Webflow AI
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“you understand and agree that, without Webflow’s prior written consent, you do not have the right to sublicense or resell access to the Platform.”
Watch: Commercial use
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Prohibits the customer from sublicensing or reselling platform access without Webflow's prior written consent, limiting permitted commercial exploitation of the platform.
This restriction limits commercial use cases such as white-labeling or agency resale without prior written approval. The requirement for prior written consent creates a gatekeeping mechanism that Webflow can apply selectively.
No specific retention period is stated. Multiple broad carve-outs (legal obligations, operational records, disputes, agreements) mean data could be retained well beyond service termination without a defined maximum period.
Scores derived from 54 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
- Data handling is conditional — 6 privacy or retention clauses warrant review before using Webflow AI at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Webflow AI's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 196 verified, verbatim-cited findings below — read the citations.
Based on 232 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 46 citationspdf textLast captured 2026-08-31
- Terms of ServiceVerified - read in full - 64 citationspdf textLast captured 2026-08-31
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Grants Webflow a non-exclusive, revocable, royalty-free, worldwide license to display user Website Content and brand marks for Webflow marketing and promotional purposes, establishing the scope of permitted marketing use of user content.
" Notwithstanding the above, in our discretion, Webflow may choose to feature your Website Content and/or your name, trade names, trademarks, logos, and other similarly identifying indicia included on your Website Content (collectively, “ Ma..."
This segment describes the procedure by which Webflow collects Personal Information (at registration and during platform use), specifying what types of data are gathered and the automated saving mechanisms — establishing the factual basis and procedural scope of data collection practices.
" When you register for the Platform, we may ask for Personal Information such as your name, email address, credit card or other billing information. You may also provide at your own discretion certain related information like your personal ..."
This clause grants residents of specified U.S. states (California, Colorado, Connecticut, Virginia, Utah) additional privacy rights including the right against discrimination, while noting exceptions such as where disclosure would create unreasonable security risk.
" Residents of certain U.S. states, including but not limited to California, Colorado, Connecticut, Virginia, and Utah, may have additional rights in relation to their Personal Information. However, these rights may be subject to certain exc..."
This plain-language summary includes a disclaimer that Webflow is not responsible for the security measures of third parties while noting Webflow's own security commitment.
" Webflow is committed to ensuring the security of your Personal Information. We use commercially reasonable technological, physical, and administrative security safeguards, such as firewalls and carefully developed security features, to pro..."
This clause restricts Webflow's use of data for cross-app interest-based advertising by referencing the DAA AppChoices opt-out mechanism, limiting data collection for advertising purposes when users exercise this option.
" We process and store information on behalf of our customers. You may decline to submit any Personal Information through the Platform; in which case we may not be able to provide certain services to you. If you are a Webflow customer and w..."
Establishes billing timing, refund procedures, non-refundability of annual plans, automatic renewal obligations, and fee responsibilities for different subscription tiers including Enterprise account migration rules.
" Customers may be required to provide their credit card details to Webflow or the payment service provider retained by Webflow (the “ PSP ”). Customers will be responsible for paying all applicable fees related to their use of the Platform ..."
Establishes the procedure by which Webflow may modify these Terms, requiring advance notice of material changes via email, written notice, or website posting, and reserving the right to update terms in the ordinary course of business.
" ### We reserve the right to modify, update, or change these Terms from time to time in the usual course of business (such modified Terms, the " Updated Terms "), so we encourage you to review this page periodically. Notwithstanding, when ..."
This clause establishes Webflow's right to modify the privacy policy and sets out the procedure for providing reasonable advance notice of material changes via email, written notice, or platform posting, while reserving the right to determine the form and means of notification.
" We reserve the right to modify, update, or change this Policy from time to time in the usual course of business, so we encourage you to review this page periodically. Notwithstanding, when we change this Policy in a material manner, we wil..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Our Platform offers publicly accessible blogs and community forums. If you elect to post something in a public area of our Platform, any Personal Information or content that you voluntarily disclose for posting to the Platform, becomes available to the public, as controlled by any applicable privacy settings. If you remove information that you posted to the Platform, copies may remain viewable in cached and archived pages of the Platform, or if other users have copied or saved that information. To request removal of your Personal Information from our blog or community forum, contact us at contact@webflow.com . In some cases, we may not be able to remove all your Personal Information. BASICALLY... "
This clause establishes that Personal Information posted to public forums may remain viewable in cached/archived pages even after user deletion, and provides a procedure for requesting removal via contact email, creating a practical limitation on the right to deletion.
