Workflow & Automation · mastra.aiMastra
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
No verified risks yet
AIRIN has not published verified findings for this record yet. The page shows the gap instead of guessing.
How to read this page: Overall risk rates what Mastra's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 0 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 0 citationsstaticLast captured 2026-08-21
Clause A states that Mastra can suspend services 'immediately and without notice,' while Clause B states that Mastra may suspend access 'with notice where reasonably practicable,' creating opposing requirements for user notification under similar circumstances of service suspension.
" Mastra has the right to, immediately and without notice, suspend or terminate any Services provided to you, at any time, in the event that (a) any Order Form pursuant to which you use the Services is terminated; (b) you breach any provision of this Agreement; (c) Mastra determines that your use of the Services violates this Agreement, infringes any right of any person or entity, threatens the personal safety of users of the Services or the public, or could create liability for Mastra; or (d) Mastra otherwise determines in its sole discretion to discontinue the applicable Service. You agree that all terminations shall be made in Mastra's sole discretion and that Mastra shall not be liable to you or any third party for any termination of your Customer Account."
" Mastra may suspend Customer's or any Authorized User's access to the Services, in whole or in part, with notice where reasonably practicable, if: (a) Customer's Customer Account is overdue; (b) Mastra reasonably believes that Customer's use of the Services violates this Agreement (including the conduct restrictions in Section 5), poses a security or operational risk, may subject Mastra or any third party to liability, or may disrupt the Services for other customers; (c) required by law, by a Model Provider, or by another Third-Party Service; or (d) needed for scheduled or emergency maintenance. Mastra will use reasonable efforts to limit the scope and duration of any suspension."
Within one document
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“If you are a consumer resident in the European Union, the European Commission provides an online dispute resolution platform that you may access at https://ec.europa.eu/consumers/odr . Mastra is not obligated and does not currently agree to participate in alternative dispute resolution proceedings before a consumer arbitration board. Nothing in this Section limits your right to bring proceedings against Mastra in ...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Subject to any applicable Order Form, Customer grants Mastra a worldwide, royalty-free, non-exclusive, sublicensable (through multiple tiers, solely to subprocessors and Model Providers) license to host, copy, transmit, store, display, process, and otherwise use Customer Data solely to (a) provide, operate, support, and improve the Services; (b) prevent, detect, investigate, or address service, security, fraud, ab...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Mastra may, from time to time, offer free trials, promotional credits (including Gateway starter credits), free tiers (including the Basic Plan), or other promotional access (" Promotional Offers "). Unless otherwise stated in the terms applicable to the Promotional Offer, at the end of a trial period your use of the affected paid feature will either expire or, if so stated, automatically convert to a paid Subscri...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Subject to Customer's compliance with this Agreement and payment of applicable Fees, Mastra grants Customer a limited, non-exclusive, non-transferable, non-sublicensable, revocable right during the Subscription Term to access and use the Services solely for Customer's internal business purposes.”Open source citation
The clause grants a broad content license.
“Subject to any applicable Order Form, Customer grants Mastra a worldwide, royalty-free, non-exclusive, sublicensable (through multiple tiers, solely to subprocessors and Model Providers) license to host, copy, transmit, store, display, process, and otherwise use Customer Data solely to (a) provide, operate, support, and improve the Services; (b) prevent, detect, investigate, or address service, security, fraud, ab...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | governing law disputes | conditional | MEDIUM | 1 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 3 |
| All applicable tiers | privacy data use | conditional | MEDIUM | 1 |
| All applicable tiers | prompt ownership | conditional | MEDIUM | 1 |
| All applicable tiers | training use | worsens | HIGH | 2 |
| Free | data retention | worsens | HIGH | 1 |
| Free | indemnity liability | conditional | MEDIUM | 1 |
| Free | moderation enforcement | worsens | HIGH | 1 |
| Free | privacy data use | worsens | HIGH | 3 |
| Pro / Paid | tier differences | conditional | MEDIUM | 1 |
| Team / Business | privacy data use | worsens | HIGH | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: sublicensable or transferable on privacy data use
“Subject to Customer's compliance with this Agreement and payment of applicable Fees, Mastra grants Customer a limited, non-exclusive, non-transferable, non-sublicensable, revocable right during the Subscription Term to access and use the Services solely for Customer's internal business purposes.”Open timeline citation
Latest stance: sublicensable or transferable on privacy data use
“Subject to any applicable Order Form, Customer grants Mastra a worldwide, royalty-free, non-exclusive, sublicensable (through multiple tiers, solely to subprocessors and Model Providers) license to host, copy, transmit, store, display, process, and otherwise use Customer Data solely to (a) provide, operate, support, and improve the Services; (b) prevent, detect, investigate, or address service, security, fraud, abuse, or technical issues; (c) comply with legal obligations and respond to lawful requests; and (d) generate and use aggregated or de-identified Usage Data that does not identify Customer, any Authorized User, any End User, or any other natural person.”Open timeline citation
