and obtained your permission to add you to our database. Personal data we collect using cookies and other similar technologies When you access and use our Site and the Iterable Platform, we will collect certain Behavioural Data and Technical Data. We collect this personal data by using cookies and other similar technologies (see the “Insight and analysis” section below). Personal data received from third parties We may receive personal data about you from third parties. Such third parties may include our Customers who have used our refer a friend facility on our Site, analytics providers, third parties that collect data from publicly available sources in order to assist us identifying prospective Customers and with delivering personalised communications to prospective Customers and third parties that provide technical services to us so that we can provide our Site and our Services. Publicly available personal data From time to time, we may collect personal data about you (Identity Data, Contact Data, or Publicly Available Data) that is contained in publicly available sources (including open source data sets or media reports) or that you or a third party may otherwise make publicly available (for example through speeches at events or publishing articles or other news stories or posts on social media platforms). "
Describes the procedures and methods by which personal data is collected — directly from individuals, via cookies and similar technologies on the Site and Platform — establishing the operative collection procedures and triggering processing obligations.
AI-generated interpretation, not legal advice.
" If you browse our Site When you browse our Site, we collect and process Behavioural Data and Technical Data to help us understand how you are using and navigating our Site. We do this so that we can better understand which parts of our Site are more or less popular and improve the structure and navigation of our Site. Our legal basis for processingIt is necessary for us to use your personal data to perform our obligations in accordance with any contract that we may have with you for the Services, or it is in our legitimate interest to use personal data in such a way to ensure that we provide access to our Site in a secure and effective way and so that we can make improvements to our Site. Insight and analysis (Site) We and our third-party partners use cookies, web beacons, pixel tags and other similar technologies (which we generically refer to as “Cookies”) to collect data from the devices that you use to access our Site and any emails that you receive from us. The data that is collected includes Behavioural Data and Technical Data, and certain Profile Data. Please see our Cookie Policy for further information, including details of our third-party partners.We and our third-party partners use this data to analyse how you use our Site and the effectiveness of our Site including:for the purposes described in the “If we carry out any online personalised advertising”, “If we advertise to you on social media and other platforms” and and the “If we advertise to other people who share similar interests and characteristics to you” sections below;to analyse how you use, and the effectiveness of, our Site;to count users who have visited our Site, or opened an email and collect other types of information, including insights about visitor browsing habits, which helps us to"
Specifies the obligation to collect and process Behavioural Data and Technical Data when users browse the site, identifies the purposes (improving site navigation and structure), and states the legal basis (contractual necessity or legitimate interest), establishing a binding processing obligation.
AI-generated interpretation, not legal advice.
"Please see our Cookie Policy for further information, including details of our third-party partners.In some of our email messages, on behalf of our Customer, we use a “click-through URL” linked to certain websites administered by us or on our Customers behalf. We may track click-through data to assist our Customers in determining End User’s interest in particular topics and measure the effectiveness of these communications. We will place the cookies but the Customer will be the controller of this data. Our legal basis for processingTo the extent the above involves personal data, it is in our legitimate interests (or those of our Customer) to process personal data in this way to enable us to provide and improve our Services. Where your data is collected through the use of non-essential cookies, we (or our Customer) rely on consent to collect your personal data and for the onward processing purpose. Please note that often such services will relate to anonymous data sets (aggregated data sets, statistical data sets and similar) and are used for high-level market analytics or making business decisions (amongst other things). When we do this, we and our Customers are not processing personal data. Systems monitoring We will process End User and Customer personnel data in connection with the provision of our Services in order to:identify and prevent fraud;enhance the security of our network and information systems; andsystems monitoring, data queuing and statistical and scientific activities.This will involve processing Account Data, Technical Data, Behavioural Data, Iterable Platform Data and certain Profile Data. "
Describes the use of click-through URLs and cookies on behalf of Customers to track End User interest and measure communications effectiveness, clarifies that Iterable places cookies but the Customer controls the data, and states the legal basis (legitimate interest), establishing processing obligations and controller/processor roles.
AI-generated interpretation, not legal advice.
