Skip to main content
Platform Review
PricingSign in
← All platforms
Image / Video / Audio Generation · alibabacloud.com

Wan (Alibaba)

Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskMEDReviewed 2026-07-20
Creator: low · GRC: low · Counsel: low
enterprise band
Exemplary
creator · pending
Exhibit A · Terms of Service · verbatim

3. providing the Cloud Services to you and/or your end users;

highest-risk verified finding on prompt ownership — tap for the citation
83 verified findings6 policy surfaces1/2 core docs verified

Partially verified: Privacy Policy assessed · Terms of Service pending. Everything below comes only from what was read in full.

Risk triage

Watch: audit rights dpa residency

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
27
medium
56
low
1/2
docs
Trains on your data?
Not yet assessed
no verified finding covers this surface yet
Who owns outputs?
Not yet assessed
no verified finding covers this surface yet
Commercial use?
Not yet assessed
no verified finding covers this surface yet
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →
Risk by role
Select a role to tailor the summary and reorder the findings below.

Scores derived from 41 enriched findings — same verbatim citations as below. AI-generated, not legal advice.

What this means for you
  • Data handling is conditional — 13 privacy or retention clauses warrant review before using Wan (Alibaba) at scale.

Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.

How to read this page: Overall risk rates what Wan (Alibaba)'s own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Creator lens
NOT YET ASSESSED

IP/output assessment pending — terms of service not yet verified This lens receives a band only once its source document has been captured and read in full.

Know where this document lives? Point us to the URL or PDF and the pipeline will verify it.

Enterprise lens
Data use, retention, subprocessors, audit
EXEMPLARY

Based on 152 verified, verbatim-cited findings below — read the citations.

Automated assessment against a published rubric — not legal advice.

Partially verifiedImage / Video / Audio Generation

Partially verified — Terms of Service — Capture pending; Privacy Policy — Verified (read in full, 83 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.

Why partial?

Capture blocked

A known core policy document could not be publicly captured after the available capture strategies were tried.

Blocked core document: Terms of Service

Document status
  • Terms of Service
    Capture blocked - document not publicly capturable
  • Privacy Policy
    Verified - read in full - 83 citationsstaticLast captured 2026-07-20
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Privacy & data use

This segment defines the scope of the Privacy Policy, identifying the covered platforms (Alibaba Cloud International Website and International Marketplace), the covered services (Cloud Services), and the responsible entity, establishing the foundational definitions that govern all legal obligations throughout the policy.

" This Privacy Policy applies to the access and use of the Alibaba Cloud International Website currently located at www.alibabacloud.com and the Alibaba Cloud International Marketplace Platform currently located at https://marketplace.alibab..."
📍 Privacy Policy › “Legal:Alibaba Cloud International Website Privacy Policy”Jump to exact text →
plan language
Privacy & data use

This clause establishes the procedure for users outside the EEA, UK, and Europe to contact Alibaba Cloud (Singapore) Private Limited's DPO for privacy concerns, and also references third-party dispute resolution and links to third-party websites.

" In all other cases, please contact: Attention: Data Protection Officer/Alibaba Cloud (Singapore) Private Limited, c/o 26/F, Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong. E-mail address: DPO_Intl@alibabacloud.com ..."
📍 Privacy Policy › “Outside the EEA, UK and Europe”Jump to exact text →
plan language
Privacy & data use

This segment imposes a data collection practice obligation, identifying the categories of personal data (email, mobile, country, name, contact address, etc.) that Alibaba Cloud collects during user registration, creating a disclosure obligation to inform users of what data is gathered.

" 1. If you are (i) an individual or (ii) a representative of a business organisation at the time you register to become a user of the Alibaba Cloud Platform and/or purchase Cloud Services, you may be asked to complete registration forms whi..."
📍 § A (COLLECTION OF PERSONAL DATA)Jump to exact text →
plan language
Privacy & data use

This segment discloses Alibaba Cloud's obligation/practice of recording user activity data (purchases, usage, transaction details including pricing and dispute records) for legal and business purposes, identifying specific data categories collected during platform use.

" 2. We record details of your activities (including any purchase or use of our product offerings and services) when you use the Alibaba Cloud Platform and/or certain Cloud Services for legal and/or business purposes. If you make purchases o..."
📍 § A (COLLECTION OF PERSONAL DATA)Jump to exact text →
plan language
Privacy & data use

This clause establishes CCPA-required disclosures about the categories of personal data Alibaba Cloud has collected, used, and disclosed in the preceding 12 months, and defines the scope of the California Addendum, explicitly excluding personal data processed on behalf of customers.

