Warmly
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“We may create anonymized data (data that is not associated with or linked to your personally identifiable information) records from Personal Information by excluding information (such as your name, email address, personal identification numbers) that makes the data personally identifiable to you. We use this anonymized data to analyze request and usage…”
Watch: audit rights dpa residency
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Discloses that Personal Information is processed and stored in the United States, identifies the legal derogations relied upon under GDPR Article 49 (consent, contract performance, compelling legitimate interest) for cross-border transfers, and notes the absence of an EU adequacy finding for the U.S.
Imposes an obligation on the platform to maintain and use deidentified data only in deidentified form and prohibits reidentification attempts except as required or permitted by law, governing the lifecycle management of processed personal information.
Specifies the criteria for determining appropriate retention periods, including sensitivity, risk of harm, processing purposes, and legal requirements, and permits anonymization as an alternative to deletion.
How to read this page: Overall risk rates what Warmly's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 179 verified, verbatim-cited findings below — read the citations.
Based on 208 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 0 citationsstaticLast captured 2026-06-08
- Privacy PolicyVerified - read in full - 135 citationsstaticLast captured 2026-06-08
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Grants users the right to control Warmly's access to calendar information through Google or Microsoft account settings, and grants enterprise administrators additional access controls through the enterprise portal; also incorporates the Calendar Supplement and Access/Correction/Deletion section by reference.
" You may control Warmly’s access to your calendar information through your Google or Microsoft account settings. For Warmly Enterprise Accounts, access controls are available in the Enterprise administrator portal. Additional information a..."
Permits Warmly to access organizations' CRM applications with opt-in consent to provide enhanced functionality, and notes that enterprise customers may permit or restrict CRM integration access at the enterprise level; establishes a conditional data collection permission subject to enterprise-level controls.
"- Calendar Information . We offer enhanced functionality to users who opt in to providing us with access to their calendar application, as described in more detail in the Warmly Privacy Policy – Calendar Supplement . Please note that our en..."
Grants the company permission to use personal information to carry out contractual obligations, enforce contractual rights, and for its own business and commercial purposes.
"- to carry out our obligations and enforce our rights arising from any contracts entered into between you and us;-for our own business and commercial purposes;"
Permits processing of Personal Information on the basis of legitimate interests (including improving and marketing services), subject to a balancing test between legitimate interests and users' privacy rights.
"For a Legitimate Interest. We may process your Personal Information where we or a third party have a legitimate interest in doing so. For example, we have a legitimate interest in understanding how people are using our Services, both to imp..."
Introduces the enumerated list of business purposes for which all categories of personal information are collected, establishing the purpose limitation framework required by CCPA.
"Business Purposes for collection of all categories of Personal Information:"
Grants account holders the right and ability to modify their profile and virtual business card information through account settings, and provides a contact mechanism for questions about modifications.
"Modifying Profile and Virtual Business Card Information. If you have an account for our Service, you have the ability to modify certain information in your profile/virtual business card (e.g., your contact information) through the account s..."
Cross-references the business purposes section and incorporates the listed purposes as applicable to all CCPA personal information categories collected, linking the category definitions to the purpose framework.
"All Personal Information collected by us under the various categories listed above is collected for a variety of business purposes as set forth below."
Identifies categories of information excluded from the definition of Personal Information, including de-identified or aggregated data, publicly available government records, and information governed by sector-specific federal privacy laws (FCRA, GLBA, CFIPA, DPPA), thereby limiting the scope of the U.S. state privacy rights and obligations.
" -De-identified or aggregated consumer information, -Publicly available information from government records, -Information excluded from the scope of the individual U.S. State Privacy Laws including, but not limited to, Personal Information ..."
Clause A states that separate third-party terms govern data for services accessed through Warmly, while Clause B asserts Warmly's Privacy Policy applies to data handled by third-party software integrations offered via its site.
"The Services include all data (including personally identifiable information (“Personal Data”)), reports, text, images, sounds, video, and content made available through any of the foregoing (collectively referred to as the “Data”) whether stored by Warmly or other third-party vendors with which Warmly contracts. For any software or third-party services accessed through the Services, individual and separate third-party terms may apply in addition to this TOS, and any such terms are between you and the applicable third-party."
" This Privacy Policy applies to our websites: https://www.warmly.ai , https://getnametags.com https://getwarmly.com , and all sub-domains (collectively the “Site”), all software (including integrations with third-party software) and services we offer through our Site (“Services”), and email, text, or other electronic messages between you and us. It applies to any information that relates to an identifiable individual (“Personal Information”), which we describe in more detail below. This Privacy Policy does not apply to information collected on sites, applications, destinations, or services linked to from our Site that are not operated or offered by Warmly. "
Across documentsClause A states that separate third-party terms govern data for services accessed through Warmly, while Clause B asserts Warmly's Privacy Policy applies to data handled by third-party software integrations offered via its site.
"The Services include all data (including personally identifiable information (“Personal Data”)), reports, text, images, sounds, video, and content made available through any of the foregoing (collectively referred to as the “Data”) whether stored by Warmly or other third-party vendors with which Warmly contracts. For any software or third-party services accessed through the Services, individual and separate third-party terms may apply in addition to this TOS, and any such terms are between you and the applicable third-party."
Across documentsClause A states the company will not deny services or charge different prices/quality for exercising rights, while Clause B explicitly states they may do so if exercising rights limits their ability to process personal information.
" Non-Discrimination We will not discriminate against you for exercising any of rights described above. To the extent prohibited by U.S. State Privacy Laws, if you exercise one of these rights we will not: -Deny you goods or services. -Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties. -Provide you a different level or quality of goods or services. -Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services."
" The right not to receive retaliatory or discriminatory treatment for exercising any of the rights described above.However, please note that if the exercise of the rights described above limits our ability to process Personal Information (such as in the case of a deletion request), we may no longer be able to provide you our products or services or engage with you in the same manner.In addition, the exercise of the rights described above may result in a different price, rate, or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law."
Within one documentClause A states the platform may link non-personally identifiable information with personally identifiable information, while Clause B explicitly states it does not combine Google Analytics data (a type of non-personally identifiable usage data) with other personal information.
"- Linking Information . To the extent we are able to do so, we may link your non-personally identifiable information with your personally identifiable information and we may also link information collected online with information we collect offline or information collected online by third parties. Information we collect about you indirectly or passively when you interact with us- Usage data. We collect usage data about you whenever you interact with our Services. This may include which webpages you visit, what you click on, when you performed those actions, and so on. Additionally, like most websites today, our web servers keep log files that record data each time a device accesses those servers. The log files contain data about the nature of each access, including originating IP addresses, internet service providers, the files viewed on our Site (e.g., HTML pages, graphics, etc.), operating system versions, and timestamps. Personal Information gathered through tracking technologies may include internet or other electronic network activity information for the purposes of cross-device tracking for targeted advertising, the date and time of visits, the pages viewed, links to/from any page, and time spent at a site."
"- Analytics Services . We use third-party analytics services, such as Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses Cookies to collect information such as how often users visit the Services, what pages they visit, and what other sites they used prior to coming to the Services. We use the information we get from Google Analytics only to improve our Services. We do not combine the information generated through the use of Google Analytics with other Personal Information you may provide to us from time to time. Although Google Analytics plants a persistent Cookie on your web browser to identify you as a unique user the next time you visit the Services, the Cookie cannot be used by anyone but Google. Google’s ability to use and share information collected by Google Analytics about your visits to the Services is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. For more information on how Google uses this data, go to www.google.com/policies/privacy/partners/ . You may also download the Google Analytics opt-out browser add on, available at https://tools.google.com/dlpage/gaoptout ."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"- to improve the content of our Sites or Services, to enhance users’ experiences when visiting our Sites or using our Services, and to customize the content and layout of Sites for each individual user"
Permits use of personal information to improve services, enhance user experience, and customize site content, establishing a legitimate business purpose for data use.
