Developer / Coding · together.aiTogether AI
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“Data that we collect, including your Personal Data, will not be used to train the Company’s models without your explicit opt-in and consent.”
Watch: audit rights dpa residency
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
The use of user consent (via acceptance of the policy) as the legal basis for international transfers is legally contested under GDPR, where Article 49 derogations require specific conditions. The vague 'adequate controls' language provides limited assurance. No data residency options or specific transfer mechanisms (e.g., BCRs, SCCs) are named for non-EEA users.
The absence of specific retention durations makes compliance verification difficult. The carve-outs for 'security' and 'functionality improvement' are broad exceptions that could justify extended retention of Usage Data beyond what users might expect.
The inclusion of M&A scenarios and catch-all 'other purposes' language (data analysis, marketing effectiveness) expands permitted uses beyond core service delivery. While common in privacy policies, these uses create risk of data being processed or transferred in ways users may not anticipate.
Scores derived from 23 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Together AI's terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
- Data handling is conditional — 2 privacy or retention clauses warrant review before using Together AI at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Together AI's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 62 verified, verbatim-cited findings below — read the citations.
Based on 73 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 34 citationsstaticLast captured 2026-08-24
- Terms of ServiceVerified - read in full - 0 citationsstaticLast captured 2026-08-07
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
This clause restates the CCPA Article 1798.110 access rights obligations. Compliance with these obligations is a legal minimum and represents a user-protective provision rather than a risk, though it confirms the platform does collect and share personal data with third parties.
"Once the Company receives and confirms your verifiable information access request, the Company must disclose to you: (i) the categories of Personal Data we collected about you; (ii) the categories of sources for the Personal Data we collect..."
This clause grants California residents the right to request disclosure of specific categories of personal data collected about them over the past twelve months and imposes a corresponding obligation on the company to confirm and respond to verifiable access requests by disclosing specified categories of information.
" You have the right to request that the Company disclose certain information to you about our collection and use of your Personal Data over the past twelve (12) months. Once the Company receives and confirms your verifiable information acce..."
The policy permits broad sharing with an undefined set of vendors and partners. Pre-deal M&A sharing during 'negotiations' means data could be disclosed before any transaction is finalized. The absence of a subprocessor list limits transparency. The law enforcement notification clause is a positive user protection.
"We may share your Personal Data in the following situations: We may share your Personal Data with Service Providers, Third-Party Vendors, Consultants, and other Business Partners in order to provide Services on our behalf, monitor and anal..."
Permits the Company to share Personal Data with service providers, vendors, consultants, and business partners for service delivery and analysis purposes, and in connection with corporate transactions such as mergers or acquisitions, and for any purpose with user consent; establishes the conditions under which third-party data sharing is authorized.
" We may share your Personal Data in the following situations: We may share your Personal Data with Service Providers, Third-Party Vendors, Consultants, and other Business Partners in order to provide Services on our behalf, monitor and ana..."
Clause A explicitly prohibits users from providing financial information such as credit card or bank account numbers, while Clause B states users may provide 'billing information' which typically includes these exact details.
" You will not use the Services to transmit or provide to the Company any financial or medical information of any nature or any sensitive personal data (e.g., social security numbers, driver’s license numbers, birth dates, personal bank account numbers, passport or visa numbers, and/or credit card numbers). You are strictly prohibited from using the Services to communicate any message or material that (i) is libelous, harmful to minors, obscene, or constitutes pornography; (ii) infringes the intellectual property rights of any third party or is otherwise unlawful; or (iii) constitutes or encourages conduct that could constitute a criminal offense. You will not directly or indirectly: (a) reverse engineer, decompile, disassemble, modify, create derivative works of or otherwise create, attempt to create, or derive, or permit or assist any third party to create or derive, the source code underlying the Services; (b) attempt to probe, scan, or test the vulnerability of the Services, breach the security or authentication measures of the Services without proper authorization or wilfully render any part of the Services unusable; (c) use or access the Services to develop a product or service that is competitive with the Company’s products or services or engage in competitive analysis or benchmarking; (d) transfer, distribute, resell, lease, license, or assign the Services or otherwise offer the Services on a standalone basis; (e) make calls through the API that exceed limits on the number and frequency of such calls or take any action that imposes an unreasonable or disproportionately heavy load on the API or the Services or that negatively affects the ability of others to access or use the API or Services; (viii) introduce any virus, worm, Trojan horse, malware, or other"