" These additional disclosures are required by the California Consumer Privacy Act (“CCPA”). This California Addendum does not apply to personal data that is not processed by us a business pursuant to the CCPA, such as any personal data proc..."
📍 Privacy Policy › “CALIFORNIA ADDENDUM”Jump to exact text →
plan language
Data retention

This clause establishes Alibaba Cloud's obligation to retain personal data only for as long as there is a legitimate business need or legal requirement, and sets the standard that retention periods depend on the nature of the data, purpose of collection, and applicable legal requirements.

" We retain your personal data for the purposes described in this Privacy Policy where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, ta..."
📍 § F (PERIOD OF RETENTION AND PROCESSING OF PERSONAL DATA)Jump to exact text →
plan language
Subprocessors & data sharing

This segment identifies legal compliance, responding to government requests, and defending against legal claims as lawful purposes for personal data processing and disclosure, creating a legal-obligation exception to general use restrictions.

" 7. to comply with applicable law, legal process or lawful government request, or in respect of any claims or potential claims brought against us or our parent companies, shareholders, subsidiaries and affiliates;"
📍 § A (COLLECTION OF PERSONAL DATA)Jump to exact text →
plan language
Audit rights / DPA / residency

Imposes an obligation on Alibaba Cloud to store personal data in Singapore and restricts overseas transfers to affiliates and named third-party providers through specified means (API/information network), establishing the operative data transfer regime.

" We store the collected Personal Data in Singapore, for the purposes described in this Privacy Policy and until such purpose is achieved. The data is transmitted through information network, as needed. We may also transfer Personal Data ove..."
📍 Privacy Policy › “Data Transfers to Overseas Country”Jump to exact text →
Conflicting provisions (2)
  • Clause A specifies `intlcompliance@service.aliyun.com` for data access, correction, or deletion requests, while Clause B provides `DPO_Intl@alibabacloud.com` as the general DPO contact for privacy concerns, including those that would encompass data requests, creating confusion about the correct initial point of contact for exercising these rights.

    " You have the right to request access to your personal data held by us (or on our behalf) and to request correction or deletion of such personal data. Additionally, upon request, we will provide you with information about whether we hold your personal data. You may contact us at intlcompliance@service.aliyun.com to request access, correction or deletion of your personal data. We will respond to your request within a reasonable timeframe. You may also have supplemental rights under applicable law in relation to your personal data. For example, if you are an EEA or UK user, you have the right to object to or request the restriction of processing of your personal data, and to request portability of your data by contacting us at intlcompliance@service.aliyun.com or submit your request by clicking here . In cases where we act as a processor, we have no direct relationship with the individuals whose personal data we process. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct their query to Alibaba Cloud’s client (the data controller). You may receive e-newsletters from us. If you would like to discontinue receiving this information, you may update your email preferences by using the “Unsubscribe” link found in emails we send to you or at your member profile. We do not knowingly collect personal data of minors (persons under the age of 18). If a minor has provided us with personal data, the parent or guardian may contact us on the minor’s behalf to request that we cease any further collection, use and/or disclosure of the personal data and delete the personal data we may hold relating to the relevant minor. "
    " c/o 31/F, Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong. E-mail address: DPO_Intl@alibabacloud.com For individuals in Malaysia, Alibaba Cloud (Malaysia) SDN.BHD. is the relevant "data controller". In all other cases, please contact: Attention: Data Protection Officer/Alibaba Cloud (Singapore) Private Limited, c/o 51 Bras Basah Road, #03-06 Lazada One, Singapore 189554. E-mail address: DPO_Intl@alibabacloud.com In addition to the addresses listed above, if you have a privacy or data use concern which has not been addressed to your satisfaction, you may contact our third party dispute resolution provider (free of charge) here . This Privacy Policy also contains links to third party websites. If you experience difficulties using these links, please contact us at DPO_Intl@alibabacloud.com , or click here to submit your request:"
    Within one document
  • Clause A specifies `intlcompliance@service.aliyun.com` for data access, correction, or deletion requests, while Clause B provides `DPO_Intl@alibabacloud.com` as the general DPO contact for privacy concerns, including those that would encompass data requests, creating confusion about the correct initial point of contact for exercising these rights.

