Hugging Face
- The documents do not say whether your data trains AI.
- The policy rules out using your data for targeted ads.
- Data is shared only with the providers who run the service.
- The policy describes staff access for safety and legal checks.
You own your content, they keep usage and account data, can close you anytime, and paid fees are non-refundable.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, posts, payments, IP, cookies, device details, and some third-party data.
Read the exact line
Privacy policy
“The Company automatically records information from your use of the Services such as: information about your Use of the Services, your session (date, location), your IP address,”
Training
They use it to run the site, improve products, do research, email you, and keep things secure.
Read the exact line
Privacy policy
“to operate and improve the Services by providing you with more effective customer service, making the Services easier to use by eliminating the need for you to enter the same information repeatedly; performing research and analysis aimed at improving the Services, or other products and technologies of the Company;”
Sharing
Affiliates and listed vendors can see it; they say they will not sell, rent, or lease personal info.
Read the exact line
Privacy policy
“The Company will not sell, rent or lease your Personal Information except as provided for by this Policy.”
Kept
If you cancel, they say they try to delete your repos within 90 days, but backups may remain.
Read the exact line
Terms of service
“Upon cancellation of your Account, we will use commercially reasonable efforts to delete your information and Content of your own Repositories, whether public or private, within 90 days.”
Controls
You can edit your profile or email privacy@huggingface.co to access, change, or erase data.
Read the exact line
Privacy policy
“You may access, modify or delete the Information we collected by editing your profile or controlling the content that you share at any time.”
Fine print
Rules change 10 days after posting; they can close you anytime; fees are non-refundable.
Read the exact line
Terms of service
“We may do the same, and we reserve the right to suspend or terminate your access to the Services anytime with or without cause, and at our own discretion, with or without notice.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Edit or delete profile content in the app
Edit your profile or control the content you share
Request full of personal information
Send a written request to privacy@huggingface.co
Cancel your account when you want
Cancel your Account (terms say at your sole discretion)
Unsubscribe from marketing emails
Follow the instructions at the bottom of an email from the Company
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can shut your account off for any reason, or none, and they do not have to warn you first.
Read the exact line
Terms of service
“We may do the same, and we reserve the right to suspend or terminate your access to the Services anytime with or without cause, and at our own discretion, with or without notice.”
For example, you could lose Hub access overnight with no email explaining why.
If you pay, you generally do not get money back.
Read the exact line
Terms of service
“All fees are non-refundable and exclusive of any applicable taxes, which the Customer is solely responsible to pay.”
For example, if you upgrade then cancel a week later, they keep the month’s fee.
If someone sues them because of how you used the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to , us and Related Parties from all claims, , and expenses, including attorney's fees, arising out or in connection with your use of (or inability to use) the Services”
For example, if a model you uploaded sparks a lawsuit, they can ask you to cover their lawyers.
Public repos can be copied and reused by anyone on the Hub forever, even if you later change your mind.
Read the exact line
Terms of service
“If you decide to set your Repository public, you grant each User a , , worldwide, , non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of your Content through our Services and functionalities;”
For example, a public dataset you later want private can still be used by people who already copied it.
If they post a new privacy policy, keeping using the site after 10 days counts as saying yes.
Read the exact line
Privacy policy
“Your continued use of the Services 10 days following such posting means you accept those changes.”
For example, they could add a new use of your data and you accept it just by logging in later.
They may give , non-identifying stats to advertisers, sometimes for pay.
Read the exact line
Privacy policy
“The Company may disclose Information (with or ) to third parties, including advertisers and partners, for purposes including, but not limited to, targeting advertisements.”
For example, they could tell an advertiser how many people used a feature, without naming you.
There is no fixed delete-by date while you use the service; they keep data as long as they say they need it.
Read the exact line
Privacy policy
“We retain your Information for as long as necessary to deliver the Services, to comply with any applicable legal requirements, to maintain security and prevent incidents and, in general, to pursue our .”
For example, old logs might stay after you stop using a model if they call it security or research.
You keep ownership of what you upload; their license is mainly to run the Hub as described.
Read the exact line
Terms of service
“You own the Content you create! We will not sell your Content, nor will we use it in any other way as permitted under these Terms.”
For example, a private model you upload is still yours, not Hugging Face’s product to sell as theirs.
They say they do not sell your personal details like a mailing list.
Read the exact line
Privacy policy
“The Company will not sell, rent or lease your Personal Information except as provided for by this Policy.”
For example, they should not sell your email to a random marketing company.
If your browser sends Do Not Track, they say they will not use cookies or ads that way.
Read the exact line
Privacy policy
“The Company honors "do not track" signals and does not track, use cookies, or use advertising when a “do not track” mechanism is in place.”
For example, turning on DNT in your browser is supposed to stop their advertising cookies.
You have to be 13 or older to make an account; they rely on you telling the truth.
Read the exact line
Terms of service
“In order to create an Account for yourself or for your Organization on our Website, you must be a natural person of at least age 13, or a legal entity duly registered.”
For example, a 12-year-old is not allowed to sign up even if they type a fake birthday.
Words to know
Legal words from the lines above, in plain English.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- legitimate interest
- A legal reason that lets a company use your data without asking, when it decides its own need outweighs your privacy. For example, an app may analyse how you use it to improve the product, without ever asking you.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
How we got here · grade A · score 58/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect account details, posts, payments, plus usage, session, IP, cookies, and device type.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
They say they may access private content without consent for security, legal duties, or similar legitimate interests.
Are you profiled or tracked for advertising?
They honor Do Not Track and say they do not let third parties collect personal info for ads without separate consent. They may share anonymous stats with advertisers.
Do they sell or share your data, and can you opt out?
They say they will not sell, rent, or lease personal information. They share with affiliates and named service providers.
What rights do they take over what you type and what the AI makes?
You own what you create. You give them a license to use it to provide the services. Public repos also license other users forever.
How long do they keep your data after you delete it, and can you delete it in the app?
You can edit your profile or email them to erase data. After you cancel, they say they try to delete your own repos within 90 days.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use generally accepted industry standards and administrative, physical, and technical safeguards, but they do not guarantee security.
Is there a real age gate, and are teens protected?
You must be at least 13. They are not aimed at kids under 13 and will try to delete data if they learn someone is under 13.
Will they tell you when the rules change, and is the policy specific?
The policies are dated. Changes take effect 10 days after posting, and continued use means you accept them.
Can they close your account without warning, and can you get your data out first?
They can suspend or terminate you anytime, with or without cause, with or without notice. You can cancel whenever you want.
If something goes wrong, who pays?
Services are as-is, liability is capped at 12 months of fees or $50 for free use, and you must indemnify them for claims from your use.
Do subscriptions renew on their own, and can you get a refund?
Plans are billed in advance monthly. All fees are non-refundable. Prices stay fixed for the current term then can change.
The privacy policy is 2,453 words at a college graduate level (Flesch reading ease 34.9); the terms are 4,610 words at a college graduate level.