AI-generated interpretation, not legal advice.
" We process and store information on behalf of our customers. You may decline to submit any Personal Information through the Platform; in which case we may not be able to provide certain services to you. If you are a Webflow customer and would like to opt out of marketing communications from Webflow, please go to https://webflow.com/dashboard/unsubscribe . Please refer to your mobile device or browser’s technical information for instructions on how to delete and disable cookies, and other tracking / recording tools. Note that disabling cookies on your mobile device or browser may prevent us or our business partners from tracking your browser’s activities in relation to the Platform. However, doing so may disable many of the features available through the Platform. You may opt-out individually for third-party vendors on their websites, but limitations on data sharing may make it difficult or impossible to provide the Platform after an opt-out. You may also opt out of interest-based advertising provided by participating ad servers through the Digital Advertising Alliance ( http://optout.aboutads.info/ ), the Network Advertising Initiative ( http://optout.networkadvertising.org/?c=1 ), or the European Interactive Digital Advertising Alliance ( http://www.youronlinechoices.eu ). California consumers may use the Digital Advertising Alliance’s tool to send requests under the California Consumer Privacy Act (“CCPA”) for a web browser to opt out of the sale of Personal Information by some or all of that framework’s participating companies by accessing the DAA’s tool here: https://www.privacyrights.info/ , or by downloading the DAA’s AppChoices mobile application opt-out here: https://youradchoices.com/appchoices . "
This clause restricts Webflow's use of data for cross-app interest-based advertising by referencing the DAA AppChoices opt-out mechanism, limiting data collection for advertising purposes when users exercise this option.
AI-generated interpretation, not legal advice.
" You acknowledge that the Platform may not be compliant with the Health Insurance Portability and Accountability Act and amendments thereto (“ HIPAA ”) and you agree not to provide or enable End Users to provide Protected Health Information, as defined in HIPAA, in the Website Content or otherwise in connection with your use of the Platform. BASICALLY... "
Restricts users from submitting or enabling end users to submit Protected Health Information through the platform, acknowledging the platform's non-compliance with HIPAA and prohibiting health data processing through the service.
AI-generated interpretation, not legal advice.
" Notwithstanding the above, in our discretion, Webflow may choose to feature your Website Content and/or your name, trade names, trademarks, logos, and other similarly identifying indicia included on your Website Content (collectively, “ Marks ”). You hereby grant us, a non-exclusive, revocable, royalty free, worldwide right and license to display or otherwise use your published Website Content or Marks for the limited purpose of Webflow marketing and promotional activities (e.g., we may feature your Website Content or Marks on our website, in our customer lists or social media accounts, etc.). You agree to waive any claims against us relating to any moral rights, artists’ rights, or any other similar rights worldwide that you may have in or to your Website Content or Marks and any right of inspection or approval of any such use. All goodwill related to the use of your Marks by Webflow will inure to the benefit of the owner of such Marks. This Section does not affect any rights you may have under applicable data protection laws. For clarity, you can revoke the licenses to Webflow to market and/or promote your Website Content and/or Marks by emailing us at contact@webflow.com ."
Grants Webflow a non-exclusive, revocable, royalty-free, worldwide license to display user Website Content and brand marks for Webflow marketing and promotional purposes, establishing the scope of permitted marketing use of user content.
AI-generated interpretation, not legal advice.
" When you register for the Platform, we may ask for Personal Information such as your name, email address, credit card or other billing information. You may also provide at your own discretion certain related information like your personal website name, social media websites, a list of your skills, the date you started using the Platform, and a description of yourself. Additionally, as you utilize the Platform to create websites, the software continuously saves changes made by you with the server and will document items such as when you are working and saving changes, when you last opened the Designer, when sites are published, or when you perform certain tasks. We may also retain the contents of any messages you send to us or through the Platform, and we may collect information you provide in Website Content that you post or upload to the Platform to the extent required or permitted under applicable law. Webflow may use Personal Information you provided to operate, improve upon, and personalize the Platform, for billing identification and authentication, to contact you about the Platform and your use of the Platform, to support your use of the Platform (including by contacting you about right sizing your use of the Platform through Enterprise offerings), to send marketing materials (in accordance with applicable law), for research purposes, and to generally improve the content and functionality of the Platform. We may also combine your Personal Information with third-party analytics — including session replay technologies — to build a broader profile of our Customers so that we can serve you better and provide custom, personalized content and information. "
This segment describes the procedure by which Webflow collects Personal Information (at registration and during platform use), specifying what types of data are gathered and the automated saving mechanisms — establishing the factual basis and procedural scope of data collection practices.
