UiPath
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“When you try out our products, we will send you surveys in our legitimate interest or with your consent, to improve our products and provide you with a better user experience. We use the services of third-party sub-processors such as Jotform and SurveyMonkey to send you such surveys. We may use sub-contractors for data analysis, bound by data protection…”
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Establishes UiPath's obligation to store personal data for limited periods proportionate to processing purposes, legal and contractual obligations, and legitimate interests, with retention periods varying by data category, data subject type, and collection purpose.
Describes the procedure and conditions under which the privacy policy may be unilaterally updated by the company, including the obligation to publish material changes and the user's option to deactivate their account if they disagree, imposing an obligation on the company and a remedy option on users.
Grants permission to use personal data for building individual profiles and delivering personalized offers, including data from partners, navigational data, and service usage data.
Scores derived from 25 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Data handling is conditional — 12 privacy or retention clauses warrant review before using UiPath at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what UiPath's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredIP/output assessment pending — terms of service not yet verified This lens receives a band only once its source document has been captured and read in full.
Know where this document lives? Point us to the URL or PDF and the pipeline will verify it.
Based on 66 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Partially verified — Privacy Policy — Verified (read in full, 55 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 55 citationsstaticLast captured 2026-08-14
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
This segment identifies the categories of personal data processed (name, job title, company, email, usage data, recordings, etc.) for the purpose of delivering services across UiPath platforms, and establishes the legal basis of contractual necessity for such processing.
" Personal Data processing for accessing and using our products and services as available through our websites, which include: UiPath Community, UiPath Community Forum, UiPath Academy and Certification platforms, UiPath Business Automation P..."
This segment defines GDPR-derived terms such as 'personal data,' 'processor,' 'controller,' and 'data subject,' and extends those definitions to California ('consumer'/'business') and Indian ('data fiduciary') residents, establishing the legal framework under which personal data collection is governed.
"Terms like “ personal data ”, “ processor ”, “ processing ”, “ controller ”, “ data subject ” and others terms defined by the GDPR are used in this Policy in accordance with the definitions given by the GDPR and are sanctioned in accordance..."
This segment identifies the personal data processed for partner onboarding (name, company, job title, contact info), the legal basis (contract performance), the purposes (account management, portal access), and the third-party service providers used (Tribble Inc., Salesforce Inc.).
" If you want to become a UiPath partner (e.g., business partner, Academic Alliance partner, Academy partner, etc.) we will process your Personal Data, such as full name, company, institution, job title, position or occupation, location, ema..."
Identifies specific named third-party subprocessors (Salesforce, Atlassian, Microsoft 365, etc.) used to process personal data on UiPath's behalf and establishes the obligation to have contractual agreements ensuring data protection.
" For the purposes described in this Policy we use the services of various contractors, digital service providers, such as Salesforce , Atlassian , Microsoft 365 , Marketo , Adobe , Discourse , Stripe , Google , Zoom , Gong , One Trust , AWS..."
Permits sharing of personal data with UiPath affiliates for service provision and business activities, and establishes that affiliate-shared data receives GDPR-level protection, with a reference list of affiliates.
" We share personal data with our affiliates as necessary to provide the Services or perform usual business activities. Personal data shared with our affiliates is granted GDPR level of protection. The list of UiPath affiliates can be found..."
Permits sharing of customers' business contact data with authorized UiPath partners and distributors to maintain a selective channel system, subject to contractual safeguards, proportionality, and transparency requirements.
" As necessary to maintain an efficient selective channel system with the purpose of creating a retail environment where the commercialization of the Services is performed only by the UiPath authorized partners and distributors and customers..."
Establishes UiPath's obligation to apply caution when contracting with processors and controllers, and to implement GDPR-required safeguards for international personal data transfers.
" As a global company, UiPath may share data with its affiliates, third-party processors, or business partners around the world. UiPath applies caution when contracting with processors or other controllers and performs the relevant activitie..."
Describes the categories of personal data processed for partner onboarding, the purpose (performing the partner agreement, account management, documentation access), and names specific third-party processors (Tribble Inc., Salesforce Inc.) used to develop the partner portal.
" If you want to become a UiPath partner (e.g., business partner, Academic Alliance partner, Academy partner, etc.) we will process your Personal Data, such as full name, company, institution, job title, position or occupation, location, ema..."
Clause A implies processing personal data like name and email for service usage based on contractual necessity, while Clause B explicitly states consent will be requested for similar data when visiting websites, creating conflicting requirements for user consent.
