Drift is a conversational marketing platform that helps businesses engage with website visitors through chatbots and live chat, enhancing lead generation and customer interactions.
Drift, by Salesloft, is a conversational AI platform that transforms website visitors into qualified leads through real-time, personalized engagements via AI chat agents, live chat, and bionic chatbots, delivering superior buyer experiences and accelerating revenue growth.[1][2][3] Key features include multilingual conversational AI that handles open-text questions 24/7 with 40% more engagement than button-only chats, customizable playbooks for automated flows, intelligent lead routing to sales workflows, ROI reporting for optimizing strategies, and seamless integrations with Salesloft's revenue orchestration tools like deal management and forecasting.[1][3][4]
It targets go-to-market teams in B2B SaaS and enterprise sales, including marketing, sales, revenue operations, and customer success, ideal for lead generation, intent-based personalization, shortening sales cycles, and bridging marketing-sales gaps.[3][5][6] What sets Drift apart is its patented AI trained on over 100 million B2B conversations for contextual, brand-aligned responses with minimal upkeep, fast no-code onboarding in minutes, and proactive features like Drift Intel for formless lead enrichment and conversational landing pages that scale personalization effortlessly.[2][4]
Sources
The ToS does not explicitly prohibit AI training on user data, but also does not explicitly authorize it. Language about
The ToS does not explicitly prohibit AI training on user data, but also does not explicitly authorize it. Language about
Moderate risk. Suitable for internal data but avoid confidential information.
The ToS does not explicitly prohibit AI training on user data, but also does not explicitly authorize it. Language about 'aggregated form' data collection for service improvement is vague and does not clearly exclude training use. No opt-out mechanism is mentioned.
“[ToS] 'Drift may collect and use data regarding the use and performance of the Services in aggregated form, without use of any personal data, to analyze and improve the Services'”
The license granted is limited to providing the Services, but the scope is somewhat broad ('as necessary to provide the Services and as permitted by these Terms of Service'). The phrase 'as permitted by these Terms of Service' creates ambiguity about potential secondary uses. No explicit termination clause for the license is stated.
“[ToS] 'You grant permission to us to use the Customer Content as necessary to provide the Services and as permitted by these Terms of Service'”
The ToS mentions PCI-compliant third parties for payment processing and references service providers in the indemnification section, but does not provide a comprehensive list of sub-processors or detailed data sharing restrictions. Confidentiality obligations suggest some protection, but the scope of 'service providers' and 'affiliates' is not clearly defined.
“[ToS] 'You further authorize us to use a PCI-compliant third party to process payments, and consent to the disclosure of your payment information to such third party'”
The ToS does not specify clear data retention periods or automatic deletion timelines. While confidentiality obligations require return or destruction of information upon request, there is no stated default retention policy or automatic purge schedule upon account termination.
“[ToS] 'The Receiving Party shall, at the Disclosing Party's option, return or destroy all Confidential Information in Receiving Party's possession, and all copies thereof, at any time upon the Disclosing Party's request'”
The ToS explicitly states that the customer owns and retains all rights to Customer Content, and Drift claims no ownership rights. The license granted is limited to providing the Services, with no claim to derivative works or sublicensing of customer outputs.
“[ToS] 'You own and retain all the rights to your Customer Content and you are responsible for protecting those rights. These Terms of Service do not grant us any ownership rights to Customer Content'”
The ToS mentions compliance with applicable laws and references HIPAA and PCI standards in the definitions, but does not provide evidence of SOC 2, ISO 27001, or formal GDPR compliance certifications. No security documentation, trust page, or DPA is referenced in the provided ToS.
“[ToS] 'We will comply with all applicable laws in our provision of the Services and in our processing of Customer Content'”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai