Image / Video / Audio Generation · photoroom.comPhotoroom
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“Photoroom indicates to you at the time of their collection the personal data which are mandatory to be able to benefit from the Application and the Services. The others are optional. In any event, Photoroom undertakes to delete personal data at the end of the above mentioned retention periods. Additional information about training our AI model : By…”
Partially verified: Privacy Policy assessed · Terms of Service pending. Everything below comes only from what was read in full.
Watch: governing law disputes
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Binding arbitration with JAMS eliminates Customer's right to a court trial for contract and service disputes. Commercial customers must pay their own JAMS filing and arbitration fees per JAMS rules, which can be substantial. The asymmetry—Photoroom can seek court relief; Customer cannot—further disadvantages Customers.
Caps the provider's aggregate liability at the total fees paid by the Customer in the preceding six months and excludes liability for lost profits, indirect, special, incidental, consequential, cover, or punitive damages regardless of cause or theory of liability, substantially limiting the provider's financial exposure.
A 6-month fee cap combined with a blanket exclusion of indirect and consequential damages is a strongly platform-favorable limitation. For users with significant commercial reliance on the service, actual losses could far exceed this cap with no legal remedy.
Scores derived from 51 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Photoroom's terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
- Your outputs and prompts are explicitly yours — Photoroom's terms include affirmatively protective IP language.
- Data handling is conditional — 3 privacy or retention clauses warrant review before using Photoroom at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Photoroom's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredIP/output assessment pending — terms of service not yet verified This lens receives a band only once its source document has been captured and read in full.
Know where this document lives? Point us to the URL or PDF and the pipeline will verify it.
Based on 182 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Partially verified — Privacy Policy — Verified (read in full, 54 findings); Terms of Service — Capture under review. Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Needs review
A core policy document is captured but requires review before AIRIN can mark the corpus fully verified.
- Privacy PolicyVerified - read in full - 54 citationsstaticLast captured 2026-07-31
- Terms of ServiceCompleteness unconfirmedstatic-revalidated
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
This segment obligates Photoroom to delete personal data at the end of stated retention periods, discloses that user-uploaded images are used to train and improve AI models under an acknowledgment clause, and grants users the right to opt out of training use via account settings, establishing both a training permission and an opt-out right.
" Photoroom indicates to you at the time of their collection the personal data which are mandatory to be able to benefit from the Application and the Services. The others are optional. In any event, Photoroom undertakes to delete personal d..."
API-processed images are carved out from the training data use, reducing risk for API tier users compared to standard application users.
"For clarity, our model improvement does not apply to the images processed through our Application Programming Interface (API)."
This segment defines what is excluded from the definition of 'Personal Data' under the CCPA section, including publicly available information, de-identified data, and aggregated data, and defines 'Publicly Available Information' with specific criteria, establishing scope-limiting definitional boundaries for California privacy rights.
"Personal Data does not include publicly available information; lawfully obtained, truthful information that is a matter of public concern; information that has been de-identified; or information that has been aggregated. For purposes of thi..."
This segment establishes legitimate interest as the legal basis for newsletter sending to business clients, specifies that processing continues until objection or consent withdrawal, and sets a 25-month retention period for cookie-related personal data, creating retention and processing obligations.
"Our legitimate interest for business clients Until you withdraw your consent or until you object Social network and audience measurement Cookies Personal data collected (IP address, pages viewed, etc.) by the deposit of these Cookies Cons..."
Collection from business partners and supplementation from unnamed 'other sources' may result in data aggregation users are unaware of, raising privacy risk.
"We obtain the categories of Personal Data listed above from the following categories of sources: From you , including from when you register for a Photoroom account, surveys that you take, or as automatically collected when using the Servi..."
This segment defines the term 'Customer' and 'you,' specifying who constitutes the contracting party in various scenarios (individual, organization, corporate email sign-up), thereby establishing the scope of who is legally bound by and entitled to rights under the Agreement.
" “ Customer ” or “ you ” is either you, if you are an individual entering into the Agreement on your own behalf, or the organization that you represent in agreeing to the Agreement. If your organization is being set up by someone who is not..."
Defines the term of free versus paid subscriptions, states that the Agreement remains effective until all subscriptions expire or terminate, and provides that certain provisions survive termination, establishing the foundational duration and survival rules that differentiate subscription types.
" A free subscription continues until terminated, while a paid subscription has a Subscription Period that may expire or be terminated. The Agreement remains effective until all subscriptions ordered under the Agreement have expired or are t..."