Latest stance: broad license on privacy data use
“Subject to any applicable Order Form, Customer grants Mastra a worldwide, royalty-free, non-exclusive, sublicensable (through multiple tiers, solely to subprocessors and Model Providers) license to host, copy, transmit, store, display, process, and otherwise use Customer Data solely to (a) provide, operate, support, and improve the Services; (b) prevent, detect, investigate, or address service, security, fraud, abuse, or technical issues; (c) comply with legal obligations and respond to lawful requests; and (d) generate and use aggregated or de-identified Usage Data that does not identify Customer, any Authorized User, any End User, or any other natural person.”Open timeline citation
Latest stance: sublicensable or transferable on moderation enforcement
“Mastra may, from time to time, offer free trials, promotional credits (including Gateway starter credits), free tiers (including the Basic Plan), or other promotional access (" Promotional Offers "). Unless otherwise stated in the terms applicable to the Promotional Offer, at the end of a trial period your use of the affected paid feature will either expire or, if so stated, automatically convert to a paid Subscription at Mastra's then-current Fee, billed in accordance with Section 7.4. Promotional credits and Promotional Offers have no cash value, are non-transferable, and may be modified, suspended, or revoked at any time.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Subject to any applicable Order Form, Customer grants Mastra a worldwide, royalty-free, non-exclusive, sublicensable (through multiple tiers, solely to subprocessors and Model Providers) license to host, copy, transmit, store, display, process, and otherwise use Customer Data solely to (a) provide, operate, support, and improve the Services; (b) prevent, detect, investigate, or address service, security, fraud, abuse, or technical issues; (c) comply with legal obligations and respond to lawful requests; and (d) generate and use aggregated or de-identified Usage Data that does not identify Customer, any Authorized User, any End User, or any other natural person.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Mastra's processing of personal data in connection with the Services is described in Mastra's Privacy Policy, available at https://mastra.ai/privacy-policy . To the extent Customer's use of the Services involves Mastra's processing of personal data on Customer's behalf as a "processor," "service provider," or comparable role under applicable data protection laws (including the GDPR, the UK GDPR, the CCPA/CPRA, and similar U.S. state privacy laws), the parties will execute Mastra's Data Processing Addendum (" DPA "), available at https://mastra.ai/legal/dpa , which is incorporated by reference upon execution. Mastra's then-current list of Subprocessors is available at https://mastra.ai/legal/subprocessors .”Open timeline citation
Latest stance: third party or vendor sharing on prompt ownership
“The Receiving Party will (a) use Confidential Information solely to perform under this Agreement; (b) protect Confidential Information using at least the same degree of care it uses to protect its own information of like importance, and in no event less than reasonable care; and (c) limit access to Confidential Information to those of its employees, contractors, Affiliates, and advisors who have a need to know and who are bound by confidentiality obligations no less protective than those in this Section. The Receiving Party may disclose Confidential Information to the extent required by law, provided that, where legally permitted, it gives prompt notice and reasonable cooperation to the Disclosing Party. Confidential Information does not include information that is (i) public other than as a result of the Receiving Party's breach, (ii) rightfully known to the Receiving Party before disclosure, (iii) rightfully received from a third party without restriction, or (iv) independently developed without reference to the Disclosing Party's Confidential Information.”Open timeline citation
Latest stance: sale or sell on data retention
“If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the "CCPA/CPRA"), provides you with certain rights with respect to your personal information, including, subject to applicable exceptions, the right to know, the right to access, the right to delete, the right to correct, the right to portability, the right to limit the use and disclosure of sensitive personal information, the right to opt out of the sale or sharing of personal information, and the right to be free from retaliation for exercising your rights. Mastra does not sell or share personal information as those terms are defined under the CCPA/CPRA. For information about how Mastra processes personal information, the categories of personal information collected, the purposes for which it is processed, and how to exercise your rights, please see Mastra's Privacy Policy at https://mastra.ai/privacy-policy . To submit a verifiable consumer request, contact Mastra at privacy@mastra.ai . You may also designate an authorized agent to make a request on your behalf, subject to verification requirements set forth in our Privacy Policy.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-21· verified 2026-08-21
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
103 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Mastra's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Mastra's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Mastra's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.