discuss.elastic.co
- The policy says your content is not used for AI training.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
They collect account, device, and partner data, say they do not train generative AI on it, but take a broad license and can close accounts anytime.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Contact and work details, billing, device IDs, IP, cookies, and data from partners.
Read the exact line
Privacy policy
“This information may include unique identification numbers and other information about the specific device you are using, such as the hardware model, operating system version, web-browser software, your Internet Protocol (IP) address/MAC address/device identifier”
Training
Used for accounts, ads, personalization, and AI bots; they say they do not train generative AI on it.
Read the exact line
Privacy policy
“We do not use or allow the use of your personal data to train any generative artificial intelligence model.”
Sharing
Elastic companies, vendors, and business partners can get it; they say they do not sell it.
Read the exact line
Privacy policy
“We do not sell your personal data to any third parties. We also do not "share" your personal information as that term is defined in the .”
Kept
They keep it as long as they say they need it; deletion is by request, not a set clock.
Read the exact line
Privacy policy
“We retain information collected in connection with the Properties for so long as necessary to fulfill the purposes outlined in this Statement or where we have an ongoing legitimate business need to do so.”
Controls
You can ask for access, correction, or deletion through their privacy form.
Read the exact line
Privacy policy
“To exercise your rights, you may raise a request by submitting this form. Please identify yourself and specify your request.”
Fine print
Must be 18; they can close accounts with no notice; you them; capped at $100.
Read the exact line
Terms of service
“Elasticsearch reserves the right, in its sole discretion, to deny, restrict, suspend, discontinue, or terminate your account, with or without prior notice or explanation, for any or no reason, without any to you.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Request access or deletion of your data
Privacy statement: submit the request form linked under “Your ” / US state rights
Unsubscribe from marketing emails
Follow the instructions in the email or unsubscribe from all Elastic email lists
Pause or stop AI marketing bot chats
During Elastic Bot or voice-assistant marketing conversations, pause, stop, or opt out as they describe
Contact privacy or legal
Privacy form or postal mail to Elastic N.V., Attn: Privacy Team, Keizersgracht 281, Amsterdam; legal@elastic.co for terms
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Anything you post or upload can be used by them forever, including by others they license it to.
Read the exact line
Terms of service
“you hereby grant to Elasticsearch (to the extent permitted by applicable law) a , , fully paid up, , worldwide, non-exclusive, transferrable and fully ”
For example, a comment you leave on a forum could be reused in marketing without paying you.
If someone sues them over your use of the site or your posts, you may have to pay their legal bills.
Read the exact line
Terms of service
“you agree to and hold Elasticsearch and its officers, directors, employees, affiliates, subsidiaries, agents, licensors, and business partners”
For example, if a post you made leads to a lawsuit, you could be on the hook for their lawyers.
If the site harms you, they say they will not pay more than one hundred dollars.
Read the exact line
Terms of service
“IN NO EVENT SHALL THE TOTAL CUMULATIVE OF THE ELASTICSEARCH PARTIES UNDER THE AGREEMENT EXCEED US$100.”
For example, if a bug wipes data you posted, their stated cap is $100.
They can shut your account at any time and do not have to warn you or explain.
Read the exact line
Terms of service
“terminate your account, with or without prior notice or explanation, for any or no reason, without any to you.”
For example, your login could stop working overnight with no email.
Your data can go to ad networks so they can show you targeted ads.
Read the exact line
Privacy policy
“We might also share some of your information with marketing service providers and digital marketing networks to present advertisements that might interest you.”
For example, visiting a product page could lead to Elastic ads following you on other sites.
Partners who sell or promote Elastic products can receive your information.
Read the exact line
Privacy policy
“We may share your information with our partners, such as distributors and resellers, and to other business partners”
For example, asking about a product could mean a reseller gets your email.
Forum and blog posts are treated as public, not private.
Read the exact line
Terms of service
“You acknowledge that your User Content and any information you post is not confidential and will be publicly accessible to any and all users of the Site.”
For example, a support question you post could be readable by anyone on the site.
They say your personal data is not used to train generative AI.
Read the exact line
Privacy policy
“We do not use or allow the use of your personal data to train any generative artificial intelligence model.”
For example, a chat with Elastic Bot should not become training text for a public chatbot.
They claim they do not sell personal data under California’s definition.
Read the exact line
Privacy policy
“We do not sell your personal data to any third parties. We also do not "share" your personal information as that term is defined in the .”
For example, they say they will not sell a list of your details to a data broker as a “sale.”
You must say you are 18; kids under 13 are banned, but there is no extra age check described.
Read the exact line
Terms of service
“By using the Site, you represent and warrant that you are 18 years of age or older. If you are under the age of 13 years old, you may not use the Site.”
For example, a 16-year-old could still tick through if they claim to be 18.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- CCPA
- California's privacy law, which gives residents the right to see, delete and stop the sale of their data. For example, a Californian can ask the app to stop selling their data and it must comply.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
How we got here · grade B · score 49/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect account and contact details plus device IDs, IP address, cookies, usage stats, and some third-party data.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
They say they do not use personal data to train any generative AI model.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use personalized ads and share information with marketing networks and ad tools.
Do they sell or share your data, and can you opt out?
They say they do not sell under CCPA, but they share with vendors and business partners; you can object or use state rights.
What rights do they take over what you type and what the AI makes?
Posts and uploads get a perpetual, irrevocable, sublicensable license for any purpose; public posts are public.
How long do they keep your data after you delete it, and can you delete it in the app?
You delete by submitting a form; they keep data as long as they have a business need.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use technical and organizational measures but do not describe an independent audit in these pages.
Is there a real age gate, and are teens protected?
You must be 18 by your own statement; under 13 is banned, with no extra age check described.
Will they tell you when the rules change, and is the policy specific?
The privacy statement is dated and they say they will notify of material changes, but retention stays vague; site terms treat continued use as acceptance.
Can they close your account without warning, and can you get your data out first?
They can deny or terminate your account for any or no reason, with or without notice.
If something goes wrong, who pays?
The site is as-is, liability is capped at $100, and you must indemnify them for many claims.
Do subscriptions renew on their own, and can you get a refund?
These site terms cover the website and free trials; paid Elastic Cloud is under a separate agreement.
The privacy policy is 4,561 words at a professional or legal expert level (Flesch reading ease 7.8); the terms are 5,840 words at a professional or legal expert level.