Establishes that payment obligations are non-cancelable and fees are generally non-refundable, requires continued payment of unpaid fees upon downgrade, and specifies that invoiced customers must pay in full within a stated period, creating binding financial obligations for subscribing customers.
" For Customers that purchase a subscription to our Services, fees are specified through the Services interface or in the Order Form(s). Payment obligations are non-cancelable and, except as expressly stated in the Agreement, fees are non-re..."
Clause A broadly requires the customer to indemnify the platform for claims arising from their use of services, while Clause B specifically states the platform is solely responsible for intellectual property infringement claims related to the iOS App, creating a direct conflict for that specific scenario.
" Customer agrees to defend, indemnify and hold harmless us and our affiliates, licensors, and our and their respective employees, contractors, agents, officers and directors, from and against any and all claims, damages, obligations, losses, liabilities, costs or debt, and expenses (including but not limited to attorney’s fees) arising from: (i) Customer’s and any Authorized User’s use of and access to the Services, including any Customer Content or other content transmitted or received by Customer or any Authorized User; (ii) your violation of the Agreement, including without limitation any breach of Customer’s representations and warranties above; (iii) Customer’s or any Authorized User’s violation of any third-party right, including without limitation any right of privacy or intellectual property rights; (iv) Customer’s or any Authorized User’s violation of any applicable law, rule or regulation; (v) Customer Content or any content that is submitted via Customer’s or any Authorized User’s account, including without limitation misleading, false, or inaccurate information; (vi) Customer’s or any Authorized User’s gross negligence, fraud, or willful misconduct; or (vii) any other party’s access and use of the Services with Customer’s or any Authorized User’s credentials or other appropriate security code."
"You acknowledge that, in the event of any third-party claim that the iOS App, or your possession and use of that iOS App, infringes that third party’s intellectual property rights, Photoroom, not Apple, will be solely responsible for the investigation, defense, settlement, and discharge of any such intellectual property infringement claim, to the extent required by these Terms. You and Photoroom acknowledge and agree that Apple and Apple’s subsidiaries are third-party beneficiaries of these Terms as relates to your license of the iOS App, and that, upon your acceptance of the terms and conditions of these Terms, Apple will have the right (and will be deemed to have accepted the right) to enforce these Terms as relates to your license of the iOS App against you as a third-party beneficiary thereof. Android App. The following applies to any app you acquire from the Google Play Store (such app, “ Android App ”): (a) you acknowledge that these Terms are between you and Photoroom only, and not Google LLC or any affiliate thereof (collectively, “ Google ”); (b) your access to and use of the Android App must comply with Google’s then-current Google Play Terms of Service ; (c) Google is only a provider of the Google Play Store where you obtained the Android App; (d) Photoroom, and not Google, is solely responsible for the Android App; (e) Google has no obligation or liability to you with respect to the Android App or these Terms; and (f) you understand and acknowledge that Google is a third-party beneficiary to these Terms as they relate to the Android App."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"By using the Services, you acknowledge and expressly authorize Photoroom to use User Content to improve, train and develop Photoroom’s products and services. You can opt-out of this at any time by changing the settings on your account, but please note that in some cases this may limit the ability of the Services to better address your specific use case."
Default opt-in to AI/ML training on user content is a meaningful risk. The opt-out mechanism partially mitigates this, but the user must affirmatively act. The vague consequence ('may limit the ability of the Services') creates soft pressure against opting out.
AI-generated interpretation, not legal advice.
"You acknowledge and agree that the Photoroom representative may review, decompile or otherwise deconstruct such User Content in order to improve, resolve, or modify the Services and any other Photoroom products and services."
When users opt to report issues, they consent to Photoroom's broad use of the submitted content for product improvement beyond the specific bug fix. The phrase 'any other Photoroom products and services' extends the scope significantly beyond the reported issue.
AI-generated interpretation, not legal advice.
" Photoroom indicates to you at the time of their collection the personal data which are mandatory to be able to benefit from the Application and the Services. The others are optional. In any event, Photoroom undertakes to delete personal data at the end of the above mentioned retention periods. Additional information about training our AI model : By using Photoroom, you acknowledge that Photoroom processes and uses the images you upload to improve, train and develop Photoroom’s products, services and models. You can opt-out of this at any time by changing the settings on your account. This opt out shall not have retroactive effect on processing activities already carried out. For clarity, our model improvement does not apply to the images processed through our Application Programming Interface (API). "
This segment obligates Photoroom to delete personal data at the end of stated retention periods, discloses that user-uploaded images are used to train and improve AI models under an acknowledgment clause, and grants users the right to opt out of training use via account settings, establishing both a training permission and an opt-out right.