" Personal Data processing for accessing and using our products and services as available through our websites, which include: UiPath Community, UiPath Community Forum, UiPath Academy and Certification platforms, UiPath Business Automation Platform, UiPath Marketplace Customer Enrollment and Provision of Services. If you are a customer employee, we may process your name, job title, company, signature, e-mail address, country, information regarding the usage of our Services, information regarding event participation, recordings (if consented) as necessary to execute and perform the agreement underlying to the Services, in our legitimate interest to improve, secure and market our Services and to provide you with the latest information, as consented or relevant. The purpose of processing includes license management, account activations, contracts and accounts management, providing the Services, billing, ensuring the security of your account, improving your experience with our Services and associated communications, ensuring service continuity and reliability. If you are part of the Customer Advisory Board, we will process your name, job title, e-mail address, LinkedIn profile, based on your consent. Salesforce Inc. and Microsoft 365 are sub-processors which help us with the data processing for this purpose. Personal data will be deleted at the latest in 18 months after the membership ends or at request. If you participate in our Customer Advocacy Program, we process your name, surname, work e-mail, employer information, job title, photo and social media account, address, with your consent, to create common advocacy projects, marketing materials and to send you gifts. "
" When you visit our websites, we will request your consent to collect your Personal Data, including browser information, device used, IP address, user experience on the website, name, email, phone number, job level, field of expertise, employer, industry, country, or LinkedIn Profile URL. We will use it to provide you with relevant news, improve your experience on our website, or respond to your inquiries, as well as in our legitimate interest to know our customers and improve our Services. When you use our websites to report an abuse, a security incident or to ask for the deletion of your accounts, we will process your name e-mail and location to respond to your request. We also use cookies that collect certain information about your navigation on our website to improve our Services and our online presence. Certain cookies are necessary for the website to function and cannot be switched off in our systems, others allow us to measure and improve the performance of our site, to provide enhanced functionality and personalization, or to show you relevant adverts. Excepting the cookies that are necessary for the website to function, all other cookies will require your consent. For more information, please visit our Cookie Policy. If you have submitted a privacy related request through our website, we will process your name, e-mail address, type of request, location, and relationship with UiPath, based on your consent, to handle your request. We use One Trust as a sub-processor to support in handling such requests."
Within one documentClause A implies that processing usage data for service execution is necessary for the agreement, while Clause B explicitly states consent will be requested for collecting personal data, including user experience data, to improve services, creating conflicting legal bases for similar data and purposes.
" Personal Data processing for accessing and using our products and services as available through our websites, which include: UiPath Community, UiPath Community Forum, UiPath Academy and Certification platforms, UiPath Business Automation Platform, UiPath Marketplace Customer Enrollment and Provision of Services. If you are a customer employee, we may process your name, job title, company, signature, e-mail address, country, information regarding the usage of our Services, information regarding event participation, recordings (if consented) as necessary to execute and perform the agreement underlying to the Services, in our legitimate interest to improve, secure and market our Services and to provide you with the latest information, as consented or relevant. The purpose of processing includes license management, account activations, contracts and accounts management, providing the Services, billing, ensuring the security of your account, improving your experience with our Services and associated communications, ensuring service continuity and reliability. If you are part of the Customer Advisory Board, we will process your name, job title, e-mail address, LinkedIn profile, based on your consent. Salesforce Inc. and Microsoft 365 are sub-processors which help us with the data processing for this purpose. Personal data will be deleted at the latest in 18 months after the membership ends or at request. If you participate in our Customer Advocacy Program, we process your name, surname, work e-mail, employer information, job title, photo and social media account, address, with your consent, to create common advocacy projects, marketing materials and to send you gifts. "
" When you visit our websites, we will request your consent to collect your Personal Data, including browser information, device used, IP address, user experience on the website, name, email, phone number, job level, field of expertise, employer, industry, country, or LinkedIn Profile URL. We will use it to provide you with relevant news, improve your experience on our website, or respond to your inquiries, as well as in our legitimate interest to know our customers and improve our Services. When you use our websites to report an abuse, a security incident or to ask for the deletion of your accounts, we will process your name e-mail and location to respond to your request. We also use cookies that collect certain information about your navigation on our website to improve our Services and our online presence. Certain cookies are necessary for the website to function and cannot be switched off in our systems, others allow us to measure and improve the performance of our site, to provide enhanced functionality and personalization, or to show you relevant adverts. Excepting the cookies that are necessary for the website to function, all other cookies will require your consent. For more information, please visit our Cookie Policy. If you have submitted a privacy related request through our website, we will process your name, e-mail address, type of request, location, and relationship with UiPath, based on your consent, to handle your request. We use One Trust as a sub-processor to support in handling such requests."
Within one documentClause A implies processing personal data like name and email for service usage based on contractual necessity, while Clause B explicitly states consent will be requested for similar data when visiting websites, creating conflicting requirements for user consent.