AI-generated interpretation, not legal advice.
"- Calendar Information . We offer enhanced functionality to users who opt in to providing us with access to their calendar application, as described in more detail in the Warmly Privacy Policy – Calendar Supplement . Please note that our enterprise customers may choose to permit or restrict calendar integration access at the enterprise level. Please contact privacy@warmly.ai for more information. "
Permits Warmly to access organizations' CRM applications with opt-in consent to provide enhanced functionality, and notes that enterprise customers may permit or restrict CRM integration access at the enterprise level; establishes a conditional data collection permission subject to enterprise-level controls.
AI-generated interpretation, not legal advice.
"- Web Beacons (tracking pixels). Web beacons (also known as tracking pixels) are bits of data that count the number of users who access a website or open an email and can also allow us to see if a cookie has been activated. Web beacons used on web pages or in emails allow us to see how successful an article has been, or whether an email message was successfully delivered and read in a marketing campaign. We also use web beacons to learn if you have clicked on any links contained in emails. We may use this information to help us identify which emails are more interesting to you."
Discloses the use of web beacons/tracking pixels to collect behavioral data (email opens, link clicks, page visits), establishing the company's permission and practice of collecting such data for marketing analytics purposes.
AI-generated interpretation, not legal advice.
"- to carry out our obligations and enforce our rights arising from any contracts entered into between you and us;-for our own business and commercial purposes;"
Grants the company permission to use personal information to carry out contractual obligations, enforce contractual rights, and for its own business and commercial purposes.
AI-generated interpretation, not legal advice.
"For a Legitimate Interest. We may process your Personal Information where we or a third party have a legitimate interest in doing so. For example, we have a legitimate interest in understanding how people are using our Services, both to improve them and to market them more effectively. Therefore, we may use your Personal Information to understand and analyze your use of our Services. When we rely on our legitimate interest, we will carry out a balancing test between our legitimate interests and your privacy rights. Our legitimate interests include: understanding how our audience interacts with our content, our marketing and promotions, and our Services; learning about our audience in order to improve our Services for them; developing, delivering, and maintaining relevant and engaging content and promotional information; supporting the dissemination of information on topics of interest to individuals and the community; supporting individuals’ rights to receive information; and conducting our business activities and achieving our business goals."
Permits processing of Personal Information on the basis of legitimate interests (including improving and marketing services), subject to a balancing test between legitimate interests and users' privacy rights.
AI-generated interpretation, not legal advice.
"- For testing, research, analysis and product development"
Permits use of personal information for testing, research, analysis, and product development purposes, establishing a broad basis for internal use of collected data including potential AI/model development.
AI-generated interpretation, not legal advice.
"- Analytics Services . We use third-party analytics services, such as Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses Cookies to collect information such as how often users visit the Services, what pages they visit, and what other sites they used prior to coming to the Services. We use the information we get from Google Analytics only to improve our Services. We do not combine the information generated through the use of Google Analytics with other Personal Information you may provide to us from time to time. Although Google Analytics plants a persistent Cookie on your web browser to identify you as a unique user the next time you visit the Services, the Cookie cannot be used by anyone but Google. Google’s ability to use and share information collected by Google Analytics about your visits to the Services is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. For more information on how Google uses this data, go to www.google.com/policies/privacy/partners/ . You may also download the Google Analytics opt-out browser add on, available at https://tools.google.com/dlpage/gaoptout ."
Discloses the use of Google Analytics as a third-party analytics subprocessor that uses cookies to collect usage data, specifying that data collected is used only for service improvement and is not combined with other personal information.
AI-generated interpretation, not legal advice.
"- Other data you intentionally share . We also collect Personal Information at such other points on our Services that state that Personal Information is being collected so that we may provide the features or functionality for which we collected the Personal Information and for other purposes described in this Privacy Policy. We may also collect your Personal Information or data if you submit it to us in other contexts. For example, if you provide us with a testimonial."
States that Warmly may link non-personally identifiable information with personally identifiable information and may link online-collected data with offline data or data collected by third parties; also describes collection of usage data including web page visits, clicks, and timestamps; establishes data linking and usage tracking obligations.
AI-generated interpretation, not legal advice.
"- to send you targeted messages, publications, news, and information about events, special offers, promotions and benefits"
Permits the use of personal information to send targeted marketing messages, promotions, and events information, establishing a commercial use basis for collected data.
AI-generated interpretation, not legal advice.
" Social Media Widgets and Advertising . The Services may include social media features, such as LinkedIn, Twitter, YouTube or other widgets. These social media companies may recognize you and collect information about your visit to the Services, and they may set a cookie or employ other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.We display targeted advertising to you through social media platforms, such as Twitter, LinkedIn, and other social media forums. These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in the Services while those users are on the social media platform, or to groups of other users who share similar traits, such as likely commercial interests and demographics. We may share a unique identifier, such as a user ID or hashed email address, with these platform providers or they may collect information from our website visitors through a first-party pixel, in order to direct targeted advertising to you or to a custom audience on the social media platform. These advertisements are governed by the privacy policies of those social media companies that provide them. If you do not want to receive targeted ads on your social networks, you may be able to adjust your advertising preferences through your settings on those networks. You may learn more about advertising preferences by clicking on the links provided below. "
Discloses that social media widget providers may collect information, set cookies, and employ tracking technologies when users interact with embedded features, and that those companies' privacy policies govern such interactions.
AI-generated interpretation, not legal advice.
" For California, Colorado, Connecticut, Nevada, Utah, and Virginia Residents : To exercise your right to opt-out of the sale of sharing of Personal Information as it relates to the use of cookies and other tracking technologies for analytics and targeted ads, please see the “ Your Privacy Choices ” section of our U.S. State Privacy Disclosures."
Confers on residents of specified U.S. states the right to opt out of the sale or sharing of Personal Information as it relates to cookies and tracking technologies used for analytics and targeted advertising.
AI-generated interpretation, not legal advice.
" For Cookie-Based Sales & Targeted Advertising Opt-Outs: To exercise your right to opt-out as it relates to the use of cookies and other tracking technologies for analytics and targeted ads, click the cookie icon on the bottom of our warmly.ai site here."
Specifies the cookie-based opt-out mechanism via a cookie icon on the platform's website as the designated procedure for opting out of cookie-based sales and targeted advertising tracking technologies.
AI-generated interpretation, not legal advice.
" The right not to receive retaliatory or discriminatory treatment for exercising any of the rights described above.However, please note that if the exercise of the rights described above limits our ability to process Personal Information (such as in the case of a deletion request), we may no longer be able to provide you our products or services or engage with you in the same manner.In addition, the exercise of the rights described above may result in a different price, rate, or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law."
Disclaims retaliatory treatment for exercising privacy rights while noting that exercise of rights may limit service delivery, and that differential pricing or quality may result where reasonably related to the impact of the right—limiting the platform's obligations regarding service continuity upon privacy rights exercise.
AI-generated interpretation, not legal advice.
"Modifying Service Data. If your personal information has been added to the Services by another Customer (for example when they integrate their Calendar contacts with our Services), please contact the Customer that provided your personal information if you would like to access, correct, or delete your personal information, restrict or object to the processing of your personal information, or receive a copy of your personal information. We will work with the Customer on whose behalf we store, use, or process your personal information to respond to your request within a reasonable time."
Establishes the procedure for data subjects whose personal information was added by a Customer to exercise their data rights, directing them to contact the originating Customer and committing the company to work with that Customer to respond within a reasonable time.
AI-generated interpretation, not legal advice.
"- to link or combine it with other Personal Information we get from third parties, to help understand your needs and provide you with better service;"
Grants the company permission to combine user personal information with third-party data to better understand user needs and improve service delivery.
AI-generated interpretation, not legal advice.
