Beautiful.ai

The ToS permits Beautiful.ai to use Customer Data and Customer Content with a broad license 'reasonably necessary' to provide services, but does not explicitly state whether this includes AI model training. The Privacy Policy states Usage Data is used to 'improve' services but is vague on training specifics. No explicit opt-out mechanism for training is documented.

“[ToS] 'Customer grants to Beautiful.ai a non-exclusive, royalty-free, fully-paid, worldwide license, under all of Customer's intellectual property and proprietary rights, to any and all Customer Data reasonably necessary for Beautiful.ai to provide Customer the Beautiful.ai Services'”

The license granted to Beautiful.ai is broad but limited to service delivery. However, the ToS permits sublicensing 'through the use of subcontractors' and the license survives in certain forms (e.g., feedback is perpetual and irrevocable). The scope is somewhat ambiguous regarding post-termination use.

“[ToS] 'Customer hereby grants to Beautiful.ai a non-exclusive, royalty-free, worldwide license to use (including through the use of subcontractors) the Customer Content solely to the extent reasonably necessary for Beautiful.ai to provide Customer the Beautiful.ai Services'”

Beautiful.ai shares data with vendors/service providers (e.g., Google Cloud Hosting) and third-party AI providers, but the Privacy Policy states these entities are 'obligated to use your personal data solely to provide the services.' However, the list of third-party AI providers and their terms are referenced but not fully detailed in the provided documents.

“[Privacy] 'We provide your data to the vendors and service agencies that we may engage to assist us in providing our services to you. Such third party entities are obligated to use your personal data solely to provide the services to us.'”

The Privacy Policy states data is retained 'as long as necessary' and mentions a 7-year retention for tax purposes, but lacks specific timelines for deletion of presentation data or Customer Content. The ToS provides only 14 days for retrieval after termination before deletion, which is a short window.

“[Privacy] 'We will only keep your personal data for as long as necessary to fulfill the purposes we collected it for... By law we have to keep basic information about our customers, such as payment data, generally for seven years after they stop being customers for tax purposes.'”

The ToS explicitly states that Customer retains all right, title, and interest in Customer Content and Customer Data. Beautiful.ai claims no ownership of outputs generated from Customer Content, only a license to use them for service delivery.

“[ToS] 'As between the parties, Customer shall retain all right, title and interest in and to the Customer Data and, subject to Beautiful.ai's rights in and to the Beautiful.ai Materials, the Customer Content (including, the presentations created by Customer via the Service and Output based specifically on Customer Content)'”

The Privacy Policy mentions GDPR compliance and offers a Data Processing Addendum (DPA) upon request, but no SOC 2, ISO 27001, or HIPAA certifications are explicitly mentioned. The ToS references 'industry-standard technical and organizational security measures' but provides no formal certification documentation.

“[Privacy] 'If you would like to request a data processing agreement from us, please contact us at privacy@beautiful.ai.' [ToS] 'Beautiful.ai shall implement and maintain appropriate industry-standard technical and organizational security measures reasonably designed to prevent unauthorized access to and disclosure of unencrypted Customer Data.'”