Enterprise Search / Productivity · tavily.comTavily
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
Overall riskHIGHReviewed 2026-08-14
Creator: low · GRC: low · Counsel: low
creator band
Severe
enterprise · Caution
Dealbreaker · Training without opt-out
39 verified findings5 policy surfaces2/2 core docs verified
Risk triage
Watch: subprocessors data sharing
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
0
high
8
medium
2
low
2/2
docs
subprocessors data sharing
Discloses that internet and network activity information collected by cookies has been shared with IT support for website maintenance, and imposes a restriction prohibiting sharing of text messaging originator opt-in data and consent with any third parties — the latter is a protective restriction in favor of users.
Read cited clause ↓
Moderation and enforcement
Disclaims that the company responds to Do Not Track browser signals, and explains what Do Not Track is and how users can enable or disable it, effectively disclosing a non-compliance position with that tracking-preference mechanism.
Read cited clause ↓
Privacy and data use
Grants state residents enumerated rights under their respective comprehensive data privacy laws, including the right to access, know, and receive information about what personal information has been collected, used, disclosed, and sold — establishing user entitlements over their data.
Read cited clause ↓
Trains on your data?
Not yet assessed
no verified finding covers this surface yetWho owns outputs?
Not yet assessed
no verified finding covers this surface yetCommercial use?
Not yet assessed
no verified finding covers this surface yetHow to read this page: Overall risk rates what Tavily's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredCreator lens
Your prompts, your outputs, your IP
Dealbreaker — Training without opt-out. Your inputs/outputs are used to train models and the policy provides no way to decline. see the clause
Dealbreaker — Third-party sublicensing. Rights in your content can be passed on to third parties beyond service operation. see the clause
Based on 88 verified, verbatim-cited findings below — read the citations.
Enterprise lens
Data use, retention, subprocessors, audit
Dealbreaker — Training without opt-out. Your inputs/outputs are used to train models and the policy provides no way to decline. see the clause
Dealbreaker — Third-party sublicensing. Rights in your content can be passed on to third parties beyond service operation. see the clause
Based on 67 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verifiedEnterprise Search / Productivity
Fully verified — complete core corpus captured and read in full.
Document status
- Terms of ServiceVerified - read in full - 0 citationsstaticLast captured 2026-08-10
- Privacy PolicyVerified - read in full - 39 citationsstaticLast captured 2026-08-14
Tier conditions
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
plan language
Privacy & data use
Describes the categories of personal information collected upon account creation (identifiers, employment-related information for enterprise), states the purposes for which that information is used, and identifies the legal basis for processing as contract performance — establishing an operative data collection and use obligation.
" We collect personal information as you engage with our Services. 2.1 If you have an enterprise or consumer subscription, this includes when you: Create an account. When you create an account (including if you create an account to use o..."
📍 § 1 (Our Role in Data Processing)Jump to exact text →
plan language
Privacy & data use
Describes use of a third-party analytics subprocessor (PostHog) and authorizes Tavily to deidentify and aggregate collected data for use and sharing in benchmarked, advertising, and internal analytics contexts, while stating that such deidentified data is maintained in deidentified or aggregated form.
"To opt out, please visit Cookies Settings within our Website. PostHog. We use PostHog for the collection and analysis of visitor statistics. This information is stored by PostHog and used by Tavily to understand the usage of the Services,..."
📍 § 2.2.5Jump to exact text →
plan language
Privacy & data use
Enumerates data subject rights for individuals in applicable jurisdictions under applicable data protection laws, including the right to access copies of personal information, subject to exemptions that may limit the scope of information provided in response.
" Individuals in the European Union and United Kingdom are entitled to certain rights under General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018 (“DPA”), respectively. To the extent these laws apply to our processing ..."
📍 § 7 (Your Data Subject Rights)Jump to exact text →
plan language
Subprocessors & data sharing
Describes internal sharing of personal information within Tavily for legitimate business purposes (accounting, customer service, improving services) on a need-to-know basis, and identifies legitimate interest as the legal basis for such sharing under applicable data protection laws.
" 4.1 General Sharing Tavily shares personal information as described in the PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG section, and generally in the following instances: Within Tavily. We share your personal information withi..."
📍 § 4.1 (General Sharing)Jump to exact text →
plan language
Subprocessors & data sharing
Establishes that Tavily will seek explicit consent before sharing personal information for purposes not already identified, notifies users prior to such sharing, and grants users the right to revoke consent prospectively by contacting Tavily — creating a consent-based permission and revocation right for additional sharing scenarios.
" With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or be..."
📍 § 4.1 (General Sharing)Jump to exact text →
plan language
Audit rights / DPA / residency
Discloses that some service providers are located in jurisdictions not recognized as providing adequate protection, and states that appropriate safeguards have been taken to protect personal information during cross-border transfers — establishing the mechanism by which cross-border data transfers are governed for enterprise subscribers.
" 5.1 If you have an enterprise subscription: Some of the service providers that we engage for the provision of our Services (as described above) are located in the United States, which has not been found by the European Union nor the Unit..."
📍 § 5.1Jump to exact text →
Conflicting provisions (6)
Clause A states the collection of 'contact information' and 'messages' linked to social media interactions, while Clause B explicitly states that only 'aggregated data and anonymous statistics' are received from social networks and no other personal information is collected.
