Hume.ai

The ToS explicitly grants Hume a perpetual, irrevocable license to use user input 'for platform improvement and product development,' which directly enables AI training on user data. No opt-out mechanism is provided, and the license applies to all tiers without distinction.

“[ToS] 'Users grant Hume a perpetual, irrevocable, nonexclusive, royalty-free, worldwide, sublicensable license to use input for platform improvement and product development.'”

The ToS grants Hume a perpetual, irrevocable, worldwide, sublicensable license to user input that survives termination and extends beyond service delivery to 'platform improvement and product development.' This is an extremely broad license that permits Hume to use content for purposes beyond providing the service.

“[ToS] 'Users grant Hume a perpetual, irrevocable, nonexclusive, royalty-free, worldwide, sublicensable license to use input for platform improvement and product development.'”

The Privacy Policy discloses sharing with 'vendors and service providers' for hosting, cloud services, and analytics, but does not explicitly name sub-processors or publish a sub-processor list. Third-party advertising companies are mentioned as serving ads based on user behavior, but the scope of content sharing (vs. metadata sharing) is unclear.

“[Privacy] 'Information is disclosed to: Vendors and service providers (hosting, cloud services, IT support, email software, analytics)' and 'Third-party advertising companies serve ads based on user access and behavior across devices and websites.'”

The Privacy Policy states users can request deletion and that 'some information may be retained for recordkeeping or transaction completion,' but does not specify clear retention periods, automatic deletion timelines, or what happens to data upon account termination. The vague language 'reasonable period' is absent but the lack of explicit retention schedules creates moderate concern.

“[Privacy] 'Users can request to access, correct, update, suppress, restrict, or delete personal information... Some information may be retained for recordkeeping or transaction completion.'”

The ToS states 'Users retain rights to their input and output, except as specified in these terms,' but then immediately grants Hume a sublicensable license to input for product development. This creates ambiguity: while users nominally retain rights, Hume's broad sublicensable license undermines exclusive ownership claims over outputs derived from user input.

“[ToS] 'Users retain rights to their input and output, except as specified in these terms' but also 'Users grant Hume a perpetual, irrevocable, nonexclusive, royalty-free, worldwide, sublicensable license to use input for platform improvement and product development.'”

Neither the ToS nor Privacy Policy mentions SOC 2, ISO 27001, GDPR compliance, HIPAA compliance, or any security certifications. The Privacy Policy only states the company uses 'reasonable organizational, technical and administrative measures' without third-party validation or published security documentation.

“[Privacy] 'The company uses "reasonable organizational, technical and administrative measures" to protect personal information within the organization. However, no system is guaranteed 100% secure.'”