Image generation · topazlabs.comTopaz Labs
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“• Topaz Labs will not use Your media content (including images and videos) to train its artificial”
Watch: subprocessors data sharing
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Restricts third-party service providers from using personal information for purposes other than performing their contracted functions — a user-protective restriction on subprocessor data use.
Disclaims Topaz's liability to the maximum extent permitted by law for unauthorized access, loss, or disclosure of Personal Information resulting from events outside its control, while also stating that safeguards are in place and cannot guarantee against breaches.
Specifies the procedure for exercising the right to request disclosure information regarding third-party marketing sharing, directing individuals to use the contact information in the Contact Us section.
How to read this page: Overall risk rates what Topaz Labs's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 102 verified, verbatim-cited findings below — read the citations.
Based on 106 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 0 citationsstaticLast captured 2026-07-20
- Privacy PolicyVerified - read in full - 156 citationsPDF · 15 pagespdf textLast captured 2026-08-14
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Defines the scope of the policy, identifies the controller entity, enumerates the covered products and services (Software, Web Applications, API, On-Premise Deployments), and defines key terms such as 'Customer', 'End User', and 'Services' — foundational definitional clause for interpreting all subsequent data-use provisions.
"This Privacy Policy (“Policy”) describes and protects how Topaz Labs LLC (“Topaz” “us”, “we”, or “our”) collects, uses and discloses information related to users (referred to herein as “Customer”, “End User”, “you” or “your”) of the product..."
Defines the scope of the Policy to cover collection, retention, use, and disclosure of Personal Information; defines what is excluded from 'Personal Information' (de-identified, aggregated, or anonymized data); and grants Topaz an unrestricted permission to use and disclose such excluded data for analytics, benchmarking, and other commercial purposes.
"This Policy applies to our collection, retention, use, and disclosure of Personal Information related to purchasers and users of the Services. For clarity, information that has been de-identified, aggregated, or anonymized so that it cannot..."
Continues and specifies the Usage, Billing, and Licensing data category to include images or frames processed, API calls, timestamps, license keys, subscription status, and fee-calculation metrics.
"including, but not limited to, information regarding a consumer’s interaction with the Services, such as the number of images or frames processed, API calls made, timestamps, license keys, subscription status, and other metrics required to ..."
Grants the company permission to use aggregated or de-identified data for analytics, benchmarking, and commercial research without restriction where permitted by law, establishing a broad permissive right for secondary commercial use of anonymized data.
"access and use our Services, to evaluate and improve our Services and business operations, and to develop new features, offerings and services; to increase our understanding of our customers; and for other research and analytical purposes. ..."
States that personal data may be used for securing and protecting business operations, assets, services, network, and technology resources, enumerating a legitimate purpose category for data processing related to security.
"• Securing and protecting our business: including to protect and secure our business operations,"
Continues the auditing and corporate governance purpose, including general business, accounting, record keeping, legal functions, and merger or acquisition scenarios, defining additional permissible data processing purposes.
"tax and accounting audits; audits and assessments of our operations, privacy, security and financial controls, risk, and compliance with legal obligations; our general business, accounting, record keeping and legal functions; and related to..."
States that personal data may be processed for the company's legitimate business interests, including providing the best service and secure experience, while requiring a balancing test against the impact on the individual.
"• For our legitimate business interests: including where the interest of our business in conducting"
Qualifies the legitimate interests processing purpose by stating that personal data will not be used where the company's interests are overridden by impact on the individual unless consent is given or law requires it, and grants the company sole discretion to determine when processing is necessary — user-favorable in the balancing language but granting broad discretion to the company.
"and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we pro..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"functions on our behalf. These third-party service providers have access to Personal information needed to perform their functions, but may not use it for other purposes."
Restricts third-party service providers from using personal information for purposes other than performing their contracted functions — a user-protective restriction on subprocessor data use.
AI-generated interpretation, not legal advice.
"residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request please contact us using the information provided in the Contact Us section below."
Specifies the procedure for exercising the right to request disclosure information regarding third-party marketing sharing, directing individuals to use the contact information in the Contact Us section.
AI-generated interpretation, not legal advice.
"The security of your Personal Information is important to us. We have put in place safeguards to protect the Personal Information we collect from unauthorized access, use and disclosure. However, we cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur. We urge you to take steps to keep your Personal Information safe, such as closing your web browser when finished using the Services. To the maximum extent permitted by law, Topaz disclaims liability for any unauthorized access, loss, or disclosure of Personal Information resulting from events outside its reasonable control, including without limitation network failures, third-party attacks, or your own failure to maintain the security of your devices and credentials."