AI-generated interpretation, not legal advice.
" By using the Platform, you confirm that you have read and understood our Privacy Policy and that you consent to the collection, use, processing, and disclosure of your Personal Information and aggregated data as set forth therein. You understand that your Personal Information will be collected, used, transferred to, and processed in the United States as part of your use of the Platform. Our Privacy Policy is not a contract and does not form part of this Agreement. We may update our Privacy Policy from time to time as set forth in that policy. We cannot guarantee that unauthorized third parties will never be able to defeat our security measures. You acknowledge that you provide your information at your own risk. BASICALLY..."
Incorporates the Privacy Policy by reference, obtains user consent to personal data collection, use, processing, and disclosure including transfer to the United States, and disclaims the Privacy Policy as a contractual document while reserving the right to update it.
AI-generated interpretation, not legal advice.
" We welcome your feedback, ideas or suggestions (collectively, “ Feedback ”), but you agree that we may use your non-confidential Feedback without any restriction or obligation to you, even after this Agreement is terminated. This Section does not limit or affect any rights you may have under applicable data protection laws. BASICALLY... "
Plain-language summary confirming Webflow owns and may use or distribute customer feedback in any manner without cost, restating the operative ownership and usage right in segment 197.
AI-generated interpretation, not legal advice.
" You represent and warrant that your use of the Platform, including any Website Content you create or publish via the Platform shall comply with our Acceptable Use Policy . Without limiting the foregoing, you understand and agree that, without Webflow’s prior written consent, you do not have the right to sublicense or resell access to the Platform."
Prohibits the customer from sublicensing or reselling platform access without Webflow's prior written consent, limiting permitted commercial exploitation of the platform.
AI-generated interpretation, not legal advice.
"you understand and agree that, without Webflow’s prior written consent, you do not have the right to sublicense or resell access to the Platform."
This restriction limits commercial use cases such as white-labeling or agency resale without prior written approval. The requirement for prior written consent creates a gatekeeping mechanism that Webflow can apply selectively.
AI-generated interpretation, not legal advice.
"Notwithstanding the foregoing, Webflow reserves the right to take down Website Content at any time in our sole discretion."
This standalone reservation of rights is broad and unqualified. Despite disclaiming any duty to monitor content, Webflow preserves unfettered removal authority. Users have no stated appeal or reinstatement mechanism.
AI-generated interpretation, not legal advice.
"we reserve the right to limit, remove, archive, or otherwise disable some or all of your Website Content, Account(s), or access to the Platform in our sole discretion. We will use reasonable efforts to notify you prior to taking any such action unless we reasonably believe that doing so would: (a) violate applicable law or a legally binding order from law enforcement; (b) compromise the integrity or operation of the Platform; (c) cause harm to of our customers, our customers’ End Users, third parties, or Webflow; or (d) otherwise subject Webflow to potential legal liability."
The 'sole discretion' standard gives Webflow nearly unchecked authority to take enforcement action. The four carve-outs to prior notice are broadly drafted (e.g., 'cause harm to… Webflow'), meaning notice could be withheld in most enforcement scenarios, exposing users to sudden loss of service without recourse.
AI-generated interpretation, not legal advice.
"Notwithstanding the foregoing, if you convert your Account to an Enterprise account , your workspace(s) will be migrated to an Enterprise account and will be subject to the terms of the applicable Order Form starting from the date of the execution of the Order Form. For the avoidance of doubt, you are expressly prohibited from adding non-Enterprise website(s) (“ Self-Serve Websites ”) to your Enterprise Workspace using a payment method other than the payment method specified in the Order Form, provided that if you (unintentionally or intentionally) add any Self-Serve Websites to your Enterprise Workspace, they will be subject to the payment terms set forth in the Order Form and billed as Enterprise Site Plans. To the extent your use of the Platform exceeds the usage limits provided for in your payment plan (as set forth on https://webflow.com/pricing ) or the applicable Order Form, including but not limited to the usage categories of monthly visits, bandwidth, and API requests per minute, Webflow reserves the right to charge you prorated overage fees for any such excessive use, require you bring your usage within the allotted parameters of your current plan, and/or require you upgrade to a new plan to increase your usage limits, in Webflow’s sole discretion. If you do not comply with such requirements within 30 days from Webflow’s initial written notice to you (email acceptable) regarding such excessive usage, Webflow may suspend or limit your access to the Platform, in whole or in part, for breaching the terms of your agreement with Webflow. "
Restricts Enterprise customers from adding non-Enterprise websites to their Enterprise Workspace using unauthorized payment methods, and specifies consequences for doing so, creating tier-specific payment compliance obligations.
