AI21 Labs Privacy Policy

This document is AI21 Labs' privacy policy governing the collection, use, storage, and sharing of personal data across its website, API, and consumer-facing products (including Jamba and AI21 Playground), with legal bases including consent, legitimate interests, and contractual necessity under frameworks such as GDPR and CCPA. The agreement states that AI21 collects a broad range of data including usage data, device identifiers, IP addresses, location data, and the content of user prompts and outputs, and the terms authorize sharing this data with third-party service providers, analytics vendors, advertising partners, and affiliates. Notably, the policy discloses that AI21 may use user-submitted prompts and interactions to improve its models, though it distinguishes between consumer product users and enterprise API customers, with the latter subject to separate data processing agreements; the agreement also reserves the right to transfer data internationally, including to Israel and the United States, with standard contractual clauses cited as the transfer mechanism for EU data. The policy engages GDPR (including provisions relevant to international data transfers and data subject rights), CCPA and CPRA for California residents, and Israeli privacy law given AI21's Israeli headquarters, and the breadth of third-party sharing for advertising purposes may require evaluation under applicable consent requirements in EU and UK jurisdictions. Material compliance considerations include the adequacy of the consent mechanisms for behavioral advertising, the scope of model training data use disclosures, and whether enterprise customers' data processing agreements are sufficiently aligned with the policy's stated terms.