This analysis describes what LlamaIndex's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a structural limitation on the scope of data subject rights exercisable directly against LlamaIndex, creating a dependency on enterprise customers' own privacy notices and processes for end users of LlamaIndex-powered products.
The updated policy establishes explicit protections for data accessed through Google Workspace API connections. LlamaIndex states it will not use this data to train generalized AI models, will not sell it to data brokers or information resellers, will encrypt it in transit and at rest, and will limit access to authorized personnel and service providers. Users can disconnect Google Drive at any time to stop data access, though previously synced data remains in LlamaIndex services unless separately deleted.
View change record →Cross-platform context
See how other platforms handle Controller-Processor Scope Exclusion and similar clauses.
Compare across platforms →"This Privacy Notice describes our privacy practices where we are acting as the controller of personal data. However, this Privacy Notice does not cover or address how our customers may process personal data when they use our services, or how we may process personal data on their behalf in accordance with their instructions where we are acting as their processor. As a result, we recommend referring to the privacy notice of the customer with which you have a relationship for information on how they engage processors, like us, to process personal data on their behalf. In addition, we are generally not permitted to respond to individual requests relating to personal data we process on behalf of our customers, so we recommend directing any requests to the relevant customer.Excerpt from LlamaIndex's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This provision establishes a structural limitation on the scope of data subject rights exercisable directly against LlamaIndex, creating a dependency on enterprise customers' own privacy notices and processes for end users of LlamaIndex-powered products.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by LlamaIndex.