"The content posted on our Social Media Pages or other public areas of social networking websites can be deleted in the same way as other content that you have created. If at any time you want content posted to be deleted (if we are required to provide you such a right), please email your request to us at support@tavily.com. Community Management. We collect, from you, your contact information, including “likes”, shares, messages and other interactions with the content, in order to analyze and evaluate how our content is perceived, to learn from it, and to improve our public relations efforts. To the extent the EU and UK data protection laws apply, the legal basis for analyzing your content is our legitimate interest in organizing, facilitating, and optimizing communication with our users and the general public. If you object to this processing of your personal information and believe you have an overriding interest, you can submit your objection via email to support@tavily.com. Page Insights. When you visit our Social Media Page, the applicable Social Network records your IP address and other information about your usage behavior on our Social Media Page. The Social Network collects this information through trackers in the browser of your device or via the advertising ID (IDFA from Apple or GAID from Google), when you open the Social Network app through your mobile device (e.g., smartphone or tablet). The Social Network uses this information to provide us with statistical evaluations of the use of our Social Media Page. "
"We receive this information directly from Social Network, in the form of aggregated data and anonymous statistics regarding certain data points, such as: age; gender; city/country; device; inquiries from fans about other Social Media Pages; region and language settings of the users; proportion of men and women; the number of people reached; clicks on posts, “likes” and reactions; comments and shared content; and total video views. We use this information to analyze and improve the advertising campaigns we conduct through our Social Media Pages. We do not collect or process any other personal information in connection with Social Network “Page Insights” function. To the extent the EU and UK data protection laws apply, we are joint controllers with the Social Network for this processing. For the purpose of the EU and UK data protection laws, the legal basis for this processing is our legitimate interest in statistical evaluation of users on our Social Media Page for the improvement and adjustment of our advertising measures based on the information collected. If you object to this processing of your personal information, by us, and believe you have an overriding interest, you can submit your objection via email to support@tavily.com. We do not retain this information independently. For information on data protection and the storage period on the Social Network in relation to its Insights function, see the Social Network privacy policy linked above. "
Within one documentClause A states that 'likes,' 'reactions,' 'comments,' and 'shared content' are received as aggregated and anonymous statistics, and no other personal information is collected, while Clause B states they collect 'likes,' 'shares,' messages, and other interactions directly 'from you' as part of community management, implying these are personal and linked to contact information.
"We receive this information directly from Social Network, in the form of aggregated data and anonymous statistics regarding certain data points, such as: age; gender; city/country; device; inquiries from fans about other Social Media Pages; region and language settings of the users; proportion of men and women; the number of people reached; clicks on posts, “likes” and reactions; comments and shared content; and total video views. We use this information to analyze and improve the advertising campaigns we conduct through our Social Media Pages. We do not collect or process any other personal information in connection with Social Network “Page Insights” function. To the extent the EU and UK data protection laws apply, we are joint controllers with the Social Network for this processing. For the purpose of the EU and UK data protection laws, the legal basis for this processing is our legitimate interest in statistical evaluation of users on our Social Media Page for the improvement and adjustment of our advertising measures based on the information collected. If you object to this processing of your personal information, by us, and believe you have an overriding interest, you can submit your objection via email to support@tavily.com. We do not retain this information independently. For information on data protection and the storage period on the Social Network in relation to its Insights function, see the Social Network privacy policy linked above. "
"The content posted on our Social Media Pages or other public areas of social networking websites can be deleted in the same way as other content that you have created. If at any time you want content posted to be deleted (if we are required to provide you such a right), please email your request to us at support@tavily.com. Community Management. We collect, from you, your contact information, including “likes”, shares, messages and other interactions with the content, in order to analyze and evaluate how our content is perceived, to learn from it, and to improve our public relations efforts. To the extent the EU and UK data protection laws apply, the legal basis for analyzing your content is our legitimate interest in organizing, facilitating, and optimizing communication with our users and the general public. If you object to this processing of your personal information and believe you have an overriding interest, you can submit your objection via email to support@tavily.com. Page Insights. When you visit our Social Media Page, the applicable Social Network records your IP address and other information about your usage behavior on our Social Media Page. The Social Network collects this information through trackers in the browser of your device or via the advertising ID (IDFA from Apple or GAID from Google), when you open the Social Network app through your mobile device (e.g., smartphone or tablet). The Social Network uses this information to provide us with statistical evaluations of the use of our Social Media Page. "
Within one documentClause A implies that any personal information can be shared with user consent, while Clause B explicitly states that text messaging originator opt-in data and consent will not be shared with any third parties, creating an opposing claim about the same data practice.
" With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time with effect moving forward and may do so by contacting us via email at support@tavily.com. 4.2 Sharing in the Last Twelve (12) Months For a business purpose. In the preceding twelve (12) months, Tavily has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors: 4.2.1 We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; website hosting; cloud storage; data analysis; customer service; email delivery; support; customer experience; marketing; external auditors and legal counsel; payment processing; identity verification; and similar services. 4.2.2 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Website and platform errors. "
" 4.2.3 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Website. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. 4.3 Sharing of Personal Information with Third Parties Per your instruction: If you share personal information in your query, you direct us to share the information with third-party search index providers, particularly in limited situations where our own search index is unable to retrieve the requested content in response to your query. If you do not wish for personal information to be shared, do not include personal information in your query. Sale/share: In the preceding twelve (12) months, Tavily has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please visit Cookies Settings within our Website. "
Within one documentClause A describes a general process for sharing personal information with user consent, implying that consent enables sharing, while Clause B explicitly states that text messaging originator opt-in data will not be shared with any third parties, regardless of consent.
" With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time with effect moving forward and may do so by contacting us via email at support@tavily.com. 4.2 Sharing in the Last Twelve (12) Months For a business purpose. In the preceding twelve (12) months, Tavily has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors: 4.2.1 We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; website hosting; cloud storage; data analysis; customer service; email delivery; support; customer experience; marketing; external auditors and legal counsel; payment processing; identity verification; and similar services. 4.2.2 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Website and platform errors. "
" 4.2.3 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Website. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. 4.3 Sharing of Personal Information with Third Parties Per your instruction: If you share personal information in your query, you direct us to share the information with third-party search index providers, particularly in limited situations where our own search index is unable to retrieve the requested content in response to your query. If you do not wish for personal information to be shared, do not include personal information in your query. Sale/share: In the preceding twelve (12) months, Tavily has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please visit Cookies Settings within our Website. "
Within one documentClause A implies that any personal information can be shared with user consent, while Clause B explicitly states that text messaging originator opt-in data and consent will not be shared with any third parties, creating an opposing claim about the same data practice.
" With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time with effect moving forward and may do so by contacting us via email at support@tavily.com. 4.2 Sharing in the Last Twelve (12) Months For a business purpose. In the preceding twelve (12) months, Tavily has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors: 4.2.1 We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; website hosting; cloud storage; data analysis; customer service; email delivery; support; customer experience; marketing; external auditors and legal counsel; payment processing; identity verification; and similar services. 4.2.2 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Website and platform errors. "
" 4.2.3 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Website. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. 4.3 Sharing of Personal Information with Third Parties Per your instruction: If you share personal information in your query, you direct us to share the information with third-party search index providers, particularly in limited situations where our own search index is unable to retrieve the requested content in response to your query. If you do not wish for personal information to be shared, do not include personal information in your query. Sale/share: In the preceding twelve (12) months, Tavily has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please visit Cookies Settings within our Website. "
Within one documentClause A describes a general process for sharing personal information with user consent, implying that consent enables sharing, while Clause B explicitly states that text messaging originator opt-in data will not be shared with any third parties, regardless of consent.