" By accessing the Website or the Services, you confirm that you are at least thirteen (13) years old and meet the minimum age of digital consent in your country. If you are old enough to access the Website or the Services in your country but not old enough to have authority to consent to our terms, your parent or guardian must agree to our terms on your behalf. By using the Website or Services, you may provide the Company with personal information like your email address, user name, billing information, or other data you upload to the Service. Please read our Privacy Policy which explains how we use your data. You will (i) use commercially reasonable efforts to prevent unauthorized access to or use of the Services and notify the Company promptly of any such unauthorized access or use or any other known or suspected breach of security or misuse of the Services, and (ii) be responsible for obtaining and maintaining any equipment, software, and ancillary services needed to connect to, access, or otherwise use the Services. The Company may grant you infrastructure on which you access, modify, or otherwise use models trained by third parties and/or with third-party data (collectively, “Third-Party Models”). Such models may come with their own terms and conditions. It is your responsibility to comply with the terms and conditions of those models. In case of any conflict between this Agreement and such terms, the model terms govern."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"The Company may use Personal Data for the following purposes: To provide, maintain, and improve our Services, including to monitor the usage of our Services. To manage your registration as a user of the Services; the Personal Data you provide can give you access to different functionalities of the Services that are available to you as a registered user. For the development, compliance, and undertaking of the purchase contract for the products, items, or services you have purchased or of any other contract with us through the Services. To contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products, or contracted services, including the security updates, when necessary or reasonable for their implementation. To provide you with news, special offers, and general information about other goods, services, and events, which we offer that are similar to those that you have already purchased or inquired about unless you have opted not to receive such information. To attend and manage your requests to us. We may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us about our Service users is among the assets transferred. We may use your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience."
The inclusion of M&A scenarios and catch-all 'other purposes' language (data analysis, marketing effectiveness) expands permitted uses beyond core service delivery. While common in privacy policies, these uses create risk of data being processed or transferred in ways users may not anticipate.
AI-generated interpretation, not legal advice.
" We may use your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience."
Grants the Company permission to use user information for secondary purposes including data analysis, usage trend identification, promotional campaign evaluation, and service improvement, expanding the scope of permissible data use.
AI-generated interpretation, not legal advice.
"The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of the Services, or we are legally obligated to retain this data for longer time periods."
The absence of specific retention durations makes compliance verification difficult. The carve-outs for 'security' and 'functionality improvement' are broad exceptions that could justify extended retention of Usage Data beyond what users might expect.
AI-generated interpretation, not legal advice.
"We may share your Personal Data in the following situations: We may share your Personal Data with Service Providers, Third-Party Vendors, Consultants, and other Business Partners in order to provide Services on our behalf, monitor and analyze the use of our Services, contact you, and for the reasons stated in our Terms of Service. We may share or transfer your Personal Data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company. We may disclose your Personal Data for any other purpose with your consent. Under certain circumstances, the Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). To the extent we receive a request from law enforcement for your Personal Data, we will promptly notify you and provide you with a copy of the request, unless we are legally prohibited from doing so. With Other Parties in order to: - Comply with a legal obligation - Protect and defend the rights or property of the Company - Prevent or investigate possible wrongdoing in connection with the Services - Protect the personal safety "
The policy permits broad sharing with an undefined set of vendors and partners. Pre-deal M&A sharing during 'negotiations' means data could be disclosed before any transaction is finalized. The absence of a subprocessor list limits transparency. The law enforcement notification clause is a positive user protection.
AI-generated interpretation, not legal advice.
"Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This means that this information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. Your consent to this Policy followed by your submission of such information represents your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your Personal Data."
The use of user consent (via acceptance of the policy) as the legal basis for international transfers is legally contested under GDPR, where Article 49 derogations require specific conditions. The vague 'adequate controls' language provides limited assurance. No data residency options or specific transfer mechanisms (e.g., BCRs, SCCs) are named for non-EEA users.
AI-generated interpretation, not legal advice.
"- Prevent or investigate possible wrongdoing in connection with the Services"
Permits disclosure of Personal Data to prevent or investigate possible wrongdoing in connection with the Services, establishing a security/investigation exception to data sharing restrictions.
AI-generated interpretation, not legal advice.
