8 Total
3 High severity
5 Medium severity
0 Low severity
Summary

This is Inflection AI's privacy policy, which explains how the company collects and uses your personal data when you interact with its AI products, including Pi and enterprise AI tools. The most important thing to know is that conversations you have with Inflection AI — which may include personal, emotional, or sensitive disclosures — can be used to train and improve AI models. You should review your account settings for any data deletion or opt-out options, and contact privacy@inflection.ai to request deletion of your conversation data.

Technical Summary

This document is Inflection AI's privacy policy, governing the collection, use, storage, and disclosure of personal data by Inflection AI in connection with its AI-powered conversational products and enterprise services, with legal basis appearing to rest on consent and legitimate interests. The policy obligates Inflection AI to collect user-provided data, usage data, and conversation content, and permits sharing with third-party service providers, business partners, and in the context of corporate transactions such as mergers or acquisitions. A notable provision is the collection and use of conversation content — including emotionally sensitive personal communications shared with the AI — for model training and product improvement purposes, which represents a significant privacy risk given the intimate nature of interactions with a 'human-centered, emotionally intelligent AI.' The policy engages GDPR (for EU/EEA users), CCPA/CPRA (for California residents), and potentially COPPA given the consumer-facing AI context; material compliance considerations include lawful basis documentation for AI training data use, cross-border data transfer mechanisms, and the adequacy of consent for using emotionally sensitive conversation data for model training. The truncated nature of the document as rendered HTML limits full assessment of all provisions, but the AI-specific data practices, enterprise data flows, and broad third-party sharing provisions represent the primary compliance exposure areas.

Evidence Provenance
Captured April 29, 2026 08:18 UTC
Document ID CA-D-000482
Version ID CA-V-001052
Wayback Machine View archived versions →
SHA-256 2cff2ab34ed280a7d0b7f743d69328eb84abfdfec0f01a2293e5f5bbf6dc762a
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
High Severity — 3 provisions
Medium Severity — 5 provisions

Cross-platform context

See how other platforms handle Children's Privacy Restriction and similar clauses.

Compare across platforms →