" Iterable is a B2B company. We provide our Services so that Customers can enable the deployment of email, SMS, push notifications, in-app messages and web push messaging to End Users. In providing these Services, Iterable processes personal data relating to End Users (“End User Data”) that the Customer submits to the Services or instructs us to process on their behalf, in connection with the Services. Except where outlined in this Privacy Notice, the Customer is the controller of this End User Data. Iterable may generate aggregated statistics from End User Data. Please refer to the ‘Insight and analysis’ section below for further information. "Permalink to this finding →
Defines Iterable's role as a data processor (not controller) for End User Data submitted by Customers, clarifies that the Customer is the controller, and notes that Iterable may generate aggregated statistics from End User Data, establishing the legal relationship and data processing roles between Iterable, Customers, and End Users.
AI-generated interpretation, not legal advice.
"We may track click-through data to assist in determining interest in particular topics and measure the effectiveness of these communications.Our legal basis for processingWhere your data is collected through the use of non-essential cookies, we rely on consent to collect your personal data and for the onward processing purpose. Please see our Cookie Policy for further information, including details of our third-party partners.In certain circumstances, we may rely on another lawful basis when we use your personal data collected via the use of cookies. For example, where we use personal data collected through the use of analytics cookies to analyse how you use our Site, it is in our legitimate interest to use your personal data in such a way to improve our Site and Services. If you link to social media sites and interact with our social media pages If you click on one of the social media links on our Site or otherwise interact with our social media pages such as on Twitter, Linkedin or Instagram (including interacting with any ‘like’ or similar embedded features on our Site or social media accounts), we and the relevant social media platform may receive information relating to such interaction and may share your personal data in connection with this purpose, such as certain Behavioural Data and Technical Data. For more information about how we use this personal data, please see the “Site insight and analysis.” section above.The relevant social media platform may also be a controller in respect of the personal data that is collected via your use of our social media pages and may use that personal data for additional purposes. "
States the legal basis for processing personal data collected via non-essential cookies (consent), notes reliance on other lawful bases in certain circumstances, and cross-references the Cookie Policy, establishing the legal basis obligations for cookie-based data processing.
AI-generated interpretation, not legal advice.
" Site visitors We will collect and process your personal data in connection with your interaction with us and our Site People who contact us with enquiries If you contact us with an enquiry through our Site, submit a complaint or provide any feedback to us in our surveys and feedback forms, we will collect and process your personal data in connection with your interaction with us and our Site. Customer personnel We may collect and process your personal data in connection with the supply of Services to you and/or your organization. End Users We may collect and process your personal data in order to provide our Services to our Customers and for insight and analytics purposes. Partner/supplier personnel If you (or your organisation) supply products or services to us or otherwise partner with us, we may collect and process your personal data in connection with our receipt of those products and services and/or partnership. This may include personal data included in any email or telephone communications or recorded on any document relating to an order for the products or services, such as your Contact Data. Visitors to our offices If you attend one of our physical offices or other locations, we may process personal data that you volunteer in connection with your visit and any enquiries you make. For example, you may volunteer personal data when signing in as a guest, or when you register for and access our guest Wi-Fi network at our premises. "
Describes the obligation to collect and process personal data from multiple categories of data subjects (site visitors, enquirers, customer personnel, end users), specifying the purpose and legal basis for processing each category.
AI-generated interpretation, not legal advice.
" Receipt of services If we have engaged an organisation to provide us or our Customer with services (for example, IT support or financial advice), we will collect and process your personal data (including Contact and Identity Data) if you are a contact within the relevant organisation in order to manage our relationship or our clients with the organization, to receive services from the organisation and, where relevant, to provide our services to others including our clients. Our legal basis for processingIt is necessary for us to use personal data in this way to perform our obligations in accordance with any contract that we may have with the organisation, or it is in our legitimate interest to use personal data in such a way to ensure that we have an effective working relationship with the organisation and are able to provide our services to others in an effective way. Where we do this on behalf of our clients as a data processor, we do not require a legal basis for such processing. Visiting our offices If an individual visits any of our offices we may collect personal data including Identity or Contact Data as part of our sign in process. We may also capture their image on our surveillance camera or CCTV. If an individual registers as a guest user for free Wi-Fi access at any of our premises, we may collect personal data including Identity and Contact Data as part of the registration process. We may also process Behavioural and Technical Data in connection with any use of this free Wi-Fi service for monitoring and record-keeping purposes, including to identify the source of service requests, optimise and maintain performance of the Wi-Fi service, and investigate and prevent system abuse. "
Obliges Iterable to collect and process Contact and Identity Data of contacts within engaged service organizations, specifying the legal basis (performing contractual obligations) and purposes (managing relationships, receiving and providing services).