    " You have the right to request access to your personal data held by us (or on our behalf) and to request correction or deletion of such personal data. Additionally, upon request, we will provide you with information about whether we hold your personal data. You may contact us at intlcompliance@service.aliyun.com to request access, correction or deletion of your personal data. We will respond to your request within a reasonable timeframe. You may also have supplemental rights under applicable law in relation to your personal data. For example, if you are an EEA or UK user, you have the right to object to or request the restriction of processing of your personal data, and to request portability of your data by contacting us at intlcompliance@service.aliyun.com or submit your request by clicking here . In cases where we act as a processor, we have no direct relationship with the individuals whose personal data we process. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct their query to Alibaba Cloud’s client (the data controller). You may receive e-newsletters from us. If you would like to discontinue receiving this information, you may update your email preferences by using the “Unsubscribe” link found in emails we send to you or at your member profile. We do not knowingly collect personal data of minors (persons under the age of 18). If a minor has provided us with personal data, the parent or guardian may contact us on the minor’s behalf to request that we cease any further collection, use and/or disclosure of the personal data and delete the personal data we may hold relating to the relevant minor. "
    " c/o 31/F, Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong. E-mail address: DPO_Intl@alibabacloud.com For individuals in Malaysia, Alibaba Cloud (Malaysia) SDN.BHD. is the relevant "data controller". In all other cases, please contact: Attention: Data Protection Officer/Alibaba Cloud (Singapore) Private Limited, c/o 51 Bras Basah Road, #03-06 Lazada One, Singapore 189554. E-mail address: DPO_Intl@alibabacloud.com In addition to the addresses listed above, if you have a privacy or data use concern which has not been addressed to your satisfaction, you may contact our third party dispute resolution provider (free of charge) here . This Privacy Policy also contains links to third party websites. If you experience difficulties using these links, please contact us at DPO_Intl@alibabacloud.com , or click here to submit your request:"
    Within one document

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 27
Tier-specific - 0
Total citations - 83
Severity
Surface
Document
Tier
Privacy & data use
CautionHigh
" 6. publishing any information you voluntarily submit (which may include, but is not limited to, a photograph or other personal data you provide) to our Alibaba Cloud Platform to be published on our Alibaba Cloud Platform through the publishing tools (such as our discussion forums);"
§ A (COLLECTION OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment permits Alibaba Cloud to publish voluntarily submitted personal data (e.g., photographs) on the platform through publishing tools such as discussion forums, establishing user consent as the basis for this specific processing activity.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" We and our partners use “cookies” and/or similar technologies (collectively " Cookies "), to collect and use personal data about including to enable basic features of our site to function, to provide enhanced and personalised functionality, to conduct analytics, and deliver personalised advertisements. For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Alibaba Cloud International Website Cookies Notice ."
Article I (COOKIES)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause discloses that Alibaba Cloud and its partners use cookies and similar technologies to collect and use personal data for site functionality, analytics, and personalized advertising, and incorporates by reference the Alibaba Cloud Cookies Notice for further detail and control options.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" 5. personalizing our communication with you based on your order history, and performing research or statistical analysis in order to improve our product offerings and services;"
§ A (COLLECTION OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment permits Alibaba Cloud to use personal data for personalized communications based on order history and for research/statistical analysis to improve products and services, establishing these as legitimate processing purposes.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" 7. We may from time to time collect additional information from you (such as copies of identification documents) and obtain information about you from third parties in order to carry out risk control, fraud prevention and compliance procedures. For example, we may collect payment-related information from third parties and combine it with information we collect about you for the purpose of fraud prevention and risk control."
§ A (COLLECTION OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment discloses collection of additional identification and third-party data for risk control, fraud prevention, and compliance, and authorizes combining third-party payment data with internally collected data for these purposes, establishing both the collection obligation and the data-combination permission.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" This Privacy Policy applies to the access and use of the Alibaba Cloud International Website currently located at www.alibabacloud.com and the Alibaba Cloud International Marketplace Platform currently located at https://marketplace.alibabacloud.com/ (the “ International Marketplace ”) (collectively the “ Alibaba Cloud Platform ”), and the use by registered users of the Alibaba Cloud Platform of Alibaba Cloud products and services (the “ Cloud Services ”) provided by the Alibaba Cloud entity listed in Clause 2 of the Terms of Use (referred to as “ we ”, “ our ” or “ Alibaba Cloud ” hereinafter). Terms not defined in this Privacy Policy shall have the same meaning as in the Terms of Use of the Alibaba Cloud Platform. This Privacy Policy sets out how we collect, use, transfer, retain, secure and disclose your personal data and/or personal data about your customers or end users that you provide to us pursuant to your use of the Alibaba Cloud Platform and/or our Cloud Services, as well as other terms relating to data location. It also describes your choices regarding use, access and correction of your personal data. Many of our Cloud Services offered through the Alibaba Cloud Platform are intended for use by business organisations. If you use your organisation’s email address to register an account and purchase or use our Cloud Services, the owner of the domain associated with your organisation’s email address, and/or your organisation, may monitor or control your account with the Alibaba Cloud Platform and access, process, and/or control your personal data, as well as the contents of your communications and files. "
Privacy Policy › “Legal:Alibaba Cloud International Website Privacy Policy”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines the scope of the Privacy Policy, identifying the covered platforms (Alibaba Cloud International Website and International Marketplace), the covered services (Cloud Services), and the responsible entity, establishing the foundational definitions that govern all legal obligations throughout the policy.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" Any changes to this Privacy Policy will be communicated by us posting an amended Privacy Policy on our Alibaba Cloud Platform. The new Privacy Policy will become immediately effective once posted on the Alibaba Cloud Platform or at a date specified by Alibaba Cloud. We may also in our discretion provide notice to you of any changes to the Privacy Policy. If we make any material changes of this Privacy Policy, we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this website prior to the change becoming effective. Any information and/or personal data we hold about you (as described in this Privacy Policy and whether or not collected prior to or after the amended and restated Policy comes into effect) will be governed by the latest version of our Privacy Policy. Should we need to use your personal data for a purpose that is materially different from that disclosed in our Privacy Policy, or disclose it to a non-agent third party in a manner not specified in our Privacy Policy, Alibaba Cloud US LLC and Alibaba Cloud LLC will provide you with the opportunity to opt out of such uses or disclosures of personal data. We strongly encourage you to visit the Alibaba Cloud Platform from time to time to review the Privacy Policy. Your continued use of the Alibaba Cloud Platform and/or the Cloud Services signifies your acceptance of the changes to the Privacy Policy.​"
§ J (CHANGES TO THIS PRIVACY POLICY)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause establishes the procedure by which Alibaba Cloud communicates changes to the Privacy Policy, including posting amended versions on the platform, specifying effective dates, and providing email or on-site notice for material changes, and addresses how previously collected data is governed.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" In accordance with South Korea’s Personal Information Protection Act (the “PIPA”), we may use or provide personal data within the scope of reasonably related to the initial purpose of the collection, in consideration of whether disadvantages have been caused to data subjects and whether necessary measures have been taken to secure such as encryption, etc. We will determine with due care whether to use or provide personal data in consideration of general circumstances including relevant laws and regulations such as the PIPA, purpose of use or provision of personal data, how personal data will be used or provided, items of personal data to be used or provided, matters to which data subjects provided consent or which were notified/disclosed to data subjects, impact on data subjects upon the use or provision, and measures taken to protect subject information. Specific considerations are as follows: Whether the additional use/provision is related to the initial purpose of the collection;"
Privacy Policy › “Additional Use and Provision of Personal data”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Grants permission under PIPA for Alibaba Cloud to use or provide personal data beyond the initial collection purpose within a reasonably related scope, conditioned on consideration of disadvantages to data subjects and security measures taken.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" 2. We record details of your activities (including any purchase or use of our product offerings and services) when you use the Alibaba Cloud Platform and/or certain Cloud Services for legal and/or business purposes. If you make purchases or otherwise transact online through the Alibaba Cloud Platform, we also collect information related to such transactions including, but not limited to, the types and specifications of the Cloud Services, pricing information, and any trade dispute/complaint records."
§ A (COLLECTION OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment discloses Alibaba Cloud's obligation/practice of recording user activity data (purchases, usage, transaction details including pricing and dispute records) for legal and business purposes, identifying specific data categories collected during platform use.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" We use commercially reasonable endeavors to protect the personal data that you provide to us. We also employ several security techniques, including but not limited to the use of industry-standard Secure Socket Layer (SSL) encryption for transmission of personal data in registration information and payment information and the adoption of identity, credential and access management measures for transmission of such personal data to prevent security breaches and unauthorized access of personal data. We limit access to your personal data and other data to people who need access to such data for their work. Nevertheless, no data transmission over the internet or any wireless network can be guaranteed to be perfectly secure. As a result, while we try to protect your personal data, we cannot guarantee the security of any personal data you transmit to us and you do so at your own risk. We cannot and do not guarantee security in connection with your use of the Alibaba Cloud Platform and our Cloud Services. We retain your personal data as long as you have an account with us, as needed to provide services or products to you, to resolve disputes, to serve the purpose of research and statistical analysis or as required or permitted by applicable laws, such as tax and accounting laws."
§ E (SECURITY MEASURES)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause establishes Alibaba Cloud's obligation to use commercially reasonable endeavors and specific security techniques (SSL encryption, identity/credential/access management) to protect personal data, and restricts access to personal data to those with a legitimate need.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" 3. When you contact our customer support, sales or other departments, we may record the communications for security and customer services purposes and collect additional information to verify your identity."
§ A (COLLECTION OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment discloses the practice of recording communications with customer support and collecting identity-verification data, informing users of data collection during support interactions for security and service purposes.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" 6. We also record records of users’ buying and browsing activities on the Alibaba Cloud Platform, including but not limited to Internet Protocol (“IP”) addresses, browsing patterns and purchasing patterns. In addition, we automatically gather statistical information about our Alibaba Cloud Platform and visitors to our Alibaba Cloud Platform including, but not limited to, IP addresses, browser software, operating system, software and hardware attributes, pages viewed, number of sessions and unique visitors."
§ A (COLLECTION OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment discloses Alibaba Cloud's practice of automatically collecting behavioral and technical data (IP addresses, browsing/purchasing patterns, browser attributes, page views, session counts) from platform users, identifying the categories and automated nature of such collection.

AI-generated interpretation, not legal advice.

