Coda
- Your data trains their AI unless you switch it off in settings.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
They collect your docs and emails, can train AI unless you flip a setting, run ads, auto-renew with no refunds.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, emails, docs, files, device data, usage logs, and optional voice recordings.
Read the exact line
Privacy policy
“User content: We receive the content you upload or enable our products to access, such as emails and drafts, text, screen content, web pages, documents, files, calendars, images, data, and any other content you allow our products to access.”
Training
They personalize the product, improve it, train AI unless you turn that off, and advertise using other data.
Read the exact line
Privacy policy
“We also use information we collect to train our AI models. You can decide whether Superhuman can use your user content to train our AI models by adjusting the available training control(s) in your account settings.”
Sharing
Company family, vendors, marketplace apps you connect, ad partners, and authorities.
Read the exact line
Privacy policy
“We engage other companies to serve advertisements promoting our products and our company and to perform related services. We do not make user content available to these companies.”
Kept
They keep data as long as needed for the product, law, disputes, and business; no set clock.
Read the exact line
Privacy policy
“We retain personal data for as long as necessary to provide our products to you, to complete the transactions you have requested, to comply with our legal obligations, to resolve disputes, and for other .”
Controls
You can change AI training in settings, opt out of ads via Your Privacy Choices, and delete your account.
Read the exact line
Privacy policy
“you can decide whether Superhuman can use your user content to train our AI models by adjusting the available training control(s) in your account settings.”
Fine print
Plans auto-renew with no refunds.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off AI training in account settings
Account settings training control(s)
Opt out of targeted ads
Footer link titled “Your Privacy Choices” on Superhuman product websites
Cancel a paid plan or delete the account
Customer Care ‘how do I cancel my subscription?’ page, or the ‘how to delete my account’ page in Documentation
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Your writing and uploads can be used to train their AI unless you change a setting in your account.
Read the exact line
Privacy policy
“We also use information we collect to train our AI models. You can decide whether Superhuman can use your user content to train our AI models by adjusting the available training control(s) in your account settings.”
For example, a private draft you paste in could help teach their models if you leave the training control on.
They keep a long-lasting right to use your content to run, protect, customize, and build new products, including through vendors.
Read the exact line
Terms of service
“The above license lasts as long as intellectual property laws protect your User Content, and it also permits our service providers to assist us in performing these limited purposes.”
For example, even after you leave, they can still use past docs in ways that help improve features.
They may share cookie IDs and hashed emails with ad networks in ways some laws call a sale, with an opt-out.
Read the exact line
Privacy policy
“These activities–disclosing unique IDs and disclosing data through Cookies–may constitute “targeted advertising”, “sharing”, or “selling” under certain privacy laws”
For example, visiting their marketing site could help show you Superhuman ads on other sites until you use Your Privacy Choices.
If you pay, they generally will not give the money back, even if you barely used the period.
Read the exact line
Terms of service
“To the fullest extent permitted by applicable law, all payments made by you under these Terms are non-refundable and payment obligations are non-cancelable”
For example, canceling a day after yearly billing still leaves that year unpaid back to you.
They say they can end the deal anytime and owe you nothing for that.
Read the exact line
Terms of service
“We may terminate these Terms at any time without to you.”
For example, they could shut access and you would not get damages just because they ended the terms.
If you turn on notetaker, they record the call, including other people on it.
Read the exact line
Privacy policy
“Voice data: If you choose to use our Notetaker or transcription features, we collect recordings to create transcriptions of communications captured through our services, including recordings of other participants.”
For example, a meeting you transcribe could store coworkers’ voices too.
They do not promise the product will work, stay up, or be error-free.
Read the exact line
Terms of service
“THE SERVICES ARE PROVIDED TO YOU ON AN “AS IS,” AND “AS AVAILABLE” BASIS, WITHOUT REPRESENTATIONS OR OF ANY KIND”
For example, if AI output is wrong and costs you a deal, they have already said there is .
They describe basic security steps like encryption and limiting who can access data.
Read the exact line
Privacy policy
“we use a combination of safeguards and processes designed to secure data, including encryption, secure network configuration, and other measures, including encryption, network segregation, and access minimization.”
For example, they say stored content is meant to be encrypted and not open to every employee.
They say you still own what you upload and what the AI makes for you.
Read the exact line
Terms of service
“You own all right, title, and interest in and to User Content.”
For example, a Coda doc you write is still yours even though they take a license to run the service.
Words to know
Legal words from the lines above, in plain English.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- legitimate interest
- A legal reason that lets a company use your data without asking, when it decides its own need outweighs your privacy. For example, an app may analyse how you use it to improve the product, without ever asking you.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
How we got here · grade D · score 36/100 · 15 of 15 policy answers backed by a verified quote · 1 not stated
What does the app collect beyond what it needs to work?
They collect account and payment info, lots of user content (emails, docs, screen content, contacts), device details including apps installed, usage logs, licensed job data, and inferences.
Does it record your voice, face or body, and what happens to that?
If you use Notetaker or transcription, they collect recordings of you and other participants to make transcripts; they do not say those recordings are deleted when the session ends.
Are your chats and uploads used to train AI models, and is that off by default?
They use collected information to train AI, and you can turn that off with training controls in account settings.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They work with ad partners using cookies and hashed emails or phones to promote their products on other sites, with an opt-out.
Do they sell or share your data, and can you opt out?
They share identifiers with ad networks in ways that may count as selling or sharing, and they describe an opt-out via Your Privacy Choices.
What rights do they take over what you type and what the AI makes?
You own your content, but you grant a worldwide license to use it to run, improve, customize, and develop products, lasting as long as copyright lasts, including for service providers.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as needed for the product, law, and business. You can delete an account via their documentation; they do not promise a 30- or 90-day wipe.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They infer things like approximate location, product interest, industry, and writing style from your use; they do not describe a memory viewer you can edit.
Do they commit to basic security, and have they leaked data?
They describe encryption, network segregation, and access minimization. They do not describe an independent audit or bug-bounty program here.
Is there a real age gate, and are teens protected?
You must be old enough to consent on your own, such as 13 in most of the US or 16 in the EU; they do not describe extra age checks.
Will they tell you when the rules change, and is the policy specific?
The terms are dated and they say they will email or notify at least 30 days before changes. The privacy policy has no date and retention is open-ended.
Can they close your account without warning, and can you get your data out first?
They may give notice before some suspensions, but they also say they may terminate the terms at any time without liability, and they can skip notice for material breach.
If something goes wrong, who pays?
The product is as-is, and their total payout is capped at what you paid in the last 12 months, or $100 if you are on a free plan.
Do subscriptions renew on their own, and can you get a refund?
Paid plans renew automatically at then-current fees unless you cancel. They say payments are non-refundable.
The privacy policy is 5,067 words at a professional or legal expert level (Flesch reading ease 24.3); the terms are 8,862 words at a college graduate level.