" We may update our Policy from time to time. When we do, we will publish an updated Policy and the date it was last updated, unless additional notification is required under the law. We will notify you of any changes by posting the new Policy on this page. You are advised to review this Policy periodically for any changes. Changes to this Policy are effective when they are posted on this page."
This clause establishes the procedure for updating the Privacy Policy, including posting updates with effective dates, providing notification, and advising users to review periodically, defining when changes become legally effective.
AI-generated interpretation, not legal advice.
"- Protect and defend the rights or property of the Company"
Permits disclosure of Personal Data to protect and defend the rights or property of the Company, establishing a company-interest exception to data confidentiality restrictions.
AI-generated interpretation, not legal advice.
"- Protect the personal safety of Users of the Services or the public"
Permits disclosure of Personal Data to protect the personal safety of users or the public, establishing a safety exception to data confidentiality obligations.
AI-generated interpretation, not legal advice.
" We may share your Personal Data in the following situations: We may share your Personal Data with Service Providers, Third-Party Vendors, Consultants, and other Business Partners in order to provide Services on our behalf, monitor and analyze the use of our Services, contact you, and for the reasons stated in our Terms of Service. We may share or transfer your Personal Data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company. We may disclose your Personal Data for any other purpose with your consent. Under certain circumstances, the Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). To the extent we receive a request from law enforcement for your Personal Data, we will promptly notify you and provide you with a copy of the request, unless we are legally prohibited from doing so. With Other Parties in order to:"
Permits the Company to share Personal Data with service providers, vendors, consultants, and business partners for service delivery and analysis purposes, and in connection with corporate transactions such as mergers or acquisitions, and for any purpose with user consent; establishes the conditions under which third-party data sharing is authorized.
AI-generated interpretation, not legal advice.
"When using the Services, in the Privacy & Security settings, you have the ability to control how your Personal Data is handled by choosing “No” when asked if you want to store prompts or allow your data to train models. By choosing “No”, you are enabling Zero Data Retention (“ZDR”) for your use of the Services. Under ZDR, the content you submit, including texts, images, or prompts and any outputs provided to you by the Services are not stored, retained, or used for model training, product improvements, or any secondary purposes except as needed to provide the Services to you. ZDR applies only from the moment you enable it and does not affect any data processed prior. This means we cannot later access, retrieve, correct, export, or delete your Personal Data on your behalf as it is removed from our systems as soon as processing concludes."
ZDR provides near-real-time deletion of prompts and outputs, which is highly user-favorable. The prospective-only application creates a gap for previously submitted data. The inability to fulfill DSARs (access, export, correction) once ZDR is active is a meaningful trade-off users should understand.
AI-generated interpretation, not legal advice.
" 2.2 Use of Your Personal Data Data that we collect, including your Personal Data, will not be used to train the Company’s models without your explicit opt-in and consent. The Company may use Personal Data for the following purposes: To provide, maintain, and improve our Services, including to monitor the usage of our Services. To manage your registration as a user of the Services; the Personal Data you provide can give you access to different functionalities of the Services that are available to you as a registered user. For the development, compliance, and undertaking of the purchase contract for the products, items, or services you have purchased or of any other contract with us through the Services. To contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products, or contracted services, including the security updates, when necessary or reasonable for their implementation. To provide you with news, special offers, and general information about other goods, services, and events, which we offer that are similar to those that you have already purchased or inquired about unless you have opted not to receive such information. To attend and manage your requests to us. We may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us about our Service users is among the assets transferred. "
Restricts the Company from using collected Personal Data, including prompts and content, to train its models without the user's explicit opt-in and consent; also enumerates the permitted purposes for which Personal Data may be used, establishing both a restriction on training use and permissions for service provision, account management, and contractual performance.
AI-generated interpretation, not legal advice.
"You have the right to request that the Company delete any of your Personal Data that we collected from you and/or retained. Unless subject to a certain limited exception, once the Company receives and confirms your verifiable data deletion request, we will delete (and direct our service providers to delete) your Personal Data from our records. The Company will notify you promptly if it determines it must deny your deletion request."
CCPA deletion rights are acknowledged, but the operative carve-out ('unless subject to a certain limited exception') is undefined here. Users cannot assess in advance when their deletion requests may be lawfully denied, creating uncertainty about actual data retention outcomes.
AI-generated interpretation, not legal advice.