AI-generated interpretation, not legal advice.
"Our legal basis for processingTo the extent the above involves personal data, it is in our legitimate interests (or those of our Customer) to process personal data in this way to enable us to provide, protect and improve our Services. Iterable Community Where you have agreed to participate in the Iterable Community and comply with the Iterable Community guidelines, we may process your Identity Data, Contact Data, Registration Data, Profile Data, Account Data, Technical Data and Behavioural Data for the purposes of enabling participation and peer to peer support on best practices when using the Iterable Platform. If you submit any content to the Iterable Community page we may process any personal data comprised within that content for the purposes of providing the Iterable Community page, to improve our Site and Services and promote our Site and Services.Our legal basis for processingWhere you have agreed to participate in the Iterable Community, we will rely on our legitimate interests to process your personal data in order to provide the Iterable Community, to improve and promote our Site and Services. "
States the legal basis (legitimate interest of Iterable or Customer) for processing personal data to provide, protect, and improve services, and describes processing of personal data for the Iterable Community platform, establishing processing obligations and legal bases.
AI-generated interpretation, not legal advice.
"CCTV footage may also be collected for security purposes. Event attendees If you attend one of our events (conferences, webinars, meetings), we will process personal data about you in connection with your attendance at the event. For example, we may ask you to complete a registration or feedback form, or other documents relating to the event. "
Describes the collection of CCTV footage for security purposes and processing of personal data about event attendees in connection with attendance, establishing processing obligations for these specific data subject categories.
AI-generated interpretation, not legal advice.
"For details of how the relevant social media platform uses your personal data, please see the privacy notice of the relevant social media platform.Our legal basis for processingIt is in our legitimate interest to use personal data in the ways described above to ensure that we provide the Site in an effective way and to promote our Site via social media. If you have a general question or need help with any issue concerning our Site or our Services There are various ways in which you are able to contact us (see the “How to contact us” section above). In particular, our Site features a Chatbot, which invites you to submit general enquiries about our Services via a chat function. From time to time, you may also be able to submit specific enquiries on other pages of our Site, including in secure account areas. When you make an enquiry, we will collect and process your Identity Data, Contact Data and, if applicable, certain Profile Data and Transaction Data, as well as any other personal data you volunteer that is relevant to your enquiry. If you have a technical issue concerning our Site or Services, we may also collect and process Behavioural Data and Technical Data to help us diagnose the technical issues you are experiencing and to help us resolve them in an efficient way. We use this information to manage and respond to your enquiry. We may also record (including voice recordings of telephone conversations) and use the information referred to above to train our personnel so that they can effectively deal with enquiries.Our legal basis for processingIt is in our legitimate interest to use your personal data in the ways described above to ensure that we are able to help you with your enquiry, provide a good standard of service and improve our customer services. "
States the legal basis (legitimate interest) for processing personal data related to social media promotion of the site, and describes processing of personal data submitted via the site's Chatbot feature, establishing processing obligations and legal bases for these activities.
AI-generated interpretation, not legal advice.
" If you procure our Services We collect and maintain personal data that Customer personnel submit to us for the purpose of supplying our Services that a Customer has requested from us. We may collect and process your personal data whether you are interacting with us on your own behalf or on behalf of any organisation you represent.The personal data we process may include your Identity Data, Contact Data, Registration Data, Profile Data, Financial Data and Transaction Data (where applicable). We process this information so that we can fulfil the supply of Services, maintain our user databases and to keep a record of how our Services are being used.Our legal basis for processingIt is necessary for us to use your personal data to perform our obligations in accordance with any contract that we may have with the Customer for the Services, or it is in our legitimate interest or a third party’s legitimate interest to use personal data in such a way to ensure that we provide our Services in an effective, safe and efficient way. Provision of support Services to our Customer Where we have engaged you as a Customer, we will process personal data of Customer personnel in order to provide you with the agreed upon Service. This will involve processing Account Data, Technical Data and Behavioural Data for the following purposes:resolving technical and Service issues in respect of your use of the Iterable Platform;working on your Customer account; andsending Service communications to you about our Services.Our legal basis for processingIt is necessary for us to use personal data in this way to perform our obligations in accordance with any contract that we may have with you where you or the organisation you represent is a Customer, or it is in our legitimate interest or a third"
Describes the obligation to collect and maintain personal data submitted by Customer personnel for service delivery purposes, enumerates data categories processed (Identity, Contact, Registration, Profile, Financial, Transaction Data), and states the purpose (fulfilling services, maintaining user databases), establishing binding processing obligations.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Iterable's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
33 verified clausesClauses in Iterable's policies that work in your favour — commitments the platform made to you.
