Apify

The ToS explicitly states that AI Services inputs and outputs are NOT used to train foundation models. Section 5.10 clearly protects user data from being used for AI model training, with the statement 'Your inputs and the resulting outputs are not used to train any foundation model.'

“[ToS] 'Your inputs and the resulting outputs are not used to train any foundation model.' (Section 5.10)”

The ToS grants Apify only a limited, non-exclusive, revocable license to Customer Data solely for providing and improving Services during the Agreement term. Section 5.8 explicitly states 'Apify acquires no right, title, or interest in or to Customer Data' and the license terminates with the Agreement.

“[ToS] 'You grant us a limited, non-exclusive, revocable, worldwide, royalty-free right to transmit, display, reproduce, or copy Customer Data to enable us to provide and improve Services during the Agreement term... Apify acquires no right, title, or interest in or to Customer Data.' (Section 5.8)”

The ToS authorizes Apify to transmit Customer Data to Third-Party Services and Actors based on customer configuration (Section 5.8), but does not explicitly detail sub-processor agreements, DPA requirements, or restrictions on sharing with advertising/analytics partners. The Privacy Policy link was not accessible, preventing full assessment of third-party sharing practices.

“[ToS] 'You authorize Apify, acting on your behalf, and based on your configuration of the Platform, to access and transmit Customer Data between the Platform and Third Party Services or Actors.' (Section 5.8)”

The ToS states Apify 'may, thereafter, unless legally prohibited, delete any Customer Data in accordance with our data retention policies' (Section 15.6) but does not specify explicit retention periods, deletion timelines, or backup retention practices. The Privacy Policy was not accessible to provide additional clarity on data retention specifics.

“[ToS] 'We may, thereafter, unless legally prohibited, delete any Customer Data in accordance with our data retention policies' (Section 15.6)”

The ToS explicitly states that customers retain all right, title, and interest in Customer Data (Section 5.8). For AI-generated outputs, they are classified as Customer Data, meaning the user retains ownership. Apify acquires no rights to outputs.

“[ToS] 'To the extent permitted under applicable laws, you retain all right, title, and interest in and to your Customer Data... Apify acquires no right, title, or interest in or to Customer Data.' (Section 5.8)”

The ToS references a Data Processing Addendum and EU Data Act Addendum (Sections 9.1 and 16.13), indicating GDPR compliance framework exists. The footer of the Privacy Policy page shows SOC 2 and GDPR badges linking to trust.apify.com and GDPR documentation, but the actual Privacy Policy content was not accessible to verify specific certifications and compliance details.

“[ToS] 'If we process any Personal Data contained in the Customer Data in the course of providing the Services, the Data Processing Addendum shall apply to such processing and is hereby incorporated by reference into this Agreement.' (Section 9.1); Footer shows SOC 2 and GDPR compliance badges”