1Password
- The policy allows AI training; it does not describe an opt-out.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- Staff may review your content; the policy does not describe an opt-out.
Vaults stay encrypted and yours; they still collect usage data, market with cookies, auto-renew.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Uses your content for AI training with no opt-out
Collected
Account and payment info, device and usage data, cookies, partner data; vault contents they cannot read.
Read the exact line
Privacy policy
“We collect information from your browsers and devices, which provides us with technical usage information when you access or use the Services.”
Training
They run the app, support you, improve products, train new tech on service data, and market with ads.
Read the exact line
Privacy policy
“we process your Contact Information, Service Data, and Diagnostic Data, to develop and train new technology, to analyze and improve our existing services, and to customize content used for our marketing purposes.”
Sharing
Affiliates, service providers, family organizers, and marketing partners; vaults stay encrypted.
Read the exact line
Privacy policy
“We may disclose your information to third-party marketing services which help us advertise our services to you.”
Kept
Kept as long as needed for the stated purposes unless you ask them to delete it.
Read the exact line
Privacy policy
“We will retain your personal information for as long as necessary to fulfill the purposes set forth in this Privacy Notice, unless a longer retention period is required or permitted by law, or you instruct us to delete your information.”
Controls
You can export vaults, delete your account, then email them to wipe data, and opt out of marketing cookies.
Read the exact line
Privacy policy
“To ensure that no one’s data is deleted without their consent, you must first delete your account through an authenticated session.”
Fine print
Subscriptions auto-renew and are non-refundable; they can change terms.
Read the exact line
Terms of service
“All amounts paid are non-refundable.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Export your vault data
From your 1Password account (privacy: Download Your Information)
Delete account then email to expunge
Delete via authenticated session, then contact privacy@1password.com
Opt out of marketing cookies and emails
Cookie banner/Cookie Policy; unsubscribe link or account; privacy@1password.com
Cancel auto-renew before the next bill
Online account management page or customer support
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If you have a legal fight with them, not a normal court .
Read the exact line
Terms of service
“All disputes and questions whatsoever which shall arise between AgileBits Inc. and you in connection with this Service Agreement”
For example, if a billing error cost you money.
Once they charge you, they generally keep the money even if you cancel mid-cycle.
Read the exact line
Terms of service
“All amounts paid are non-refundable. You further agree to be responsible for all taxes associated with the Service”
For example, if you pay yearly and cancel after a week, the policy says that payment is not refunded.
Giving data to marketing partners can count as selling or sharing it, though some places let you opt out.
Read the exact line
Privacy policy
“This may be considered a sale or sharing personal information data under applicable privacy laws.”
For example, ad cookies on their website may help partners show you 1Password ads elsewhere.
They say they can use contact, service, and diagnostic data to train new technology, not just to run the app.
Read the exact line
Privacy policy
“to develop and train new technology, to analyze and improve our existing services, and to customize content used for our marketing purposes.”
For example, how you use the website or support tools could help them build new features or models.
They promise almost nothing if the service breaks, and their payout is capped at recent fees.
Read the exact line
Terms of service
“The Service is provided on an “AS IS” and “AS AVAILABLE” basis.”
For example, if downtime locks you out of passwords, they limit what they would pay you.
Support chatbots can record what you type and share it with the companies that run those tools.
Read the exact line
Privacy policy
“If you communicate with us via a chatbot or use our automated communication tools to facilitate your communications with us, including those offered by a third-party, these tools may collect and record the contents of any communications you send through them.”
For example, a support chat about a billing issue could be stored by a third-party chatbot vendor.
They cannot open your vaults because they never have the keys.
Read the exact line
Privacy policy
“Secure Data is encrypted using secure cryptographic keys that exist only in the possession and under the control of users or admins of their accounts.”
For example, they cannot read the passwords you save even if someone asks them to.
You own what you store; they only get rights needed to run backups and the service.
Read the exact line
Terms of service
“You retain all of the rights to Your Data. You agree to grant AgileBits Inc. a license to store, retrieve, backup, restore, and otherwise copy Your Data so that we may provide you with the Service.”
For example, they can copy your encrypted vault for backup, but they do not claim to own your passwords.
You can take your vault data with you.
Read the exact line
Privacy policy
“You may export a copy of your Secure Data from your 1Password account.”
For example, you can export before switching to another password manager.
If they close you for a normal terms breach after notice, they say you can still get your data.
Read the exact line
Terms of service
“In the event of such a termination we will provide you with the ability to take your data with you.”
For example, after a warning email they would still let you export vaults.
Words to know
Legal words from the lines above, in plain English.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
How we got here · grade C · score 47/100 · 15 of 15 policy answers backed by a verified quote · 1 not stated
What does the app collect beyond what it needs to work?
Besides account and vault data, they collect device, IP, cookies, diagnostics, product usage, and partner marketing data.
Does it record your voice, face or body, and what happens to that?
The documents do not describe collecting voice, face, or body data as a product feature.
Are your chats and uploads used to train AI models, and is that off by default?
They say they process contact, service, and diagnostic data to develop and train new technology, without an in-app training off switch.
Can employees or contractors read your conversations, and when?
Support chats and emails can be recorded and used for training and quality, including via third-party chatbots, with no review opt-out described.
Are you profiled or tracked for advertising?
They and marketing partners use cookies and tracking for advertising and targeted ads.
Do they sell or share your data, and can you opt out?
They share with marketing partners in ways that may be a sale, and say you may opt out depending on where you live.
What rights do they take over what you type and what the AI makes?
You keep rights to your data; they only take a license to store, back up, and run the service. Vaults are encrypted with keys they do not have.
How long do they keep your data after you delete it, and can you delete it in the app?
You delete the account in an authenticated session, then contact them to expunge; copies may linger in records.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe encryption, access controls, and that they cannot decrypt vaults; no independent audit is detailed in these pages.
Is there a real age gate, and are teens protected?
Services are not for minors; under 16 need parent or family organizer consent, with no extra age-check described.
Will they tell you when the rules change, and is the policy specific?
Policies are dated. Privacy says check often and they may email; terms promise about 30 days for material changes, then continued use binds you.
Can they close your account without warning, and can you get your data out first?
For most breaches they email notice and let you take your data; only rare legal or emergency cases skip notice.
If something goes wrong, who pays?
The service is as-is, with liability capped at fees paid in the prior six months for individual users.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew; they say all amounts paid are non-refundable, with rare case-by-case exceptions and notice before fee changes.
The privacy policy is 6,342 words at a professional or legal expert level (Flesch reading ease 27.3); the terms are 7,736 words at a professional or legal expert level.
