For European users, the policy provides a legal basis table mapping processing purposes to GDPR legal bases including contractual necessity, legitimate interests, and consent. AI model training and service improvement are stated to rely on the legitimate interests basis.
This analysis describes what Inflection AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses the specific GDPR legal bases for each processing purpose, including the reliance on legitimate interests for AI model training. The document also identifies DataRep as the appointed EU and UK representative, and states that international transfers rely on appropriate safeguards such as contractual clauses.
The updated policy establishes broader data collection practices than previously disclosed. The terms now explicitly state the company collects voice and audio inputs alongside text, whereas prior language specified only text and other materials. Additionally, the policy now discloses collection of precise geolocation information with user consent and authorization to access contacts, emails, calendars, and documents from third-party platforms. You can stop collection of precise location information at any time through the Your Choices section.
View change record →Under this provision, EU and UK users have access to a legal basis table setting out the GDPR basis for each processing activity. The use of legitimate interests as the basis for AI model training means EU and UK users have a right to object to that processing under GDPR Article 21, in addition to the account settings opt-out described elsewhere in the policy.
Cross-platform context
See how other platforms handle EU and UK GDPR Legal Basis for Processing and similar clauses.
Compare across platforms →"The table below sets out the purposes for which we process your information, the type of personal information we process and our legal basis for processing. [...] Where necessary for our legitimate interests and those of third parties and broader society, including in developing, improving, or promoting our Services, such as when we develop and train our models.Excerpt from Inflection AI's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses the specific GDPR legal bases for each processing purpose, including the reliance on legitimate interests for AI model training. The document also identifies DataRep as the appointed EU and UK representative, and states that international transfers rely on appropriate safeguards such as contractual clauses.
Under this provision, EU and UK users have access to a legal basis table setting out the GDPR basis for each processing activity. The use of legitimate interests as the basis for AI model training means EU and UK users have a right to object to that processing under GDPR Article 21, in addition to the account settings opt-out described …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Inflection AI.