Venngage

The ToS does not explicitly state whether user data or designs are used to train AI models. Section 5.1 grants Venngage a license to 'access, collect, store and use the User Content and User Designs solely to provide the Services' but does not clarify if this includes AI training. The absence of explicit protection against AI training on user data, combined with vague 'service improvement' language, warrants a moderate concern score.

“[ToS Section 5.1] 'User grants to Venngage a royalty-free, fully paid-up, worldwide license to access, collect, store and use the User Content and User Designs solely to provide the Services to User.'”

The ToS grants Venngage a broad license to user content in Section 5.1 ('access, collect, store and use') but limits it 'solely to provide the Services.' However, the scope of 'providing the Services' is not tightly defined, and the license does not explicitly terminate upon account deletion. Section 8.2 states users reserve rights to their content, but the license granted to Venngage is not clearly time-limited or restricted to essential service delivery only.

“[ToS Section 5.1] 'User grants to Venngage a royalty-free, fully paid-up, worldwide license to access, collect, store and use the User Content and User Designs solely to provide the Services to User.'”

The ToS does not explicitly address third-party sharing of user content or designs. Section 11.2 mentions disclosure to 'personnel, affiliates or contractors having a need to know' but provides no detail on sub-processors, data brokers, or advertising partners. The Privacy Policy URL is referenced but returned a 404 error, preventing full assessment. This absence of clarity on third-party sharing warrants a moderate concern score.

“[ToS Section 11.2] 'Recipient shall not disclose such Confidential & Proprietary Information of the Discloser to any person or entity, except to its own personnel, affiliates or contractors having a "need to know"'”

Section 14 states that upon termination, 'Venngage will delete all data, files, or other information that is stored in your account,' but provides no specific timeline (e.g., immediate, 30 days, 90 days). Section 11.2 allows Venngage to 'retain a copy of such Confidential & Proprietary Information for the sole purpose of and to the extent necessary for it to comply with applicable and legal, regulatory, and/or reasonable internal back-up or archival policies' — an indefinite retention exception. No clear retention periods are stated for active accounts, and backup retention is vague.

“[ToS Section 14] 'Upon termination, Venngage will delete all data, files, or other information that is stored in your account' and [ToS Section 11.2] 'Venngage may retain a copy of such Confidential & Proprietary Information for the sole purpose of and to the extent necessary for it to comply with applicable and legal, regulatory, and/or reasonable internal back-up or archival policies'”

Section 8.1 explicitly states 'Venngage does not claim ownership over User Designs that the User creates.' Section 8.2 further confirms 'User expressly reserves all rights in any content, information, data and files that User (or the Users) loads, transmits to or enters into the Service.' Section 5 grants users a 'non-exclusive, non-transferrable, royalty-free, fully paid-up worldwide license to use, reproduce and distribute all designs and visual representations of User Content generated by the Services.' This clearly protects user IP ownership.

“[ToS Section 8.1] 'Venngage does not claim ownership over User Designs that the User creates. Instead User grants Venngage a royalty-free, fully paid-up, worldwide license to use the User Designs on the terms set out in Section 5.'”

The ToS does not mention SOC 2, ISO 27001, HIPAA, or other compliance certifications. Section 6.1 references a Privacy Policy but the Privacy Policy URL returned a 404 error, preventing verification of any compliance claims. The ToS references 'commercially reasonable efforts' for security but provides no formal compliance documentation or trust page details. This absence of explicit compliance certifications warrants a moderate concern score.

“Not found in documents — scored conservatively. Privacy Policy referenced but inaccessible (404 error).”