- Privacy & data use
“Your right of access If you ask us, we will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data (along with certain other details). If you require additional copies, we may charge a reasonable fee for…”
Defines and grants data subjects the right of access (to confirm processing and receive a copy of personal data) and the right to rectification (to correct inaccurate or incomplete data), with a procedure for fee chargin…
📍 § 18 (YOUR DATA PROTECTION RIGHTS)Jump to exact text → - Privacy & data use
“If we’ve shared your personal data with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal data with so that…”
Grants data subjects the right to restriction of processing (with notification to third parties and disclosure of sharing recipients) and the right to data portability in a structured, machine-readable format, including…
📍 § 18 (YOUR DATA PROTECTION RIGHTS)Jump to exact text → - Confidentiality
“Confidential Information Defined. “Confidential Information” means proprietary or confidential information that is marked as “proprietary” or “confidential” or should reasonably be considered “proprietary” or “confidential” given the nature of the information…”
Defines 'Confidential Information' and enumerates exceptions (public domain, independent development, prior knowledge, third-party disclosure), establishing the scope and boundaries of confidentiality obligations through…
📍 § 5 (CONFIDENTIALITY)Jump to exact text → - Privacy & data use
“You can exercise your right of withdrawal by contacting us using our contact details in the “How to contact us” section above or by using any other opt-out mechanism we may provide, such as an unsubscribe link in an email. Your right to lodge a complaint wit…”
Grants data subjects the right to withdraw consent via opt-out mechanisms and the right to lodge complaints with a national supervisory authority, establishing procedural pathways for both rights.
📍 § 18 (YOUR DATA PROTECTION RIGHTS)Jump to exact text → - Audit rights, DPA & residency
“Non-EEA countries do not have the same data protection laws as the UK and the EEA. In particular, non-EEA countries may not provide the same degree of protection for your personal data. However, when transferring your personal data outside the UK or the EEA, w…”
Obliges Iterable to implement at least one recognized transfer safeguard (adequacy decision or SCCs) when transferring personal data outside the UK or EEA, acknowledging the differential in data protection standards and…
📍 § 15 (DATA TRANSFERS OUTSIDE THE EEA AND UK)Jump to exact text → - Confidentiality
“Obligations of Confidentiality. Each Party acknowledges that in connection with these Terms, such Party may gain access to Confidential Information of the other Party. The Receiving Party agrees to: (a) not use the Disclosing Party’s Confidential Information o…”
Imposes obligations on the Receiving Party to use Confidential Information only as necessary, prohibits competitive use, and requires maintenance of confidentiality using reasonable protective measures, establishing the…
📍 § 5 (CONFIDENTIALITY)Jump to exact text →
+ 27 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
1 verified clauseWhat Iterable requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcement
“You are responsible for all of your (or any user you allow access to the Services) activity in connection with the Services. You may not post or transmit, or cause to be posted or transmitted, any communication designed or intended to obtain password, account,…”
Restricts users from transmitting communications designed to obtain unauthorized account or private information, prohibits security violations, and disclaims Iterable liability for service failures caused by Customer Dat…
📍 § 3 (USE GUIDELINES)Jump to exact text →
What the policies actually cover
12 topics- Product telemetry & usage tracking9 clauses
- Advertising & tracking1 protective9 clauses
- Sale or sharing of personal data3 protective3 clauses
- Sensitive data (biometric, location, health)1 clause
- Children's data2 protective2 clauses
- Government & law-enforcement disclosure2 clauses
- Arbitration & class-action waiver1 protective1 clause
- Damages & liability cap2 clauses
- Indemnity direction1 clause
- Terms can change at any time1 protective2 clauses
- Deletion rights & post-termination survival3 protective8 clauses
- Breach-notification promises1 clause
78 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Verified retention clauses point in different directions: the Privacy Policy, § 21 (HOW LONG DO WE KEEP YOUR PERSONAL DATA?) describes broad or open-ended retention, while the Privacy Policy, § 18 (YOUR DATA PROTECTION RIGHTS) describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“You agree that the Terms, and your relationship with Iterable will be governed by the laws of the State of California, U.S.A. regardless of conflict of laws principles. You agree that all claims related to the Terms can only be litigated in the federal or state courts in San Francisco, California, USA and agree to personal jurisdiction in those courts. However, you agree that Iterable can apply for injunctive reme...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Iterable is subject to the investigatory and enforcement powers of the US Federal Trade Commission (FTC). If you have an unresolved privacy complaint, you may also refer this to your data protection authority and we will work with them to resolve your concern. In certain circumstances, the Data Privacy Framework provides the right to invoke binding arbitration to resolve complaints which were unable to be resolved...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“You agree that the Terms, and your relationship with Iterable will be governed by the laws of the State of California, U.S.A. regardless of conflict of laws principles. You agree that all claims related to the Terms can only be litigated in the federal or state courts in San Francisco, California, USA and agree to personal jurisdiction in those courts. However, you agree that Iterable can apply for injunctive reme...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Iterable is subject to the investigatory and enforcement powers of the US Federal Trade Commission (FTC). If you have an unresolved privacy complaint, you may also refer this to your data protection authority and we will work with them to resolve your concern. In certain circumstances, the Data Privacy Framework provides the right to invoke binding arbitration to resolve complaints which were unable to be resolved...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“You agree that the Terms, and your relationship with Iterable will be governed by the laws of the State of California, U.S.A. regardless of conflict of laws principles. You agree that all claims related to the Terms can only be litigated in the federal or state courts in San Francisco, California, USA and agree to personal jurisdiction in those courts. However, you agree that Iterable can apply for injunctive reme...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | governing law disputes | conditional | MEDIUM | 8 |
| All applicable tiers | indemnity liability | worsens | HIGH | 10 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 8 |
| All applicable tiers | output ownership | improves | LOW | 4 |
| All applicable tiers | privacy data use | worsens | HIGH | 7 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 1 |
| All applicable tiers | tier differences | conditional | MEDIUM | 1 |
| Free | subprocessors data sharing | worsens | HIGH | 4 |
| Free | training use | worsens | HIGH | 1 |
| Government | privacy data use | conditional | MEDIUM | 2 |
| Pro / Paid | indemnity liability | conditional | MEDIUM | 4 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: sublicensable or transferable on moderation enforcement
“The failure of either party to exercise in any respect any right provided for herein shall not be deemed a waiver of any further rights hereunder. Iterable shall not be liable for any failure to perform its obligations hereunder where such failure results from any cause beyond Iterable’s reasonable control, including, without limitation, mechanical, electronic or communications failure or degradation. If any provision of this Agreement is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that these Terms shall otherwise remain in full force and effect and enforceable. These Terms are not assignable, transferable or sublicensable by you except with Iterable’s prior written consent. Iterable may transfer, assign or delegate these Terms and any or all of its rights and obligations without consent. These Terms (including the Privacy Policy and Anti-Spam Policy ) are the complete and exclusive statement of the mutual understanding of the parties and supersedes and cancels all previous written and oral agreements, communications and other understandings relating to the subject matter of these Terms. No agency, partnership, joint venture, or employment is created as a result of these Terms and you do not have any authority to bind Iterable in any respect whatsoever. Any notice that is required or permitted by this Agreement shall be in writing and shall be deemed effective upon receipt, when sent by confirmed email to legal@Iterable.com when delivered in person by nationally recognized overnight courier or mailed by first class, registered or certified mail, postage prepaid, to: Iterable, Inc., 71 Stevenson Street Suite 300, San Francisco, CA 94105, Attn: Legal.”Open timeline citation
Latest stance: liability limited on indemnity liability
“Limitation of Liability. ITERABLE’S LIABILITY UNDER THIS AGREEMENT SHALL BE LIMITED TO THE LESSER OF THE AMOUNT PAID BY YOU, IF ANY, FOR ACCESSING THE SERVICES DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE DAY THE ACT OR OMISSION OCCURRED THAT GAVE RISE TO YOUR CLAIM OR $100USD.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“Provision of Services. Subject to these Terms, Iterable may provide Services, which are selected by you, solely for your own use, and not for the use or benefit of any third party. Iterable may change, suspend or discontinue the Services for any reason, at any time, including the availability of any feature. Iterable may also restrict your access to parts or all of the Services without notice or liability.”Open timeline citation
