coroflot
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
Portfolio site that takes a broad license, can close you without notice, and keeps copies after you remove work.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Name, email, billing and card details, IP address, and extra data from partners.
Read the exact line
Privacy policy
“During registration a user is required to give their contact information (such as name and email address).”
Training
They use it to run the site, bill you, and sometimes build a personalized profile from partner data.
Read the exact line
Privacy policy
“we combine information about the purchasing habits of users with similar information from our partners, Company Y & Company Z, to create a personalized user profile.”
Sharing
Payment processors, service partners, and advertisers who get stats.
Read the exact line
Privacy policy
“We will share demographic information with our partners and advertisers.”
Kept
They do not say how long they keep data; they may keep copies after you remove content.
Read the exact line
Terms of service
“It is possible to remove your content from the website at any time, but Coroflot will retain the right to keep copies for archival or backup purposes.”
Controls
You can try to fix or remove personal data on the member page or by emailing support.
Read the exact line
Privacy policy
“This can usually be done at the member information page or by emailing our Customer Support at [email protected].”
Fine print
They can close you without notice, keep no refunds, and you must cover their legal costs.
Read the exact line
Terms of service
“You agree that Coroflot may terminate your password, account or use of our service immediately, without prior notice, and remove and discard any content within our service”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Update or remove personal data
Member information page or email Customer Support at the address on the privacy page
Remove public portfolio items
Your account on the site; note they may keep archival copies
Read posted policy changes on the homepage
Homepage and the terms page they ask you to visit periodically
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can shut your account at any time and throw away your files without warning.
Read the exact line
Terms of service
“You agree that Coroflot may terminate your password, account or use of our service immediately, without prior notice, and remove and discard any content within our service”
For example, they could delete your whole portfolio overnight and you would have no chance to download it first.
If someone sues them because of something you posted, you may have to pay their lawyer bills.
Read the exact line
Terms of service
“You agree to and hold Coroflot, and its subsidiaries, affiliates, officers, agents, co-branders or other partners, and employees, harmless from any claim or demand, including reasonable attorneys' fees”
For example, if a photo you uploaded sparks a lawsuit, you could be on the hook for their legal fees.
If they cut you off, they say they will not give money back.
Read the exact line
Terms of service
“In no event shall any refunds be paid.”
For example, if you paid for extra services and they close your account, you keep none of that money.
They may send your name and Social Security number to get a credit report.
Read the exact line
Privacy policy
“to determine if our customers qualify for one of our credit cards, we use their name and social security number to request a credit report.”
For example, applying for something on the site could mean a credit check you did not expect.
They mix your buying history with partner data to build a profile of you.
Read the exact line
Privacy policy
“we combine information about the purchasing habits of users with similar information from our partners, Company Y & Company Z, to create a personalized user profile.”
For example, a purchase on a partner site could change what you see on Coroflot.
Taking work off the public site does not mean they delete every copy.
Read the exact line
Terms of service
“It is possible to remove your content from the website at any time, but Coroflot will retain the right to keep copies for archival or backup purposes.”
For example, a project you unpublish may still sit in their backups.
You still own your work, but they can show, store, and tweak it to run and promote the site.
Read the exact line
Terms of service
“by uploading content or submitting a portfolio or job post, you give us permission to use any content for the purposes of communication, distribution, hosting, displaying publicly, publishing, storing, and modifying”
For example, they could feature your project in marketing while giving you credit.
If they change the rules and you keep using the site, they treat that as you saying yes.
Read the exact line
Terms of service
“You agree that any continued use of this site after such amendment shall signify your acceptance of any such amendment.”
For example, a new rule could apply the next time you log in even if you never got an email.
They say card and SSN fields are encrypted with SSL while you send them.
Read the exact line
Privacy policy
“When our registration/order form asks users to enter sensitive information (such as credit card number and/or social security number), that information is encrypted and is protected with the best encryption software in the industry - SSL.”
For example, the lock icon in the browser should appear on the order form.
They say you still own your photos and portfolio text.
Read the exact line
Terms of service
“Coroflot users will retain rights and ownership to all of their content, unless stated otherwise. Coroflot does not claim ownership over any content of its users.”
For example, you can still use the same images on your own website.
Words to know
Legal words from the lines above, in plain English.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- sensitive personal information
- Data that could hurt you if exposed, like health, religion, sexuality, race, exact location or bank details. For example, telling a chatbot about a medical condition creates sensitive data that some laws protect more strictly.
How we got here · grade F · score 32/100 · 15 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect account and order details plus IP logs, and they may add Social Security numbers, credit reports, and partner purchase data.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They share aggregated demographic information with partners and advertisers.
Do they sell or share your data, and can you opt out?
They say they will not sell or rent except as disclosed, and they share contact info with processors and partners who provide services you sign up for.
What rights do they take over what you type and what the AI makes?
You keep ownership; they get permission to host, display, market, promote, and improve the service, and they may keep backups.
How long do they keep your data after you delete it, and can you delete it in the app?
You can try to update or remove personal data on the member page or by email; they may keep archival copies of content.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They describe creating a personalized user profile from your purchases and partner data, with no controls listed.
Do they commit to basic security, and have they leaked data?
They describe SSL encryption, limited employee access, password screen savers, and servers in a locked cage.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
Policies are undated. Terms say continued use after they post changes means you accept them.
Can they close your account without warning, and can you get your data out first?
They may end your account immediately without notice and discard content; they also say they may keep copies.
If something goes wrong, who pays?
The site is as-is with a broad damage waiver, and you must indemnify them for claims tied to your content or use.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 1,076 words at a college level (Flesch reading ease 42.9); the terms are 4,241 words at a college graduate level.