AI-generated interpretation, not legal advice.
" Except for your Website Content, all materials on or inherent to the Platform, including the mini-applications that allow integrations with other applications and services (“ Recipes ”), the Platform itself, and all Intellectual Property Rights contained therein or related thereto, including text, graphics, user and visual interfaces, photographs, trademarks, logos, sounds, music, artwork, applications, computer code and associated documentation (collectively, “ Webflow IP ”), including but not limited to the design, structure, arrangement, and “look and feel” of Webflow IP, is owned by or licensed to us and our licensors and is protected by copyright, trademark, and other Intellectual Property Rights and laws. Other than as provided herein, Webflow does not grant to you or any user in your account or workspace any license, express or implied, to Webflow IP. Except as expressly provided in the Agreement, no part of the Platform or Webflow IP may be copied, reproduced, sold, republished, transmitted, displayed, reposted, or otherwise distributed for public or commercial purposes. Subject to the terms and conditions of this Agreement, Webflow provides you with a non-exclusive, revocable license to use the Platform, including the Recipes, as expressly permitted by the features and functionality of the Platform and the terms of this Agreement. Webflow may terminate this license at any time for any reason or no reason. BASICALLY... "
States that published site content constitutes copyrighted works of Webflow or its licensors, restricting unauthorized use or reproduction of that content.
AI-generated interpretation, not legal advice.
"Webflow will retain Personal Information we process on your behalf for as long as necessary to provide the Platform to you, subject to our compliance with this Policy, or as required or permitted under applicable law. We may further retain and processPersonal Information as necessary to comply with our legal obligations; maintain accurate accounting, financial, and other operational records; resolve disputes; and enforce our agreements. We have established internal policies for the deletion of Personal Information following the termination of your Account."
No specific retention period is stated. Multiple broad carve-outs (legal obligations, operational records, disputes, agreements) mean data could be retained well beyond service termination without a defined maximum period.
AI-generated interpretation, not legal advice.
"Unless otherwise specified, Webflow, its successors, assigns, employees, agents, directors, officers, and stockholders (i) do not undertake or assume any duty to monitor the Platform for inappropriate or unlawful content and (ii) assume and shall have no responsibility or liability which may arise from your or any other user’s Website Content, including, but not limited to, third-party claims for defamation, libel, slander, infringement, invasion of privacy and publicity rights, obscenity, pornography, profanity, fraud, or misrepresentation."
The disclaimer covers a broad set of tort categories (defamation, privacy, IP infringement, fraud, etc.) and extends to a wide class of Webflow-affiliated persons. Combined with the earlier 'sole responsibility' clause, users bear essentially the entire legal risk for any claims arising from content on the platform.
AI-generated interpretation, not legal advice.
"You agree that Webflow's remedy at law for any actual or threatened breach of this Agreement would be inadequate and that Webflow shall be entitled to specific performance or injunctive relief, or both, in addition to any damages that Webflow may be legally entitled to recover, together with reasonable expenses of any form of dispute resolution, including, without limitation, attorneys' fees. No right or remedy of Webflow shall be exclusive of any other, whether at law or in equity, including without limitation damages injunctive relief, attorneys' fees, and expenses."
By stipulating in advance that legal remedies are inadequate, users waive a key threshold requirement for injunctive relief. This significantly tilts the balance of remedies in Webflow's favor and could expose users to court orders halting their operations based on any alleged breach.
AI-generated interpretation, not legal advice.
"We may be required to disclose Personal Information to respond to subpoenas, court orders, and law enforcement or governmental requests or investigations, or to establish or exercise our legal rights or defend against legal claims. We may also share Personal Information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations or our Terms of Service , or as otherwise required by law."