AI-generated interpretation, not legal advice.
" We may supplement the Personal Data collected from the categories of sources described above with Personal Data we obtain from other sources. "
Grants Photoroom permission to supplement collected Personal Data with data obtained from sources beyond those previously enumerated, expanding the scope of permissible data acquisition activities.
AI-generated interpretation, not legal advice.
" We are not responsible for the content of any Customer Content or the way Customer or its Authorized Users choose to use the Services to store or process any Customer Content. Customer represents and agrees that Customer is solely responsible for (i) providing notices and obtaining consents as from its Authorized Users for the collection, use, processing and transfer of Customer Content in connection with the Services; and (ii) ensuring compliance with all laws in all jurisdictions that may apply to Customer Content provided hereunder, including but not limited to all applicable international, federal, state, provincial and local laws, rules, and regulations relating to data privacy and security. Customer may not submit any Customer Content that includes a social security number, passport number, driver’s license number, or similar identifier, credit card or debit card number, or any other information which may be subject to specific data privacy and security laws including, but not limited to, the Gramm-Leach-Bliley Act (GLBA), the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HiTECH), the Family Educational Rights and Privacy Act of 1974 (FERPA), the Children's Online Privacy Protection Act (COPPA),or the GDPR or any other data which is considered to be sensitive or which could give rise to notification obligations under data breach notification laws. We do not make any representations as to the adequacy of the Services to process your Customer Content or to satisfy any legal or compliance requirements which may apply to your Customer Content. "
Places obligations on Customer to obtain necessary consents from Authorized Users for data collection and processing, and to ensure compliance with all applicable laws regarding Customer Content across jurisdictions.
AI-generated interpretation, not legal advice.
" You consent to Photoroom’s use of your company name and logo and general description of your relationship with Photoroom in press releases and other marketing materials that we may share from time to time. You further agree to participate, from time to time at Photoroom’s sole discretion, in reference phone calls and other marketing initiatives that Photoroom may undertake or initiate, including with press, analysts and Photoroom’s existing or potential investors or customers."
Grants Photoroom permission to use Customer's company name, logo, and description of the relationship in marketing materials and requires Customer to participate in reference calls and marketing initiatives at Photoroom's discretion, constituting a consent-based publicity right.
AI-generated interpretation, not legal advice.
" By using the Services, you understand and acknowledge that your personal information will be collected, used and disclosed as set forth in our Privacy Policy https://www.photoroom.com/legal/privacy . We cannot guarantee that unauthorized third parties will never be able to defeat our security measures or use your personal information for improper purposes. You acknowledge that you provide your personal information at your own risk."
Disclaims any guarantee that security measures will prevent unauthorized access to personal data, acknowledging user acceptance of risk when providing personal information.
AI-generated interpretation, not legal advice.
" You agree that any Customer Content that you submit does not and will not violate third-party rights of any kind, including without limitation any intellectual property rights or rights of privacy, and that you have the power to grant the license granted above. We may, but are not obligated, to reject and/or remove any User Content that we believe, in our sole discretion, violates any of these provisions."
Requires that Customer Content does not violate third-party intellectual property or privacy rights, and reserves Photoroom's discretionary right to reject or remove non-compliant User Content.
AI-generated interpretation, not legal advice.
"We obtain the categories of Personal Data listed above from the following categories of sources: From you , including from when you register for a Photoroom account, surveys that you take, or as automatically collected when using the Services. Through our service providers , which are third party companies who help us provide our Services to you consistent with the purposes detailed in this Privacy Policy. From our business partners and others , including those that may promote and/or offer products and services that may be of interest to you. We may supplement the Personal Data collected from the categories of sources described above with Personal Data we obtain from other sources."
Collection from business partners and supplementation from unnamed 'other sources' may result in data aggregation users are unaware of, raising privacy risk.
AI-generated interpretation, not legal advice.
"Unless otherwise specified in an Order Form, we may add new services for additional fees and charges, or add or amend fees and charges for existing services, at any time in our sole discretion, by giving to the Customer at least thirty (30) calendar days' written notice, such increase to take effect at the beginning of the next billing cycle. If the Customer is unhappy with the increase, the Customer may give notice to terminate the Agreement, by giving at least twenty-four (24) hours’ written notice to us prior to the next billing date."
