Behind the Privacy Promise: An In-Depth Look at AI Companies
Peeling back layers of privacy policies to reveal the truth—join the quest for transparency in AI.
AI WATCH
@BlockEmpower
6/26/202412 min read
This comprehensive article takes a deep dive into the data privacy practices of various AI companies, examining how they handle user data in accordance with their privacy policies. We meticulously review the exact language and stipulations set forth in their official documents, providing you with a detailed overview of their compliance—or lack thereof—with privacy standards. For a summarized view of which companies are respecting user privacy and which are not, please refer to our "Community AI Watch" page.
Despite our careful analysis, if you notice any discrepancies or have concerns about how we've interpreted the data, we encourage you to join the discussion. Tweet us at @BlockEmpower to spark a community dialogue. It’s important to remember that these are legal documents crafted by the companies themselves, offering limited wiggle room for interpretation.
Additionally, it's worth noting that the most promising legislation for data privacy in the US, the Vermont Data Privacy Act, which could have set a precedent for protecting user privacy, was unfortunately vetoed on June 13, 2024. This act would have been a landmark in safeguarding personal information, but its rejection means that many companies' claims of protecting data "as required by law" fall short, as there are currently no stringent federal privacy laws in effect. This loophole means that privacy protections are often more theoretical than practical. For those who believe that their country's laws provide better protection, we encourage you to explore some of our curated list articles that discuss the global state of privacy laws and the general reluctance of governments to impose strict regulations, as it often means relinquishing control over surveillance capabilities.
The National Law Review - Vermont Governor Vetoes Data Privacy Act
StateScoop - Vermont Gov. Phil Scott vetoes intensive data privacy bill, citing high ‘level of risk’
Tech Policy Press - Vermont Governor Vetoes Comprehensive Data Privacy Bill
The Register - America's best chance for nationwide privacy law could do more harm than good
White & Case LLP - US Data Privacy Guide
Explore more and join our efforts to demand better standards in AI and data privacy. Your voice is crucial in this ongoing battle for digital rights.
Chatbots
ChatGPT
Text in this table consists of direct extracts from the company's privacy policy.
"Be cautious: this company's policy allows for broad use and sale of your personal data, potentially exposing it to third parties for profit without explicit consent. It’s crucial to understand that your personal data may not only be used to enhance services but also could be monetized or utilized in ways that may not directly benefit you. Stay vigilant and exercise your rights to protect your privacy." - Community Insight
Claude-2
Text in this table consists of direct extracts from the company's privacy policy.
"Be wary: Anthropic's extensive data collection and sharing practices could extend beyond service enhancement to potentially monetize or expose your data to third parties without clear benefits to you. The policy's ambiguity in handling 'Inputs' and 'Outputs' and broad data sharing with corporate partners may compromise your personal privacy. It’s vital to stay informed and proactive in managing your data rights." - Community Insight
Copilot
Text in this table consists of direct extracts from the company's privacy policy.
"Exercise caution: Microsoft's policies outline extensive data collection and sharing practices that support their AI services and advertising objectives. Notably, personal data, including interactions and location, is actively utilized for personalized advertising and service enhancement. While users have some control over their data, the broad scope of data usage and sharing with third parties may raise concerns about privacy and data exploitation. Be proactive in managing your privacy settings and remain aware of how your data is used. If you have any concerns or notice discrepancies, we encourage you to join the discussion by tweeting us at @BlockEmpower." - Community Insight
Zapeir Central
Text in this table consists of direct extracts from the company's privacy policy.
"Attention needed: Zapier's privacy policy outlines broad data collection and expansive sharing practices, particularly highlighting the sharing of personal data with partners and during corporate transactions without explicit consent. While there are provisions for user control and rights to opt-out, the extent of data sharing for business purposes and potential restructures could pose significant privacy risks. Users are advised to exercise caution and actively manage their privacy settings to safeguard their personal information. If you find discrepancies or have concerns about our interpretations, please join the conversation by tweeting us at @BlockEmpower." - Community Insight
Content Creation AI Tools
Jasper
Text in this table consists of direct extracts from the company's privacy policy.