Disclaims Topaz's liability to the maximum extent permitted by law for unauthorized access, loss, or disclosure of Personal Information resulting from events outside its control, while also stating that safeguards are in place and cannot guarantee against breaches.
AI-generated interpretation, not legal advice.
"you use our Software, Web Applications, APIs, or On-Premise Deployments, or interact with us, or information we derive about you and your preferences or interests based on the Personal Information we collect and our interactions with you. Where permitted by law, Topaz may also supplement the Personal Information you provide with information obtained from commercial sources, affiliates, or publicly available sources. 2.3. Information We Collect From You. We may collect Personal Information from you related to:"
Permits Topaz to supplement user-provided personal information with data from commercial sources, affiliates, or publicly available sources where permitted by law — authorizing third-party data enrichment.
AI-generated interpretation, not legal advice.
"• Service providers: we may disclose Personal Information to third-party service providers who use"
Permits disclosure of personal information to third-party service providers such as hosting providers, auditors, advisors, consultants, and support providers who use it to perform services for the company, with a requirement that such providers handle personal information consistent with the policy.
AI-generated interpretation, not legal advice.
"• Right to Opt-Out of Sale or Sharing of Personal Information. We do not sell or share your Personal"
States that the company does not sell or share personal information with third parties, prohibiting such sale or sharing — a user-favorable restriction on the company's data-sharing practices.
AI-generated interpretation, not legal advice.
"• Topaz Labs will not use Your media content (including images and videos) to train its artificial"
Prohibits Topaz Labs from using the user's media content, including images and videos, to train its AI models without the user's prior consent — user-favorable restriction that makes consent a prerequisite for training use.
AI-generated interpretation, not legal advice.
"intelligence models without Your prior consent, which shall not be unreasonably withheld. Notwithstanding the foregoing, Topaz may use de-identified, aggregated, or synthetic data derived - 5 - from such media content solely for the purpose of improving its algorithms, provided that such data cannot reasonably be linked back to You."
Creates an exception to the consent requirement for training use by permitting Topaz to use de-identified, aggregated, or synthetic data derived from media content solely for algorithm improvement, provided such data cannot reasonably be linked back to the user — narrows the scope of the training restriction but preserves the user's protection regarding identifiable data.
AI-generated interpretation, not legal advice.
"This Privacy Policy (“Policy”) describes and protects how Topaz Labs LLC (“Topaz” “us”, “we”, or “our”) collects, uses and discloses information related to users (referred to herein as “Customer”, “End User”, “you” or “your”) of the products and services offered by Topaz including, without limitation, our downloadable desktop software ("Software"), web-based applications ("Web Applications"), application programming interfaces ("API"), and on-premise deployments ("On-Premise Deployments") (collectively, the "Services"), as further described at https://www/topazlabs.com. Topaz will not use, disclose, or share Your information with anyone except as described in this Policy or as otherwise required or permitted by applicable law. To the maximum extent permitted by applicable law, Topaz disclaims liability for disclosures made by third-party service providers, partners, or contractors acting on its behalf. Your use of the Services is also subject to the End User License Agreement, available at https://topazlabs.com/eula, which is incorporated herein by reference and includes, by way of example, applicable terms governing limitations of liability, disclaimer, and indemnification. By accessing or using the Services, you (A) expressly accept and agree to the practices described in this Policy and (B) agree to the collection. use and disclosure of information in accordance with this Policy and/or, to the extent permitted by law, you waive and release Topaz from any claims arising out of third-party access, use, or misuse of your information outside Topaz’s reasonable control. "
Defines the scope of the policy, identifies the controller entity, enumerates the covered products and services (Software, Web Applications, API, On-Premise Deployments), and defines key terms such as 'Customer', 'End User', and 'Services' — foundational definitional clause for interpreting all subsequent data-use provisions.
AI-generated interpretation, not legal advice.
"and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Information for our legitimate interests. We do not use your Personal Information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). To the maximum extent permitted by law, Topaz retains sole discretion to determine when processing is necessary for legitimate interests. You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us."
Qualifies the legitimate interests processing purpose by stating that personal data will not be used where the company's interests are overridden by impact on the individual unless consent is given or law requires it, and grants the company sole discretion to determine when processing is necessary — user-favorable in the balancing language but granting broad discretion to the company.
AI-generated interpretation, not legal advice.