Unilateral fee amendment rights with a short notice period and a terminate-or-accept binary places pricing risk entirely on the customer. Enterprise customers may negotiate an Order Form override, but standard paid subscribers have no contractual price lock.
AI-generated interpretation, not legal advice.
" You are solely responsible for the content of any Customer Content you submit through the Services. You agree not to submit any Customer Content, including but not limited to any User Content, that: (i) may create a risk of harm, loss, physical or mental injury, emotional distress, death, disability, disfigurement, or physical or mental illness to you, to any other person, or to any animal; (ii) may create a risk of any other loss or damage to any person or property; (iii) seeks to harm or exploit children by exposing them to inappropriate content, asking for personally identifiable details or otherwise; (iv) may constitute or contribute to a crime or tort; (v) contains any information or content that we deem to be unlawful, harmful, abusive, racially or ethnically offensive, defamatory, infringing, invasive of personal privacy or publicity rights, harassing, humiliating to other people (publicly or otherwise), libelous, threatening, profane, obscene, or otherwise objectionable; (vi) contains any information or content that is illegal (including, without limitation, the disclosure of insider information under securities law or of another party’s trade secrets); (vii) contains any information or content that you do not have a right to make available under any law or under contractual or fiduciary relationships; (viii) contains any information or content that you know is not correct and current; or (ix) to the extent applicable, violates any school or other applicable policy, including those related to cheating or ethics. "
Prohibits submission of Customer Content that creates risk of harm, injury, death, exploitation of children, or other harmful consequences, establishing content standards that Customer and Authorized Users must comply with.
AI-generated interpretation, not legal advice.
"We may, but are not obligated, to reject and/or remove any User Content that we believe, in our sole discretion, violates any of these provisions."
Sole discretion content removal without defined notice or appeal processes is a standard but user-adverse clause. Combined with broad content restrictions, this gives Photoroom wide latitude to act unilaterally against user content.
AI-generated interpretation, not legal advice.
" IN NO EVENT WILL OUR AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THE AGREEMENT (WHETHER IN CONTRACT OR TORT OR UNDER ANY OTHER THEORY OF LIABILITY) EXCEED THE TOTAL AMOUNT PAID BY CUSTOMER HEREUNDER IN THE SIX (6) MONTHS PRECEDING THE LAST EVENT GIVING RISE TO LIABILITY. THE FOREGOING WILL NOT LIMIT CUSTOMER’S PAYMENT OBLIGATIONS UNDER THE “PAYMENT TERMS” SECTION. IN NO EVENT WILL WE HAVE ANY LIABILITY TO YOU OR TO ANY THIRD PARTY FOR ANY LOST PROFITS OR REVENUES OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, COVER OR PUNITIVE DAMAGES HOWEVER CAUSED, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, AND WHETHER OR NOT WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Customer is responsible for all login credentials, including usernames and passwords, for administrator accounts as well the accounts of your Authorized Users. We will not be responsible for any damages, losses or liability to Customer, Authorized Users, or anyone else, if such information is not kept confidential by Customer or its Authorized Users, or if such information is correctly provided by an unauthorized third party logging into and accessing the Services. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN TYPES OF DAMAGES, SUCH AS INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU. THE AGREEMENT GRANTS SPECIFIC LEGAL RIGHTS, AND CUSTOMER AND AUTHORIZED USERS MAY ALSO HAVE OTHER RIGHTS THAT VARY FROM JURISDICTION TO JURISDICTION. THE FOREGOING DISCLAIMERS AND LIMITATIONS WILL NOT APPLY TO THE EXTENT PROHIBITED BY APPLICABLE LAW."
Caps the provider's aggregate liability at the total fees paid by the Customer in the preceding six months and excludes liability for lost profits, indirect, special, incidental, consequential, cover, or punitive damages regardless of cause or theory of liability, substantially limiting the provider's financial exposure.
AI-generated interpretation, not legal advice.
"IN NO EVENT WILL OUR AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THE AGREEMENT (WHETHER IN CONTRACT OR TORT OR UNDER ANY OTHER THEORY OF LIABILITY) EXCEED THE TOTAL AMOUNT PAID BY CUSTOMER HEREUNDER IN THE SIX (6) MONTHS PRECEDING THE LAST EVENT GIVING RISE TO LIABILITY. THE FOREGOING WILL NOT LIMIT CUSTOMER’S PAYMENT OBLIGATIONS UNDER THE “PAYMENT TERMS” SECTION. IN NO EVENT WILL WE HAVE ANY LIABILITY TO YOU OR TO ANY THIRD PARTY FOR ANY LOST PROFITS OR REVENUES OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, COVER OR PUNITIVE DAMAGES HOWEVER CAUSED, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, AND WHETHER OR NOT WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES."