" With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time with effect moving forward and may do so by contacting us via email at support@tavily.com. 4.2 Sharing in the Last Twelve (12) Months For a business purpose. In the preceding twelve (12) months, Tavily has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors: 4.2.1 We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; website hosting; cloud storage; data analysis; customer service; email delivery; support; customer experience; marketing; external auditors and legal counsel; payment processing; identity verification; and similar services. 4.2.2 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Website and platform errors. "
" 4.2.3 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Website. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. 4.3 Sharing of Personal Information with Third Parties Per your instruction: If you share personal information in your query, you direct us to share the information with third-party search index providers, particularly in limited situations where our own search index is unable to retrieve the requested content in response to your query. If you do not wish for personal information to be shared, do not include personal information in your query. Sale/share: In the preceding twelve (12) months, Tavily has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please visit Cookies Settings within our Website. "
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
High - 0
Medium - 8
Tier-specific - 0
Total citations - 39
Severity
Surface
Document
Tier
Subprocessors & data sharing
High
" 4.2.3 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Website. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. 4.3 Sharing of Personal Information with Third Parties Per your instruction: If you share personal information in your query, you direct us to share the information with third-party search index providers, particularly in limited situations where our own search index is unable to retrieve the requested content in response to your query. If you do not wish for personal information to be shared, do not include personal information in your query. Sale/share: In the preceding twelve (12) months, Tavily has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please visit Cookies Settings within our Website. "
§ 4.2.2Jump to exact text →
Permalink to this finding →Automated analysis
Discloses that internet and network activity information collected by cookies has been shared with IT support for website maintenance, and imposes a restriction prohibiting sharing of text messaging originator opt-in data and consent with any third parties — the latter is a protective restriction in favor of users.
AI-generated interpretation, not legal advice.
Privacy & data use
High
" Residents of California, Connecticut, and Texas, and residents of the following states, to the extent their privacy laws apply: Colorado, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, and Virginia are entitled to certain rights under their respective state’s comprehensive data privacy law. If you are a resident of one of these states, you are entitled to the following rights: 8.1 Right to Access/Know. You have the right to request what personal information we have collected, used, disclosed, and sold about you, subject to certain exceptions. For example, if providing you with this information reveals any of our trade secrets, we may deny this request. 8.2 Right to Deletion. You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. For example, if we are required by law to retain the information that you are asking to be deleted, we would not be able to delete the information until we are legally permitted to delete it. 8.3 Right to Correct. You have the right to correct inaccurate personal information that we collect or maintain. 8.4 Right to Opt Out. You have the right to opt out of the processing of your personal information for the purposes of: (i) targeted advertising; (ii) profiling through solely automated decision making; and (iii) the sale or sharing of your personal information to third parties. "
§ 8 (US State Privacy Rights)Jump to exact text →
Permalink to this finding →Automated analysis
Grants state residents enumerated rights under their respective comprehensive data privacy laws, including the right to access, know, and receive information about what personal information has been collected, used, disclosed, and sold — establishing user entitlements over their data.
AI-generated interpretation, not legal advice.
Privacy & data use
High
" If you are located in the EU or UK, these trackers won’t deploy (i.e. collect your information) unless you provide your consent. In the US, such third party marketing and analytics cookies may be considered sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out, please visit the Cookies Settings within our Website. In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent. Please note, if you opt out of these targeted advertising cookies, your opt-out will be specific to the web browser, app, or device from which you accessed the opt-out. If you use multiple devices or web browsers, you will need to opt out of each browser or device that you use. For more information about what kind of cookies we use, please visit our Cookie Policy within our Website. Google Analytics. We use Google Analytics to collect information on your use of the Website for its improvement. To collect this information, Google Analytics installs cookies on your browser or reads cookies that are already there. Google Analytics also receives information about you from applications you have downloaded or services that you use that partner with Google. Google’s ability to use and share information collected by Google Analytics about your visits to the Website or to another application which partners with Google is restricted by the Google Analytics Terms of Use and Privacy Policy. "
§ 2.2.5Jump to exact text →
Permalink to this finding →Automated analysis
States that consent is required before third-party marketing and analytics trackers deploy for users in certain jurisdictions, characterizes such cookies as potentially constituting sale or sharing for targeted advertising under state data privacy laws for users in the US, and provides opt-out mechanisms via cookie settings and browser-level controls.
AI-generated interpretation, not legal advice.
Moderation & enforcement
High
" We do not respond to Do Not Track requests. Do Not Track is a preference you can set in your web browser to inform websites and mobile applications that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser. "
§ 10 (Do Not Track)Jump to exact text →
Permalink to this finding →Automated analysis
Disclaims that the company responds to Do Not Track browser signals, and explains what Do Not Track is and how users can enable or disable it, effectively disclosing a non-compliance position with that tracking-preference mechanism.
AI-generated interpretation, not legal advice.
Subprocessors & data sharing
High
" While we mostly use our own services, we may also share your query data with third-party search index providers in limited situations where our own search index is unable to retrieve the requested content in response to your query. Such information is governed by the applicable third-party index provider’s privacy policy. By sharing personal information in your query, you direct us to share the information with the applicable third-party index provider, if necessary. If you do not wish for personal information to be shared, do not include personal information in your query. Even if we use third party services to this end, if you logged into our Services using a third party service (SSO) your log-in information will not be shared as part of any query that we submit to such third party services, if any. Information from third party sources: To provide the Services, we collect information from the web, by obtaining data from third party indexes directly or via third parties. 2.2 If you are a Website visitor, this includes when you: Apply for a job. When you apply for a position at Tavily, we collect your personal information and handle it in accordance with our Candidate Privacy Policy available here. Contact us for any purpose. When you contact us, we collect, from you, your personal identifiers (such as name, email address), professional or employment-related information (job title, company size), and any additional information you choose to include in your message. "
§ 2.1Jump to exact text →
Permalink to this finding →Automated analysis
Discloses that query data may be shared with third-party search index providers when Tavily's own index cannot fulfill a request, characterizes the user's act of including personal information in a query as a direction to share it with those providers, and advises users to omit personal information from queries if they do not wish it to be shared.