"Once the Company receives and confirms your verifiable information access request, the Company must disclose to you: (i) the categories of Personal Data we collected about you; (ii) the categories of sources for the Personal Data we collected about you; (iii) our business or commercial purpose for collecting or, if applicable, selling that Personal Data; (iv) the categories of third parties with whom we share that Personal Data; (v) the specific data points or pieces of Personal Data we collected about you."
This clause restates the CCPA Article 1798.110 access rights obligations. Compliance with these obligations is a legal minimum and represents a user-protective provision rather than a risk, though it confirms the platform does collect and share personal data with third parties.
AI-generated interpretation, not legal advice.
" Our Services are not directed to, or intended for anyone under the age of thirteen (13). We do not knowingly collect Personal Data from anyone under the age of thirteen (13). If you are a parent or guardian, and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of thirteen (13) without verification of parental consent, we will take steps to remove that information from our servers. If we need to rely on consent as a legal basis for processing your Personal Data, and your country requires consent from a parent, we may require your parent's consent before we collect and use your Personal Data."
This clause restricts the platform from knowingly collecting personal data from children under 13, imposes an obligation to delete such data if discovered, and establishes a procedure for parental notification and data removal, reflecting compliance with COPPA and similar child privacy laws.
AI-generated interpretation, not legal advice.
"Data that we collect, including your Personal Data, will not be used to train the Company’s models without your explicit opt-in and consent."
This clause in Section 2.2 restates the opt-in requirement for training use, consistent with Section 1. The explicit opt-in standard is user-favorable under GDPR and similar frameworks.
AI-generated interpretation, not legal advice.
" This Privacy Policy (the “Policy”) describes the practices of Together Computer, Inc. (the “Company”, “we”, “our”, or “us”) with respect to personal data that is collected when you access www.together.ai (the “Website”), the Company’s developed and available programmatic APIs and web interfaces that host, use, fine-tune, and train large AI models (the “Service(s)”), and training, migration, or other professional services provided to you by the Company (“Professional Support”). As used in this Policy, “Personal Data” means any information that relates to, describes, or could be used to identify an individual, directly or indirectly. Applicability: This Policy applies to Personal Data that the Company collects, uses, and discloses and which may include: (i) data collected through the Services, (ii) data collected through Professional Support, (iii) data collected through the Website, and (iv) data collected from third-party sources. Third-party sources may include but are not limited to public databases, commercial data sources, and the public internet. When you make purchases, we use third-party payment processors to collect credit card or other financial information. The Company does not store the credit card or payment information you provide, only confirmation that payment was made. We do not use any data collected from you to train our models without your explicit opt-in and consent. You may revoke that consent at any time and request deletion of information we have collected. "
Defines the scope of the Privacy Policy, identifies the Company and its covered services (Website, APIs, Professional Support), and defines the term 'Personal Data,' establishing what data is subject to all downstream obligations and restrictions in the policy.
AI-generated interpretation, not legal advice.
"We do not use any data collected from you to train our models without your explicit opt-in and consent. You may revoke that consent at any time and request deletion of information we have collected. You may also disable some data collection in the settings for your product. We allow you to tweak your privacy settings in our platform so that we do not retain training data, prompts, or model responses for any purpose."
The policy conditions any model training on user data upon affirmative, explicit opt-in consent, which is a strong user protection. The revocability of consent and deletion rights further reduce risk. However, the default state (opted-in vs. opted-out) is not explicitly stated in this excerpt, introducing minor ambiguity.
AI-generated interpretation, not legal advice.
Common questions about Together AI's policies
- Does Together AI train its AI models on your data?
- No training on your content by default — based on 6 verified findings from Together AI's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Together AI's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
17 verified clausesClauses in Together AI's policies that work in your favour — commitments the platform made to you.