" Personal Data processing for accessing and using our products and services as available through our websites, which include: UiPath Community, UiPath Community Forum, UiPath Academy and Certification platforms, UiPath Business Automation Platform, UiPath Marketplace Customer Enrollment and Provision of Services. If you are a customer employee, we may process your name, job title, company, signature, e-mail address, country, information regarding the usage of our Services, information regarding event participation, recordings (if consented) as necessary to execute and perform the agreement underlying to the Services, in our legitimate interest to improve, secure and market our Services and to provide you with the latest information, as consented or relevant. The purpose of processing includes license management, account activations, contracts and accounts management, providing the Services, billing, ensuring the security of your account, improving your experience with our Services and associated communications, ensuring service continuity and reliability. If you are part of the Customer Advisory Board, we will process your name, job title, e-mail address, LinkedIn profile, based on your consent. Salesforce Inc. and Microsoft 365 are sub-processors which help us with the data processing for this purpose. Personal data will be deleted at the latest in 18 months after the membership ends or at request. If you participate in our Customer Advocacy Program, we process your name, surname, work e-mail, employer information, job title, photo and social media account, address, with your consent, to create common advocacy projects, marketing materials and to send you gifts. "
" When you visit our websites, we will request your consent to collect your Personal Data, including browser information, device used, IP address, user experience on the website, name, email, phone number, job level, field of expertise, employer, industry, country, or LinkedIn Profile URL. We will use it to provide you with relevant news, improve your experience on our website, or respond to your inquiries, as well as in our legitimate interest to know our customers and improve our Services. When you use our websites to report an abuse, a security incident or to ask for the deletion of your accounts, we will process your name e-mail and location to respond to your request. We also use cookies that collect certain information about your navigation on our website to improve our Services and our online presence. Certain cookies are necessary for the website to function and cannot be switched off in our systems, others allow us to measure and improve the performance of our site, to provide enhanced functionality and personalization, or to show you relevant adverts. Excepting the cookies that are necessary for the website to function, all other cookies will require your consent. For more information, please visit our Cookie Policy. If you have submitted a privacy related request through our website, we will process your name, e-mail address, type of request, location, and relationship with UiPath, based on your consent, to handle your request. We use One Trust as a sub-processor to support in handling such requests."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" to maximize your experience with our Services and to make available personalized offers by building individual profiles using the Personal Data you provided to us, navigational information, information regarding the use of our services and information provided by our partners about you. "
Grants permission to use personal data for building individual profiles and delivering personalized offers, including data from partners, navigational data, and service usage data.
AI-generated interpretation, not legal advice.
" When you apply for a job at UiPath, or when we search for a specific candidate and reach out to you for recruitment purposes, we process your Personal Data such as name, surname, CV data, work experience, education, contact information, LinkedIn profile, other social media public profiles relevant for our job openings and other information included in your application, based on your consent, or on our legitimate interest, for the purpose of recruiting the best candidates for our job openings. We may also process gender to fulfill our equal opportunity goals. We also process your personal data through the UiPath Talent Community with your consent when you upload your CV and other information. We use the services of HackerRank to process technical tests and interviews in our legitimate interest to have suitable employees for the job offerings . As part of our recruitment process, we also use AI-enabled functionalities within our applicant tracking system to support candidate sourcing, identification of relevant experience in candidate application/CV , drafting of communications , summarizing interview feedback, generating reports and aggregated analytics, coordinating and scheduling interviews, and, where consent is provided, recording, transcribing and summarizing interviews. These tools assist our recruiters and hiring teams in managing applications more efficiently; however, hiring decisions are not based on automated processing and always involve human review and validation . "
This segment identifies the categories of personal data processed for recruitment (CV, work experience, LinkedIn, gender), establishes legal bases (consent, legitimate interest), and describes the purpose of identifying suitable job candidates.
AI-generated interpretation, not legal advice.
" You may at any time choose not to receive marketing communications from us by clicking on the unsubscribe link included in the e-mail, by indicating so when we call you, or by filling in this form . Please note that if you opt out of marketing communications, we may still contact you regarding your use of our Services and to respond to your questions or requests. When we process your personal data for marketing purposes, we use third parties who process personal data on our behalf such as: Marketo, Survey Monkey, Survale, Jotform. We may process personal data such as name, e-mail, company, location, title or role, story based on your consent, if you agree to contribute to our success stories and provide your feedback. We will delete your data upon request. "
This segment grants users the right to opt out of marketing communications and identifies subprocessors used for marketing (Marketo, SurveyMonkey, Survale, Jotform), while clarifying that opting out does not prevent service-related communications.
AI-generated interpretation, not legal advice.
" Personal Data processing for accessing and using our products and services as available through our websites, which include: UiPath Community, UiPath Community Forum, UiPath Academy and Certification platforms, UiPath Business Automation Platform, UiPath Marketplace Customer Enrollment and Provision of Services. If you are a customer employee, we may process your name, job title, company, signature, e-mail address, country, information regarding the usage of our Services, information regarding event participation, recordings (if consented) as necessary to execute and perform the agreement underlying to the Services, in our legitimate interest to improve, secure and market our Services and to provide you with the latest information, as consented or relevant. The purpose of processing includes license management, account activations, contracts and accounts management, providing the Services, billing, ensuring the security of your account, improving your experience with our Services and associated communications, ensuring service continuity and reliability. If you are part of the Customer Advisory Board, we will process your name, job title, e-mail address, LinkedIn profile, based on your consent. Salesforce Inc. and Microsoft 365 are sub-processors which help us with the data processing for this purpose. Personal data will be deleted at the latest in 18 months after the membership ends or at request. If you participate in our Customer Advocacy Program, we process your name, surname, work e-mail, employer information, job title, photo and social media account, address, with your consent, to create common advocacy projects, marketing materials and to send you gifts. "
This segment identifies the categories of personal data processed (name, job title, company, email, usage data, recordings, etc.) for the purpose of delivering services across UiPath platforms, and establishes the legal basis of contractual necessity for such processing.