AI-generated interpretation, not legal advice.
Subprocessors & data sharing
High
" 4.1 General Sharing Tavily shares personal information as described in the PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG section, and generally in the following instances: Within Tavily. We share your personal information within Tavily for the legitimate business purposes of efficiently and effectively providing the Services and improving it, such as accounting and customer service support. Access to your personal information is limited to those on a need-to-know basis. To the extent the EU or UK data protection laws apply, the legal basis for this is our legitimate interest in providing the Services more efficiently. In the event of a corporate reorganization. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, including without limitation bankruptcy or liquidation, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction. To the extent the EU or UK data protection laws apply, the legal basis for this is our legitimate interest in carrying out our business operations or, if required by law, consent. With third-party search index providers. "
§ 4.1 (General Sharing)Jump to exact text →
Permalink to this finding →Automated analysis
Describes internal sharing of personal information within Tavily for legitimate business purposes (accounting, customer service, improving services) on a need-to-know basis, and identifies legitimate interest as the legal basis for such sharing under applicable data protection laws.
AI-generated interpretation, not legal advice.
Subprocessors & data sharing
High
"We may share your query data with third-party search index providers (e.g., Google) in limited situations where our own search index is unable to retrieve the requested content in response to your query. By sharing personal information in your query, you direct us to share the information with the third parties if necessary. If you do not wish for personal information to be shared, do not include personal information in your query. For legal purposes. We share personal information where we are legally required to do so, such as in response to court orders, subpoenas, governmental/regulatory bodies, law enforcement or legal process, including for national security purposes. We may share your information with our legal advisors or auditors to establish, protect, or exercise our legal rights or as required to enforce our terms of service or other contracts or to defend against legal claims or demands. We also share this information with third parties as necessary to: detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; to comply with the requirements of any applicable law; or to comply with our legal obligations. To the extent the EU or UK data protection laws apply, the legal basis for this processing is compliance with the law or our legitimate interest in complying with non-EU data protection laws to which we are subject. "
§ 4.1 (General Sharing)Jump to exact text →
Permalink to this finding →Automated analysis
Discloses sharing of query data with third-party search index providers when Tavily's own index cannot fulfill the request, characterizes user inclusion of personal data in a query as a direction to share, and separately discloses that personal information is shared when legally required (e.g., court orders, subpoenas, governmental bodies).
AI-generated interpretation, not legal advice.
Subprocessors & data sharing
High
" With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time with effect moving forward and may do so by contacting us via email at support@tavily.com. 4.2 Sharing in the Last Twelve (12) Months For a business purpose. In the preceding twelve (12) months, Tavily has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors: 4.2.1 We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; website hosting; cloud storage; data analysis; customer service; email delivery; support; customer experience; marketing; external auditors and legal counsel; payment processing; identity verification; and similar services. 4.2.2 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Website and platform errors. "
§ 4.1 (General Sharing)Jump to exact text →
Permalink to this finding →Automated analysis
Establishes that Tavily will seek explicit consent before sharing personal information for purposes not already identified, notifies users prior to such sharing, and grants users the right to revoke consent prospectively by contacting Tavily — creating a consent-based permission and revocation right for additional sharing scenarios.
AI-generated interpretation, not legal advice.
Privacy & data use
High
" If you are a consumer in the State of Nevada, you may request to opt-out of the current or future sale of your personal information. We do not currently sell any of your personal information under Nevada law, nor do we plan to do so in the future. However, you can submit a request to opt-out of future sales by contacting us at support@tavily.com regarding the sale of such information. Please include “Opt-Out Request Under Nevada Law” in the subject line of your message. "
§ 9 (Nevada Residents)Jump to exact text →
Permalink to this finding →Automated analysis
Grants residents of a specific state the right to opt out of current or future sale of personal information, disclaims that any such sale currently occurs or is planned, and provides the procedure and subject-line requirement for submitting an opt-out request.
AI-generated interpretation, not legal advice.
Audit rights / DPA / residency
High
" 5.1 If you have an enterprise subscription: Some of the service providers that we engage for the provision of our Services (as described above) are located in the United States, which has not been found by the European Union nor the United Kingdom Secretary of State to provide an adequate level of protection of personal information, i.e. a level of protection of fundamental rights and freedoms that is essentially equivalent to that guaranteed within the European Union or United Kingdom. However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with the EU and UK data privacy laws. These include implementing the European Commission’s Standard Contractual Clauses (and UK Addendum) for transfers of personal information with our service providers, which require all of them to protect the personal information they process from the EEA in accordance with the EU and UK data protection laws. 5.2 If you have a consumer subscription: As a US based entity, we collect the data directly from the United States and so there is no cross-border transfer of personal information. However, we still apply reasonable safeguards to protect such personal information from unauthorized access or use, such as by implementing technical, administrative, and organizational measures and processing the personal information in compliance with the law and with the provisions of this Privacy Policy. "
§ 5.1Jump to exact text →
Permalink to this finding →Automated analysis
Discloses that some service providers are located in jurisdictions not recognized as providing adequate protection, and states that appropriate safeguards have been taken to protect personal information during cross-border transfers — establishing the mechanism by which cross-border data transfers are governed for enterprise subscribers.
AI-generated interpretation, not legal advice.
Privacy & data use
High
" This Privacy Policy describes the information collection, use, retention, and sharing practices of AlphaAI Technologies Inc. d/b/a Tavily and its affiliates (“Tavily”, “we”, “us”, “our”) when you interact with us through our website, www.tavily.com, and its sub-domains (collectively, the “Website”), or our web platform, located at https://app.tavily.com/ (the “Platform”), and when you interact with us offline, such as when you contact us via telephone, email or by other offline means (collectively, the “Services”). For clarity, the term “Website” shall be deemed to include any of Tavily’s domains and subdomains, except for Tavily’s web platform located at https://app.tavily.com/. As used in this Privacy Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person. Personal information includes “personal data”, as such term is defined under applicable data privacy laws. "
Privacy Policy › “Tavily Privacy Policy”Jump to exact text →
Permalink to this finding →Automated analysis
Defines the scope of the privacy policy, identifying the covered entity (AlphaAI Technologies Inc. d/b/a Tavily and affiliates), the channels of data collection (website, platform, offline interactions), and establishes key defined terms ('Website', 'Platform', 'Services') used throughout the document.