"We support the self-regulatory principles for online behavioral advertising (Principles) published by the Digital Advertising Alliance (DAA). This means that we allow you to exercise choice regarding the collection of information about your online activities over time and across third-party websites for online interest-based advertising purposes. More information about these Principles can be found at www.aboutads.info. If you want to opt out of receiving online interest-based advertisements on your internet browser from advertisers and third parties that participate in the DAA program and perform advertising-related services for us and our partners, please follow the instructions at www.aboutads.info/choices, or http://www.networkadvertising.org/choices/ to place an opt-out cookie on your device indicating that you do not want to receive interest-based advertisements. Opt-out cookies only work on the internet browser and device they are downloaded onto. If you want to opt out of interest-based advertisements across all your browsers and devices, you will need to opt out on each browser on each device you actively use. If you delete cookies on your device generally, you will need to opt out again. If you want to opt out of receiving online interest-based advertisements on mobile apps, please follow the instructions at http://www.aboutads.info/appchoices ."
Recognizes users' right to opt out of interest-based advertising data collection by adhering to the DAA self-regulatory Principles, establishing a user choice mechanism for behavioral advertising.
AI-generated interpretation, not legal advice.
"- to understand you and your preferences to enhance your experience and enjoyment using our Services;"
Grants the company permission to use personal information to understand user preferences in order to enhance user experience.
AI-generated interpretation, not legal advice.
" provides helpful information about cookies. If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Please note that doing so may negatively impact your experience using our online Services, as some features and services on our online Services may not work properly. Depending on your device and operating system, you may not be able to delete or block all cookies. In addition, if you want to reject cookies across all your browsers and devices, you will need to do so on each browser on each device you actively use. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it."
Describes the procedure for users to manage cookie preferences via browser settings, and includes a disclaimer that disabling cookies may negatively impact service functionality, creating a procedural right for users to opt out of cookies.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Warmly's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
31 verified clausesClauses in Warmly's policies that work in your favour — commitments the platform made to you.
- Privacy & data use
“ Authorized Agents In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order t…”
Establishes the conditions and verification requirements for using an authorized agent to submit privacy rights requests on a user's behalf, including acceptable forms of authorization evidence (power of attorney or sign…
📍 Privacy Policy › “To Exercise the Right to Opt Out of the Selling or Sharing of Personal Information for Targeted Advertising Purposes”Jump to exact text → - Privacy & data usesensitive data (biometric/location/health)
“ Sensitive Information The following Personal Information elements we collect may be classified as “sensitive” under certain U.S. State Privacy Laws (“sensitive information”): account log-in in combination with any required security or access code, password o…”
Restricts use and disclosure of sensitive personal information (specifically account credentials) to purposes reasonably expected in connection with services or detecting security incidents and fraud, prohibiting use bey…
📍 Privacy Policy › “Sales, Sharing or Targeted Advertising”Jump to exact text → - Privacy & data use
“ Response Timing and Format We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we…”
Establishes the response timing obligations (45-day initial response, up to 90-day extension with written notice), delivery methods for responses, and format requirements for data portability requests, defining the platf…
📍 Privacy Policy › “Submitting Privacy Rights Requests”Jump to exact text → - Audit rights, DPA & residency
“Please read this Privacy Policy carefully to understand our policies and practices regarding your Personal Information and how we treat it. By accessing or using the Site and/or the Services, you acknowledge that you have read and understood this Privacy Polic…”
Instructs users to read the policy carefully, establishes that accessing or using the Site/Services constitutes acknowledgment of having read and understood the policy, restricts use if the user does not consent to data…
- Designated security contact: security@warmly.ai
📍 Privacy Policy › “ What does this Privacy Policy apply to?”Jump to exact text → - Privacy & data usechildren's data
“Warmly does not direct our services towards individuals under the age of 18. We do not knowingly collect Personal Information from individuals under the age of 18. If we become aware that we have collected Personal Information from individuals under the age of…”
Imposes an obligation not to knowingly collect Personal Information from individuals under 18, and requires deletion of any such information if discovered, with an exception for child safety purposes required by law.
