Common Room
Common Room is an AI-native go-to-market platform that unifies buyer signals from across the web—product usage, website visits, job changes, and community engagement—to help B2B sales and marketing teams identify, prioritize, and act on the right buyers with precision. Its AI agent suite, RoomieAI™, automatically hunts buying signals and personalizes outbound messages, while Person360™ provides industry-leading enrichment and identity resolution. The platform integrates with 50+ native tools and includes an MCP Server to bring buyer intelligence directly into existing AI workflows.
Common Room is an AI-native go-to-market platform designed for B2B sales and marketing teams seeking to generate pipeline with precision rather than guesswork. It unifies buyer signals from across the web—including product usage, website visits, job changes, dark funnel activity, community engagement, and 50+ native business integrations—into a single, actionable intelligence layer. The platform's core AI agent suite, RoomieAI™, includes Capture (which hunts buying signals across integrations) and Activate (which personalizes outbound messages using signal context), while Person360™ delivers industry-leading waterfall enrichment and identity resolution to maximize match rates. Common Room also ships an MCP Server, allowing teams to bring buyer intelligence directly into existing AI workflows, and features a Chrome extension for browser-based signal access. The platform serves RevOps, SDRs, Account Executives, and demand generation teams with workflow automation, AI-powered lead scoring, custom reporting, and enterprise-grade security including SOC 2 compliance, SSO, and SAML/SCIM. Pricing ranges from $1,700/month for starter plans (up to 35k contacts) to custom enterprise tiers with dedicated support and up to 200k contacts.
Privacy policy states personal information may be used to create de-identified and aggregated information for 'research,
No training opt-out mechanism was identified in the legal documents.
High risk across multiple dimensions. Only use with public, non-sensitive data.
Privacy policy states personal information may be used to create de-identified and aggregated information for 'research, internal analysis, analytics, and any other legally permissible purposes.' This suggests potential use of data for model training, but de-identification language provides some protection. However, the broad language around 'any other legally permissible purposes' creates moderate risk.
“De-identified and/or aggregated information is not personal information, and we may use and disclose such information in a number of ways, including research, internal analysis, analytics, and any other legally permissible purposes.”
Terms of Use grant Common Room broad rights to user content. Users grant permission for Common Room to 'display, copy, distribute and download' content, and the company 'retains all rights to all such content.' The license is non-exclusive and perpetual, creating significant risk for enterprise users.
“We retain all rights to all such content. We grant you permission to display, copy, distribute and download the content on this Site for personal, noncommercial use only.”
Privacy policy explicitly permits sharing with multiple categories of third parties including service providers, business partners, affiliates, and advertising partners. Data may be shared for 'business purposes' broadly defined. Additionally, data may be transferred in merger/acquisition scenarios with minimal restrictions.
“We may share your personal information with the following categories of third parties: Service Providers...Business Partners...Affiliates...Advertising Partners...Disclosure in the Event of Merger, Sale, or Other Asset Transfer.”
Privacy policy states data is retained 'for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected' and mentions right to request erasure. However, the policy also reserves 'the right to delete inactive instances' unilaterally, and retention periods are vague regarding specific data types.
“We store the personal information we receive as described in this Privacy Notice for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected.”
Terms of Use state 'We retain all rights to all such content' regarding materials on the site. For user-generated content through interactive features, the policy states such content is 'public' and 'not subject to the privacy protections referenced herein.' This creates significant IP ownership risk for enterprise users.
“We retain all rights to all such content...Any content you provide on the public sections of these features will be considered 'public' and is not subject to the privacy protections referenced herein.”
Privacy policy mentions CCPA compliance and references GDPR rights (European Economic Area supervisory authority complaints), but does not explicitly state SOC2, HIPAA, or ISO certifications. The policy acknowledges data protection obligations but lacks specific compliance certifications that would reduce enterprise risk.
“We endeavor to safeguard your information consistent with the requirements of applicable laws...If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with a supervisory authority.”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai