Workflow & Automation · kastle.aiKastle
Graded against 1167 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: subprocessors data sharing
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
States that personal information may be shared in specific situations with specific third parties and incorporates by reference a detailed section on sharing practices.
Discloses that personal information may be shared with service providers pursuant to a written contract between the company and each service provider, establishing a contractual basis for third-party disclosure and incorporating by reference the detailed sharing practices in a separate named section.
Restricts the company from selling or sharing personal information with third parties for business or commercial purposes, affirming no such disclosure occurred in the prior twelve months and prohibiting future sales or sharing — user-favorable restriction.
How to read this page: Overall risk rates what Kastle's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 82 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
Insufficient signal
The verified citations do not support a stronger high, medium, or low rating without overclaiming.
- Privacy PolicyVerified - read in full - 82 citationsstaticLast captured 2026-07-20
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Grants California residents the right, once per year at no charge, to request and receive disclosure of the categories of personal information shared with third parties for direct marketing purposes and the identities of those third parties — a user-favorable disclosure right regarding third-party data sharing.
" California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal informat..."
Grants the company permission to use personal information for its own business purposes including internal research for technological development and demonstration, and disclaims that this activity constitutes a sale of personal information.
" We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information. "
Restricts the company from selling or sharing personal information with third parties for business or commercial purposes, affirming no such disclosure occurred in the prior twelve months and prohibiting future sales or sharing — user-favorable restriction.
" We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website ..."
Defines the category of professional and employment-related personal information collected, including business contact details, job titles, work history, and professional qualifications, describing the scope of data collection for employment applicants and business service contexts.
" I . Professional or employment-related information Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us "
Names and defines the audio, electronic, sensory, or similar information category, listing images, audio, video, and call recordings created in connection with business activities as its elements.
" H . Audio, electronic, sensory, or similar information Images and audio, video or call recordings created in connection with our business activities "
Obligates the company to delete or anonymize personal information when there is no ongoing legitimate business need, and where immediate deletion is not possible (e.g., backup archives), requires secure storage and isolation from further processing until deletion can be completed.
" When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in back..."
Grants the company permission to share or transfer personal information to another company in connection with a merger, asset sale, financing, or acquisition, establishing a legally operative disclosure basis for business-transfer scenarios.
" We may need to share your personal information in the following situations: Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or ac..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information . "
States that personal information may be shared in specific situations with specific third parties and incorporates by reference a detailed section on sharing practices.
AI-generated interpretation, not legal advice.
" We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, " WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION? " "
Discloses that personal information may be shared with service providers pursuant to a written contract between the company and each service provider, establishing a contractual basis for third-party disclosure and incorporating by reference the detailed sharing practices in a separate named section.
AI-generated interpretation, not legal advice.
" We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers. "
Restricts the company from selling or sharing personal information with third parties for business or commercial purposes, affirming no such disclosure occurred in the prior twelve months and prohibiting future sales or sharing — user-favorable restriction.
AI-generated interpretation, not legal advice.
" Sensitive Information. We do not process sensitive information. "
Affirmatively states the operator does not process sensitive information, prohibiting such processing — user-favorable restriction that limits the scope of data handling.
AI-generated interpretation, not legal advice.
" In Short: We do not knowingly collect data from or market to children under 18 years of age . "
Summary statement prohibiting collection of data from or marketing to children under 18 — user-favorable restriction on data collection practices targeting minors.
AI-generated interpretation, not legal advice.
" Do we process any sensitive personal information? We do not process sensitive personal information. "
Affirmatively states that sensitive personal information is not processed — a user-favorable restriction prohibiting such processing.
AI-generated interpretation, not legal advice.
" Do we collect any information from third parties? We do not collect any information from third parties. "
Affirmatively states that no information is collected from third parties — a user-favorable restriction prohibiting third-party data ingestion.
AI-generated interpretation, not legal advice.
" We will use the information we receive only for the purposes that are described in this privacy notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps. "
Restricts the company's use of social-login information to the purposes described in the privacy notice or otherwise made clear to the user, and disclaims responsibility for the third-party social media provider's independent use of the user's personal information.
AI-generated interpretation, not legal advice.
" Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements. "
States that account termination will result in deactivation or deletion from active databases, but creates an exception permitting retention of certain information for fraud prevention, troubleshooting, investigations, legal terms enforcement, and legal compliance.
AI-generated interpretation, not legal advice.
" In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. "
Broadly authorises processing of personal information for service provision, improvement, administration, communications, security, fraud prevention, legal compliance, and — with consent — other purposes, establishing the operator's general processing permissions.
AI-generated interpretation, not legal advice.
" Category B - As long as the user has an account with us "
Specifies that Category B personal information is retained for as long as the user maintains an account, establishing an account-lifecycle-tied retention period for this data category.
AI-generated interpretation, not legal advice.
" Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name "
Enumerates the specific data elements that constitute the Identifiers category, including contact details, unique personal identifiers, IP addresses, and account names, establishing the scope of this collection category.
AI-generated interpretation, not legal advice.
" How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe . "
States that organizational and technical safeguards are in place but disclaims any guarantee of 100% security, explicitly noting that unauthorized access, theft, or modification cannot be ruled out.
AI-generated interpretation, not legal advice.
" To evaluate and improve our Services, products, marketing, and your experience. We may process your information when we believe it is necessary to identify usage trends, determine the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience. "
Permits processing of personal information to identify usage trends, measure promotional campaign effectiveness, and evaluate and improve services, products, and user experience.
AI-generated interpretation, not legal advice.
" Learn more about the sources of personal information we collect in " WHAT INFORMATION DO WE COLLECT? " "
Incorporates by reference the sources of personal information described in a separate named section of the document, making that section's contents operative as part of this disclosure.
AI-generated interpretation, not legal advice.
" We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. "
Permits the operator to automatically collect device and usage information (including IP address, browser type, operating system, location, and behavioral data) and states the permitted purposes as security, operations, and internal analytics.
AI-generated interpretation, not legal advice.
" We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of: Receiving help through our customer support channels; "
Defines additional contexts outside the enumerated categories in which personal information may be collected, specifically through customer support channels, establishing the scope of incidental collection.
AI-generated interpretation, not legal advice.
" We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment. "
States that the company has implemented reasonable technical and organizational security measures but disclaims any guarantee that those measures will prevent unauthorized access, theft, or modification of personal information, limiting the company's liability for security failures.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Kastle's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Kastle's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Kastle's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Kastle requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Kastle's published policies yet.
What the policies actually cover
0 topicsNone of Kastle's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Cross-clause notes
Verified retention clauses point in different directions: the Privacy Policy, Privacy Policy › “Participation in customer surveys or contests; and” describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “Account Information” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Capture recency
- Privacy Policy:Last captured 2026-07-20· verified 2026-07-20verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
87 findings first captured First scan: September 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Kastle's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Kastle's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Kastle's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.