Paxton AI

Privacy Policy states data is processed to 'evaluate and improve our Services' but does not explicitly state whether user content trains AI models. Language is vague on model training specifically; no clear opt-out mechanism for training is mentioned, though data processing purposes are listed.

“[Privacy] 'To evaluate and improve our Services, products, marketing, and your experience. We may process your information when we believe it is necessary to identify usage trends, determine the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience.'”

ToS grants Paxton broad, perpetual license over user submissions. Section 10 states 'we may access, store, process, and use any information and personal data that you provide' and Section 9 explicitly assigns all IP rights in 'Submissions' to Paxton for 'unrestricted use and dissemination for any lawful purpose, commercial or otherwise.'

“[ToS] 'By directly sending us any question, comment, suggestion, idea, feedback, or other information about the Services ("Submissions"), you agree to assign to us all intellectual property rights in such Submission. You agree that we shall own this Submission and be entitled to its unrestricted use and dissemination for any lawful purpose, commercial or otherwise.'”

Privacy Policy mentions sharing only in 'Business Transfers' context and states payment data is stored by Stripe. However, no comprehensive list of sub-processors is published, and sharing with 'affiliates' or 'partners' is not explicitly addressed. Social login data handling is described but third-party analytics sharing is unclear.

“[Privacy] 'We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.' [Privacy] 'All payment data is stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/privacy.'”

Privacy Policy states data is kept 'as long as necessary' and 'for as long as it is necessary for the purposes set out in this privacy notice' but provides no specific retention periods. ToS Section 22 disclaims liability for data loss. Account termination may result in some data retention 'to prevent fraud, troubleshoot problems, assist with any investigations.'

“[Privacy] 'We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law.' [ToS] 'Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations.'”

ToS Section 10 explicitly states Paxton claims ownership of user submissions and feedback: 'we may access, store, process, and use any information and personal data that you provide' and 'we shall own this Submission and be entitled to its unrestricted use and dissemination for any lawful purpose.' This is a broad, perpetual claim over user-generated content.

“[ToS] 'By submitting suggestions or other feedback regarding the Services, you agree that we can use and share such feedback for any purpose without compensation to you.' [ToS] 'By directly sending us any question, comment, suggestion, idea, feedback, or other information about the Services ("Submissions"), you agree to assign to us all intellectual property rights in such Submission.'”

No SOC 2, ISO 27001, HIPAA, or GDPR compliance certifications are mentioned in either document. ToS explicitly states 'The Services are not tailored to comply with industry-specific regulations (Health Insurance Portability and Accountability Act (HIPAA), Federal Information Security Management Act (FISMA), etc.).' No security trust page or DPA is referenced.

“[ToS] 'The Services are not tailored to comply with industry-specific regulations (Health Insurance Portability and Accountability Act (HIPAA), Federal Information Security Management Act (FISMA), etc.), so if your interactions would be subjected to such laws, you may not use the Services.' [Privacy] 'However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.'”