Workflow & Automation · rastro.aiRastro
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
No verified risks yet
AIRIN has not published verified findings for this record yet. The page shows the gap instead of guessing.
How to read this page: Overall risk rates what Rastro's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 0 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 0 citationsLast captured 2026-07-20
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits sale of personal data or information.
“We do not sell personal data. We may share personal data with service providers that help us operate the website and related workflows, subject to appropriate contractual and operational controls. Hosting, infrastructure, storage, caching, and monitoring providers, including AWS services such as EKS, Bedrock, S3, ElastiCache, and CloudWatch, for application and evaluation workflows. Application hosting and site an...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We do not sell personal data. We may share personal data with service providers that help us operate the website and related workflows, subject to appropriate contractual and operational controls. Hosting, infrastructure, storage, caching, and monitoring providers, including AWS services such as EKS, Bedrock, S3, ElastiCache, and CloudWatch, for application and evaluation workflows. Application hosting and site an...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Rastro works with service providers that may process data in more than one jurisdiction. Where personal data is transferred across borders, we rely on the safeguards required or appropriate for the relevant transfer, which may include contractual commitments and similar transfer mechanisms.”Open source citation
The clause says submitted content is not used for model training or model/service improvement.
“We use personal data to operate the site, respond to you, provide previews and demo workflows, generate requested outputs, create evaluation accounts when you ask us to, secure our systems, investigate misuse, understand aggregate site usage, measure paid-search campaign performance, attribute demo requests, and meet legal or contractual obligations. For users in the EEA, UK, or similar jurisdictions, our legal ba...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | conditional | MEDIUM | 1 |
| Pro / Paid | output ownership | worsens | HIGH | 2 |
| Pro / Paid | training use | improves | LOW | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: sale or sell on output ownership
“We do not sell personal data. We may share personal data with service providers that help us operate the website and related workflows, subject to appropriate contractual and operational controls. Hosting, infrastructure, storage, caching, and monitoring providers, including AWS services such as EKS, Bedrock, S3, ElastiCache, and CloudWatch, for application and evaluation workflows. Application hosting and site analytics providers, including Vercel, for site delivery, performance, and usage reporting. Advertising and analytics providers, including Google Ads and Google Analytics where enabled, for paid-search attribution, aggregate reporting, and conversion measurement. Database, authentication, storage, and backend-service providers, including Supabase, for saved sessions and related application storage. Model and automation providers, including OpenAI, when a submitted request requires model processing to generate a preview, demo result, or related output. Scheduling or external-service providers when you choose to follow a link or complete a workflow on a third-party site, such as Cal.com. Professional advisers, auditors, counterparties in a transaction, or public authorities where disclosure is reasonably necessary or legally required.”Open timeline citation
Latest stance: third party or vendor sharing on output ownership
“We do not sell personal data. We may share personal data with service providers that help us operate the website and related workflows, subject to appropriate contractual and operational controls. Hosting, infrastructure, storage, caching, and monitoring providers, including AWS services such as EKS, Bedrock, S3, ElastiCache, and CloudWatch, for application and evaluation workflows. Application hosting and site analytics providers, including Vercel, for site delivery, performance, and usage reporting. Advertising and analytics providers, including Google Ads and Google Analytics where enabled, for paid-search attribution, aggregate reporting, and conversion measurement. Database, authentication, storage, and backend-service providers, including Supabase, for saved sessions and related application storage. Model and automation providers, including OpenAI, when a submitted request requires model processing to generate a preview, demo result, or related output. Scheduling or external-service providers when you choose to follow a link or complete a workflow on a third-party site, such as Cal.com. Professional advisers, auditors, counterparties in a transaction, or public authorities where disclosure is reasonably necessary or legally required.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Rastro works with service providers that may process data in more than one jurisdiction. Where personal data is transferred across borders, we rely on the safeguards required or appropriate for the relevant transfer, which may include contractual commitments and similar transfer mechanisms.”Open timeline citation
Latest stance: no training claim on training use
“We use personal data to operate the site, respond to you, provide previews and demo workflows, generate requested outputs, create evaluation accounts when you ask us to, secure our systems, investigate misuse, understand aggregate site usage, measure paid-search campaign performance, attribute demo requests, and meet legal or contractual obligations. For users in the EEA, UK, or similar jurisdictions, our legal bases may include taking steps at your request before entering into a contract, performing a contract, complying with law, pursuing legitimate interests such as operating and securing the site, and, where required, consent. Consistent with our public product commitments, we do not use customer-submitted catalog data to train general-purpose models.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-20· verified 2026-07-20verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
9 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Rastro's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Rastro's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Rastro's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.