Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes Poe's data collection, use, and sharing practices for users of its AI chat platform. The policy authorizes transmission of user account information, conversation content, and device data to third-party AI service operators whose bots users interact with on the platform. The document specifies data subject rights for California residents and EU/UK users, including mechanisms to request access to, correction of, or deletion of personal data via privacy@poe.com.
This document is Poe's Privacy Policy, governing the collection, use, and disclosure of personal information by Quora, Inc. (operating Poe) in connection with its AI aggregation platform, with the stated basis being user consent and legitimate business operations. The policy states that Poe collects account information (email address, phone number), usage data (messages sent, bots interacted with, features used), device and log data (IP address, browser type, operating system, referring URLs, device identifiers), payment information processed via third-party processors, and information from third-party sign-in services such as Google or Apple. The policy authorizes sharing of personal data with third-party AI model providers whose bots users interact with, analytics vendors, advertising partners, and service providers, as well as in the context of business transfers; the scope of data passed to third-party AI providers in the course of bot interactions is operationally distinct in that user message content may be transmitted to external model operators whose own privacy terms apply. The policy engages GDPR and UK GDPR for EU and UK residents, CCPA and CPRA for California residents, and general FTC Act consumer protection standards; the document provides region-specific rights disclosures for these populations but the adequacy of consent mechanisms and data transfer safeguards for EU/UK users warrants compliance evaluation. Poe operates internationally and the policy acknowledges cross-border data transfers, which under GDPR requires appropriate transfer mechanisms such as standard contractual clauses, though the specific mechanism in use is not identified in the accessible document text.
Institutional analysis available with Compliance
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.
Start Compliance free trialMonitoring
Poe has updated this document before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Compliance free trialCross-platform context
See how other platforms handle Cross-Border Data Transfers and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.