While disclosure for legal compliance is standard, the clause also permits sharing for 'suspected fraud' and ToS violations at Webflow's own belief/discretion, which may be applied broadly without user notification.
AI-generated interpretation, not legal advice.
"The arbitrator must follow applicable law, and any award may be challenged if the arbitrator fails to do so. Except as otherwise provided in this Agreement, you and Webflow may litigate in court to compel arbitration, stay proceeding pending arbitration, or to confirm, modify, vacate, or enter judgment on the award entered by the arbitrator."
This clause restricts the arbitrator to following applicable law and limits challenges to awards, while also specifying the limited circumstances under which parties may litigate in court in connection with the arbitration process.
AI-generated interpretation, not legal advice.
Common questions about Webflow AI's policies
- Can you use Webflow AI's output commercially?
- Commercial use allowed — with conditions — based on 2 verified findings from Webflow AI's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Webflow AI's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
16 verified clausesClauses in Webflow AI's policies that work in your favour — commitments the platform made to you.
- Moderation & enforcementterms can change anytime
“### We reserve the right to modify, update, or change these Terms from time to time in the usual course of business (such modified Terms, the " Updated Terms "), so we encourage you to review this page periodically. Notwithstanding, when we change these Terms…”
Establishes the procedure by which Webflow may modify these Terms, requiring advance notice of material changes via email, written notice, or website posting, and reserving the right to update terms in the ordinary cours…
- Terms changes: advance notice promised
📍 § 15 (Amendments, Notification Procedures, and Updates to the Agreement)Jump to exact text → - Privacy & data usesale/sharing of personal data
“Residents of certain U.S. states, including but not limited to California, Colorado, Connecticut, Virginia, and Utah, may have additional rights in relation to their Personal Information. However, these rights may be subject to certain exceptions. For instance…”
This clause grants residents of specified U.S. states (California, Colorado, Connecticut, Virginia, Utah) additional privacy rights including the right against discrimination, while noting exceptions such as where disclo…
📍 § 13 (U.S. State Privacy Rights)Jump to exact text → - Moderation & enforcementterms can change anytime
“We reserve the right to modify, update, or change this Policy from time to time in the usual course of business, so we encourage you to review this page periodically. Notwithstanding, when we change this Policy in a material manner, we will update the effectiv…”
This clause establishes Webflow's right to modify the privacy policy and sets out the procedure for providing reasonable advance notice of material changes via email, written notice, or platform posting, while reserving…
- Terms changes: advance notice promised
📍 § 14 (Changes to the Privacy Policy)Jump to exact text → - Audit rights, DPA & residency
“As Webflow is based in the United States, we may host, transfer, and process your Personal Information in the United States or countries other than the United States. Webflow uses a variety of safeguards, including contractual and technical measures, to protec…”
This clause establishes Webflow's adherence to Swiss-U.S. DPF Principles for processing Swiss personal data and sets a hierarchy where DPF Principles govern over the privacy policy in cases of conflict, incorporating the…
📍 § 7 (Hosting and data transfer)Jump to exact text → - Audit rights, DPA & residency
“For example, if End Users located in certain jurisdictions exercise their “right to be forgotten” (or “erasure”) of their Personal Information that you have collected via the Platform, you shall comply with their request as required by applicable law. For clar…”
Clarifies that the customer as data controller is responsible for complying with end user data rights requests (e.g., right to erasure) and that Webflow acts as processor following customer instructions, establishing res…
📍 § 4.4 (End Users)Jump to exact text → - Audit rights, DPA & residency
“Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between…”
This plain-language summary incorporates by reference the EU & Swiss Privacy Policy for EEA, UK, and Switzerland users, and constitutes users' consent to cross-border data transfers as a condition of service use.