- Model trainingdoes-not-train
“2.2 Use of Your Personal Data Data that we collect, including your Personal Data, will not be used to train the Company’s models without your explicit opt-in and consent. The Company may use Personal Data for the following purposes: To provide, maintain, and…”
Restricts the Company from using collected Personal Data, including prompts and content, to train its models without the user's explicit opt-in and consent; also enumerates the permitted purposes for which Personal Data…
📍 § 2.2 (Use of Your Personal Data)Jump to exact text → - Model trainingdoes-not-train
“This Privacy Policy (the “Policy”) describes the practices of Together Computer, Inc. (the “Company”, “we”, “our”, or “us”) with respect to personal data that is collected when you access www.together.ai (the “Website”), the Company’s developed and available p…”
Defines the scope of the Privacy Policy, identifies the Company and its covered services (Website, APIs, Professional Support), and defines the term 'Personal Data,' establishing what data is subject to all downstream ob…
📍 § 1 (Introduction)Jump to exact text → - Audit rights, DPA & residency
“If you are located in the European Economic Area (the “EEA”), Switzerland, or the United Kingdom (the “UK”), our legal basis for collecting and using the Personal Data described in this Policy will depend on the personal data concerned and the specific context…”
This clause establishes the legal bases under which the company collects and processes personal data for EEA, Switzerland, and UK residents, imposing an obligation to rely on consent, contractual necessity, or legitimate…
📍 Privacy Policy › “Europe”Jump to exact text → - Privacy & data usesale/sharing of personal data
“To exercise your access, data portability, and deletion rights or do not sell opt-out rights described above, you may submit a verifiable consumer request by sending an email to privacy@together.ai. You may only make a verifiable consumer request for access o…”
This clause establishes the procedure for exercising CCPA access, portability, deletion, and opt-out rights, specifying the method of submission (email), frequency limitations (twice per twelve months for access/portabil…
- Designated security contact: privacy@together.ai
📍 Privacy Policy › “EXERCISING YOUR RIGHTS”Jump to exact text → - Model trainingdoes-not-train
“You may also disable some data collection in the settings for your product. We allow you to tweak your privacy settings in our platform so that we do not retain training data, prompts, or model responses for any purpose. You can tweak your privacy settings by…”
Grants users the right to disable data collection and adjust privacy settings so the Company does not retain training data, prompts, or model responses; also states the policy does not cover employee data and reserves th…
- Terms changes: advance notice promised
📍 § 1 (Introduction)Jump to exact text → - Privacy & data usesale/sharing of personal data
“You have the right to request that the Company disclose certain information to you about our collection and use of your Personal Data over the past twelve (12) months. Once the Company receives and confirms your verifiable information access request, the Compa…”
This clause grants California residents the right to request disclosure of specific categories of personal data collected about them over the past twelve months and imposes a corresponding obligation on the company to co…
📍 Privacy Policy › “Access to Specific Information and Data Portability Rights”Jump to exact text →
+ 11 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
0 verified clausesWhat Together AI requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Together AI's published policies yet.
What the policies actually cover
8 topics- Product telemetry & usage tracking2 clauses
- Sale or sharing of personal data4 protective4 clauses
- Children's data1 protective1 clause
- Government & law-enforcement disclosure6 clauses
- Does not train on your content6 protective6 clauses
- Terms can change at any time1 clause
- Deletion rights & post-termination survival1 clause
- Breach-notification promises1 clause
12 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, § 2.4 (Retention of Your Personal Data) addresses how long content is retained, and the Privacy Policy, § 1 (Introduction) addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause includes sublicensable, transferable, or assignable rights.
“We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you in writing of the extension period and the reason for it. The Company will deliver any required or requested responses or other communications in writing to you by email. Any disclosures we provide will only cover the twelve-month period preceding the verifiable consume...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you in writing of the extension period and the reason for it. The Company will deliver any required or requested responses or other communications in writing to you by email. Any disclosures we provide will only cover the twelve-month period preceding the verifiable consume...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“The Company exclusively owns all right, title, and interest in and to the Website, the Services, the Professional Services deliverables, Usage Data, and all related data, (collectively, “Company IP”). Subject to your compliance with this Agreement, the Company hereby grants you a non-exclusive, non-sublicensable right and license to use the Company IP as permitted by this Agreement.Company reserves all of its inte...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you in writing of the extension period and the reason for it. The Company will deliver any required or requested responses or other communications in writing to you by email. Any disclosures we provide will only cover the twelve-month period preceding the verifiable consume...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“The Company exclusively owns all right, title, and interest in and to the Website, the Services, the Professional Services deliverables, Usage Data, and all related data, (collectively, “Company IP”). Subject to your compliance with this Agreement, the Company hereby grants you a non-exclusive, non-sublicensable right and license to use the Company IP as permitted by this Agreement.Company reserves all of its inte...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | conditional | MEDIUM | 3 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 4 |
| All applicable tiers | privacy data use | worsens | HIGH | 16 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 3 |
| Free | output ownership | worsens | HIGH | 6 |
| Standard | audit rights dpa residency | conditional | MEDIUM | 3 |
| Standard | indemnity liability | conditional | MEDIUM | 3 |
| Standard | privacy data use | conditional | MEDIUM | 1 |
| Standard | subprocessors data sharing | conditional | MEDIUM | 1 |
| Team / Business | commercial use | worsens | HIGH | 4 |
| Team / Business | privacy data use | worsens | HIGH | 3 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 3 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
legal burden changed from medium/liability limited to medium/indemnity.
“The Company warrants that (a) the Services will perform materially as described in the standard usage documentation for the Services and will not materially decrease the overall functionality of the Services during the applicable subscription term (the “Performance Warranty”), and (b) any Professional Services will be provided in a professional and workmanlike manner (the “Professional Services Warranty”). The Company will use reasonable efforts to correct a verified breach of the Performance Warranty or Professional Services Warranty reported by Customer. These procedures are Customer’s exclusive remedies and the Company's sole liability for breach of the Performance Warranty or Professional Services Warranty. EXCEPT AS EXPRESSLY SET FORTH HEREIN, EACH PARTY DISCLAIMS ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, TITLE, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMER’S USE OF THE SERVICES IS AT CUSTOMER’S SOLE RISK. THE SERVICES ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. TOGETHER COMPUTER SHALL NOT BE LIABLE FOR THE RESULTS OF ANY COMMUNICATIONS SENT OR ANY COMMUNICATIONS THAT WERE FAILED TO BE SENT USING THE TOGETHER COMPUTER SOFTWARE, AND CUSTOMER ACKNOWLEDGES THAT THE INSIGHTS OR COMMUNICATIONS PROVIDED BY THE SERVICES DO NOT CONSTITUTE PROFESSIONAL ADVICE OR COUNSEL. TOGETHER COMPUTER IS NOT RESPONSIBLE OR LIABLE FOR ANY THIRD-PARTY PLATFORMS, DOES NOT GUARANTEE THE CONTINUED AVAILABILITY THEREOF OR ANY INTEGRATION THEREWITH, AND MAY CEASE MAKING ANY SUCH INTEGRATION AVAILABLE IN ITS DISCRETION.”Before citation
legal burden changed from medium/indemnity to medium/liability limited.
“The Company warrants that (a) the Services will perform materially as described in the standard usage documentation for the Services and will not materially decrease the overall functionality of the Services during the applicable subscription term (the “Performance Warranty”), and (b) any Professional Services will be provided in a professional and workmanlike manner (the “Professional Services Warranty”). The Company will use reasonable efforts to correct a verified breach of the Performance Warranty or Professional Services Warranty reported by Customer. These procedures are Customer’s exclusive remedies and the Company's sole liability for breach of the Performance Warranty or Professional Services Warranty. EXCEPT AS EXPRESSLY SET FORTH HEREIN, EACH PARTY DISCLAIMS ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, TITLE, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMER’S USE OF THE SERVICES IS AT CUSTOMER’S SOLE RISK. THE SERVICES ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. TOGETHER COMPUTER SHALL NOT BE LIABLE FOR THE RESULTS OF ANY COMMUNICATIONS SENT OR ANY COMMUNICATIONS THAT WERE FAILED TO BE SENT USING THE TOGETHER COMPUTER SOFTWARE, AND CUSTOMER ACKNOWLEDGES THAT THE INSIGHTS OR COMMUNICATIONS PROVIDED BY THE SERVICES DO NOT CONSTITUTE PROFESSIONAL ADVICE OR COUNSEL. TOGETHER COMPUTER IS NOT RESPONSIBLE OR LIABLE FOR ANY THIRD-PARTY PLATFORMS, DOES NOT GUARANTEE THE CONTINUED AVAILABILITY THEREOF OR ANY INTEGRATION THEREWITH, AND MAY CEASE MAKING ANY SUCH INTEGRATION AVAILABLE IN ITS DISCRETION.”After citation
legal burden changed from medium/liability limited to medium/indemnity.