Data retention
CautionHigh
" We retain your personal data for the purposes described in this Privacy Policy where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). In certain circumstances, we will need to keep your personal data for legal reasons after our relationship has ended. The specific retention periods depend on the nature of the personal data and why it is collected and processed, and the nature of the legal requirement. When we have no ongoing legitimate business need or legal reason to process your personal data, we will either delete or anonymize it or, if this is not possible, then we will securely store your personal data and isolate it from any further processing until deletion is possible.​"
§ F (PERIOD OF RETENTION AND PROCESSING OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause establishes Alibaba Cloud's obligation to retain personal data only for as long as there is a legitimate business need or legal requirement, and sets the standard that retention periods depend on the nature of the data, purpose of collection, and applicable legal requirements.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
CautionHigh
"Your organisation’s use of our Cloud Services may be subject to your organisation’s own rules or policies, and you shall direct all privacy enquiries relating to such rules or policies to your organisation’s administrators. We are not responsible for the privacy or security practices of your organisation. Cloud Services may be used by our customers (i.e. registered users of Alibaba Cloud) to develop or host their own services and products for the customer’s end users. Any information collected or handled by Alibaba Cloud in such circumstances is processed on behalf of our customer who controls the collection and use of such information. We do not have a direct relationship with the end users of our customers. Where this is the case, end users should direct all privacy enquiries, such as any requests to access, correct, amend or delete personal data, to the Alibaba Cloud customer providing their services or products. We are not responsible for the privacy or security practices of our customers."
Privacy Policy › “Legal:Alibaba Cloud International Website Privacy Policy”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines the controller/processor relationship, clarifying that when Cloud Services are used by customers to host their own products, Alibaba Cloud processes personal data on behalf of the customer (who controls), and disclaims responsibility for the organisation's privacy practices — establishing key data-responsibility allocations.

AI-generated interpretation, not legal advice.

Privacy & data use
FavorableHigh
" Subject to obtaining your specific consent (or where otherwise permitted by applicable law in your jurisdiction), we may use your name, phone number, residential address, email address and fax number (which may incorporate personal data) to provide notices, surveys, product alerts, related communications and other marketing and promotional materials to you relating to goods and services offered by us on our Alibaba Cloud Platform. Legal Basis for Processing for Users from European Economic Area (“EEA”) and the United Kingdom ("UK") Our legal basis to process personal data for EEA and UK Users includes processing that is: necessary for the performance of the contract between you and Alibaba Cloud (for example, to provide you with the Cloud Services you request and to identify and authenticate you so you may use the website or Cloud Services); necessary to comply with legal requirements (for example, to comply with applicable accounting rules and to make mandatory disclosures to law enforcement); necessary for our legitimate interests (for example, to manage our relationship with you and to improve our Services); and based on your consent (for example, to communicate with you about our products and services and provide you with marketing information), which may subsequently be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.You may withdraw any consent that you have provided by clicking here ."
§ A (COLLECTION OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment grants Alibaba Cloud permission — conditional on specific consent or applicable law — to use contact data (name, phone, address, email, fax) for marketing and promotional communications, and identifies the legal bases for EEA/UK users, establishing the consent requirement and lawful-basis framework for direct marketing data use.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" 4. If you make online purchases for our Cloud Services through the Alibaba Cloud Platform, you may be required to provide information related to your payment instrument (such as credit cards), including information about your payment instrument organisation, your payment instrument number, the security code, and the expiration date of your payment instrument, directly to our payment service provider."
§ A (COLLECTION OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment describes the procedure by which payment instrument data is collected — directing users to provide payment information directly to a third-party payment service provider rather than to Alibaba Cloud, thereby allocating data-handling responsibility for payment data.

AI-generated interpretation, not legal advice.

