PrometAI

[ToS] states user data will be used for 'improving our services' in de-identified and aggregated form, but language is vague about whether raw content trains the AI model. [Privacy] does not explicitly address AI model training. The commitment to de-identification is present but the scope of 'service improvement' is ambiguous and could include model training.

“[ToS] 'We may use the information and data you provide in a de-identified and aggregated form for the purpose of improving our services, developing new features, and ensuring the best possible user experience.'”

[ToS] grants PrometAI 'a limited, non-exclusive, royalty-free license to access, use, reproduce, modify, and display your content solely for the purposes of providing and improving our services.' The license is limited in scope but 'modify' and 'improving services' language creates ambiguity about derivative works and potential sublicensing. No explicit termination clause for the license upon account deletion.

“[ToS] 'you grant us a limited, non-exclusive, royalty-free license to access, use, reproduce, modify, and display your content solely for the purposes of providing and improving our services to you.'”

[Privacy] states information is shared with 'service providers' under confidential terms and mentions 'business partners' for aggregated data, but does not provide a published sub-processor list. [Privacy] explicitly states 'We do not sell, rent, or trade your personal identification information to third parties,' which is positive, but the definition of 'service providers' and 'partners' is vague. No DPA provided to assess third-party controls.

“[Privacy] 'We may share your information with third-party service providers who perform services on our behalf, such as web hosting, data analysis, payment processing... These service providers are given access to your information only as is reasonably necessary to provide the services under confidential terms.'”

[ToS] states upon account termination 'your account and its associated data, including User-Generated Content, may be deleted, subject to any legal requirements for the retention of such information.' The word 'may' and 'subject to legal requirements' creates ambiguity about actual deletion timelines and whether data is truly purged. No specific retention period is stated for active accounts.

“[ToS] 'Your account and its associated data, including User-Generated Content, may be deleted, subject to any legal requirements for the retention of such information.'”

[ToS] explicitly states 'You, as a user of PrometAI, retain all rights to the User-Generated Content you create on our platform. This includes any business plans, texts, images, and other materials you produce. PrometAI does not claim ownership of your content.' This is a clear, unambiguous statement that the user/company retains full IP ownership of outputs.

“[ToS] 'You, as a user of PrometAI, retain all rights to the User-Generated Content you create on our platform... PrometAI does not claim ownership of your content.'”

Neither [ToS] nor [Privacy] mentions SOC 2, ISO 27001, HIPAA, GDPR compliance certifications, or a published security/trust page. [Privacy] mentions 'standard contractual clauses' for international transfers and 'Privacy Shield certification' for service providers, but PrometAI itself provides no compliance certifications. No DPA is provided. This is a significant gap for enterprise use.

“Not found in documents — scored conservatively. [Privacy] mentions 'standard contractual clauses' and 'Privacy Shield certification' for service providers but provides no PrometAI-specific compliance certifications.”