Latest stance: liability limited on indemnity liability
“Iterable may terminate or suspend any and all Services immediately, without prior notice or liability, if you breach any of the terms or conditions of this Agreement. Upon any such termination, your right to use the Services will immediately cease. All provisions of this Agreement which by their nature should survive termination shall survive termination, including, without limitation, ownership provisions, indemnity, limitation of liability and warranty disclaimer.”Open timeline citation
Latest stance: user retains rights on output ownership
“Your Proprietary Rights. As between you and Iterable, you own all rights, title and interest in and to all Customer Data. You understand and allow Iterable (i) the rights provided under these Terms to provide you the selected Services and (ii) to use your logo and name as appropriate on the Iterable website(s) and certain marketing materials.”Open timeline citation
Latest stance: platform claims or reserves rights on moderation enforcement
“We reserve the right to modify these Terms. If we make material changes to these Terms, we will notify you via the Services and/or by email. You will be responsible for reviewing and becoming familiar with any such modifications. Your continued use of the Services following such notification constitutes your acceptance of the updated terms. If at any time you do not agree to the updated terms, you may terminate your use of the Services. You will still remain liable for any obligations incurred or charges accrued on or before the date of termination.”Open timeline citation
Latest stance: sublicensable or transferable on subprocessors data sharing
“Your Responsibilities. You acknowledge and agree that if you provide data regarding your end users or e-mail campaigns to Iterable in connection with your use of the Services (“Customer Data”), you hereby grant Iterable a non-exclusive, worldwide, royalty-free, transferable right to use, modify, reproduce, and display such Customer Data (including all related intellectual property rights) to (i) provide the Services you have selected and (ii) improve the Services’ ability to deliver web and application analytics services to you. You warrant, represent and agree (i) that you have the authority to grant Iterable the rights set forth above as well as the rights to any Customer Data that you provide through the Services, (ii) you bear all responsibility and liability for the accuracy, completeness, quality, integrity, legality, reliability, appropriateness, and intellectual property ownership or right of the Customer Data and Iterable’s access, possession and use as permitted herein, (iii) you are responsible to provide notice and obtain any legally required consent for your collection, use and disclosure of Customer Data to the Services, (iv) you will not contribute or provide any Customer Data or content that (a) infringes or violates any copyright or trademark or trade secret of another party, (b) infringes any intellectual property right or the privacy or publicity rights of another, (c) is libelous, defamatory, obscene, pornographic, harassing, hateful, offensive or otherwise violates any law or right of any third party, (d) contains a virus, trojan horse, worm, or other computer programming routine or engine intended to detrimentally interfere with any system, data or information, or (e) causes damage to the Iterable Services or its customers in any way.”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“You agree that the Terms, and your relationship with Iterable will be governed by the laws of the State of California, U.S.A. regardless of conflict of laws principles. You agree that all claims related to the Terms can only be litigated in the federal or state courts in San Francisco, California, USA and agree to personal jurisdiction in those courts. However, you agree that Iterable can apply for injunctive remedies in any jurisdiction. You must comply with all domestic and international export laws and regulations that apply to your use of the Services, such as software. These laws include restrictions on destinations, end users, and end use. Use of the Services is not authorized in any jurisdiction that does not give effect to all provisions of this Agreement, including without limitation, this section. To the extent that the following provision is not in conflict with applicable law, you may only resolve disputes with us on an individual basis and may not bring a claim or proceed in a group arbitration proceeding as a plaintiff or a class member in a class, consolidated, or representative action.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-24· verified 2026-07-31
- Terms of Service:Last captured 2026-08-24· verified 2026-08-24
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 208 more findings this quarter vs last (349 vs 141). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Iterable's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Iterable's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.