A 6-month fee cap combined with a blanket exclusion of indirect and consequential damages is a strongly platform-favorable limitation. For users with significant commercial reliance on the service, actual losses could far exceed this cap with no legal remedy.
AI-generated interpretation, not legal advice.
"We will not be responsible for any damages, losses or liability to Customer, Authorized Users, or anyone else, if such information is not kept confidential by Customer or its Authorized Users, or if such information is correctly provided by an unauthorized third party logging into and accessing the Services."
This clause shifts responsibility for credential security entirely to the customer. Even in scenarios where the platform's systems may have contributed to a breach, this language could be used to deny liability, though enforceability may vary by jurisdiction.
AI-generated interpretation, not legal advice.
"In particular, we transmit your browsing and interaction data on the Photoroom Application to Apple and RevenueCat in order to check that you are eligible to benefit from the refunds you request."
Sharing behavioral data with third parties (including Apple, a large data aggregator) on the basis of legitimate interest for fraud/refund checks is permissible but warrants user awareness.
AI-generated interpretation, not legal advice.
"We may disclose your Personal Data to service providers and third parties as described in Section 3 of this Privacy Policy. This includes disclosure of your Personal Data to service providers for a business purpose. “Business purposes” means the reasonably necessary and proportionate use of personal information for our operational purposes, other purposes described in this Privacy Policy, for the operational purposes of our service providers and contractors, as well as other purposes compatible with the context in which the Personal Data was collected. When we disclose Personal Data for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Data confidential and not to use it for any purpose except performing the contract."
The definition of 'business purposes' includes a catch-all for 'other purposes compatible with the context in which the Personal Data was collected,' which may allow disclosures beyond what users would anticipate. Contractual protections on recipients are noted as a partial mitigation.
AI-generated interpretation, not legal advice.
"READ THIS SECTION CAREFULLY BECAUSE IT REQUIRES THE PARTIES TO ARBITRATE THEIR DISPUTES AND LIMITS THE MANNER IN WHICH YOU CAN SEEK RELIEF FROM PHOTOROOM. For any dispute with Photoroom, you agree to first contact us at [email protected] and attempt to resolve the dispute with us informally. In the unlikely event that Photoroom has not been able to resolve a dispute it has with you after sixty (60) days, we each agree to resolve any claim, dispute, or controversy (excluding any claims for injunctive or other equitable relief as provided below) arising out of or in connection with or relating to this Agreement, or the breach or alleged breach thereof (collectively, “ Claims ”), by binding arbitration by JAMS, under the Optional Expedited Arbitration Procedures then in effect for JAMS, except as provided herein."
Binding arbitration with JAMS eliminates Customer's right to a court trial for contract and service disputes. Commercial customers must pay their own JAMS filing and arbitration fees per JAMS rules, which can be substantial. The asymmetry—Photoroom can seek court relief; Customer cannot—further disadvantages Customers.
AI-generated interpretation, not legal advice.
Common questions about Photoroom's policies
- Does Photoroom train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 5 verified findings from Photoroom's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Photoroom's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
38 verified clausesClauses in Photoroom's policies that work in your favour — commitments the platform made to you.
- Privacy & data usesale/sharing of personal data
“We provide this California Privacy Notice to comply with applicable privacy laws in the State of California, including the California Consumer Privacy Act of 2018, and its amendment, the California Privacy Rights Act of 2020 (together, the “CCPA”). Any capital…”
This segment incorporates applicable California privacy laws (CCPA and CPRA) by reference, defines the scope of the California Privacy Notice as supplementing the main Privacy Policy, and specifies that it applies to Cal…
📍 § 8 (CALIFORNIA PRIVACY NOTICE)Jump to exact text → - Moderation & enforcementterms can change anytime
“If you elect to purchase a subscription to use our Services, or any other paid aspects of the Services, the Customer agrees to the pricing communicated to you by us. Unless otherwise specified in an Order Form, we may add new services for additional fees and c…”
Imposes an obligation on the Customer to accept communicated pricing for paid subscriptions and grants the provider a unilateral right to amend fees with at least 30 days' written notice, effective at the next billing cy…
- Terms changes: advance notice promised
📍 § 3.2 (Billing Policies)Jump to exact text → - Data retentiondeletion rights & post-termination survival
“(Please note that credit card or other payment methods data are not processed and kept by Photoroom but only by the Payment Services Provider) Contractual performance of the Terms between you and Photoroom Duration of use of the services and then archived for…”
This segment clarifies that credit card data is not processed by Photoroom (a disclaimer of data handling scope), establishes legitimate interest as the legal basis for operational data, and sets retention periods of ser…
📍 Privacy Policy › “User ID”Jump to exact text → - Privacy & data use
“Photoroom undertakes to respond to your requests concerning this Privacy Policy or the exercise of your rights as soon as possible and no later than the time limit set forth by applicable legislation. Any request you submit to us is subject to an identificati…”
Establishes the identity and residency verification procedure required for processing consumer rights requests, specifying that Photoroom will not fulfill requests without sufficient identifying information, and defines…
📍 Privacy Policy › “By e-mail to: [email protected]”Jump to exact text → - Privacy & data usechildren's data
“The authorized agent may submit a request to exercise these rights by emailing the letter of authorization or power of attorney to : [email protected] . Responses . We will respond to your request within forty-five (45) days after receipt of a Verifiable Cons…”
Establishes the procedure for authorized agents to submit rights requests, specifies Photoroom's 45-day response deadline with a potential 45-day extension, and sets limits on the frequency of requests, defining the oper…
📍 Privacy Policy › “By e-mail to: [email protected]”Jump to exact text → - Moderation & enforcementterms can change anytime
“We may change these Terms and the other components of the Agreement (except any Order Forms) in accordance with this Section. If we make a material change to the Agreement, we will provide Customer with reasonable notice prior to the change taking effect. The…”
Sets out the procedure by which Photoroom may modify the Agreement, including notice requirements for material changes and the mechanism by which continued use constitutes Customer's acceptance, and addresses waiver and…
- Terms changes: advance notice promised
📍 § 10.6 (Modification; Waiver; Severability)Jump to exact text →
+ 32 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
3 verified clausesWhat Photoroom requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcementconduct restrictions
“You agree not to engage in any of the following prohibited activities: (i) copying, distributing, or disclosing any part of the Services in any medium, including without limitation by any automated or non-automated “scraping”; (ii) using any automated system,…”
Prohibits a range of technical activities including scraping, automated access exceeding normal human usage, spam transmission, and other unauthorized uses that could harm the Services or other users.
📍 § 2.7 (a. Technical Restrictions)Jump to exact text → - Moderation & enforcement
“5. A statement that you have a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or law; and”
Requires a good faith belief statement that the complained-of use is unauthorized as a mandatory element of the DMCA notice procedure.
📍 § 5 (Copyright Policy)Jump to exact text → - Governing law & disputes
“You may not assign or delegate any of your rights or obligations hereunder, whether by operation of law or otherwise, without the prior written consent of Photoroom.”
Restricts Customer from assigning or delegating any rights or obligations under the Agreement, whether by operation of law or otherwise, without Photoroom's prior written consent.
📍 § 10.7 (Assignment)Jump to exact text →
What the policies actually cover
17 topics- Product telemetry & usage tracking4 clauses
- Advertising & tracking1 clause
- Sale or sharing of personal data5 protective5 clauses
- Sensitive data (biometric, location, health)1 protective2 clauses
- Children's data1 protective2 clauses
- Government & law-enforcement disclosure1 clause
- Does not train on your content3 protective3 clauses
- Trains by default, opt-out available2 clauses
- Arbitration & class-action waiver4 clauses
- Damages & liability cap1 protective8 clauses
- Indemnity direction1 clause
- Terms can change at any time4 protective4 clauses
- Deletion rights & post-termination survival4 protective5 clauses
- Auto-renewal & cancel window5 clauses
- Human review of your content1 clause
- Breach-notification promises1 protective1 clause
- Conduct restrictions1 obligation1 clause
63 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, Privacy Policy › “Processing purposes Collected data Legal basis Retention Period” addresses how long content is retained, and the Privacy Policy, Privacy Policy › “Training our AI” addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The policy document, § 2.7 (b. Customer Content Restrictions) describes rights the platform takes in user content, and the Privacy Policy, § 4.3 (Cookies providers) describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause restricts commercial use.