“The Company warrants that (a) the Services will perform materially as described in the standard usage documentation for the Services and will not materially decrease the overall functionality of the Services during the applicable subscription term (the “Performance Warranty”), and (b) any Professional Services will be provided in a professional and workmanlike manner (the “Professional Services Warranty”). The Company will use reasonable efforts to correct a verified breach of the Performance Warranty or Professional Services Warranty reported by Customer. These procedures are Customer’s exclusive remedies and the Company's sole liability for breach of the Performance Warranty or Professional Services Warranty. EXCEPT AS EXPRESSLY SET FORTH HEREIN, EACH PARTY DISCLAIMS ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, TITLE, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMER’S USE OF THE SERVICES IS AT CUSTOMER’S SOLE RISK. THE SERVICES ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. TOGETHER COMPUTER SHALL NOT BE LIABLE FOR THE RESULTS OF ANY COMMUNICATIONS SENT OR ANY COMMUNICATIONS THAT WERE FAILED TO BE SENT USING THE TOGETHER COMPUTER SOFTWARE, AND CUSTOMER ACKNOWLEDGES THAT THE INSIGHTS OR COMMUNICATIONS PROVIDED BY THE SERVICES DO NOT CONSTITUTE PROFESSIONAL ADVICE OR COUNSEL. TOGETHER COMPUTER IS NOT RESPONSIBLE OR LIABLE FOR ANY THIRD-PARTY PLATFORMS, DOES NOT GUARANTEE THE CONTINUED AVAILABILITY THEREOF OR ANY INTEGRATION THEREWITH, AND MAY CEASE MAKING ANY SUCH INTEGRATION AVAILABLE IN ITS DISCRETION.”Before citation
legal burden changed from medium/indemnity to medium/liability limited.
“The Company warrants that (a) the Services will perform materially as described in the standard usage documentation for the Services and will not materially decrease the overall functionality of the Services during the applicable subscription term (the “Performance Warranty”), and (b) any Professional Services will be provided in a professional and workmanlike manner (the “Professional Services Warranty”). The Company will use reasonable efforts to correct a verified breach of the Performance Warranty or Professional Services Warranty reported by Customer. These procedures are Customer’s exclusive remedies and the Company's sole liability for breach of the Performance Warranty or Professional Services Warranty. EXCEPT AS EXPRESSLY SET FORTH HEREIN, EACH PARTY DISCLAIMS ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, TITLE, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMER’S USE OF THE SERVICES IS AT CUSTOMER’S SOLE RISK. THE SERVICES ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. TOGETHER COMPUTER SHALL NOT BE LIABLE FOR THE RESULTS OF ANY COMMUNICATIONS SENT OR ANY COMMUNICATIONS THAT WERE FAILED TO BE SENT USING THE TOGETHER COMPUTER SOFTWARE, AND CUSTOMER ACKNOWLEDGES THAT THE INSIGHTS OR COMMUNICATIONS PROVIDED BY THE SERVICES DO NOT CONSTITUTE PROFESSIONAL ADVICE OR COUNSEL. TOGETHER COMPUTER IS NOT RESPONSIBLE OR LIABLE FOR ANY THIRD-PARTY PLATFORMS, DOES NOT GUARANTEE THE CONTINUED AVAILABILITY THEREOF OR ANY INTEGRATION THEREWITH, AND MAY CEASE MAKING ANY SUCH INTEGRATION AVAILABLE IN ITS DISCRETION.”After citation
legal burden changed from medium/liability limited to medium/indemnity.
“The Company warrants that (a) the Services will perform materially as described in the standard usage documentation for the Services and will not materially decrease the overall functionality of the Services during the applicable subscription term (the “Performance Warranty”), and (b) any Professional Services will be provided in a professional and workmanlike manner (the “Professional Services Warranty”). The Company will use reasonable efforts to correct a verified breach of the Performance Warranty or Professional Services Warranty reported by Customer. These procedures are Customer’s exclusive remedies and the Company's sole liability for breach of the Performance Warranty or Professional Services Warranty. EXCEPT AS EXPRESSLY SET FORTH HEREIN, EACH PARTY DISCLAIMS ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, TITLE, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMER’S USE OF THE SERVICES IS AT CUSTOMER’S SOLE RISK. THE SERVICES ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. TOGETHER COMPUTER SHALL NOT BE LIABLE FOR THE RESULTS OF ANY COMMUNICATIONS SENT OR ANY COMMUNICATIONS THAT WERE FAILED TO BE SENT USING THE TOGETHER COMPUTER SOFTWARE, AND CUSTOMER ACKNOWLEDGES THAT THE INSIGHTS OR COMMUNICATIONS PROVIDED BY THE SERVICES DO NOT CONSTITUTE PROFESSIONAL ADVICE OR COUNSEL. TOGETHER COMPUTER IS NOT RESPONSIBLE OR LIABLE FOR ANY THIRD-PARTY PLATFORMS, DOES NOT GUARANTEE THE CONTINUED AVAILABILITY THEREOF OR ANY INTEGRATION THEREWITH, AND MAY CEASE MAKING ANY SUCH INTEGRATION AVAILABLE IN ITS DISCRETION.”Before citation
legal burden changed from medium/indemnity to medium/liability limited.