AI-generated interpretation, not legal advice.
" When you visit our websites, we will request your consent to collect your Personal Data, including browser information, device used, IP address, user experience on the website, name, email, phone number, job level, field of expertise, employer, industry, country, or LinkedIn Profile URL. We will use it to provide you with relevant news, improve your experience on our website, or respond to your inquiries, as well as in our legitimate interest to know our customers and improve our Services. When you use our websites to report an abuse, a security incident or to ask for the deletion of your accounts, we will process your name e-mail and location to respond to your request. We also use cookies that collect certain information about your navigation on our website to improve our Services and our online presence. Certain cookies are necessary for the website to function and cannot be switched off in our systems, others allow us to measure and improve the performance of our site, to provide enhanced functionality and personalization, or to show you relevant adverts. Excepting the cookies that are necessary for the website to function, all other cookies will require your consent. For more information, please visit our Cookie Policy. If you have submitted a privacy related request through our website, we will process your name, e-mail address, type of request, location, and relationship with UiPath, based on your consent, to handle your request. We use One Trust as a sub-processor to support in handling such requests."
This segment describes the categories of personal data collected via website visits (browser info, IP, name, email, LinkedIn URL, etc.), the consent-based legal basis, and the purposes of processing including improving user experience and responding to inquiries.
AI-generated interpretation, not legal advice.
"Terms like “ personal data ”, “ processor ”, “ processing ”, “ controller ”, “ data subject ” and others terms defined by the GDPR are used in this Policy in accordance with the definitions given by the GDPR and are sanctioned in accordance with the GDPR. If you are a California resident, please have in mind that “ data subject ” also means “ consumer ” and “ controller ” also means “ business” . If you are a resident of the Republic of India, the term “controller” also means “data fiduciary”. When you use our Services, we will collect information about you ( personal data ) which can identify you directly (name, email) or indirectly (IP address, or other online identifiers). We also collect information and aggregated data regarding user behavior, navigational information, device information, which helps us improve and tailor our Services and understand usage trends. For more information about the data we collect when you are using our websites, please check our Cookie Policy. For more information about the data we process when you are using UiPath products, please check our documentation page ."
This segment defines GDPR-derived terms such as 'personal data,' 'processor,' 'controller,' and 'data subject,' and extends those definitions to California ('consumer'/'business') and Indian ('data fiduciary') residents, establishing the legal framework under which personal data collection is governed.
AI-generated interpretation, not legal advice.
" We process these personal data based either on your consent, on the need to perform the contract we have with you (terms & conditions of service) or your employer, or on the basis of our legitimate interest to improve, secure or market our products or on the legitimate interest of your employer; and for the purpose of creating and managing your account, delivering the Services, and providing you with information related your use of the Services. UiPath Cloud Services. If you are using our cloud Services, you act as a data controller and UiPath will act as a data processor in relation to any Personal Data you use with the Services. As a controller you are in control of how you use Personal Data. Do not use personal or sensitive data with Trial, Community or test versions of UiPath’s cloud products. Some products allow you to leverage generative AI supported features. You are responsible for data minimization and configuring workflows so that limited personal data is processed. Please note that if you use the Services in Preview or Trial, you may have certain restrictions on using Personal Data or sensitive data; please check out the applicable terms of use . When using UiPath Services, we gather usage data, which includes your user ID and information about your interaction with our applications. We gather these data based on our legitimate interest to maintain the accessibility and functioning of our services as well as based on our legitimate interest to know our users and our users’ interests. "
This segment establishes the legal bases for processing (consent, contract, legitimate interest) and the purposes (account creation, service delivery, service improvement), and addresses UiPath's role as data processor when customers use cloud services, clarifying the controller/processor relationship.
AI-generated interpretation, not legal advice.
" We may process Personal Data from children that attend our workshops or educational programs organized to spread the RPA knowledge and develop educational partnerships. An information notice regarding the processing will be provided to the legal guardians and to the children upon registration. UiPath commits to comply with the applicable legislation with respect to such processing. UiPath’s products and services have not been designed to be used by children."
Obliges UiPath to provide information notices to legal guardians and children upon registration for workshops or educational programs, and commits UiPath to comply with applicable legislation for processing children's data, while noting products are not designed for children.
AI-generated interpretation, not legal advice.