AI-generated interpretation, not legal advice.
Privacy & data use
High
" To the extent the General Data Protection Regulation (“GDPR”), Regulation (EU) 2016/679, and the UK Data Protection Act 2018 (“DPA”) apply (collectively referred to in this Privacy Policy as “EU or UK data protection laws”), the entity responsible for the collection and use (processing) of your personal information is AlphaAI Technologies Inc., the data controller. You can contact AlphaAI Technologies Inc. at support@tavily.com or by mailing a letter to 1350 Broadway, 24th Floor, New York, NY 10018, USA. Where we process information in connection with the Services we provide to a corporate client (e.g. your employer), the client is the data controller and we are the data processor, and generally process personal information pursuant to the client’s instructions. In such instances, please contact the client (i.e. your employer) with any inquiries or to exercise your privacy rights (also known as “data subject rights”) and we will work with the client to fulfill them pursuant to the client’s instructions. "
§ 1 (Our Role in Data Processing)Jump to exact text →
Permalink to this finding →Automated analysis
Defines Tavily's role as data controller under applicable data protection laws and identifies contact information; also establishes that when processing is done on behalf of corporate clients, Tavily acts as a data processor, distinguishing the two processing roles and legal bases.
AI-generated interpretation, not legal advice.
Privacy & data use
High
" We collect personal information as you engage with our Services. 2.1 If you have an enterprise or consumer subscription, this includes when you: Create an account. When you create an account (including if you create an account to use our community), we collect, from you, your personal identifiers (such as name, email address) and a selected password (to which we do not have access in cleartext). For enterprise subscriptions we also collect from the client your professional or employment-related information (such as job title, company name, industry, phone number, location). We use this information to create and maintain your account, communicate with you, and facilitate your access to the Services. To the extent the EU or UK data protection laws apply, the legal basis for this processing activity is the performance of a contract. If you do not provide this information, we will not be able to set up your account. We retain this information as necessary to provide the Services and as set forth in the Data Retention section below. Purchase a subscription. When you purchase a subscription to the Platform, we collect, from you or from our third-party payment processor, such as Stripe, your identifiers (such as name, email address, physical address, phone number) and your sensitive financial information (such as credit/debit card number, security code, expiration date). We use this information to process your payment for the selected subscription; however, we do this using the services of a third-party vendor and only get access to card type, and the last four digits of the card. "
§ 1 (Our Role in Data Processing)Jump to exact text →
Permalink to this finding →Automated analysis
Describes the categories of personal information collected upon account creation (identifiers, employment-related information for enterprise), states the purposes for which that information is used, and identifies the legal basis for processing as contract performance — establishing an operative data collection and use obligation.
AI-generated interpretation, not legal advice.
Privacy & data use
High
" You have the following choices with respect to your personal information: 6.1 Correct or View Your Information. You may access your account to correct or view certain personal information you have provided to us, and which is associated with your account. 6.2 Opt Out of Google Analytics. To prevent your personal information from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on. 6.3 Opt Out of YouTube. To opt-out of sharing viewing metrics and the displaying of YouTube ads, visit Your data in YouTube. 6.4 Opt Out of Advertising Cookies. All session cookies are temporary and expire after you close your web browser. In addition to opting out of certain trackers in Cookies Settings within our Website, persistent cookies can be removed by following your web browser’s directions. To find out how to see what cookies have been set on your computer or device, and how to reject and delete the cookies, please visit https://www.aboutcookies.org/. Please note that each web browser is different. To find information relating to your browser, visit the browser developer’s website and mobile application. If you reset your web browser to refuse all cookies or to indicate when a cookie is being sent, some features of our website may not function properly. If you choose to opt out, we will place an “opt-out cookie” on your device. The “opt-out cookie” is browser specific and device specific and only lasts until cookies are cleared from your browser or device. "
§ 6 (Your Information Choices)Jump to exact text →
Permalink to this finding →Automated analysis
Enumerates user rights to correct or view account-associated personal information, opt out of Google Analytics data use, opt out of YouTube viewing metric sharing, and opt out of advertising cookies — granting multiple data subject choice rights.
AI-generated interpretation, not legal advice.
Privacy & data use
High
"The opt-out cookie will not work for essential cookies. If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer, you will need to return and update your preferences. By clicking on the “Opt-Out” links below, you will be directed to the respective third-party website where your computer will be scanned to determine who maintains cookies on you. At that time, you can either choose to opt out of all targeted advertising, or you can choose to opt out of targeted advertising by selecting individual companies who maintain a cookie on your machine. Our use of third-party marketing and analytics cookies is considered a sale/sharing under certain state privacy laws and is also considered to be what is known as interest-based advertising (IBA). To opt out of the sale/sharing through cookies and IBA across various platforms, please visit the Digital Advertising Alliance’s YourAdChoices program tools (Your Ad Choices) or visit one of the links below: Network Advertising Initiative (NAI) Opt-Out: https://www.networkadvertising.org/managing/opt_out.asp Digital Advertising Alliance (DAA) Opt-Out: https://optout.aboutads.info/ European Union (EU) / European Economic Area (EEA) Opt-Out: http://www.youronlinechoices.eu/ In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent. 6.5 Opt Out of Email Tracking. "
§ 6.4Jump to exact text →
Permalink to this finding →Automated analysis
Describes the mechanics and limitations of the advertising opt-out cookie (not applicable to essential cookies, not persistent across browser upgrades or devices), and explains the opt-out process via third-party website scanning for targeting cookies.
AI-generated interpretation, not legal advice.
Privacy & data use
High
" Use the Platform. When you use the Platform, we automatically collect through our use of cookies and similar technologies, including pixels, tags and SDKs, your internet or other electronic network activity information (usage data (e.g., timestamps, interactions with the Platform)) and your online identifiers (IP address, browser type, operating system). We use this information for benchmarking purposes, as well as to create aggregated usage reports and to understand how users are using the Platform. We also collect, from you, your query data and any documents you upload to the Platform. We use this information to retrieve relevant content from the Internet in response to your query. To the extent the EU or UK data protection laws apply, the legal basis for this processing is the performance of a contract. Additionally, unless otherwise specified under the contract between you and us, we may use certain portions of your query data to improve our responses to future queries. To the extent the EU or UK data protection laws apply, the legal basis for this processing is our legitimate interest in the optimization and improvement of the Platform. If you are subject to the GDPR, and you object to this processing of your personal information to improve our services and believe you have an overriding interest, you can submit your objection via email to support@tavily.com. We retain this information for the period necessary to provide and improve the Services and as set forth in the Data Retention section below. "
§ 2.1Jump to exact text →
Permalink to this finding →Automated analysis
Describes automatic collection of usage data and online identifiers via cookies and similar technologies when users interact with the platform, states the purposes (benchmarking, aggregated usage reports, understanding usage), and discloses collection of query data and uploaded documents — establishing the scope and purposes of platform-use data processing.
AI-generated interpretation, not legal advice.
Privacy & data use
High
"We use this information to: 2.2.1 Measure the effectiveness of our communications and make them more attractive, particularly by improving email subject lines; 2.2.2 Limit the frequency of sending or stop it, ensuring emails continue to reach their recipients; 2.2.3 Detect and analyze suspected fraud; 2.2.4 Personalize communications based on your interest in received emails and interaction with them. This personalization includes: adapting message content / adjusting sending frequency or communication channel / optimizing campaigns based on reactions (e.g., adjusting email subject lines); and 2.2.5 Offer tailored content or advertisements on other websites, applications, or communication channels. You may revoke your consent at any time with effect moving forward by clicking the “unsubscribe” link included within each email we send to you. Interact with us on social media. When you interact with our social media pages on social networking websites, such as Facebook, X, LinkedIn, Instagram, YouTube, and TikTok (each a “Social Media Page” and collectively, “Social Media Pages”), we collect basic engagement metrics and use it to tailor content and marketing and use it to improve user experience as set forth in this section. Please note that we do not control the use or storage of the information that you have posted to any social networking websites. This information is collected and processed by the social networking websites for their own purposes, including marketing. "
§ 2.2Jump to exact text →
Permalink to this finding →Automated analysis
Enumerates the specific purposes for which communication-related personal information is used, including measuring effectiveness, limiting frequency, detecting fraud, and personalizing communications — defining the scope of permitted use of that data category.
AI-generated interpretation, not legal advice.
Privacy & data use
High
"The content posted on our Social Media Pages or other public areas of social networking websites can be deleted in the same way as other content that you have created. If at any time you want content posted to be deleted (if we are required to provide you such a right), please email your request to us at support@tavily.com. Community Management. We collect, from you, your contact information, including “likes”, shares, messages and other interactions with the content, in order to analyze and evaluate how our content is perceived, to learn from it, and to improve our public relations efforts. To the extent the EU and UK data protection laws apply, the legal basis for analyzing your content is our legitimate interest in organizing, facilitating, and optimizing communication with our users and the general public. If you object to this processing of your personal information and believe you have an overriding interest, you can submit your objection via email to support@tavily.com. Page Insights. When you visit our Social Media Page, the applicable Social Network records your IP address and other information about your usage behavior on our Social Media Page. The Social Network collects this information through trackers in the browser of your device or via the advertising ID (IDFA from Apple or GAID from Google), when you open the Social Network app through your mobile device (e.g., smartphone or tablet). The Social Network uses this information to provide us with statistical evaluations of the use of our Social Media Page. "
§ 2.2.5Jump to exact text →
Permalink to this finding →Automated analysis
Grants users the right to request deletion of content they have posted on social media pages, conditioned on Tavily being legally required to provide such a right, and provides a contact mechanism for exercising it.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Tavily's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Tavily's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Tavily's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Tavily requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Tavily's published policies yet.
What the policies actually cover
0 topicsNone of Tavily's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
182
clauses
66
patterns
66
stances
privacy sharing · 40ip license · 10legal burden · 7ip ownership · 4dispute resolution · 3training use · 2
dispute resolutionMEDIUM§ 16 (Arbitration)
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“16. Arbitration”Open source citation
dispute resolutionMEDIUMTerms of Service › “Tavily Platform Terms of Service”
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Any rights granted to Customer in such Partner Order Form which are not contained in this Agreement, apply only in connection with such Partner. In that case, Customer may seek redress or realization or enforcement of such rights solely with such Partner and not Tavily. BY AGREEING TO THIS AGREEMENT, AND EXCEPT FOR (A) CERTAIN TYPES OF DISPUTES DESCRIBED IN SECTION 16, (B) WHERE YOU EXERCISE YOUR RIGHT TO OPT OUT ...”Open source citation
dispute resolutionMEDIUMTerms of Service › “Tavily Platform Terms of Service”
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Any rights granted to Customer in such Partner Order Form which are not contained in this Agreement, apply only in connection with such Partner. In that case, Customer may seek redress or realization or enforcement of such rights solely with such Partner and not Tavily. BY AGREEING TO THIS AGREEMENT, AND EXCEPT FOR (A) CERTAIN TYPES OF DISPUTES DESCRIBED IN SECTION 16, (B) WHERE YOU EXERCISE YOUR RIGHT TO OPT OUT ...”Open source citation
ip licenseHIGH§ 3.1
The clause includes sublicensable, transferable, or assignable rights.
“For the avoidance of doubt, if Customer accesses or uses the Services through an Agent Key without separately registering an Account or providing registration details, such access or use will automatically constitute the creation of an Account under this Agreement, and all use of the Services through that Agent Key will be subject to this Agreement, including Section 3.1, with necessary changes. Without limiting t...”Open source citation
ip licenseHIGH§ 2 (Order Form and Right to Use the Services)
The clause includes sublicensable, transferable, or assignable rights.
“Subject to the terms and conditions of this Agreement, the payment of Fees and any applicable limitations set forth in the Order Form, Tavily hereby grants Customer a non-exclusive, revocable (in accordance with the terms of this Agreement), non-transferable, and non-sublicensable right, during the Term, to install, access, and use the Tavily APIs and to remotely access and use the Services, including integration ...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | worsens | HIGH | 4 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 3 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 5 |
| All applicable tiers | privacy data use | worsens | HIGH | 9 |
| All applicable tiers | prompt ownership | conditional | MEDIUM | 1 |
| All applicable tiers | training use | conditional | MEDIUM | 1 |
| Api | privacy data use | worsens | HIGH | 4 |
| Api | subprocessors data sharing | worsens | HIGH | 2 |
| Enterprise | privacy data use | conditional | MEDIUM | 1 |
| Free | indemnity liability | worsens | HIGH | 4 |
| Free | output ownership | conditional | MEDIUM | 1 |
| Free | prompt ownership | worsens | HIGH | 7 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
improvedhigh materialityJun 17 → Aug 14, 2026
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
Before · high
“To opt out of the sale or sharing of your data through cookies or the processing of your personal information for purposes of targeted advertising, please visit the Cookies Settings within our Website. If the browser or extension that you (or your authorized agent) are using supports Global Privacy Control (GPC), you may utilize the GPC opt out preference signal to instruct us not to sell or share any of your personal information collected online. The GPC opt out preference signal will apply to the device, platform, or browser in which you utilize it. You can utilize the opt out preference signal by turning on the signal in your device, platform, or browser settings. Please note that you must opt out of each device and each browser. For more information about the cookies we use, please visit our Cookie Policy. When submitting a request to know/access, correct, or delete your personal information, you must provide us with sufficient information to allow us to reasonably verify that you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. In doing so, we will take steps to verify your request by matching information provided by you with the information we have in our records. If we are not able to verify your identity for know/access, correction, or deletion requests with the information provided, we may ask you to provide other data as required.”Before citation
After · medium
“We retain this information for the period necessary to provide and improve the Services and as set forth in the Data Retention section below. To the extent the EU or UK data protection laws apply, the legal basis for this processing activity is the performance of a contract. For transparency, our third-party payment processor may share information with third parties for fraud and export law-related purposes. Please see Stripe’s Privacy Policy for information regarding Stripe’s collection, use, and sharing of personal information. Log-in using third party services (Single Sign On / SSO). If you log-in to the Platform using a third-party authentication service provider (e.g., your Google or GitHub account), we will also collect other information from the third-party authentication service provider, including, for example, your Google ID, profile photo, and information that you choose to share with us through your Google or GitHub privacy settings, if you logged-in using your Google account. Such information is governed by the applicable third-party authentication service provider’s privacy policy, meaning the authentication provider may use the data for its own purposes. We retain this information for the period necessary to provide and improve the Services and as set forth in the Data Retention section below. For clarity, this information will not be shared as part of any of your queries that we submit to such third party services as part of the use of our Platform, if any.”After citation
worsenedhigh materialityAug 10 → Aug 14, 2026
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
Before · medium
“3.1 Account. Customer and its users of the Services (each, a “ User ”)may be required to create an account(an “ Account ”)to access and use the Services. Unless otherwise specifically specified underthe Order Form, (X) each Order Form provides the Customer and its Users with access to a single Account only, and (Y) any additional Accounts may require the issuance of a separate Order Form and may incur additional charges. Customer (i) may not, and will ensure that Users do not, share Account information with any third party, (ii) will keep, and ensure that all Users keep, each Account and all Account information and credentials (including API security keys and any Agent Key) secure, and (iii) will only use, and will ensure that Users only use, their Account to access the Services. Customer is solely responsible for all activity that occurs under Customer’s Account and is solely responsible for any and all acts and omissions of Users. Any act or omission of a User will, for purposes of this Agreement, be deemed an act or omission of Customer. You shall ensure that all information provided during the Account registration process or otherwise through the Account is complete, correct and accurate. We reserve the right to suspend or terminate your Account if any information provided during the registration process or thereafter proves to be inaccurate, not current or incomplete, and you will be solely responsible for any damage or consequence that may arise from the use of false, incorrect or incomplete information in connection with an Account.”Before citation
After · high
“We do not have actual knowledge that we sell, share, profile, or process for purposes of targeted advertising the personal information of individuals under the age of 18 without their affirmative consent. 8.5 Right to Data Portability. You have the right to request that we transfer your personal information to another organization or provide it to you. 8.6 Right to Non-Discrimination. You have the right to not receive discriminatory treatment in the processing of your personal information if you choose to exercise your privacy rights. Such discriminatory treatment may include but is not limited to: (i) the denial of goods or services, (ii) being charged a different price or rate, or (iii) receiving a different level of quality in goods or services. 8.7 Right to Limit Use of Sensitive Personal Information (California residents only). You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. However, Tavily does not process personal information in a manner that gives rise to this right. 8.8 Right to Appeal. You have the right to appeal our refusal to take action on your request to exercise your other rights.”After citation
improvedhigh materialityJun 17 → Aug 10, 2026
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
Before · high
“We do not have actual knowledge that we sell, share, profile, or process for purposes of targeted advertising the personal information of individuals under the age of 18 without their affirmative consent. 8.5 Right to Data Portability. You have the right to request that we transfer your personal information to another organization or provide it to you. 8.6 Right to Non-Discrimination. You have the right to not receive discriminatory treatment in the processing of your personal information if you choose to exercise your privacy rights. Such discriminatory treatment may include but is not limited to: (i) the denial of goods or services, (ii) being charged a different price or rate, or (iii) receiving a different level of quality in goods or services. 8.7 Right to Limit Use of Sensitive Personal Information (California residents only). You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. However, Tavily does not process personal information in a manner that gives rise to this right. 8.8 Right to Appeal. You have the right to appeal our refusal to take action on your request to exercise your other rights.”Before citation
After · medium
“3.1 Account. Customer and its users of the Services (each, a “ User ”)may be required to create an account(an “ Account ”)to access and use the Services. Unless otherwise specifically specified underthe Order Form, (X) each Order Form provides the Customer and its Users with access to a single Account only, and (Y) any additional Accounts may require the issuance of a separate Order Form and may incur additional charges. Customer (i) may not, and will ensure that Users do not, share Account information with any third party, (ii) will keep, and ensure that all Users keep, each Account and all Account information and credentials (including API security keys and any Agent Key) secure, and (iii) will only use, and will ensure that Users only use, their Account to access the Services. Customer is solely responsible for all activity that occurs under Customer’s Account and is solely responsible for any and all acts and omissions of Users. Any act or omission of a User will, for purposes of this Agreement, be deemed an act or omission of Customer. You shall ensure that all information provided during the Account registration process or otherwise through the Account is complete, correct and accurate. We reserve the right to suspend or terminate your Account if any information provided during the registration process or thereafter proves to be inaccurate, not current or incomplete, and you will be solely responsible for any damage or consequence that may arise from the use of false, incorrect or incomplete information in connection with an Account.”After citation