“During the Subscription Period, we grant the Customer a non-exclusive, non-transferable license to access and use, and to permit Authorized Users to access and use the Services, in accordance with the Agreement, for the Customer's own internal business purposes. If you do not purchase a subscription for the Services, then you will be considered a Free Account. We grant Free Accounts a non-exclusive, non-trans...”Open source citation
The clause restricts commercial use.
“During the Subscription Period, we grant the Customer a non-exclusive, non-transferable license to access and use, and to permit Authorized Users to access and use the Services, in accordance with the Agreement, for the Customer's own internal business purposes. If you do not purchase a subscription for the Services, then you will be considered a Free Account. We grant Free Accounts a non-exclusive, non-trans...”Open source citation
The clause restricts commercial use.
“READ THIS SECTION CAREFULLY BECAUSE IT REQUIRES THE PARTIES TO ARBITRATE THEIR DISPUTES AND LIMITS THE MANNER IN WHICH YOU CAN SEEK RELIEF FROM PHOTOROOM. For any dispute with Photoroom, you agree to first contact us at [email protected] and attempt to resolve the dispute with us informally. In the unlikely event that Photoroom has not been able to resolve a dispute it has with you after sixty (60) days, we e...”Open source citation
The clause provides a deletion or time-bounded retention path.
“Contractual performance of the Terms between you and Photoroom Duration of use of the services (=Until the account is deleted by you or up to a period of 2 years from your last connection to your account), and then archived for 5 years Management of your account (creation, logging and unsubscription) Optional profile data (profile photo) Consent Duration of use of the services”Open source citation
The clause provides a deletion or time-bounded retention path.
“Management of your account (creation, logging and unsubscription) Email address via GoogleAuth, FacebookAuth or AppleAuth (optional) Full name User ID Contractual performance of the Terms between you and Photoroom Duration of use of the services (=Until the account is deleted by you or up to a period of 2 years from your last connection to your account), and then archived for 5 years”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | conditional | MEDIUM | 2 |
| All applicable tiers | data retention | improves | LOW | 4 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 10 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 4 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 2 |
| All applicable tiers | privacy data use | worsens | HIGH | 8 |
| All applicable tiers | prompt ownership | worsens | HIGH | 1 |
| Free | indemnity liability | conditional | MEDIUM | 3 |
| Free | output ownership | worsens | HIGH | 2 |
| Free | privacy data use | worsens | HIGH | 4 |
| Free | training use | worsens | HIGH | 2 |
| Team / Business | commercial use | conditional | MEDIUM | 6 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“If you elect to purchase a subscription to use our Services, or any other paid aspects of the Services, the Customer agrees to the pricing communicated to you by us. Unless otherwise specified in an Order Form, we may add new services for additional fees and charges, or add or amend fees and charges for existing services, at any time in our sole discretion, by giving to the Customer at least thirty (30) calendar days' written notice, such increase to take effect at the beginning of the next billing cycle. If the Customer is unhappy with the increase, the Customer may give notice to terminate the Agreement, by giving at least twenty-four (24) hours’ written notice to us prior to the next billing date. The fees will not increase during the notice period; otherwise, any change to such pricing shall become effective in the billing cycle following notice of such change as provided under the Agreement. To use the Services outside of a Free Account, you must provide one or more current, valid accepted -payment card, as may be updated from time to time and which may include payment through your account with a third party (such method, a “ Payment Method ”). By providing a Payment Method, you agree that we or our Payment Processor are authorized to periodically charge the fees in addition to any applicable taxes and service fees on a recurring basis until you cancel your subscription. The fees for the Services and any other charges you may incur in connection with your use of the Services, such as taxes and possible transaction fees, will be charged to your Payment Method on the specific payment date indicated on your account.”Before citation
“We may disclose your Personal Data to service providers and third parties as described in Section 3 of this Privacy Policy. This includes disclosure of your Personal Data to service providers for a business purpose. “Business purposes” means the reasonably necessary and proportionate use of personal information for our operational purposes, other purposes described in this Privacy Policy, for the operational purposes of our service providers and contractors, as well as other purposes compatible with the context in which the Personal Data was collected. When we disclose Personal Data for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Data confidential and not to use it for any purpose except performing the contract. Photoroom does not “sell” or “share” Personal Data as those terms are defined by the CCPA. Please review our disclosures in our Cookies Policy for more information on our use of cookies.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“We may disclose your Personal Data to service providers and third parties as described in Section 3 of this Privacy Policy. This includes disclosure of your Personal Data to service providers for a business purpose. “Business purposes” means the reasonably necessary and proportionate use of personal information for our operational purposes, other purposes described in this Privacy Policy, for the operational purposes of our service providers and contractors, as well as other purposes compatible with the context in which the Personal Data was collected. When we disclose Personal Data for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Data confidential and not to use it for any purpose except performing the contract. Photoroom does not “sell” or “share” Personal Data as those terms are defined by the CCPA. Please review our disclosures in our Cookies Policy for more information on our use of cookies.”Before citation