Privacy & data use
FavorableHigh
" These additional disclosures are required by the California Consumer Privacy Act (“CCPA”). This California Addendum does not apply to personal data that is not processed by us a business pursuant to the CCPA, such as any personal data processed by Alibaba Cloud on behalf of its customers. During the preceding 12 months, Alibaba Cloud has collected, used, and/or disclosed the categories of personal data described in Section A of our Privacy Policy. For example, depending on the Alibaba Cloud Platform and/or our Cloud Services you use, this may include your identifiers (e.g., IP addresses and email addresses), commercial information, audio information (e.g., recordings of customer support communications), and Internet and other electronic activity information. This may also include inferences we draw from the other information we collect. We do not sell information, although we do share personal data in the ways described in our Privacy Policy. We provide you certain rights described in Section H above in accordance with state law. We will not charge you different prices or provide different quality of services unless those differences are related to your information or otherwise permitted by law. Please submit your request by sending us an email to intlcompliance@service.aliyun.com. Once we receive your request, we may verify it by requesting information sufficient to confirm your identity, including by asking you to verify information about your use of the Alibaba Cloud Platform and/or our Cloud Services. "
Privacy Policy › “CALIFORNIA ADDENDUM”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause establishes CCPA-required disclosures about the categories of personal data Alibaba Cloud has collected, used, and disclosed in the preceding 12 months, and defines the scope of the California Addendum, explicitly excluding personal data processed on behalf of customers.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" 3. We may share your personal data with affiliated companies in the Alibaba Group and/or their designated Service Providers, for the purposes specified at Section B above. We have appropriate agreements with our affiliated companies in the Alibaba Group for the sharing of your personal data and/or outsourcing of the processing of your personal data to affiliated companies. The designated Service Providers (and their sub-processors, if any) of our affiliates in the Alibaba Group will be engaged under terms compliant with applicable laws and under appropriate duties of confidentiality and will only be permitted to use your personal data in connection with the purposes specified in Section B of the Privacy Policy."
Article C (DISCLOSURE OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment discloses data sharing with Alibaba Group affiliates and their designated service providers and sub-processors for the purposes identified in Section B, and requires appropriate data-sharing agreements and compliance with applicable law and confidentiality obligations for all such entities.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" 5. We have established and will establish relationships with other parties and websites to offer you the benefit of their products and services. We offer you access to these other parties and their websites either through the use of hyperlinks to these sites from our Alibaba Cloud Platform or through offering “co-branded” sites in which both we and other parties share the same uniform resource locator, domain name or pages within a domain name on the Internet. In some cases you may be required to submit personal data to register or apply for products or services provided by such third parties or co-branded partners. This Privacy Policy does not apply to these third party sites or co-branded sites. The privacy policies of those other parties may differ from ours, and we have no control over the information that you submit to those third parties. You should read the relevant privacy policy for those third party sites and co-branded sites before responding to any offers, products or services advertised by those parties."
Article C (DISCLOSURE OF PERSONAL DATA)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This clause establishes that Alibaba Cloud shares user personal data with third-party partners and co-branded sites, imposing an obligation on users to submit personal data to third parties and disclosing the data-sharing relationships Alibaba Cloud has formed.

AI-generated interpretation, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from Wan (Alibaba)'s own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

12 verified clauses

Clauses in Wan (Alibaba)'s policies that work in your favour — commitments the platform made to you.

  • Privacy & data usechildren's data
    You have the right to request access to your personal data held by us (or on our behalf) and to request correction or deletion of such personal data. Additionally, upon request, we will provide you with information about whether we hold your personal data. You…

    This clause grants users the right to request access, correction, or deletion of personal data held by Alibaba Cloud, as well as supplemental rights under applicable law (e.g., EEA/UK rights), and establishes the procedu…

    • Designated security contact: intlcompliance@service.aliyun.com
    📍 § H (RIGHT TO ACCESS/CORRECT PERSONAL DATA; CONTACTING US)Jump to exact text →
  • Audit rights, DPA & residency
    Alibaba Cloud US LLC and Alibaba Cloud LLC remain responsible and liable under the EU-U.S. DPF Principles, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles for transferring personal data received under DPF Principles to a third party who…

    This clause imposes ongoing liability and responsibility on Alibaba Cloud US LLC and Alibaba Cloud LLC for onward transfers of personal data to third-party processors that violate DPF Principles, establishing accountabil…

    📍 Article D (TRANSFER OF PERSONAL DATA)Jump to exact text →
  • Audit rights, DPA & residency
    Alibaba Cloud US LLC and Alibaba Cloud LLC comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Alibaba Cl…

    This clause creates an obligation for Alibaba Cloud US LLC and Alibaba Cloud LLC to adhere to the EU-U.S. DPF Principles, UK Extension, and Swiss-U.S. DPF Principles for personal data received from the EU, UK, and Switze…

    📍 Article D (TRANSFER OF PERSONAL DATA)Jump to exact text →
  • Audit rights, DPA & residency
    This section of the Privacy Policy applies only if you are located in the EEA or the UK or Europe (but outside the EEA) and supplements the information in this Privacy Policy. Alibaba Cloud is the controller of personal data only when it collects personal dat…

    This clause defines when Alibaba Cloud acts as a data controller versus a data processor under EEA/UK data protection law, distinguishing between situations where Alibaba Cloud determines the purposes and means of proces…

    • Designated security contact: intlcompliance@service.aliyun.com
    📍 Privacy Policy › “EEA and UK ADDENDUM”Jump to exact text →
  • Audit rights, DPA & residency
    DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Alibaba Cloud US LLC and Alibaba Cloud LLC at: intlcompliance@service.aliyun.com . Alibaba Cloud US LLC and Alibaba Cloud LLC commit to refer unresolved complaints concerning…

    This clause establishes the dispute resolution procedure for DPF-related complaints, requiring users to first contact Alibaba Cloud and then providing for referral of unresolved complaints to TRUSTe as an alternative dis…