- Designated security contact: privacy@warmly.ai
📍 Privacy Policy › “Our Policy Towards Children”Jump to exact text → - Privacy & data usesale/sharing of personal data
“ Non-Discrimination We will not discriminate against you for exercising any of rights described above. To the extent prohibited by U.S. State Privacy Laws, if you exercise one of these rights we will not: -Deny you goods or services. -Charge you different p…”
Restricts the platform from discriminating against users who exercise their privacy rights by prohibiting denial of goods or services, differential pricing, or different quality levels, enumerating the specific prohibite…
📍 Privacy Policy › “Submitting Privacy Rights Requests”Jump to exact text →
+ 25 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
1 verified clauseWhat Warmly requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcement
“- to comply with applicable law;”
Establishes an obligation to disclose personal information as required to comply with applicable law.
📍 Privacy Policy › “Other Sharing”Jump to exact text →
What the policies actually cover
8 topics- Product telemetry & usage tracking15 clauses
- Advertising & tracking2 protective13 clauses
- Sale or sharing of personal data7 protective12 clauses
- Sensitive data (biometric, location, health)2 protective5 clauses
- Children's data2 protective2 clauses
- Government & law-enforcement disclosure6 clauses
- Terms can change at any time1 protective1 clause
- Deletion rights & post-termination survival1 clause
80 further verified clauses are cited on this page but not yet assigned a topic.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits commercial or business use.
“The Effective Date of the TOS is set forth above. If we decide to change the TOS we will post the new version here and will use commercially reasonable efforts to notify you via email or otherwise so that you can review the new terms. Please review this page periodically to ensure you are aware of the most current terms. Using or accessing the Services after a change to the TOS constitutes your agreement to the ne...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“To Comply with Legal Obligations. We will process your Personal Information when necessary to comply with legal and regulatory obligations or defend claims. For example, we may share your Personal Information in response to a court order, subpoena, or law enforcement agency's request.Retention of InformationWe will only keep your Personal Information for as long as necessary to fulfill the purposes for which ...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“As between you and Warmly, all rights, title and interest in and to the Service and its components, updates and derivative works will remain with and belong exclusively to Warmly. You shall obtain no rights or interests in the Services (or modifications thereto) except as provided in this TOS. Any rights not expressly granted herein are reserved and no license or right to use any trademark of Warmly or any third p...”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“We may create anonymized data (data that is not associated with or linked to your personally identifiable information) records from Personal Information by excluding information (such as your name, email address, personal identification numbers) that makes the data personally identifiable to you. We use this anonymized data to analyze request and usage patterns so that we may enhance the content of our Services an...”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“We may create anonymized data (data that is not associated with or linked to your personally identifiable information) records from Personal Information by excluding information (such as your name, email address, personal identification numbers) that makes the data personally identifiable to you. We use this anonymized data to analyze request and usage patterns so that we may enhance the content of our Services an...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | audit rights dpa residency | conditional | MEDIUM | 1 |
| All applicable tiers | commercial use | improves | LOW | 6 |
| All applicable tiers | data retention | conditional | MEDIUM | 1 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 2 |
| All applicable tiers | output ownership | worsens | HIGH | 1 |
| All applicable tiers | privacy data use | worsens | HIGH | 16 |
| All applicable tiers | prompt ownership | improves | LOW | 1 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 10 |
| All applicable tiers | training use | worsens | HIGH | 2 |
| Enterprise | commercial use | worsens | HIGH | 2 |
| Enterprise | privacy data use | conditional | MEDIUM | 1 |
| Enterprise | subprocessors data sharing | worsens | HIGH | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“ Third Party Vendors. To provide some of the Services, Warmly uses third-party vendors as listed ( here ). By accepting these terms, you consent to Warmly's third-party vendors storing and processing data you make available to Warmly only if necessary to provide the Services. Each vendor identified below has entered a Data Processing Agreements (DPA) with Warmly and Warmly will remain responsible for the actions of each vendor. Third Party Materials. The Services may provide access to third party services or other resources (“Third-Party Materials”) or allow for the routing or transmission of such Third-Party Materials (including via links). Use of Third-Party Materials is not required to use the Services - and their use is at your sole discretion and risk. We do not control, endorse, or are responsible for, any Third-Party Materials and we make no representation or warranty about their accuracy, integrity, quality, legality, usefulness or safety. We do not monitor Third Party Materials, and we may block or disable access to any Third-Party Materials (in whole or part) through the Service at any time. Your use of any Third-Party Materials may require you to agree to additional terms – and such terms are solely between you and that third-party. Open Source The Services may be provided with, or otherwise contain, open source software components (“Open Source Components”) governed by open source license agreements (“Open Source Licenses”).”Before citation
“ As further described in the “Third-Party Data Collection and Online Advertising” section of our Privacy Policy, we may sell or share your Personal Information (as those terms are defined by U.S. State Privacy Laws), subject to your right to opt out of such sales and sharing (see “ Your Privacy Choices ” below). We do not sell or share the Personal Information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the “Right to Opt In”) from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“If you reject the invitation to join Warmly, please refer to the Do Not Sell/Do Not Share section of our Privacy Policy to learn how to request the removal of your information via this link: https://warmly.ai/p/removal .”Before citation
“ Third Party Vendors. To provide some of the Services, Warmly uses third-party vendors as listed ( here ). By accepting these terms, you consent to Warmly's third-party vendors storing and processing data you make available to Warmly only if necessary to provide the Services. Each vendor identified below has entered a Data Processing Agreements (DPA) with Warmly and Warmly will remain responsible for the actions of each vendor. Third Party Materials. The Services may provide access to third party services or other resources (“Third-Party Materials”) or allow for the routing or transmission of such Third-Party Materials (including via links). Use of Third-Party Materials is not required to use the Services - and their use is at your sole discretion and risk. We do not control, endorse, or are responsible for, any Third-Party Materials and we make no representation or warranty about their accuracy, integrity, quality, legality, usefulness or safety. We do not monitor Third Party Materials, and we may block or disable access to any Third-Party Materials (in whole or part) through the Service at any time. Your use of any Third-Party Materials may require you to agree to additional terms – and such terms are solely between you and that third-party. Open Source The Services may be provided with, or otherwise contain, open source software components (“Open Source Components”) governed by open source license agreements (“Open Source Licenses”).”After citation
Latest stance: platform claims or reserves rights on privacy data use
“We may create anonymized data (data that is not associated with or linked to your personally identifiable information) records from Personal Information by excluding information (such as your name, email address, personal identification numbers) that makes the data personally identifiable to you. We use this anonymized data to analyze request and usage patterns so that we may enhance the content of our Services and improve Services navigation. We reserve the right to use anonymized data for any purpose and to disclose anonymized data to third parties in our sole discretion.”Open timeline citation
Latest stance: sale or sell on privacy data use
“ As further described in the “Third-Party Data Collection and Online Advertising” section of our Privacy Policy, we may sell or share your Personal Information (as those terms are defined by U.S. State Privacy Laws), subject to your right to opt out of such sales and sharing (see “ Your Privacy Choices ” below). We do not sell or share the Personal Information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the “Right to Opt In”) from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age.”Open timeline citation
Latest stance: sale or sell on privacy data use
“The Right to Opt Out of Sales or Sharing for Targeted Advertising Purposes The right to direct us not to sell or share Personal Information for certain targeted or cross-context behavioral advertising purposes.”Open timeline citation
Latest stance: sale or sell on commercial use
“The third parties to whom we sell or share Personal Information may use such information for their own purposes, in accordance with their own privacy statements, which may include reselling or sharing this information to additional third parties.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days
- Privacy Policy:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 61 fewer findings this quarter vs last (130 vs 191). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Warmly's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Warmly's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.