Recraft AI

Recraft uses user inputs and assets to train AI models by default, but provides an opt-out mechanism. The opt-out is not the default position, and free tier users may have different protections than paid users. Training use is enabled by default with opt-out available.

“[ToS] 'You acknowledge and agree that Recraft may use your Inputs you provide and the Assets produced by the Services to train, fine-tune, and otherwise improve Recraft's artificial intelligence models and systems. This training use is enabled by default, but you may opt out at any time by adjusting your preferences in your account profile settings.'”

Recraft claims a perpetual, irrevocable, worldwide, sublicensable license to user inputs and assets for multiple purposes including training and improvement. The license survives termination and grants broad rights beyond service delivery.

“[ToS] 'By using the Services, you grant to Recraft and its successors and assigns a perpetual, worldwide, non-exclusive, sublicensable, fully paid, royalty-free, irrevocable license to use, copy, reproduce, process, adapt, modify, publish, transmit, prepare derivative works of, publicly display, publicly perform, sublicense, or distribute...for Recraft (i) to provide, maintain, promote, and improve the Services...The licenses to Recraft and other users of the Services will survive termination or expiration of these Terms.'”

Recraft shares data with third-party service providers under privacy protection agreements and with affiliates/partners for service delivery. However, the policy lacks detailed sub-processor lists and specific restrictions on data use beyond service provision.

“[Privacy] 'As needed, including to third-party service providers, to process or provide Services or products for or to you, but only if those entities agree to provide at least the same level of privacy protection as this Policy.' [ToS] 'We process and store information in the United States and other countries. By using our Services you authorize Recraft to transfer your personal information across national borders and to other countries where Recraft and its partners operate.'”

Retention periods are vague ('as long as necessary' for various purposes). Deletion on request is mentioned but without specific timelines. Account termination may result in asset deletion, but backup and operational data retention is unclear.

“[Privacy] 'We only keep your personal information for as long as is needed to do what we collected it for. After that, we destroy it unless required by law to maintain it.' [ToS] 'You understand that any termination may involve deletion of your Assets from our databases. Recraft will not have any liability whatsoever to you for any termination of your rights under these Terms, including for deletion of your Assets.'”

Paid subscription users own generated assets, but Recraft retains a broad license to use inputs and assets for training and service improvement. Free tier users do not own assets—Recraft owns them. Ownership is ambiguous and conditional.

“[ToS] Paid: 'You own all Assets you create with the Services and Recraft hereby assigns to you all copyright rights it may have in the Assets subject to the following restriction: Assets may not be used to train artificial intelligence models...' Free Tier: 'Free Tier Assets are owned by Recraft and may not be sold, licensed or transferred...you hereby irrevocably transfer and assign to Recraft all worldwide right, title and interest in and to the Free Tier Assets.'”

Recraft mentions GDPR and CCPA compliance and states commitment to privacy, but no SOC 2, ISO 27001, HIPAA, or other formal security certifications are documented. No published security audit or trust page is referenced.

“[Privacy] 'The following rights are granted under the European General Data Protection Regulation ("GDPR") and California Consumer Privacy Act ("CCPA"), and Recraft applies these rights to all users of our products, regardless of location...' [Privacy] 'We implement physical, business, and technical security measures to safeguard your personal information.' No formal certifications mentioned.”