Apollo Graphql
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Developer-site data plus ads pixels, a broad license on posts, , and $100 cap.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account and contact info, site and tool usage, device IDs, cookies, and partner business data.
Read the exact line
Privacy policy
“We collect information about your use of our websites and services, including IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, features used, approximate location derived from IP address”
Training
They run the product, market to you, and use CRM and AI tools to pick who to contact.
Read the exact line
Privacy policy
“Apollo uses customer relationship, revenue, enrichment, analytics, and AI-enabled tools to analyze account, product usage, engagement, marketing, and business contact signals”
Sharing
Service providers, ads platforms if you allow targeting cookies, and event partners.
Read the exact line
Privacy policy
“We disclose information to advertising and measurement partners where permitted by applicable law and your choices.”
Kept
They keep it as long as they think they need it; session replay is kept 30 days.
Read the exact line
Privacy policy
“We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain business records, comply with legal obligations”
Controls
Cookie settings, GPC, unsubscribe, and email legal@ for access or deletion.
Read the exact line
Privacy policy
“To exercise applicable rights, contact us at legal@apollographql.com. We may need to verify your request before responding.”
Fine print
Posts get a forever license; you them; is $100; California courts.
Read the exact line
Terms of service
“IN NO EVENT SHALL APOLLO'S CUMULATIVE AND UNDER THESE TERMS EXCEED ONE HUNDRED UNITED STATES DOLLARS.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off targeting cookies or send GPC
Cookie Settings or Your Privacy Choices on Apollo sites
Ask to access or delete your data
Email legal@apollographql.com
Unsubscribe from marketing email
Unsubscribe link in Apollo emails
Opt out of Free Plan enhanced telemetry
Disconnect components from GraphOS Studio, remove the GraphOS API key, or use product controls in the docs
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Anything you post on the site can be used by them forever, including by others they allow, even if you leave.
Read the exact line
Terms of service
“you automatically grant (or warrant that the owner of such rights has expressly granted) to Apollo a , , worldwide, non-exclusive, , fully paid-up and license”
For example, a code snippet you paste in a forum could be copied into their marketing without paying you.
If someone sues them because of how you used the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to , and Apollo, its affiliates, and their respective employees, contractors, agents, officers, and directors from any and all claims”
For example, if a comment you posted leads to a lawsuit, they can ask you to cover their lawyers.
If the site harms you, they say they will pay at most $100.
Read the exact line
Terms of service
“IN NO EVENT SHALL APOLLO'S CUMULATIVE AND UNDER THESE TERMS EXCEED ONE HUNDRED UNITED STATES DOLLARS.”
For example, if a site outage costs your company money, their cap is one hundred dollars.
Sales and usage signals about you can be sent through outside AI companies for outreach drafts.
Read the exact line
Privacy policy
“These tools may include Salesforce, Common Room, ZoomInfo, LinkedIn, 6sense, Outreach, and third-party large language model providers (such as Anthropic and OpenAI)”
For example, your product usage might be summarized by an OpenAI model for a sales email.
Ad networks can get your cookies, IP, and browsing on their sites when targeting is on.
Read the exact line
Privacy policy
“Apollo may disclose online identifiers, cookie identifiers, IP address, device information, internet or electronic network activity, and similar information to advertising and measurement platforms, such as Google Ads, Meta, LinkedIn”
For example, visiting a docs page with targeting cookies on can help Meta retarget you.
They can change the website rules by posting them; using the site counts as agreeing.
Read the exact line
Terms of service
“By accessing the Site, you agree to the latest version of these Terms.”
For example, a new license on posts could apply the next time you load the homepage.
They say they do not sell your personal information for money under U.S. state law definitions.
Read the exact line
Privacy policy
“Apollo does not sell personal information for monetary or other valuable consideration as "sale" is defined under applicable U.S. state privacy laws.”
For example, they claim they would not sell your email list for cash.
Targeted ads across sites need you to turn targeting cookies on, or another legal basis.
Read the exact line
Privacy policy
“Apollo does not share personal information for cross-context behavioral advertising or process personal information for targeted advertising unless you have affirmatively enabled Targeting Cookies”
For example, if you refuse targeting cookies, they say they will not share you for that kind of ad.
They say the service is for adults and they do not knowingly take kids' data.
Read the exact line
Privacy policy
“Apollo's services are not directed to children under 18, and we do not knowingly collect personal information from children under 18.”
For example, a 16-year-old should not create an account under this policy.
Recordings of how you click around GraphOS Studio are kept for 30 days.
Read the exact line
Privacy policy
“including a 30-day retention period for Amplitude Session Replay in GraphOS Studio.”
For example, a mouse-path recording of a Studio session is deleted after a month.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
How we got here · grade C · score 42/100 · 15 of 15 policy answers backed by a verified quote · 4 not stated
What does the app collect beyond what it needs to work?
They collect account and contact info plus usage, device IDs, IP, cookies, telemetry, and partner enrichment data.
Does it record your voice, face or body, and what happens to that?
This is not a voice or face product; they do not describe collecting voice or face as biometrics.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use Google, Meta, LinkedIn and other ad pixels and tags when targeting cookies are allowed.
Do they sell or share your data, and can you opt out?
They say they do not sell for money, but share with ad platforms unless you refuse targeting cookies or use GPC.
What rights do they take over what you type and what the AI makes?
Forum and other site submissions get a perpetual, irrevocable, sublicensable license.
How long do they keep your data after you delete it, and can you delete it in the app?
Retention is “as long as reasonably necessary.” Deletion is by contacting them, not an in-app wipe.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They mention administrative, technical, and organizational safeguards in general terms, not audits.
Is there a real age gate, and are teens protected?
You must say you are 18+. They do not describe age checks beyond that statement.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated and says they will notice material changes as required by law; retention stays vague. Site terms change by posting.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
The site is as-is, liability is capped at $100, and you must indemnify them for claims from your use.
Do subscriptions renew on their own, and can you get a refund?
These website terms say they do not currently charge fees for the public site.
The privacy policy is 2,795 words at a professional or legal expert level (Flesch reading ease 0); the terms are 4,430 words at a college graduate level.
