[{"data":1,"prerenderedAt":62},["ShallowReactive",2],{"watch-how-to-read-ai-product-data-privacy-terms":3},{"id":4,"title":5,"author":6,"blogbody":7,"body":8,"category":15,"ctaLabel":16,"ctaUrl":17,"date":18,"description":19,"extension":20,"featured":21,"image":22,"lastReviewed":18,"meta":23,"navigation":24,"outboundlinks":25,"path":26,"reviewStatus":27,"seo":28,"seoTitle":29,"sources":30,"stem":46,"tags":47,"videos":53,"youtubelinks":25,"__hash__":61},"blog\u002Fblog\u002Fhow-to-read-ai-product-data-privacy-terms.md","Before You Approve an AI Tool, Read the Terms That Control the Data","Nick DiVito","## Executive summary\n\nAn AI product name does not tell you what happens to the data.\n\nThe answer can change based on the plan, account type, settings, contract, feature, integration, region, and way the product is purchased. A free personal account, a paid business workspace, an application programming interface, and an AI feature embedded inside another platform may carry the same brand while operating under different terms.\n\nThat is why \"Does this company train on our prompts?\" is usually the wrong first question.\n\nThe better review is:\n\n- Which exact service are we approving?\n- Which documents govern it?\n- What information will we enter, upload, retrieve, or connect?\n- How may the provider use, retain, review, disclose, and delete that information?\n- Which settings and contract terms change the answer?\n- What can the tool read or do through connectors and automations?\n- Which output requires human verification?\n- What evidence will we keep, and when will we review the decision again?\n\nThis article gives a practical way to answer those questions without turning a small-business tool review into a six-month procurement project.\n\nIt is intentionally dated and was last reviewed on **August 4, 2026**. Product names, features, terms, controls, and privacy practices can change. Use this as a review method, then verify the current first-party documents for the exact service being considered.\n\n## Start with the exact product boundary\n\nDo not approve \"AI.\"\n\nDo not even approve a provider by name.\n\nApprove a defined boundary:\n\n- Provider and contracting entity.\n- Product and feature.\n- Plan or tier.\n- Personal, business, enterprise, education, developer, or application programming interface account.\n- Direct purchase, reseller purchase, or feature bundled inside another platform.\n- Browser, desktop, mobile, extension, integration, or embedded use.\n- Users and administrators.\n- Intended business purpose.\n- Information involved.\n\nThis sounds tedious until the first time two employees are using the same brand under different accounts. One signs into a managed business workspace. The other pastes customer information into a personal account created with a company email address. Leadership thinks the product was approved once. In reality, two different data-handling decisions are happening.\n\nWrite the boundary at the top of the review. If the product or plan changes, the approval does not automatically follow it.\n\n## Find the documents that actually govern the service\n\nA privacy policy is not the whole contract.\n\nDepending on the purchase, the relevant set may include:\n\n1. An order form or subscription agreement.\n2. Master service or commercial terms.\n3. Product-specific or service-specific terms.\n4. A data processing addendum.\n5. A privacy notice.\n6. Acceptable-use or prohibited-use terms.\n7. A security or trust-center description.\n8. A subprocessor list.\n9. Feature documentation for connectors, memory, browsing, file upload, agents, or data controls.\n10. Settings inside the administrator and user interfaces.\n\nThese documents do not always carry the same authority. An order form may modify the general terms. Product-specific terms may govern one feature. A data processing addendum may address personal data without answering what happens to confidential engineering material. A marketing page may describe a control without becoming a contractual commitment.\n\nRecord the document title, link, effective date, access date, and the product boundary it appears to cover. Save a copy or screenshot for important decisions if the terms permit it. A bookmark to a page that changes tomorrow is weak evidence of what leadership reviewed today.\n\nQualified counsel should resolve contract priority, legal obligations, intellectual-property terms, regulated data, and negotiated language when the consequence warrants it. The cybersecurity review should still make the operating assumptions visible.