📍 § 7 (Hosting and data transfer)Jump to exact text →
+ 10 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
7 verified clausesWhat Webflow AI requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcement
“Please safeguard your Account and make sure others do not have access to your passwords or other authentication credentials (e.g. multi-factor authentication credentials). Your Account and Primary Email Address are specific to you (or one designated person if…”
Obligates users to safeguard account credentials, restricts sharing or transferring of accounts, and holds users solely responsible for harm arising from unauthorized use or disclosure of account information, creating co…
📍 § 2.4 (Your Responsibility for Your Account)Jump to exact text → - Moderation & enforcementconduct restrictions
“### You may not use the Platform if you are a resident of a country embargoed by the United States, or are a foreign person or entity blocked or denied by the United States government. By using the Platform, you represent and warrant that you (i) are not loca…”
This clause restricts use of the platform by residents of US-embargoed countries or persons on US restricted-party lists, and requires users to represent and warrant their compliance with US sanctions laws as a condition…
📍 § 17 (US Economic Sanctions)Jump to exact text → - Moderation & enforcement
“You represent and warrant that your use of the Platform, including your Website Content, shall comply with all applicable laws, rules, and regulations, including without limitation applicable privacy and data protection laws and applicable export or import con…”
Customer warrants that their platform use and website content will comply with all applicable laws including privacy, data protection, and export controls, and disclaims Webflow's responsibility to provide legal complian…
📍 § 4.2 (Compliance with Applicable Law)Jump to exact text → - Moderation & enforcement
“You acknowledge that the Platform may not be compliant with the Health Insurance Portability and Accountability Act and amendments thereto (“ HIPAA ”) and you agree not to provide or enable End Users to provide Protected Health Information, as defined in HIPAA…”
Restricts users from submitting or enabling end users to submit Protected Health Information through the platform, acknowledging the platform's non-compliance with HIPAA and prohibiting health data processing through the…
📍 § 3.6 (HIPAA Non-Compliance)Jump to exact text → - Moderation & enforcement
“You are solely responsible for the content you publish using Webflow, and by publishing any content you are confirming that the content does not violate these Terms, including our Acceptable Use Policy. Please follow our rules and don’t do anything illegal wit…”
Imposes an obligation on users to ensure that published content complies with the Terms and Acceptable Use Policy, and confirms user sole responsibility for published content, functioning as an enforcement and compliance…
📍 § 3.1 (Uploading Website Content)Jump to exact text →
+ 2 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
16 topics- Product telemetry & usage tracking8 clauses
- Advertising & tracking1 protective3 clauses
- Sale or sharing of personal data1 protective4 clauses
- Sensitive data (biometric, location, health)1 clause
- Children's data1 protective4 clauses
- Government & law-enforcement disclosure3 clauses
- Data shared with other AI providers1 clause
- Arbitration & class-action waiver1 protective6 clauses
- Damages & liability cap2 clauses
- Indemnity direction1 clause
- Terms can change at any time3 protective6 clauses
- Deletion rights & post-termination survival4 clauses
- Auto-renewal & cancel window1 clause
- Feedback ownership1 clause
- Breach-notification promises1 clause
- Conduct restrictions2 obligations3 clauses
61 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
The Terms of Service, § 3.4 (Featuring your Website Content and Marks) describes rights the platform takes in user content, and the Privacy Policy, § 1 (What “Personal Information” means) describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Verified retention clauses point in different directions: the Privacy Policy, § 10 (Data retention) describes broad or open-ended retention, while the Privacy Policy, § 10 (Data retention) describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause restricts commercial use.
“To the extent you access or use any downloadable software related to the Platform (“ Software ”), such access or use shall be governed by the terms of the license agreement that accompanies the Software or is posted with the Software on the Sites where the Software can be accessed; however, if no such license agreement is made available, we grant you a limited, revocable, worldwide, royalty-free, non-assignable, n...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“Webflow will retain Personal Information we process on your behalf for as long as necessary to provide the Platform to you, subject to our compliance with this Policy, or as required or permitted under applicable law. We may further retain and processPersonal Information as necessary to comply with our legal obligations; maintain accurate accounting, financial, and other operational records; resolve disputes; and ...