"Exercise heightened caution: This company's privacy policy indicates extensive data collection practices, encompassing a wide range of personal data, from basic identifiers to detailed usage data. Notably, the policy outlines explicit intentions to use personal data for targeted advertising and potentially lucrative business transfers, including selling data under certain conditions, which might not always align with user interests. Users are encouraged to diligently manage their privacy settings and remain alert to how their information is being utilized and shared. For a summarized perspective, refer to our 'Community AI Watch' page. Concerns or discrepancies should be openly discussed via tweets to @BlockEmpower to foster community-driven insights.." - Community Insight
Copy.ai
Text in this table consists of direct extracts from the company's privacy policy.
"Proceed with caution: Copy.ai's privacy policy outlines significant data collection across various interactions, including the capture of personal data within user-generated content and job applications. Notably, the policy allows for the sale of personal data in the event of corporate changes, which could potentially impact user privacy. Although there are options to opt-out of certain uses of data, users should remain vigilant about how their personal information is used and shared. If you notice any discrepancies or have concerns, we encourage you to initiate a discussion by tweeting us at @BlockEmpower to explore these privacy practices further." - Community Insight
Anyword
Text in this table consists of direct extracts from the company's privacy policy.
"Proceed with vigilance: Anyword's privacy policy illustrates an expansive data collection approach, encompassing a wide array of personal data, from basic identifiers to complex inferences about personal preferences and behaviors. While the company outlines comprehensive uses for this data, including product development and marketing, the policy also indicates potential sharing of personal data with third parties for various business operations without explicit ongoing consent. Users should be particularly cautious about their data's journey beyond Anyword's direct usage, especially in scenarios involving business transfers where personal data may be among the transferred assets. Stay informed and proactive in managing your privacy by utilizing the rights and controls provided. Discrepancies or concerns should be discussed openly via tweets to @BlockEmpower to ensure community-driven oversight." - Community Insight
Grammar Checkers and Rewording tools
Grammarly
Text in this table consists of direct extracts from the company's privacy policy.
"Moderate caution advised: Grammarly’s privacy policy details comprehensive data collection practices, including user content which encompasses all text and documents users submit. While the company commits to not selling personal data, it does engage in sharing data extensively with trusted service providers and in the event of business transactions. Users should appreciate the transparency regarding data use for service improvement and legal compliance but remain vigilant about the potential for data disclosure during corporate restructurings or acquisitions. If any discrepancies are noticed or if there are concerns about how personal data is handled, users are encouraged to engage with us via tweets at @BlockEmpower for community-based discussions and further clarification." - Community Insight
Wordtune
Text in this table consists of direct extracts from the company's privacy policy.
"Stay alert: This company's privacy policy outlines extensive potential uses and sharing of your personal data, including possible transfers during business restructurings and to third parties. Their policy allows for the broad sharing of personal data with affiliates, partners, and in the context of business transactions, which may significantly affect your privacy. While they provide mechanisms for user control and rights, the extensive conditions under which your data may be shared or sold warrant careful consideration and vigilance. We encourage our community to actively engage in discussions and reach out on @BlockEmpower if there are any concerns or noticeable discrepancies in how data handling is presented versus actual practices." - Community Insight
ProWrittingAid
Text in this table consists of direct extracts from the company's privacy policy.
"Be assured: ProWritingAid maintains a strong stance on user privacy. They pledge not to sell, trade, or transfer your personal information to external parties without maintaining strict confidentiality, except in standard operational circumstances or to comply with legal obligations. This commitment extends to safeguarding your personal and payment information with the help of trusted third-party services. For EU users, specific rights are respected, including the ability to access, modify, or delete personal data, and marketing communications are contingent on your explicit consent. Stay informed and exercise your rights to maintain control over your personal data." - Community Insight
Video Creation and Editing
Descript
Text in this table consists of direct extracts from the company's privacy policy.
"Attention needed: Descript's policy outlines extensive data collection, including personal and biometric data, which could raise concerns for privacy-conscious users. While they affirm limited third-party sharing, the inclusion of marketing partners and potential business transactions could lead to broader data dissemination. Users should be particularly cautious about the public settings of their projects, as these are openly accessible. The policy also hints at comprehensive data retention practices, possibly extending beyond the immediate needs of service provision. For those concerned about aggressive data use and sharing practices, vigilance and proactive privacy management are advised. - Community Insight
Wondershare Filmora
Text in this table consists of direct extracts from the company's privacy policy.