\n\n## Describe the data before reading promises about it\n\n\"Business data\" is too vague.\n\nList what the use will involve:\n\n- Prompts and chat history.\n- Uploaded documents, images, audio, video, or spreadsheets.\n- Customer, employee, applicant, patient, financial, insurance, legal, or identity information.\n- Source code, configurations, logs, incident material, or vulnerability information.\n- Controlled Unclassified Information, export-controlled information, or contract-restricted material.\n- Content retrieved from email, cloud drives, calendars, customer systems, code repositories, or internal search.\n- Feedback, ratings, support tickets, and diagnostic data.\n- Generated output and derived artifacts such as summaries, embeddings, indexes, or saved memory.\n- Metadata about users, devices, location, usage, and administrators.\n\nThen ask whether every category is necessary.\n\nThe [FTC's privacy and security guidance](https:\u002F\u002Fwww.ftc.gov\u002Fbusiness-guidance\u002Fprivacy-security) keeps returning to a durable principle: collect and retain information with care, protect it appropriately, and honor the promises made about it. AI does not erase those obligations. The word \"prompt\" does not make customer information less sensitive.\n\nIf a representative excerpt, synthetic record, or de-identified example answers the question, do not upload the complete live record.\n\n## Training is not a yes-or-no question\n\nThis is where reviews often become sloppy.\n\nOne person says, \"AI companies train on everything.\"\n\nAnother says, \"The provider says it does not train on business data.\"\n\nNeither sentence is enough to approve the use.\n\nAsk:\n\n- Does the statement apply to this exact service and plan?\n- Does it cover prompts, files, retrieved content, output, feedback, support data, and metadata?\n- Is the behavior a default, a setting, an opt-out, or a contract commitment?\n- Who can change the setting?\n- Does the answer change for beta, preview, experimental, or third-party features?\n- Does abuse monitoring, safety review, debugging, or support create a separate use or retention path?\n- What happens if a user submits feedback or shares a conversation?\n- Does an embedded product send information to a different model provider?\n\nA provider may distinguish model training from other processing. Information might still be stored, scanned, reviewed, logged, used for security, or disclosed to subprocessors even when it is not used to train a general model.\n\nConversely, do not claim every AI prompt is permanently added to a model. That is not how every service, plan, or control works.\n\nRecord the exact statement and where it came from. Then set an internal data rule that employees can follow without interpreting product terms mid-prompt.\n\n## Retention and deletion need a timeline\n\n\"We delete your data\" is incomplete.\n\nAsk what is retained, for how long, in which systems, and after which event.\n\nThe relevant event might be:\n\n- The user deletes a conversation.\n- An administrator deletes a user.\n- The workspace is cancelled.\n- A file is removed from a connected source.\n- A support case closes.\n- A safety or abuse flag is raised.\n- A legal hold or other required preservation applies.\n\nAlso distinguish active-system deletion from backup expiration, security-log retention, de-identification, aggregation, and derived artifacts.\n\nImportant questions include:\n\n- Can administrators set or shorten retention?\n- Can users create public links or persistent shared artifacts?\n- Does \"temporary\" or \"private\" mode change all retention, or only chat history?\n- Are uploaded files deleted with the conversation?\n- What happens to indexes, embeddings, memory, or cached connector data?\n- Can the business export records before deletion?\n- What proof is available after account termination?\n\nThe correct answer depends on the business. A short retention period may reduce exposure. It may also conflict with a recordkeeping, investigation, quality, or customer obligation. That tradeoff belongs to the accountable business owner with legal and records guidance where needed.\n\n## Human access and subprocessors still matter\n\n\"The model processes the data\" can hide a larger service chain.\n\nReview:\n\n- Whether provider staff or contractors may access content for support, safety, abuse, quality, or debugging.\n- How that access is approved, limited, logged, and reviewed.\n- Which subprocessors host, analyze, secure, support, or otherwise handle the service.\n- Where the current subprocessor list is maintained.\n- How customers are notified of changes.