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“Webflow will retain Personal Information we process on your behalf for as long as necessary to provide the Platform to you, subject to our compliance with this Policy, or as required or permitted under applicable law. We may further retain and processPersonal Information as necessary to comply with our legal obligations; maintain accurate accounting, financial, and other operational records; resolve disputes; and ...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“Webflow will retain Personal Information we process on your behalf for as long as necessary to provide the Platform to you, subject to our compliance with this Policy, or as required or permitted under applicable law. We may further retain and processPersonal Information as necessary to comply with our legal obligations; maintain accurate accounting, financial, and other operational records; resolve disputes; and ...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“Webflow will retain Personal Information we process on your behalf for as long as necessary to provide the Platform to you, subject to our compliance with this Policy, or as required or permitted under applicable law. We may further retain and processPersonal Information as necessary to comply with our legal obligations; maintain accurate accounting, financial, and other operational records; resolve disputes; and ...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | worsens | HIGH | 3 |
| All applicable tiers | data retention | conditional | MEDIUM | 5 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 35 |
| Free | commercial use | conditional | MEDIUM | 2 |
| Free | output ownership | worsens | HIGH | 1 |
| Free | subprocessors data sharing | worsens | HIGH | 4 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“In this Policy, “Personal Information” means any information relating to an identifiable natural person. Except as described in this Policy, Webflow will not give, sell, rent, or loan any Personal Information to any third party.”Before citation
“- **Notice.** You agree to provide and adhere to a privacy policy for your use of the Platform that: (i) complies with all applicable laws, rules, and regulations, (ii) is conspicuously displayed to all End Users, and (iii) clearly and accurately describes to End Users what information you collect (such as login information, contact form data, cookies, etc.) and how you use and share such information (including for marketing and advertising) with Webflow and other third parties.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“- **Notice.** You agree to provide and adhere to a privacy policy for your use of the Platform that: (i) complies with all applicable laws, rules, and regulations, (ii) is conspicuously displayed to all End Users, and (iii) clearly and accurately describes to End Users what information you collect (such as login information, contact form data, cookies, etc.) and how you use and share such information (including for marketing and advertising) with Webflow and other third parties.”Before citation
“In this Policy, “Personal Information” means any information relating to an identifiable natural person. Except as described in this Policy, Webflow will not give, sell, rent, or loan any Personal Information to any third party.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“In this Policy, “Personal Information” means any information relating to an identifiable natural person. Except as described in this Policy, Webflow will not give, sell, rent, or loan any Personal Information to any third party.”Before citation
“- **Notice.** You agree to provide and adhere to a privacy policy for your use of the Platform that: (i) complies with all applicable laws, rules, and regulations, (ii) is conspicuously displayed to all End Users, and (iii) clearly and accurately describes to End Users what information you collect (such as login information, contact form data, cookies, etc.) and how you use and share such information (including for marketing and advertising) with Webflow and other third parties.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“- **Notice.** You agree to provide and adhere to a privacy policy for your use of the Platform that: (i) complies with all applicable laws, rules, and regulations, (ii) is conspicuously displayed to all End Users, and (iii) clearly and accurately describes to End Users what information you collect (such as login information, contact form data, cookies, etc.) and how you use and share such information (including for marketing and advertising) with Webflow and other third parties.”Before citation
“> **BASICALLY...** > > We ask for certain information, like your name, email address, and account credentials, to use Webflow. We use this information to run Webflow and other things mentioned in this policy (like logging and analytics). We also continuously save your work to keep it safe. > > > > Webflow won't sell or rent your personal information to a third party. > > > > Sometimes we aggregate user data anonymously to understand our customer base better. > > > > We may connect with third-party services to improve your experience. These features are governed by the respective company's privacy policy, so review your privacy settings there. > > > > We collect some information from you automatically using cookies so we know when things go wrong, or to help us understand what parts of Webflow need some improvement. > > > > Sometimes the law or subpoenas require us to share information. We may also sometimes need to use information to investigate and prevent wrongful actions.”After citation
content ownership improved from high/platform claims or reserves rights to low/user retains rights.