    • Designated security contact: intlcompliance@service.aliyun.com
    📍 Article D (TRANSFER OF PERSONAL DATA)Jump to exact text →
  • Data retentiondeletion rights & post-termination survival
    Alibaba Cloud will delete your personal data as described in Section F of this Privacy Policy. When deleting personal data, we will take standard commercially reasonable measures to make the personal data practically irrecoverable or irreproducible. The specif…

    This clause establishes Alibaba Cloud's obligation to delete personal data using commercially reasonable measures ensuring the data is practically irrecoverable or irreproducible, with the specific method depending on da…

    📍 § G (PROCESS AND METHOD OF DESTRUCTION OF PERSONAL DATA)Jump to exact text →

+ 6 more verified clauses of this kind on this platform, cited in full in the report.

📋 Rules you must follow

0 verified clauses

What Wan (Alibaba) requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

No user-conduct rule has been verified in Wan (Alibaba)'s published policies yet.

What the policies actually cover

8 topics
  • Product telemetry & usage tracking7 clauses
  • Advertising & tracking2 clauses
  • Sale or sharing of personal data1 protective2 clauses
  • Sensitive data (biometric, location, health)1 clause
  • Children's data1 protective1 clause
  • Government & law-enforcement disclosure2 clauses
  • Deletion rights & post-termination survival1 protective3 clauses
  • Breach-notification promises6 clauses

59 further verified clauses are cited on this page but not yet assigned a topic.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

273
clauses
43
patterns
43
stances
privacy sharing · 35data retention · 7dispute resolution · 1
data retentionLOWPrivacy Policy › “Communication for sales of Cloud Services and marketing support”

The clause provides a deletion or time-bounded retention path.

Subject to termination of the contractual relationship between the recipient and us, in which case data will be deleted within 30 days from termination
Open source citation
data retentionLOWPrivacy Policy › “Communication for sales of Cloud Services and marketing support”

The clause provides a deletion or time-bounded retention path.

Subject to termination of the contractual relationship between the recipient and us, in which case data will be deleted within 30 days from termination
Open source citation
data retentionLOWPrivacy Policy › “Communication for sales of Cloud Services and marketing support”

The clause provides a deletion or time-bounded retention path.

Subject to termination of the contractual relationship between the recipient and us, in which case data will be deleted within 30 days from termination
Open source citation
data retentionLOWPrivacy Policy › “Communication for sales of Cloud Services and marketing support”

The clause provides a deletion or time-bounded retention path.

Subject to termination of the contractual relationship between the recipient and us, in which case data will be deleted within 30 days from termination
Open source citation
data retentionLOWPrivacy Policy › “Communication for sales of Cloud Services and marketing support”

The clause provides a deletion or time-bounded retention path.

Subject to termination of the contractual relationship between the recipient and us, in which case data will be deleted within 30 days from termination
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tiersdata retentionimprovesLOW7
All applicable tiersprivacy data useconditionalMEDIUM19
All applicable tierssubprocessors data sharingconditionalMEDIUM8
Apiprivacy data useconditionalMEDIUM3
Apisubprocessors data sharingconditionalMEDIUM1
Governmentgoverning law disputesconditionalMEDIUM1
Team / Businesscommercial useworsensHIGH3
Team / Businessprivacy data useworsensHIGH1

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

improvedhigh materialityJun 17Jul 8, 2026

data sharing improved from high/sale or sell to medium/third party or vendor sharing.

Before · high
These additional disclosures are required by the California Consumer Privacy Act (“CCPA”). This California Addendum does not apply to personal data that is not processed by us a business pursuant to the CCPA, such as any personal data processed by Alibaba Cloud on behalf of its customers. During the preceding 12 months, Alibaba Cloud has collected, used, and/or disclosed the categories of personal data described in Section A of our Privacy Policy. For example, depending on the Alibaba Cloud Platform and/or our Cloud Services you use, this may include your identifiers (e.g., IP addresses and email addresses), commercial information, audio information (e.g., recordings of customer support communications), and Internet and other electronic activity information. This may also include inferences we draw from the other information we collect. We do not sell information, although we do share personal data in the ways described in our Privacy Policy. We provide you certain rights described in Section H above in accordance with state law. We will not charge you different prices or provide different quality of services unless those differences are related to your information or otherwise permitted by law. Please submit your request by sending us an email to intlcompliance@service.aliyun.com. Once we receive your request, we may verify it by requesting information sufficient to confirm your identity, including by asking you to verify information about your use of the Alibaba Cloud Platform and/or our Cloud Services.
Before citation
After · medium
1. We may disclose your personal data to third party service providers engaged by us to assist with providing you with our services (including partners providing customer services to you, contacting you regarding promotions products and services, performing risk control, fraud prevention and legal compliance procedures, and conducting payment processing services) (the “Third Party Service Providers”). These Third Party Service Providers may be located in Singapore or outside of Singapore, and are engaged under terms compliant with applicable data protection laws and/or appropriate duties of confidentiality to us and are only permitted to use your personal data in connection with the purposes specified in Section B above, and not for their own purposes. These Third-Party Service Providers may further contract some components of the services they provide to us to other service providers. These other service providers may also be located in Singapore or outside of Singapore, and are under a duty of confidentiality to our Third Party Service Providers and are only permitted to use your personal data in connection with the purposes specified in Section B above, and not for their own purposes.​
After citation
Jul 20, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