\n- Whether data location or cross-border processing matters to the business.\n\nThe [NIST Generative AI Profile](https:\u002F\u002Fwww.nist.gov\u002Fpublications\u002Fartificial-intelligence-risk-management-framework-generative-artificial-intelligence) treats third-party components, data, governance, monitoring, and incident disclosure as connected risk-management concerns. That is useful framing. A tool is not only a model. It is an operating service with people, infrastructure, dependencies, and changes.\n\n## Connectors change the review more than the chat box\n\nThe product may look acceptable when a user pastes public text into a blank conversation.\n\nThen somebody connects the entire mailbox.\n\nReview each connector, plugin, extension, action, retrieval source, automation, and agent separately:\n\n- What can it read?\n- Which user's permissions does it inherit?\n- Can the scope be limited to selected folders, sites, records, repositories, or actions?\n- Can it send, publish, delete, purchase, approve, execute, or change anything?\n- Does it maintain another copy, index, cache, or embedding of connected content?\n- Can instructions inside a document, email, website, or retrieved record influence the tool?\n- Are actions logged and attributable?\n- Is confirmation required before consequential action?\n- Can access be revoked quickly without disabling the entire business system?\n\nA connector is an access-control decision. An agent is a delegation decision. Treating either one as a productivity checkbox is how a limited pilot becomes broad data access without a deliberate approval.\n\nStart read-only. Start narrow. Test with non-sensitive information. Add write or action permissions only after the business can explain the boundary and recovery path.\n\n## Administrator controls are part of the product\n\nA business-ready tool should be reviewed as an account and identity system, not only as a model.\n\nLook for:\n\n- Central account ownership.\n- Named administrators.\n- Multifactor authentication.\n- Single sign-on and automated user lifecycle options when appropriate.\n- Restrictions on personal accounts and external sharing.\n- Role-based access.\n- Workspace, project, and connector boundaries.\n- Audit and usage logs.\n- Retention and data-control settings.\n- User export, suspension, and deletion.\n- A tested recovery path if the primary administrator is unavailable.\n\nDo not purchase an enterprise-sounding tier merely because it has more controls. Confirm that the business will actually configure and operate the controls it is paying for.\n\nA feature that exists but has no owner is not a control yet.\n\n## Output terms do not make the output correct\n\nContract language about ownership, licenses, indemnity, or similarity of output can matter. It should be reviewed by qualified counsel when the business will publish, sell, license, patent, or rely heavily on generated material.\n\nCybersecurity and operating review still needs to ask:\n\n- Who verifies facts and citations?\n- Who reviews confidential or personal information in the output?\n- Who checks code, formulas, calculations, and security recommendations?\n- Who looks for copied or unexpectedly similar material?\n- Can the business explain the source and approval of a consequential decision?\n- What happens when the output is challenged?\n\nNIST's [AI Risk Management Framework](https:\u002F\u002Fwww.nist.gov\u002Fitl\u002Fai-risk-management-framework) emphasizes context, measurement, human roles, and continued management. A terms-of-service clause does not validate a recommendation. A person still has to decide whether the output is fit for the actual task.\n\n## High-impact use deserves a different process\n\nOrdinary self-service approval is not enough when the tool affects employment, lending, insurance, healthcare, legal rights, safety, eligibility, critical security actions, or other consequential decisions.\n\nThat does not mean every use is forbidden.\n\nIt means the business should involve the functions qualified to address:\n\n- Applicable law and regulation.\n- Validity for the intended population and context.\n- Bias, fairness, accommodation, and appeal.\n- Required notice or disclosure.\n- Human authority and override.\n- Recordkeeping and explanation.\n- Monitoring after deployment.\n\nThe product terms will not design that operating process for the customer.\n\n## Run a small pilot with an exit\n\nBefore broad rollout:\n\n1. Define the use and owner.\n2. Use the approved account and settings.\n3. Limit users, data, and integrations.\n4. Build normal, ambiguous, failure, and refusal test cases.