Donatello
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
Mismatched restaurant and clothing-site policies; comments kept forever, you them, terms can change anytime.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Comment text, your IP, browser info, and cookies if you comment or log in.
Read the exact line
Privacy policy
“When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.”
Training
They use it for spam checks, comments, login cookies, and may send an email hash to Gravatar.
Read the exact line
Privacy policy
“An string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it.”
Sharing
Spam tools and Gravatar may see data; embedded other sites can track you like a visit.
Read the exact line
Privacy policy
“Visitor comments may be checked through an automated spam detection service.”
Kept
Comments and their extra data are kept forever so they can auto-approve later comments.
Read the exact line
Privacy policy
“If you leave a comment, the comment and its metadata are retained indefinitely.”
Controls
If you have an account or comments, you can ask for an export or for them to erase some data.
Read the exact line
Privacy policy
“If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.”
Fine print
They can change the shop terms anytime; you them; India courts; no .
Read the exact line
Terms of service
“These Terms of Use can be modified at any time without assigning any reason. It is your responsibility to periodically review these Terms of Use to stay informed of updates..”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Request a copy or of personal data
Privacy policy: request if you have an account or have left comments
Avoid uploading photos with GPS in them
Privacy policy Media section
Contact them about the terms
Contact information provided on the website (terms)
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Anything you write in a comment, plus extra data around it, is stored with no end date.
Read the exact line
Privacy policy
“If you leave a comment, the comment and its metadata are retained indefinitely.”
For example, a comment you posted years ago can still sit on their servers with your IP-related metadata.
If someone sues them because of something you did on the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“You shall and Platform Owner, its affiliates, group companies (as applicable) and their respective officers, directors, agents, and employees, from any claim or demand, or actions including reasonable attorney's fees”
For example, if a post you made leads to a lawsuit, they can ask you to cover lawyer fees.
They can change the rules whenever they want and you are expected to keep checking.
Read the exact line
Terms of service
“These Terms of Use can be modified at any time without assigning any reason. It is your responsibility to periodically review these Terms of Use to stay informed of updates..”
For example, a new fee or restriction could appear and they may say you already agreed by using the site.
They say the site and services come with no promise they work or are correct.
Read the exact line
Terms of service
“Neither we nor any third parties provide any or guarantee as to the accuracy, timeliness, performance, completeness or suitability of the information and materials offered on this website or through the Services, for any specific purpose.”
For example, if a product page is wrong, they try to avoid responsibility for that error.
They may send a fingerprint of your email to another company to fetch a profile picture.
Read the exact line
Privacy policy
“An string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it.”
For example, commenting with your email could let Gravatar match you to a public avatar.
Videos or widgets from other sites can track you as if you visited those sites.
Read the exact line
Privacy policy
“These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content”
For example, watching an embedded video could let that video site set cookies on your browser.
You can ask them to delete personal data, but they may keep some for legal or security reasons.
Read the exact line
Privacy policy
“You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.”
For example, you email them to wipe your profile, but they might keep records they say the law requires.
If you sue, you would have to do it in Mumbai courts under Indian law.
Read the exact line
Terms of service
“All disputes arising out of or in connection with these Terms shall be subject to the exclusive of the courts in Mumbai and Maharashtra.”
For example, a buyer outside India would still be pointed to courts in Mumbai.
Leaving a comment also hands over your IP address and what browser you use.
Read the exact line
Privacy policy
“When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.”
For example, writing “nice food” also stores your IP for spam checks.
If you use paid services, you agree to pay their charges; refunds are not described.
Read the exact line
Terms of service
“You agree to pay us the charges associated with availing the Services.”
For example, placing an order means you accept the listed charges with no refund rules here.
Words to know
Legal words from the lines above, in plain English.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- venue
- The specific court or city where any lawsuit must be filed, which may be far from where you live. For example, a user in Florida may have to travel to a court in San Francisco to sue.
- governing law
- Which country's or state's laws are used to settle any dispute, no matter where you live. For example, a user in Ohio may find the terms are judged under California law.
How we got here · grade F · score 33/100 · 15 of 15 policy answers backed by a verified quote · 9 not stated
What does the app collect beyond what it needs to work?
Besides comment form fields they collect IP address, browser user agent, and cookies for login and comments.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Embedded content from other sites may use cookies and third-party tracking.
Do they sell or share your data, and can you opt out?
They share an email hash with Gravatar and may send comments to a spam service; they do not describe selling data.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Comments are kept indefinitely; you can request export or erasure, not an in-app 30-day wipe.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
Not stated in the documents.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
Terms can be changed anytime without a reason; you must check for updates. Privacy page has no date.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
No warranties, use at your own risk, and you must indemnify them for claims from your breach or third-party rights.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 592 words at a fairly hard level (Flesch reading ease 59.8); the terms are 991 words at a college graduate level.