"Proceed with caution: Wondershare's policy clarifies that while it does not sell, rent, or trade personal data for promotional purposes without consent, extensive sharing with various third parties including affiliates, service providers, and during business transactions is standard. This practice involves sharing data across its global subsidiaries and with entities that assist in processing transactions or providing services. Users should be aware that despite not directly selling data for promotion, the extent of data sharing might still impact personal data security. It’s important for users to understand the complex network of data usage and to exercise their rights effectively to safeguard their privacy." - Community Insight
Runway
Text in this table consists of direct extracts from the company's privacy policy.
"Stay informed: Runway engages in extensive data sharing practices, both within its corporate structure and with external third parties, including service providers and business partners. Notably, personal information may be shared for business transactions like mergers or acquisitions, which could lead to significant changes in control of user data. While Runway does not directly sell personal information, the extent of its data sharing and the potential for third-party marketing partnerships could expose user data more broadly than some users might expect. As always, users should remain vigilant and proactive in managing their privacy settings to safeguard their personal data." - Community Insight
Image Generation Tool
DALLE 3
Text in this table consists of direct extracts from the company's privacy policy.
"Attention needed: OpenAI's policy outlines extensive use and sharing of personal information, including for business transfers and affiliate operations, which could lead to substantial data dissemination across various platforms and entities. While OpenAI commits to protecting personal information with commercially reasonable security measures, the policy also acknowledges potential risks and the inherent insecurity of data transmission, urging users to be cautious about the information they share. Users are encouraged to utilize their rights to access, correct, or delete their personal information as needed, emphasizing the importance of staying proactive about personal data management. Given the breadth of data usage and sharing, users should carefully consider the implications of their interactions with OpenAI's services." - Community Insight
MidJourney
Text in this table consists of direct extracts from the company's privacy policy.
"Proceed with caution: Midjourney's comprehensive collection of personal data includes not only basic contact information but also user-generated content, which can be deeply personal or sensitive. The policy explicitly mentions the potential for business transfers where user data could be a transferred asset, underscoring a significant privacy consideration. Although Midjourney does not currently sell personal data, their extensive sharing practices with service providers and for business restructuring activities necessitate user vigilance. Users are advised to actively manage their privacy settings and stay informed about any changes in Midjourney’s privacy practices. Those in California are afforded specific rights under CCPA, which Midjourney acknowledges, offering some reassurance about data protection measures." - Community Insight
Stable Diffusion
Text in this table consists of direct extracts from the company's privacy policy.
"Be mindful: Stable Diffusion collects extensive personal information, including payment details and user-generated content like images and text prompts, which are stored and potentially used to identify you. Their disclosure practices involve sharing your data with various third parties, including for marketing purposes and in the event of business transactions like mergers or acquisitions, which could affect the control you have over your personal information. They emphasize compliance with legal requests and business transfers as key reasons for data disclosure. Users, especially in the EEA, are encouraged to exercise their rights to manage, object to, or withdraw consent for the use of their data. Ensure you understand how your data may be utilized and remain proactive in managing your privacy settings." - Community Insight
Community Insights Disclaimer:
The information provided on this page, labeled as "Community Insights," consists of summaries and analyses based on data publicly available from various companies' official websites. These insights are intended to offer users an easy-to-understand overview of data privacy practices of different services and do not represent legal or professional advice. While we strive to keep this information up-to-date and accurate, BlockEmpower does not guarantee the completeness or accuracy of the details presented, as policies and practices may change over time.
BlockEmpower provides these insights as a community service to enhance understanding and discussion around data privacy. They reflect community views and interpretations of the publicly available information and are not endorsed by or represent the official positions of the companies discussed.
Feedback and Participation:
We welcome and value your feedback and suggestions. If you have concerns about any of the insights or wish to see a similar analysis for other applications, please engage with us. You can contact us directly through our [contact form] or tweet to us at [BlockEmpower Twitter handle]. Your input is crucial to us, helping ensure our community-driven content is relevant and respectful of privacy concerns.
Additionally, if you're interested in requesting analyses of other applications or contributing to discussions on data privacy, join our community platform, BlockEmpower. Here, you can share your thoughts, requests, and participate in shaping the discourse around technology and privacy. Together, we can build a more informed and privacy-conscious user base.