worsenedhigh materialityJun 17 → Jun 17, 2026
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
Before · medium
“3.1 Account. Customer and its users of the Services (each, a “ User ”)may be required to create an account(an “ Account ”)to access and use the Services. Unless otherwise specifically specified underthe Order Form, (X) each Order Form provides the Customer and its Users with access to a single Account only, and (Y) any additional Accounts may require the issuance of a separate Order Form and may incur additional charges. Customer (i) may not, and will ensure that Users do not, share Account information with any third party, (ii) will keep, and ensure that all Users keep, each Account and all Account information and credentials (including API security keys and any Agent Key) secure, and (iii) will only use, and will ensure that Users only use, their Account to access the Services. Customer is solely responsible for all activity that occurs under Customer’s Account and is solely responsible for any and all acts and omissions of Users. Any act or omission of a User will, for purposes of this Agreement, be deemed an act or omission of Customer. You shall ensure that all information provided during the Account registration process or otherwise through the Account is complete, correct and accurate. We reserve the right to suspend or terminate your Account if any information provided during the registration process or thereafter proves to be inaccurate, not current or incomplete, and you will be solely responsible for any damage or consequence that may arise from the use of false, incorrect or incomplete information in connection with an Account.”Before citation
After · high
“We do not have actual knowledge that we sell, share, profile, or process for purposes of targeted advertising the personal information of individuals under the age of 18 without their affirmative consent. 8.5 Right to Data Portability. You have the right to request that we transfer your personal information to another organization or provide it to you. 8.6 Right to Non-Discrimination. You have the right to not receive discriminatory treatment in the processing of your personal information if you choose to exercise your privacy rights. Such discriminatory treatment may include but is not limited to: (i) the denial of goods or services, (ii) being charged a different price or rate, or (iii) receiving a different level of quality in goods or services. 8.7 Right to Limit Use of Sensitive Personal Information (California residents only). You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. However, Tavily does not process personal information in a manner that gives rise to this right. 8.8 Right to Appeal. You have the right to appeal our refusal to take action on your request to exercise your other rights.”After citation
Aug 14, 2026data sharingMEDIUM
Latest stance: third party or vendor sharing on subprocessors data sharing
“4.2.3 We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Website. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. 4.3 Sharing of Personal Information with Third Parties Per your instruction: If you share personal information in your query, you direct us to share the information with third-party search index providers, particularly in limited situations where our own search index is unable to retrieve the requested content in response to your query. If you do not wish for personal information to be shared, do not include personal information in your query. Sale/share: In the preceding twelve (12) months, Tavily has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please visit Cookies Settings within our Website.”Open timeline citation
Aug 14, 2026data sharingMEDIUM
Latest stance: third party or vendor sharing on data retention
“We use this information to respond to your questions or inquiries and to troubleshoot where necessary. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is that it is necessary for the performance of the service requested by you. We retain this information for the period necessary to provide the Services and as set forth in the Data Retention section below. Subscribe to our newsletter/blog/community/SLA updates/changes to sub-processors. When you subscribe to our newsletter, blog, community, SLA updates and changes to sub-processors list, we collect, from you, your personal identifiers (such as username, password, name, and email address). We use this information to send you news and updates about our products and services, related blog, newsletters, SLA, and changes to our sub-processor list. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. You may revoke your consent at any time with effect moving forward by clicking the “unsubscribe” link included within each email we send to you. However, we may continue to send you service-related messages including messages related to SLA updates and changes to sub-processors list. We, through our service provider, may use tracking pixels to determine whether you open emails, the time of opening, information about the device you use (including IP address), whether you interacted with the email, the topic of the email, whether it was delivered, sender and recipient addresses.”Open timeline citation
Aug 14, 2026data sharingHIGH
Latest stance: sale or sell on privacy data use
“To opt out of the sale or sharing of your data through cookies or the processing of your personal information for purposes of targeted advertising, please visit the Cookies Settings within our Website. If the browser or extension that you (or your authorized agent) are using supports Global Privacy Control (GPC), you may utilize the GPC opt out preference signal to instruct us not to sell or share any of your personal information collected online. The GPC opt out preference signal will apply to the device, platform, or browser in which you utilize it. You can utilize the opt out preference signal by turning on the signal in your device, platform, or browser settings. Please note that you must opt out of each device and each browser. For more information about the cookies we use, please visit our Cookie Policy. When submitting a request to know/access, correct, or delete your personal information, you must provide us with sufficient information to allow us to reasonably verify that you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. In doing so, we will take steps to verify your request by matching information provided by you with the information we have in our records. If we are not able to verify your identity for know/access, correction, or deletion requests with the information provided, we may ask you to provide other data as required.”Open timeline citation
Aug 14, 2026data sharingMEDIUM
Latest stance: third party or vendor sharing on audit rights dpa residency
“5.1 If you have an enterprise subscription: Some of the service providers that we engage for the provision of our Services (as described above) are located in the United States, which has not been found by the European Union nor the United Kingdom Secretary of State to provide an adequate level of protection of personal information, i.e. a level of protection of fundamental rights and freedoms that is essentially equivalent to that guaranteed within the European Union or United Kingdom. However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with the EU and UK data privacy laws. These include implementing the European Commission’s Standard Contractual Clauses (and UK Addendum) for transfers of personal information with our service providers, which require all of them to protect the personal information they process from the EEA in accordance with the EU and UK data protection laws. 5.2 If you have a consumer subscription: As a US based entity, we collect the data directly from the United States and so there is no cross-border transfer of personal information. However, we still apply reasonable safeguards to protect such personal information from unauthorized access or use, such as by implementing technical, administrative, and organizational measures and processing the personal information in compliance with the law and with the provisions of this Privacy Policy.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-08-10· verified 2026-08-10
- Privacy Policy:Last captured 2026-08-14· verified 2026-08-14
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 155 more findings this quarter vs last (182 vs 27). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Tavily's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Tavily's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.