“The Company warrants that (a) the Services will perform materially as described in the standard usage documentation for the Services and will not materially decrease the overall functionality of the Services during the applicable subscription term (the “Performance Warranty”), and (b) any Professional Services will be provided in a professional and workmanlike manner (the “Professional Services Warranty”). The Company will use reasonable efforts to correct a verified breach of the Performance Warranty or Professional Services Warranty reported by Customer. These procedures are Customer’s exclusive remedies and the Company's sole liability for breach of the Performance Warranty or Professional Services Warranty. EXCEPT AS EXPRESSLY SET FORTH HEREIN, EACH PARTY DISCLAIMS ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, TITLE, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMER’S USE OF THE SERVICES IS AT CUSTOMER’S SOLE RISK. THE SERVICES ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. TOGETHER COMPUTER SHALL NOT BE LIABLE FOR THE RESULTS OF ANY COMMUNICATIONS SENT OR ANY COMMUNICATIONS THAT WERE FAILED TO BE SENT USING THE TOGETHER COMPUTER SOFTWARE, AND CUSTOMER ACKNOWLEDGES THAT THE INSIGHTS OR COMMUNICATIONS PROVIDED BY THE SERVICES DO NOT CONSTITUTE PROFESSIONAL ADVICE OR COUNSEL. TOGETHER COMPUTER IS NOT RESPONSIBLE OR LIABLE FOR ANY THIRD-PARTY PLATFORMS, DOES NOT GUARANTEE THE CONTINUED AVAILABILITY THEREOF OR ANY INTEGRATION THEREWITH, AND MAY CEASE MAKING ANY SUCH INTEGRATION AVAILABLE IN ITS DISCRETION.”After citation
Latest stance: training permitted on training use
“When using the Services, in the Privacy & Security settings, you have the ability to control how your Personal Data is handled by choosing “No” when asked if you want to store prompts or allow your data to train models. By choosing “No”, you are enabling Zero Data Retention (“ZDR”) for your use of the Services. Under ZDR, the content you submit, including texts, images, or prompts and any outputs provided to you by the Services are not stored, retained, or used for model training, product improvements, or any secondary purposes except as needed to provide the Services to you. ZDR applies only from the moment you enable it and does not affect any data processed prior. This means we cannot later access, retrieve, correct, export, or delete your Personal Data on your behalf as it is removed from our systems as soon as processing concludes.”Open timeline citation
Latest stance: third party or vendor sharing on data retention
“You have the right to request that the Company delete any of your Personal Data that we collected from you and/or retained. Unless subject to a certain limited exception, once the Company receives and confirms your verifiable data deletion request, we will delete (and direct our service providers to delete) your Personal Data from our records. The Company will notify you promptly if it determines it must deny your deletion request.”Open timeline citation
Latest stance: sale or sell on privacy data use
“The Company does not sell your Personal Data as defined under CCPA. If, in the future, we do sell your Personal Data, we will notify you, and you may have the right to opt out of such sale.”Open timeline citation
Latest stance: sale or sell on commercial use
“You have the right to request that the Company disclose certain information to you about our collection and use of your Personal Data over the past twelve (12) months. Once the Company receives and confirms your verifiable information access request, the Company must disclose to you: (i) the categories of Personal Data we collected about you; (ii) the categories of sources for the Personal Data we collected about you; (iii) our business or commercial purpose for collecting or, if applicable, selling that Personal Data; (iv) the categories of third parties with whom we share that Personal Data; (v) the specific data points or pieces of Personal Data we collected about you. If we disclosed for a business purpose or sold your Personal Data, the Company must also provide separate lists that: (i) identify the personal data categories that were sold to each category of recipient in connection with sales of your Personal Data; and (ii) identify the personal data categories that were provided to each category of recipient in connection with business purposes disclosures of your Personal Data.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-24· verified 2026-08-24
- Terms of Service:Last captured 2026-08-07· verified 2026-08-07
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 71 more findings this quarter vs last (146 vs 75). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Together AI's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Together AI's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.