Me.bot

Privacy Policy does not explicitly state whether user data is used to train AI models. Language focuses on service delivery and improvement but lacks clarity on whether training data includes user content or conversations. No explicit opt-out mechanism mentioned for AI training specifically.

“[Privacy] We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.”

ToS grants vendor an extremely broad, perpetual, irrevocable, worldwide, sublicensable license to all user contributions for any purpose including commercial use, derivative works, and advertising. License survives account termination and includes waiver of moral rights.

“[ToS] By posting any Contributions, you grant us an unrestricted, unlimited, irrevocable, perpetual, non-exclusive, transferable, royalty-free, fully-paid, worldwide right, and license to use, copy, reproduce, distribute, sell, resell, publish, broadcast, retitle, store, publicly perform, publicly display, reformat, translate, excerpt (in whole or in part), and exploit your Contributions for any purpose, commercial, advertising, or otherwise.”

Privacy Policy states data shared with third-party service providers under contracts with safeguards, but lists broad categories (Cloud Computing, Payment Processors, Sales & Marketing Tools, Data Analytics Services) without published sub-processor list. Some sharing with Data Analytics Services and User Account Registration services mentioned but not fully detailed.

“[Privacy] We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf. The categories of third parties we may share personal information with are as follows: Cloud Computing Services, Payment Processors, Sales & Marketing Tools, Social Networks, Data Analytics Services, Communication & Collaboration Tools, Data Storage Service Providers, User Account Registration & Authentication Services.”

Privacy Policy states data retained for 3 months after account termination for most categories, but language is somewhat vague on backup retention and exceptions. Google Calendar/Contacts/Gmail data stated as runtime-only and not stored, but general retention policy lacks granular detail on all data types.

“[Privacy] No purpose in this notice will require us keeping your personal information for longer than three (3) months past the termination of the user's account. Your calendar data is only used during the chat runtime and is never stored statically on any disk.”

ToS explicitly states vendor retains no ownership over user contributions but grants itself an unrestricted license to use, reproduce, distribute, and create derivative works. While user retains ownership, the broad license effectively allows vendor to exploit outputs commercially without restriction.

“[ToS] We do not assert any ownership over your Contributions. You retain full ownership of all of your Contributions and any intellectual property rights or other proprietary rights associated with your Contributions. [But also:] you grant us an unrestricted, unlimited, irrevocable, perpetual, non-exclusive, transferable, royalty-free, fully-paid, worldwide right, and license to use, copy, reproduce, distribute, sell, resell, publish, broadcast, retitle, store, publicly perform, publicly display, reformat, translate, excerpt (in whole or in part), and exploit your Contributions for any purpose, commercial, advertising, or otherwise.”

No SOC 2, ISO 27001, HIPAA, or formal GDPR compliance certifications mentioned. Privacy Policy references Standard Contractual Clauses for EEA transfers but provides no published security documentation, trust page, or third-party audit certifications. Security statement is generic and non-committal.

“[Privacy] We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.”