" Personal data such as name, e-mail address, associated files or communications may also be processed in our legitimate interest of ensuring data security, to investigate, mitigate, and prevent personal data breaches. We use third party sub-processors such as Microsoft Defender, for this purpose. "
This segment describes IT monitoring processing (name, email, files, communications) for data security and breach prevention purposes, identifies Microsoft Defender as a subprocessor, and establishes legitimate interest as the legal basis.
AI-generated interpretation, not legal advice.
" This Privacy Policy may be changed and updated by us as it could become necessary. We will publish any substantial changes to this Privacy Policy . If you do not agree with the changes, please contact us or deactivate your account."
Describes the procedure and conditions under which the privacy policy may be unilaterally updated by the company, including the obligation to publish material changes and the user's option to deactivate their account if they disagree, imposing an obligation on the company and a remedy option on users.
AI-generated interpretation, not legal advice.
"Our partners or sponsors may directly request information about you or may ask to scan your badge. Badge scanning is entirely optional, and you can at any time refuse to have your badge scanned. In all cases, if you allow other Event participants (including UiPath delegates), sponsors or partners to scan your badge, these participants may contact you about their products and services. We may be taking pictures and video recording our events (including events organized by third parties where we have booths or presentations), based on our legitimate interest to document our events and market their success. If you have any concerns regarding the photos/recordings of you from an event, you can always reach out to our photographers, organizing staff, or contact us at privacy@uipath.com . With your consent, we may process your personal information to post testimonials on our website or social networks. If you attend one of our events as a speaker, we will process your image and voice (photos, videos), name, title, company, information about your professional life and education, as well as your presentation slides (if the case). We will always ask for your consent before making this data public through our website, social media, or other channels. When registering for our events we may process your personal data through third parties we use as sub-processors such as Bizzabo."
This segment describes optional badge scanning at events, informs participants of data sharing consequences with sponsors/partners upon scanning, and establishes the legal basis (legitimate interest) for photo/video recording at events.
AI-generated interpretation, not legal advice.
"When you try out our products, we will send you surveys in our legitimate interest or with your consent, to improve our products and provide you with a better user experience. We use the services of third-party sub-processors such as Jotform and SurveyMonkey to send you such surveys. We may use sub-contractors for data analysis, bound by data protection requirements. Privacy and security assessments . If you are an employee of our vendors, we process your name, e-mail address, company name as part of filling out the privacy and security questionnaires, based on your employer’s contract with UiPath. We use One Trust as sub-processor for managing such questionnaires. Data used for training purposes. When you use UiPath’s cloud products, the data used with the products may be used for product improvement and machine learning purposes, based on the contract with our customers, to provide them with improved functionalities. Please read the terms and conditions and product documentation. Please note that personal data and confidential data should not be used with the Community version of our products. We may use open-source data sets from legitimate sources to train or fine-tune our machine learning models. If we do so, we make sure that we use techniques and practices which minimize personal data processing is only incidental, making sure that it is only incidental. UiPath on-premises Services . UiPath does not have any access to Personal Data you use with the on-premises Services. "
This segment identifies subprocessors used for survey distribution (Jotform, SurveyMonkey) and data analysis, and describes the processing of vendor employee personal data for privacy and security assessments, establishing the legal basis as the employer's contract with UiPath.
AI-generated interpretation, not legal advice.
"To perform these activities, we use the services of SlapFive, Salesforce, Marketo, Gainsight and Bamko. We keep your data for as long as you are active in the program or until you opt-out. When you use UiPath’s cloud products, we will collect usage information such as performance logs, error logs, network logs, in order to fix errors, monitor the health of our software and improve our features and make them more user friendly. We may also use these data to identify breaches to our licensing terms. When you use UiPath website, and services such as Partner Portal, we may offer agentic chat support. We process conversations through our sub-processors (such as Cloudflare Inc. or Tribble Inc.) in order to provide you with the functionality and to improve future responses. Account Creation and Management. When you create an account with UiPath (Academy, Forum, Marketplace, UiBank, Community, Trial, Partner Portal, Certification, Automation Cloud Platform) to use the associated Services, including for the provisioning of licenses, we process your name, e-mail address, username, country, language, employment status, employer, job title, industry, area of interest, phone number, activity within the service, needed to grant you access to the Service and maintain the account. We process this data based on the terms & conditions of the Services (contract). Please keep in mind that due to the nature of some of our Services, such as Academy, Community Forum and UiPath Marketplace, your profile and your activity may need to be visible to other users. "
This segment identifies specific subprocessors (SlapFive, Salesforce, Marketo, Gainsight, Bamko) used in delivering services, establishes data retention duration tied to program activity or opt-out, and describes collection of usage/log data for performance monitoring and license breach detection, as well as the provision of agentic chat support.
AI-generated interpretation, not legal advice.
" If you want to become a UiPath partner (e.g., business partner, Academic Alliance partner, Academy partner, etc.) we will process your Personal Data, such as full name, company, institution, job title, position or occupation, location, email, telephone number, industry, location, and other necessary information, in order to perform the underlying partner agreement and to create and manage your account in UiPath’s Partner Portal, as well as for providing access to our documentation. We use the services of third parties such as Tribble Inc. and Salesforce Inc. to develop our Partner Portal."
This segment identifies the personal data processed for partner onboarding (name, company, job title, contact info), the legal basis (contract performance), the purposes (account management, portal access), and the third-party service providers used (Tribble Inc., Salesforce Inc.).
AI-generated interpretation, not legal advice.
" We will store your Personal Data for a limited period, as necessary to achieve the purposes of the Personal Data processing, as described in this Policy, and in accordance with our legal, contractual obligations, legitimate interest and in accordance with our internal policies and procedures regarding personal data retention. This means that we retain different categories of data for different periods of time depending on the type of data, the category of data subject to whom the data relates, and the purposes for which we collected the data. We keep your personal data if you have a relationship with UiPath or are interested in our products or services. Once the retention period expires for a specific category of data, UiPath will delete, archive, anonymize or destroy it, in accordance with our internal policies and procedures, unless prohibited by the applicable law. We also delete your personal data whenever you withdraw your consent. You may request to have all your information deleted at any time by filling in this form . Contact dpo@uipath.com for more information about your privacy ."
Establishes UiPath's obligation to store personal data for limited periods proportionate to processing purposes, legal and contractual obligations, and legitimate interests, with retention periods varying by data category, data subject type, and collection purpose.
AI-generated interpretation, not legal advice.
" If you request our support, we will process the Personal Data needed for support, such as name, email address, country, company, job title and device ID, in accordance with our Support terms . We may also process voice data upon your consent, when support is offered via call center or remote. We process this data to perform the contract we have with you. We use Salesforce Inc. and Atlassian Corporation as main sub-processors for support purposes. We want to limit the usage of Personal Data to what is necessary for support purposes, so we rely on you to limit the disclosure and stick to sharing only technical data when raising support tickets. We may also use generative AI features for quality assurance and analytics in order to improve our processes, when you interact with us and send us support tickets or questions, based on our legitimate interest. "
This segment identifies the personal data processed for support purposes, the legal basis (contract performance), the subprocessors used (Salesforce, Atlassian), and places an obligation on the user to limit personal data disclosed during support interactions.
AI-generated interpretation, not legal advice.
" to comply with a legal requirement or to protect the rights and assets of UiPath or other entities or people, such as courts of law, or enforcement authorities;"
Permits disclosure of personal data to courts of law or enforcement authorities to comply with legal requirements or to protect the rights and assets of UiPath or other parties.
AI-generated interpretation, not legal advice.
" For the purposes described in this Policy we use the services of various contractors, digital service providers, such as Salesforce , Atlassian , Microsoft 365 , Marketo , Adobe , Discourse , Stripe , Google , Zoom , Gong , One Trust , AWS , Google , Ashby , HackerRank . Among others, these contractors process specific categories of Personal Data on our behalf to help us organize events, manage business information and contracts, market research, store data, analyze and organize data. We have contractual agreements with our contractors to ensure that your Personal Data is protected and used only as necessary to perform the contracted services. Some of our contractors are also controllers on their own, carrying out processing activities while using their services and products, which include online advertising technologies, search engines, cloud computing. Some of the contractors are third parties who are not intended to process the Personal Data but may have access to it upon fulfilling their tasks or interacting with us, such as technical maintenance companies, financial entities, or legal auditors. Whenever your personal data is transferred outside the EU or outside UK, to a third country, UiPath makes sure that there is a valid transfer mechanism in place, such as Standard Contractual Clauses or an International Data Transfer Addendum to the European Commission’s standard contractual clauses for international data transfers, to make sure that your personal data is protected."
Identifies specific named third-party subprocessors (Salesforce, Atlassian, Microsoft 365, etc.) used to process personal data on UiPath's behalf and establishes the obligation to have contractual agreements ensuring data protection.
AI-generated interpretation, not legal advice.
Common questions about UiPath's policies
- Does UiPath train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 1 verified finding from UiPath's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from UiPath's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
14 verified clausesClauses in UiPath's policies that work in your favour — commitments the platform made to you.
- Audit rights, DPA & residency
“Data Privacy Framework for data processed by UiPath Inc. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, UiPath commits to resolve DPF Principles-related complaints about our collection and use of your perso…”
Commits UiPath to resolving DPF Principles-related complaints and describes the compliance obligations under EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF, including providing a designated complaint contact.
- Designated security contact: dpo@uipath.com
📍 Privacy Policy › “With UiPath service providers and business partners”Jump to exact text → - Audit rights, DPA & residency
“For any other questions regarding your rights please write to us at dpo@uipath.com . UiPath complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as s…”
Affirms UiPath's certification and compliance obligations under the EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF as set by the U.S. Department of Commerce, and provides a contact point for rights-related inquiries.
- Designated security contact: dpo@uipath.com
📍 Privacy Policy › “With UiPath service providers and business partners”Jump to exact text → - Subprocessors & data sharingsale/sharing of personal data
“If you opt-in, UiPath may also contact you via SMS related to your job application. We do not sell or share mobile or personal data with third parties, affiliates, or partners for marketing or promotional purposes. We only share data with third parties that ac…”
This segment establishes a one-year retention limit for candidate data, restricts sharing of mobile/personal data with third parties for marketing or advertising purposes, and permits sharing only with third parties acti…
📍 Privacy Policy › “Recruitment”Jump to exact text → - Privacy & data usesensitive data (biometric/location/health)
“If personal data covered by this Privacy Policy is to be used for a new purpose that is materially different from that for which the personal data was originally collected or subsequently authorized, or is to be disclosed to a non-agent third party in a manner…”
Grants data subjects the right to opt out when personal data is to be used for materially different new purposes or disclosed to non-agent third parties, and mandates UiPath to provide opt-out opportunity, including heig…
- Designated security contact: privacy@uipath.com
📍 Privacy Policy › “Choice of limiting the use and disclosure of personal data”Jump to exact text → - Audit rights, DPA & residency
“In the context of an onward transfer, UiPath has responsibility for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf. UiPath shall remain liable under the D…”
Establishes UiPath's ongoing liability for onward transfers to third-party agents under DPF Principles, including responsibility for agent misprocessing unless UiPath can prove non-responsibility, and notes FTC jurisdict…
📍 Privacy Policy › “With UiPath service providers and business partners”Jump to exact text → - Privacy & data use
“for recruitment, in order to ensure that we reach out to interested candidates or candidates who possess the skills required by our job postings. You can always contact us by using this form if you want more information or if you want to exercise your rights.…”
Obliges UiPath to ensure human oversight in recruitment-related processing decisions and prohibits automated decisions regarding job offerings, while providing data subjects a contact mechanism to exercise rights.
📍 § 3 (Automated Decision Making and Profiling)Jump to exact text →
+ 8 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
0 verified clausesWhat UiPath requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in UiPath's published policies yet.
What the policies actually cover
10 topics- Product telemetry & usage tracking5 clauses
- Advertising & tracking3 clauses
- Sale or sharing of personal data3 protective4 clauses
- Sensitive data (biometric, location, health)1 protective2 clauses
- Children's data1 protective2 clauses
- Government & law-enforcement disclosure2 clauses
- Trains by default, opt-out available1 clause
- Terms can change at any time1 clause
- Deletion rights & post-termination survival1 clause
- Breach-notification promises1 clause
33 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, § 5 (Personal Data Retention) addresses how long content is retained, and the Privacy Policy, Privacy Policy › “Providing our Services” addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause provides a deletion or time-bounded retention path.
“You may at any time choose not to receive marketing communications from us by clicking on the unsubscribe link included in the e-mail, by indicating so when we call you, or by filling in this form . Please note that if you opt out of marketing communications, we may still contact you regarding your use of our Services and to respond to your questions or requests. When we process your personal data for marketing pu...”Open source citation
The clause provides a deletion or time-bounded retention path.
“Personal Data processing for accessing and using our products and services as available through our websites, which include: UiPath Community, UiPath Community Forum, UiPath Academy and Certification platforms, UiPath Business Automation Platform, UiPath Marketplace Customer Enrollment and Provision of Services. If you are a customer employee, we may process your name, job title, company, signature, e-mail address...”Open source citation
The clause provides a deletion or time-bounded retention path.
“Personal Data processing for accessing and using our products and services as available through our websites, which include: UiPath Community, UiPath Community Forum, UiPath Academy and Certification platforms, UiPath Business Automation Platform, UiPath Marketplace Customer Enrollment and Provision of Services. If you are a customer employee, we may process your name, job title, company, signature, e-mail address...”Open source citation
The clause provides a deletion or time-bounded retention path.
“You may at any time choose not to receive marketing communications from us by clicking on the unsubscribe link included in the e-mail, by indicating so when we call you, or by filling in this form . Please note that if you opt out of marketing communications, we may still contact you regarding your use of our Services and to respond to your questions or requests. When we process your personal data for marketing pu...”Open source citation
The clause permits sale of personal data or information.
“If you are a resident of California, please be mindful that although we do not sell your data, we do share your data under certain conditions. We share your progress information and learning information from Academy with your employer, if you have created your account with your work e-mail. If we organize an event with other partners, please be mindful of the fact that we will share the contact details of our part...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | worsens | HIGH | 6 |
| All applicable tiers | data retention | improves | LOW | 6 |
| All applicable tiers | privacy data use | worsens | HIGH | 10 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 8 |
| All applicable tiers | training use | worsens | HIGH | 2 |
| Team / Business | commercial use | conditional | MEDIUM | 4 |
| Team / Business | data retention | improves | LOW | 2 |
| Team / Business | privacy data use | conditional | MEDIUM | 6 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 6 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“We may process your Personal Data, such as name, e-mail address and telephone number, and other data that was either provided by you, collected from your interactions with our Services, or received from third party sources (such as TechTarget, ZoomInfo, Lusha, 6Sense), for the purpose of enhancing our prospect database, for knowing our users, improving our sales strategy and for sending you marketing communications through e-mail, telephone, or e-mail. We only do so based on your explicit or implied consent, such as when you are using a particular product or service, or based on our legitimate interest, where the applicable privacy laws allow it. Please be mindful of the fact that when you provide your consent to receive marketing communications regarding UiPath’s products or services, you may receive such communications from UiPath’s Trusted Business Partners . We share your data with our business partners based on our legitimate interest of commercial efficiency and business growth. Marketing communications include sending communications about the Services you use or have shown interest in, Services similar to those you already use, new product releases, service developments, alerts, updates, terms, events, surveys, special offers and associated campaigns and promotions or prices, and may be performed either via targeted marketing e-mails or through our sales representatives, in accordance with the applicable laws.”Open timeline citation
Latest stance: sale or sell on privacy data use
“You may opt out of AI assisted screening or filtering upon submitting your application. If you opt out, your application will be reviewed manually. Opting out will not negatively affect your application. You can also ask for human review anytime by reaching out at privacy@uipath.com . If you opt-in, UiPath may also contact you via SMS related to your job application. We do not sell or share mobile or personal data with third parties, affiliates, or partners for marketing or promotional purposes. We only share data with third parties that act on our behalf when it is strictly necessary to deliver our service and only under binding agreements that ensure confidentiality and data protection. Under no circumstances will mobile data be shared or sold for advertising or promotional use. We keep candidate data for up to a year in order to send you relevant job opportunities or until you send us a deletion request. We delete or anonymize data in line with our internal data retention policies. If you opt-in to being recorded during the interview phase, we will only use the recording for recruitment purposes. Whether you opt in or not to being recorded will not impact your evaluation process. Recordings will be kept for up to 3 months. We only use trusted providers who are processing data on our behalf in the management of the recruitment process. See section 4. Personal Data Sharing and Disclosures.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“You may opt out of AI assisted screening or filtering upon submitting your application. If you opt out, your application will be reviewed manually. Opting out will not negatively affect your application. You can also ask for human review anytime by reaching out at privacy@uipath.com . If you opt-in, UiPath may also contact you via SMS related to your job application. We do not sell or share mobile or personal data with third parties, affiliates, or partners for marketing or promotional purposes. We only share data with third parties that act on our behalf when it is strictly necessary to deliver our service and only under binding agreements that ensure confidentiality and data protection. Under no circumstances will mobile data be shared or sold for advertising or promotional use. We keep candidate data for up to a year in order to send you relevant job opportunities or until you send us a deletion request. We delete or anonymize data in line with our internal data retention policies. If you opt-in to being recorded during the interview phase, we will only use the recording for recruitment purposes. Whether you opt in or not to being recorded will not impact your evaluation process. Recordings will be kept for up to 3 months. We only use trusted providers who are processing data on our behalf in the management of the recruitment process. See section 4. Personal Data Sharing and Disclosures.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“In the context of an onward transfer, UiPath has responsibility for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf. UiPath shall remain liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles, unless the organization proves that it is not responsible for the event giving rise to the damage. The Federal Trade Commission has jurisdiction over UiPath’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“As necessary to maintain an efficient selective channel system with the purpose of creating a retail environment where the commercialization of the Services is performed only by the UiPath authorized partners and distributors and customers’ demand is properly satisfied, we may share certain customers’ data (such as business contact details) with such UiPath authorized partners and distributors. We take appropriate measures, have contractual safeguards and we conduct internal assessment to ensure that the sharing of Personal Data is proportionate, transparent limited to the purpose and beneficial for you, that there are no privacy risks with all data privacy laws being observed during the processing. You may use the same form to exercise your right to opt-out of sharing personal information, if you are a resident of the state of California, as provided by the CCPA.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may also provide personal data to third parties in the following situations: as lawfully requested by public authorities, auditors, or institutions competent to exercise inspections on UiPath, based on their legal obligations, such as data protection authorities or authorities for consumer protection, which may ask us to provide information;”Open timeline citation
Latest stance: sale or sell on subprocessors data sharing
“If you are a resident of California, please be mindful that although we do not sell your data, we do share your data under certain conditions. We share your progress information and learning information from Academy with your employer, if you have created your account with your work e-mail. If we organize an event with other partners, please be mindful of the fact that we will share the contact details of our participants with our partners. We may share contact data with our resellers if you have been interested in UiPath’s products and services.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“If you are a resident of California, please be mindful that although we do not sell your data, we do share your data under certain conditions. We share your progress information and learning information from Academy with your employer, if you have created your account with your work e-mail. If we organize an event with other partners, please be mindful of the fact that we will share the contact details of our participants with our partners. We may share contact data with our resellers if you have been interested in UiPath’s products and services.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-14· verified 2026-08-14
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 132 more findings this quarter vs last (181 vs 49). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of UiPath's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified UiPath's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from UiPath's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.