2. The International Marketplace enables you to purchase or subscribe to products and services (“ Marketplace Products ”) from companies other than Alibaba Cloud (“ Third Party Vendors ”), and should you purchase or subscribe to Marketplace Products offered by a Third Party Vendor, we may provide such Third Party Vendor with your personal data for the purposes of processing your purchase and/or subscriptions on the International Marketplace. Other than such personal data disclosed by Alibaba Cloud to the Third Party Vendor, in some cases you may be required to submit personal data to Third Party Vendors to use such Marketplace Products. This Privacy Policy does not apply to such collection, use or disclosure of personal data by Third Party Vendors. The privacy policies of Third Party Vendors may differ from ours, and we have no control over the information that you submit to those Third Party Vendors. You should read the relevant privacy policies for those Third Party Vendors before providing your information to such Third Party Vendors.
Open timeline citation
Jul 20, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

3. We may share your personal data with affiliated companies in the Alibaba Group and/or their designated Service Providers, for the purposes specified at Section B above. We have appropriate agreements with our affiliated companies in the Alibaba Group for the sharing of your personal data and/or outsourcing of the processing of your personal data to affiliated companies. The designated Service Providers (and their sub-processors, if any) of our affiliates in the Alibaba Group will be engaged under terms compliant with applicable laws and under appropriate duties of confidentiality and will only be permitted to use your personal data in connection with the purposes specified in Section B of the Privacy Policy.
Open timeline citation
Jul 20, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

Any changes to this Privacy Policy will be communicated by us posting an amended Privacy Policy on our Alibaba Cloud Platform. The new Privacy Policy will become immediately effective once posted on the Alibaba Cloud Platform or at a date specified by Alibaba Cloud. We may also in our discretion provide notice to you of any changes to the Privacy Policy. If we make any material changes of this Privacy Policy, we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this website prior to the change becoming effective. Any information and/or personal data we hold about you (as described in this Privacy Policy and whether or not collected prior to or after the amended and restated Policy comes into effect) will be governed by the latest version of our Privacy Policy. Should we need to use your personal data for a purpose that is materially different from that disclosed in our Privacy Policy, or disclose it to a non-agent third party in a manner not specified in our Privacy Policy, Alibaba Cloud US LLC and Alibaba Cloud LLC will provide you with the opportunity to opt out of such uses or disclosures of personal data. We strongly encourage you to visit the Alibaba Cloud Platform from time to time to review the Privacy Policy. Your continued use of the Alibaba Cloud Platform and/or the Cloud Services signifies your acceptance of the changes to the Privacy Policy.
Open timeline citation
Jul 20, 2026data sharingHIGH

Latest stance: sale or sell on commercial use

These additional disclosures are required by the California Consumer Privacy Act (“CCPA”). This California Addendum does not apply to personal data that is not processed by us a business pursuant to the CCPA, such as any personal data processed by Alibaba Cloud on behalf of its customers. During the preceding 12 months, Alibaba Cloud has collected, used, and/or disclosed the categories of personal data described in Section A of our Privacy Policy. For example, depending on the Alibaba Cloud Platform and/or our Cloud Services you use, this may include your identifiers (e.g., IP addresses and email addresses), commercial information, audio information (e.g., recordings of customer support communications), and Internet and other electronic activity information. This may also include inferences we draw from the other information we collect. We do not sell information, although we do share personal data in the ways described in our Privacy Policy. We provide you certain rights described in Section H above in accordance with state law. We will not charge you different prices or provide different quality of services unless those differences are related to your information or otherwise permitted by law. Please submit your request by sending us an email to DPO_Intl@alibabacloud.com . Once we receive your request, we may verify it by requesting information sufficient to confirm your identity, including by asking you to verify information about your use of the Alibaba Cloud Platform and/or our Cloud Services.
Open timeline citation

Capture recency

  • Terms of Service:Last captured 2026-06-08
  • Privacy Policy:Last captured 2026-07-20· verified 2026-07-20

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

↑ 162 more findings this quarter vs last (256 vs 94). First scan: June 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Wan (Alibaba)'s policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Know where the missing document lives?

We haven't yet verified Wan (Alibaba)'s Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.

Every finding above is a verbatim quote from Wan (Alibaba)'s own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.