\n5. Define which errors are tolerable.\n6. Record human-review expectations.\n7. Monitor support issues, unsafe behavior, sharing, and unexpected access.\n8. Decide how to export work and remove data if the pilot ends.\n\nKeep a short approval record with the documents reviewed, important settings, test results, limitations, approval date, and next review date.\n\nRevisit the decision when:\n\n- The product, model, plan, or contracting entity changes.\n- Terms or privacy notices change.\n- A new connector, memory feature, action, or agent is enabled.\n- New information or users enter scope.\n- A material incident, unsafe result, or provider notice occurs.\n- The use begins affecting customers, employees, regulated work, or critical decisions.\n\n## The practical approval record\n\nA small business can do this on one or two pages.\n\nRecord:\n\n- Exact product boundary.\n- Approved business purpose.\n- Owner and users.\n- Allowed and prohibited information.\n- Terms and settings reviewed.\n- Training, retention, deletion, human-access, and subprocessor assumptions.\n- Integrations and permissions.\n- Human-review process.\n- Test evidence and known limits.\n- Incident contact and exit path.\n- Approval and review dates.\n\nThat record will not answer every legal or technical question.\n\nIt will answer the one leadership needs first: what exactly did we approve, and why?\n\n## Summary\n\nDo not approve an AI tool from a logo, demo, privacy-policy headline, or one sentence about training.\n\nApprove the exact service. Understand the document hierarchy. Describe the data. Separate training from retention and other processing. Review human access and subprocessors. Treat connectors as access decisions. Confirm administrator controls. Require human verification that matches the consequence. Pilot narrowly. Keep an exit.\n\nProduct terms will keep changing.\n\nThe review method should not.\n\nUse the [Safe Business AI guide](\u002Fresources\u002Fsafe-business-ai-use-and-approval) to turn this review into employee rules, approval lanes, testing, and mistake reporting. If the tool will touch sensitive data, broad integrations, code, customers, or critical business decisions, bring the proposed boundary to a [security architecture review](\u002Fservices\u002Fsecurity-architecture-review) before it becomes difficult to unwind.",{"type":9,"value":10,"toc":11},"minimark",[],{"title":12,"searchDepth":13,"depth":13,"links":14},"",2,[],"Policy and Governance","Review an AI use or integration","\u002Fservices\u002Fsecurity-architecture-review","2026-08-04","A practical method for reviewing AI product tiers, data use, retention, training controls, integrations, and contract terms before a small business approves a tool.","md",false,"\u002Fimg\u002Fblog\u002Fblog-small-business-cyber.jpg",{},true,null,"\u002Fblog\u002Fhow-to-read-ai-product-data-privacy-terms","Current",{"title":5,"description":19},"How to Review AI Product Data and Privacy Terms",[31,34,37,40,43],{"label":32,"url":33},"NIST Artificial Intelligence Risk Management Framework","https:\u002F\u002Fwww.nist.gov\u002Fitl\u002Fai-risk-management-framework",{"label":35,"url":36},"NIST AI 600-1: Generative Artificial Intelligence Profile","https:\u002F\u002Fwww.nist.gov\u002Fpublications\u002Fartificial-intelligence-risk-management-framework-generative-artificial-intelligence",{"label":38,"url":39},"NIST AI Resource Center","https:\u002F\u002Fairc.nist.gov\u002F",{"label":41,"url":42},"NSA and CISA Joint Guidance: AI Data Security","https:\u002F\u002Fwww.nsa.gov\u002FPress-Room\u002FPress-Releases-Statements\u002FPress-Release-View\u002FArticle\u002F4192332\u002Fnsas-aisc-releases-joint-guidance-on-the-risks-and-best-practices-in-ai-data-se\u002F",{"label":44,"url":45},"FTC Privacy and Security Guidance","https:\u002F\u002Fwww.ftc.gov\u002Fbusiness-guidance\u002Fprivacy-security","blog\u002Fhow-to-read-ai-product-data-privacy-terms",[48,49,50,51,52],"Artificial Intelligence","Small Business","Vendor Risk","Data Privacy","AI Governance",[54],{"title":55,"url":56,"description":57,"uploadDate":58,"duration":59,"thumbnailUrl":60,"watchPage":24},"You Turned Off AI Training. Is Your Client Data Safe?","https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FOQ6nKQpwniE","Nick separates AI training settings from storage, retention, permission to share client data, and connected-account access. Follow the exact product and account before approving business use.","2026-09-08T12:00:25-05:00","PT10M59S","https:\u002F\u002Fi.ytimg.com\u002Fvi\u002FOQ6nKQpwniE\u002Fhqdefault.jpg","dP3jM6z-qQsClEdRtF9MYBv0AD17EEpLnGwilUcOtBE",1792533899467]