"• 3A: FACIAL INFORMATION PROTECTION AND PRIVACY. Topaz Labs does not collect, store,"
Prohibits the collection, storage, retention, transmission, or processing of facial recognition data or biometric identifiers unless the user explicitly opts in for the purpose of improving AI models via a clear affirmative mechanism — protective of the user by restricting facial data processing to opt-in consent only.
AI-generated interpretation, not legal advice.
"retain, transmit, or otherwise process facial recognition data or biometric identifiers unless a user explicitly opts in to provide images for the purpose of improving our AI models. Such opt-in must occur through a clear, affirmative mechanism within the Services. Facial images submitted for enhancement through any of our Services are processed solely to fulfill the requested functionality (e.g., face refinement or enhancement) and are not analyzed, stored, or used for facial recognition, identification, profiling, marketing, or analytics. Any facial analysis performed is limited to temporary, in-memory processing and is automatically and irreversibly discarded once the enhancement task is complete. Facial analysis data is never written to persistent storage and is never shared with third parties. Images of faces may be stored only for the purpose of returning the original or enhanced image to the end user. These images may be deleted upon request at any time by the user. Topaz Labs does not and will not use facial images or data for user identification or tracking. However, you acknowledge and agree that any data, including, without limitation, images, videos, and all other data, you submit for enhancement or processing may be cached or stored as necessary to provide the Services, enforce compliance, or resolve support issues, and you consent to such processing."
Restricts use of facial images submitted for enhancement to fulfilling the requested functionality only, prohibiting their use for facial recognition, identification, profiling, marketing, or analytics, and limiting any facial analysis to temporary processing — user-favorable restriction on secondary use of facial data.
AI-generated interpretation, not legal advice.
"those of a third party) and there is something about your situation which makes you want to object to processing on this ground as you feel it affects your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information that override your rights and freedoms. - 7 -"
Establishes that Topaz may override an objection to processing by demonstrating compelling legitimate grounds that override the user's rights and freedoms, continuing into the next segment.
AI-generated interpretation, not legal advice.
"However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to"
Clarifies that withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal, and that withdrawal may result in inability to provide certain products or services.
AI-generated interpretation, not legal advice.
"Information with third parties, as those terms are defined under the California law."
Continues the prior statement by specifying that the prohibition on selling or sharing applies as those terms are defined under California law, clarifying the scope of the restriction by reference to that legal definition.
AI-generated interpretation, not legal advice.
"https://www.oag.state.va.us/ - 15 - Nevada Residents. If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Information to third parties who intend to license or sell that Personal Information. You can exercise this right by contacting us at privacy@topazlabs.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your Personal Information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as set forth below. Utah Residents. If you are a resident of Utah, you have the right to out of the processing of the Personal Information for purposes of (i) targeted advertising and (ii) the sale of personal data. We do not process your Personal Information for (i) targeted advertising or (ii) the sale of personal data."
Provides the website for the government office, introduces Nevada residents' opt-out right regarding sale of personal information to third parties who intend to license or sell it, describes the exercise procedure, and disclaims that the company does not currently sell personal information as defined under the referenced statute — user-favorable clarification.
AI-generated interpretation, not legal advice.
"you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process, when you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Information to comply with local law. Note, however, that we may not always be able to comply with your request for erasure for specific legal reasons that will be notified to you, including, without limitation, where retention is required for compliance, billing, dispute resolution, or security purposes."
Identifies circumstances under which the erasure right may be exercised and carves out exceptions where Topaz may be unable to comply, including where retention is required for compliance, billing, dispute resolution, or security purposes.
AI-generated interpretation, not legal advice.
"shall not affect processing carried out prior to such withdrawal, and Topaz reserves the right to retain and process Personal Information where another lawful basis applies."
Establishes that withdrawal of consent does not affect prior processing and reserves Topaz's right to retain and process Personal Information where another lawful basis applies, creating an exception to the effect of consent withdrawal on data retention.
AI-generated interpretation, not legal advice.
Common questions about Topaz Labs's policies
- Does Topaz Labs train its AI models on your data?
- No training on your content by default — based on 2 verified findings from Topaz Labs's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Topaz Labs's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Topaz Labs's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Topaz Labs's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Topaz Labs requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Topaz Labs's published policies yet.
What the policies actually cover
0 topicsNone of Topaz Labs's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, Privacy Policy › “Dallas, Texas 75254” addresses how long content is retained, and the Privacy Policy, § 2.5 addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“Personal Information provided by third-party sources and has no obligation to independently verify such information. 2.5. Data Transmission for Locally Processed Services. You acknowledge that certain Services which run on your local hardware, such as On-Premise Deployments and the Command Line Interface (CLI), may be required to periodically transmit Usage, Billing, and Licensing Data to Topaz over the internet. ...”Open source citation
The clause provides a deletion or time-bounded retention path.
“retain, transmit, or otherwise process facial recognition data or biometric identifiers unless a user explicitly opts in to provide images for the purpose of improving our AI models. Such opt-in must occur through a clear, affirmative mechanism within the Services. Facial images submitted for enhancement through any of our Services are processed solely to fulfill the requested functionality (e.g., face refinement ...”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“We may update our Policy from time to time. If we make material changes to our privacy practices, an updated version of this Policy will reflect those changes. We will notify you of any changes by posting the new Policy on this page. If you continue to access or use the Services after being provided with the notice of updates, you acknowledge your acceptance of the updated Policy. You are advised to review this Po...”Open source citation
The clause affirms user ownership or retention of rights.
“Additionally, by submitting content to the Community section of the Topaz Labs website, including but not limited to the member blogs, galleries, and forum, you grant Topaz Labs the unlimited right to display this content across its associated web properties. You are solely responsible for the content of any comments you make. You agree that no comments submitted by you to this web site will: (i) violate any right...”Open source citation
The clause affirms user ownership or retention of rights.
“Additionally, by submitting content to the Community section of the Topaz Labs website, including but not limited to the member blogs, galleries, and forum, you grant Topaz Labs the unlimited right to display this content across its associated web properties. You are solely responsible for the content of any comments you make. You agree that no comments submitted by you to this web site will: (i) violate any right...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | audit rights dpa residency | conditional | MEDIUM | 1 |
| All applicable tiers | commercial use | conditional | MEDIUM | 1 |
| All applicable tiers | data retention | conditional | MEDIUM | 2 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 4 |
| All applicable tiers | output ownership | improves | LOW | 2 |
| All applicable tiers | privacy data use | worsens | HIGH | 6 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 3 |
| Team / Business | indemnity liability | conditional | MEDIUM | 5 |
| Team / Business | privacy data use | worsens | HIGH | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
legal burden changed from medium/indemnity to medium/liability limited.
“The security of your Personal Information is important to us. We have put in place safeguards to protect the Personal Information we collect from unauthorized access, use and disclosure. However, we cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur. We urge you to take steps to keep your Personal Information safe, such as closing your web browser when finished using the Services. To the maximum extent permitted by law, Topaz disclaims liability for any unauthorized access, loss, or disclosure of Personal Information resulting from events outside its reasonable control, including without limitation network failures, third-party attacks, or your own failure to maintain the security of your devices and credentials.”After citation
Latest stance: platform claims or reserves rights on privacy data use
“We may update our Policy from time to time. If we make material changes to our privacy practices, an updated version of this Policy will reflect those changes. We will notify you of any changes by posting the new Policy on this page. If you continue to access or use the Services after being provided with the notice of updates, you acknowledge your acceptance of the updated Policy. You are advised to review this Policy periodically for any changes. Changes to this Policy are effective when they are posted on this page. Without prejudice to your rights under applicable law, we reserve the right to update and amend this Policy without prior notice to reflect technological advancements, legal and regulatory changes and good business practices provided that such updates do not materially diminish your statutory rights. Continued use of the Services after such updates shall constitute your acceptance of the updated Policy.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request please contact us using the information provided in the Contact Us section below.”Open timeline citation
Latest stance: sale or sell on privacy data use
“https://www.oag.state.va.us/ - 15 - Nevada Residents. If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Information to third parties who intend to license or sell that Personal Information. You can exercise this right by contacting us at privacy@topazlabs.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your Personal Information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as set forth below. Utah Residents. If you are a resident of Utah, you have the right to out of the processing of the Personal Information for purposes of (i) targeted advertising and (ii) the sale of personal data. We do not process your Personal Information for (i) targeted advertising or (ii) the sale of personal data.”Open timeline citation
Latest stance: liability limited on indemnity liability
“The security of your Personal Information is important to us. We have put in place safeguards to protect the Personal Information we collect from unauthorized access, use and disclosure. However, we cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur. We urge you to take steps to keep your Personal Information safe, such as closing your web browser when finished using the Services. To the maximum extent permitted by law, Topaz disclaims liability for any unauthorized access, loss, or disclosure of Personal Information resulting from events outside its reasonable control, including without limitation network failures, third-party attacks, or your own failure to maintain the security of your devices and credentials.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-07-20· verified 2026-07-20
- Privacy Policy:Last captured 2026-08-14· verified 2026-08-14
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
531 findings first captured First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Topaz Labs's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Topaz Labs's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.