8 Total
2 High severity
5 Medium severity
1 Low severity
Summary

This document establishes Poe's data collection, use, and sharing practices for users of its AI chat platform. The policy authorizes transmission of user account information, conversation content, and device data to third-party AI service operators whose bots users interact with on the platform. The document specifies data subject rights for California residents and EU/UK users, including mechanisms to request access to, correction of, or deletion of personal data via privacy@poe.com.

Technical / Legal Breakdown

This document is Poe's Privacy Policy, governing the collection, use, and disclosure of personal information by Quora, Inc. (operating Poe) in connection with its AI aggregation platform, with the stated basis being user consent and legitimate business operations. The policy states that Poe collects account information (email address, phone number), usage data (messages sent, bots interacted with, features used), device and log data (IP address, browser type, operating system, referring URLs, device identifiers), payment information processed via third-party processors, and information from third-party sign-in services such as Google or Apple. The policy authorizes sharing of personal data with third-party AI model providers whose bots users interact with, analytics vendors, advertising partners, and service providers, as well as in the context of business transfers; the scope of data passed to third-party AI providers in the course of bot interactions is operationally distinct in that user message content may be transmitted to external model operators whose own privacy terms apply. The policy engages GDPR and UK GDPR for EU and UK residents, CCPA and CPRA for California residents, and general FTC Act consumer protection standards; the document provides region-specific rights disclosures for these populations but the adequacy of consent mechanisms and data transfer safeguards for EU/UK users warrants compliance evaluation. Poe operates internationally and the policy acknowledges cross-border data transfers, which under GDPR requires appropriate transfer mechanisms such as standard contractual clauses, though the specific mechanism in use is not identified in the accessible document text.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial
High — 2 provisions
Medium — 5 provisions
Low — 1 provision

Monitoring

Poe has updated this document before.

Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →

Compliance Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Compliance free trial

Cross-platform context

See how other platforms handle Cross-Border Data Transfers and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 12, 2026 06:42 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000797
Version ID CA-V-002526
SHA-256 3f5ff2c5153b594d076c9de3674ca517752f03fc62a62f7b729a9a928e52b5f4
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans