Kapiche

Privacy policy does not explicitly address whether user data is used to train AI models. The policy mentions use for 'analytics, market research and business development, including to operate and improve our Site' which is vague language that could encompass AI training. No explicit opt-out or prohibition on AI training is stated.

“[Privacy] 'for analytics, market research and business development, including to operate and improve our Site and any associated applications'”

The privacy policy does not explicitly address content licensing or intellectual property rights over user-generated content or outputs. The absence of clear language about licensing scope creates ambiguity about what rights Kapiche may claim over content users create or input into the platform.

“Not found in documents”

The policy permits broad sharing with 'third party service providers,' 'agents or sub-contractors,' 'marketing or advertising providers,' and notably states 'third parties to collect and process data. This may include parties that store data outside of Australia.' The policy explicitly acknowledges that some third parties may not be regulated by privacy laws and users cannot seek redress under the Privacy Act.

“[Privacy] 'third parties, including agents or sub-contractors, who assist us in providing information, products, services or direct marketing to you. This may include parties located, or that store data, outside of Australia' and 'third parties to collect and process data'”

The policy states data will be retained 'for as long as necessary to fulfil the purposes we collected it for' but does not specify concrete retention periods. Critically, the policy states 'we may anonymise your personal information...in which case we may use this anonymised information indefinitely without further notice to you,' creating indefinite retention of anonymized data.

“[Privacy] 'We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for' and 'we may use this anonymised information indefinitely without further notice to you'”

The privacy policy does not address IP ownership of outputs or content created using the platform. The absence of explicit language about who owns generated content or whether Kapiche claims rights to outputs creates moderate ambiguity about IP ownership.

“Not found in documents”

The policy references compliance with Australian Privacy Act and GDPR, and mentions 'suitable physical, electronic and managerial procedures such as the pseudonymisation and encryption' but does not cite specific compliance certifications such as SOC 2 Type II, ISO 27001, or HIPAA. No security trust page or formal DPA is referenced in the provided document.

“[Privacy] 'This Privacy Policy takes into account the requirements of the Privacy Act 1988 (Cth) (as amended)...and the General Data Protection Regulation 2016/679 (GDPR)' and 'we have put in place suitable physical, electronic and managerial procedures'”