Trickle

Terms state data is used to 'improve the Service' and Privacy Policy mentions using data for service improvement, but no explicit statement about training AI models on user content. The broad language about 'improving' services creates moderate ambiguity about potential AI training uses.

“you hereby grant us a non-exclusive, worldwide, transferrable, royalty-free, sublicenseable license to store, use, distribute, reproduce, publicly display, publicly perform, export, and process the Content, solely for the purpose of operating and improving the Services”

The license granted is extremely broad - non-exclusive, worldwide, transferrable, royalty-free, and sublicenseable. It covers storing, using, distributing, reproducing, publicly displaying, performing, exporting, and processing content. This is a highly permissive license that extends far beyond basic service operation.

“you hereby grant us a non-exclusive, worldwide, transferrable, royalty-free, sublicenseable license to store, use, distribute, reproduce, publicly display, publicly perform, export, and process the Content”

Data is shared with multiple third parties including AWS, Slack, and payment processors. The terms explicitly state permissions extend to service providers 'to the extent necessary' but this is broadly defined. Third-party social networks can receive content when users share via integrations.

“In our provision of the Services, we use third-party service providers, such as Amazon Web Services, Slack, and others, in the storage and processing of your Content. The permissions in Section 7(c) extend to such service providers”

Upon account cancellation, files are marked for deletion after 60 days but deletion is not guaranteed ('may be deleted'). No explicit data retention period during active use is specified. Users can request export but it's not guaranteed to be available.

“Upon canceling your account, your files will be marked for deletion in sixty days, and may be deleted upon expiration of that sixty-day period”

User retains full ownership of their content. The company explicitly states 'you retain full ownership of all of your Content. Trickle does not claim ownership of your Content.' This is clearly favorable to users.

“Except as provided in Section 11 below with regard to Shared Creations, you retain full ownership of all of your Content. Trickle does not claim ownership of your Content”

No mention of SOC2, GDPR, HIPAA, or ISO certifications in either the Terms of Service or Privacy Policy. The company only mentions using 'industry standard security measures' without specifying any formal compliance certifications.

“We use industry standard security measures in the storage, transfer, and processing of your Content. These measures are designed to protect the integrity of your Content and guard against the unauthorized or unlawful access to or use of your Content”