“Sometimes ownership of an Account, workspace, Website Content, or website is disputed between parties, such as a business and its employees, or a web designer and a client. We try not to get involved in these disputes. However, we reserve the right, at any time and in our sole discretion, and without notice to you, to determine the rightful owner and to transfer the relevant account, workspace, website Content, or website to the party we determine to be the rightful owner. Our decision in that respect is final. If we feel that we cannot reasonably determine the rightful owner, we reserve the right to suspend or disable an Account and its related Website Content until the disputing parties reach a resolution. We also may request documentation to help determine the rightful owner, including but not limited to a government-issued photo ID, credit card invoice, or business license.”Before citation
“You represent and warrant that you own or otherwise have obtained and shall maintain all necessary licenses, authorizations, rights, approvals, and permissions necessary to enter into and perform your obligations or exercise your rights hereunder, including without limitation the rights to display your Website Content in the manner set forth in this Agreement. You represent and warrant that your Website Content, and any use of your Website Content by Webflow as authorized under this Agreement, will not infringe, misappropriate, or otherwise violate the Intellectual Property Rights or other rights of any third party.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“We ask for certain information, like your name, email address, and account credentials, to use Webflow. We use this information to run Webflow and other things mentioned in this policy (like logging and analytics). We also continuously save your work to keep it safe. Webflow won't sell or rent your personal information to a third party. Sometimes we aggregate user data anonymously to understand our customer base better. We may connect with third-party services to improve your experience. These features are governed by the respective company's privacy policy, so review your privacy settings there. We collect some information from you automatically using cookies so we know when things go wrong, or to help us understand what parts of Webflow need some improvement. Sometimes the law or subpoenas require us to share information. We may also sometimes need to use information to investigate and prevent wrongful actions.”Before citation
“For example, if End Users located in certain jurisdictions exercise their “right to be forgotten” (or “erasure”) of their Personal Information that you have collected via the Platform, you shall comply with their request as required by applicable law. For clarity, you (the “data controller”) are directly responsible for the End User Personal Information you collect. By using the Platform, you are instructing Webflow (the “processor”) to process your End Users’ Personal Information. Webflow, as the “processor,” is not responsible for responding to End Users on your behalf. To the extent Webflow receives a request from an End User, regulator, or authority about your use of the Platform, Webflow will notify you in compliance with or as permitted by law. If applicable, Webflow shall process your End Users’ Personal Information in accordance with our Data Processing Addendum , which is hereby incorporated by reference. Notice. You agree to provide and adhere to a privacy policy for your use of the Platform that: (i) complies with all applicable laws, rules, and regulations, (ii) is conspicuously displayed to all End Users, and (iii) clearly and accurately describes to End Users what information you collect (such as login information, contact form data, cookies, etc.) and how you use and share such information (including for marketing and advertising) with Webflow and other third parties. ”After citation
Latest stance: user retains rights on output ownership
“You represent and warrant that you own or otherwise have obtained and shall maintain all necessary licenses, authorizations, rights, approvals, and permissions necessary to enter into and perform your obligations or exercise your rights hereunder, including without limitation the rights to display your Website Content in the manner set forth in this Agreement. You represent and warrant that your Website Content, and any use of your Website Content by Webflow as authorized under this Agreement, will not infringe, misappropriate, or otherwise violate the Intellectual Property Rights or other rights of any third party.”Open timeline citation
Latest stance: platform claims or reserves rights on indemnity liability
“If there is a dispute about Account or Website Content ownership, we reserve the right to determine ownership based on our reasonable judgment in our sole discretion. However, if we cannot make such a determination, we reserve the right to not intervene in the dispute, suspend any Account(s) involved in the dispute, and/or take down Website Content until the parties disputing ownership reach a resolution, without liability to you or to any other party. We may request documentation (e.g. government-issued ID, trademark certification) that may assist us in determining ownership. Below is a non-exhaustive set of factors we will consider when determining proper ownership:”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“You and Webflow agree that any arbitration will be limited to the Dispute between Webflow and you individually. YOU ACKNOWLEDGE AND AGREE THAT YOU AND WEBFLOW ARE EACH WAIVING THE RIGHT TO PARTICIPATE AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS ACTION OR REPRESENTATIVE PROCEEDING. Further, unless both you and Webflow otherwise agree, the arbitrator may not consolidate more than one person’s claims, and may not otherwise preside over any form of any class or representative proceeding. If this specific paragraph is held unenforceable, then the entirety of this “Dispute Resolution” Section will be deemed null and void.”Open timeline citation
Latest stance: platform claims or reserves rights on indemnity liability
“We reserve these rights, which we may exercise at any time and in our sole discretion, and without liability or notice to you (except where prohibited by applicable law): (a) we may change parts or all of the Platform and its functionality; (b) we may suspend or discontinue parts or all of the Platform; (c) we may terminate, suspend, restrict or disable your access to or use of parts or all of the Platform; (d) we may terminate, suspend, restrict or disable access to your Account or parts, some of, or all of your Website Content; (e) we may change our eligibility criteria to use the Platform (and if such eligibility criteria changes are prohibited by law where you live, we may revoke your right to use the Platform in that jurisdiction); and (f) we may monitor or scan your Website Content and/or Account for abusive, spammy, or similar malicious behavior and take appropriate actions including but not limited to removal of Website Content and suspension or termination of your Account.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-31· verified 2026-08-31
- Terms of Service:Last captured 2026-08-31· verified 2026-08-31
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 200 more findings this quarter vs last (417 vs 217). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Webflow AI's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Webflow AI's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.