“Photoroom may disclose “Confidential Information” to you in connection with the Agreement, which is anything that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure including all Order Forms, as well as non-public business, product, technology and marketing information. Customer will (i) take at least reasonable measures to prevent the unauthorized disclosure or use of Confidential Information, and limit access to those employees, affiliates and contractors who need to know such information in connection with the Agreement; and (ii) not use or disclose any Confidential Information for any purpose outside the scope of the Agreement.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“Photoroom does not “sell” or “share” Personal Data as those terms are defined by the CCPA. Please review our disclosures in our Cookies Policy for more information on our use of cookies.”Before citation
“Subject to the terms and conditions of the Agreement, Customer (for itself and all of its Authorized Users) grants us a worldwide, non-exclusive, limited term license to access, use, process, copy, distribute, perform, export and display Personal Data, only as reasonably necessary (a) to provide and maintain the Services; (b) to prevent or address service, security, support or technical issues; (c) as required by law; and (d) as expressly permitted in writing by Customer. Customer represents and warrants that it has secured all rights in and to Personal Data from its Authorized Users or any third parties as may be necessary to grant this license. Notwithstanding the foregoing, Customer agrees that we may collect, analyze, use and disclose, during or after the Subscription Period or at any time for a Free Account, data derived from Personal Data, which is anonymized and/or aggregated in a manner that makes the identification of Customer or any Authorized User or third party impossible, for any business purpose, including without limitation, to operate, analyze, and improve the Services and other products and services and to share such data with our affiliates and business partners. Customer further agrees that we will have the perpetual right to use, store, transmit, distribute, modify, copy, display, sublicense, and create derivative works of such derived data.”After citation
Latest stance: third party or vendor sharing on privacy data use
“We may disclose your Personal Data to service providers and third parties as described in Section 3 of this Privacy Policy. This includes disclosure of your Personal Data to service providers for a business purpose. “Business purposes” means the reasonably necessary and proportionate use of personal information for our operational purposes, other purposes described in this Privacy Policy, for the operational purposes of our service providers and contractors, as well as other purposes compatible with the context in which the Personal Data was collected. When we disclose Personal Data for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Data confidential and not to use it for any purpose except performing the contract. Photoroom does not “sell” or “share” Personal Data as those terms are defined by the CCPA. Please review our disclosures in our Cookies Policy for more information on our use of cookies.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Direct marketing by third parties. Photoroom does not disclose personal information to third parties for their own direct marketing purposes. However, California residents have the right to request information regarding such practices under California’s “Shine the Light” law. If you are a California resident and would like to inquire further, please email [email protected] .”Open timeline citation
Latest stance: training permitted on training use
“model Photos/images that users uploaded to Photoroom Legitimate interest to improve our product Data is only retained for the duration necessary to train the model with no use of personal data Limit the risk of fraud in connection with refunds granted by Photoroom Browsing and interaction data on the Photoroom Application Legitimate interest in ensuring that users are eligible for a refund Data is kept for a period of 6 months in the active database, after which it is deleted Marketing and implementation of referral programs Email addresses of users who have opted-in to participate in the referral program Consent For as long as you participate in the referral program, i.e. until you withdraw your consent”Open timeline citation
Latest stance: training permitted on training use
“Photoroom indicates to you at the time of their collection the personal data which are mandatory to be able to benefit from the Application and the Services. The others are optional. In any event, Photoroom undertakes to delete personal data at the end of the above mentioned retention periods. Additional information about training our AI model : By using Photoroom, you acknowledge that Photoroom processes and uses the images you upload to improve, train and develop Photoroom’s products, services and models. You can opt-out of this at any time by changing the settings on your account. This opt out shall not have retroactive effect on processing activities already carried out. For clarity, our model improvement does not apply to the images processed through our Application Programming Interface (API).”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-31· verified 2026-07-31
- Terms of Service:Last captured 2026-07-20· verified 2026-06-09verified once — no re-scan in 94 days
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 55 fewer findings this quarter vs last (127 vs 182). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Photoroom's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Photoroom's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Photoroom's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.