Immunefi
- The documents do not say whether your data trains AI.
- The documents do not say whether your data is used for ads.
- The policy allows data sales or sharing; it does not describe an opt-out.
- The documents do not say who can read your content.
You must be 18+, they collect account and usage data, can share with partners.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Sells or shares your data with no opt-out
Collected
Email, name, blockchain addresses, IP, device IDs, usage data, and sometimes social-login contacts.
Read the exact line
Privacy policy
“Personally identifiable information may include, but is not limited to: Email address First name and last name Usage Data Blockchain address(es)”
Training
They use your data to run the site, contact you, send similar offers, analyze trends, and improve the service.
Read the exact line
Privacy policy
“We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service”
Sharing
Service providers, affiliates, and business partners can get your information; public areas are visible to others.
Read the exact line
Privacy policy
“With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.”
Kept
They keep personal data as long as they say they need it; no clear delete-in-app timeline.
Read the exact line
Privacy policy
“The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.”
Controls
You can refuse cookies in your browser; questions go to privacy@immunefi.com. No training or memory controls.
Read the exact line
Privacy policy
“You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent.”
Fine print
waiver, $100 cap, and they can ban you anytime.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Refuse cookies in your browser
Browser cookie settings; privacy policy Tracking Technologies and Cookies section
Email privacy questions or requests
privacy@immunefi.com or https://immunefi.com/privacy-policy
Avoid social login if you do not want contacts shared
Account registration via Google, Facebook, or Twitter
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
You cannot sue them in court or join a .
Read the exact line
Terms of service
“Any dispute, controversy or claim arising out of, relating to, or in connection with the User’s use of the Website or the Services, or in connection with this Agreement”
For example, if you lost funds using their interface.
If someone sues them because of how you used the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“The User agrees to , and the Company, its affiliates, licensors, and service providers, and its and their respective officers, directors, employees”
For example, if a report you posted led to a lawsuit against Immunefi, they could demand you cover their lawyers.
If they are at all, they say they will not pay more than $100 or what you paid them in six months.
Read the exact line
Terms of service
“IN NO EVENT WILL THE COLLECTIVE OF THE COMPANY AND ITS SUBSIDIARIES AND AFFILIATES, AND THEIR LICENSORS, SERVICE PROVIDERS, EMPLOYEES, AGENTS, OFFICERS, AND DIRECTORS, TO ANY PARTY”
For example, even if a site bug cost you far more, their terms try to cap payouts at $100.
They can shut off your access whenever they want, even without a stated reason.
Read the exact line
Terms of service
“Terminate or suspend your access to all or part of the Website for any or no reason, including without limitation, any violation of these Terms of Use.”
For example, they could block your account or IP overnight with no warning.
Your information can go to business partners for offers. The policy does not describe an opt-out for that sharing.
Read the exact line
Privacy policy
“We may share Your information with Our business partners to offer You certain products, services or promotions.”
For example, a partner could get your details so they can pitch you related products.
Social login can pull more than your name, including contacts from that account.
Read the exact line
Privacy policy
“We may collect Personal data that is already associated with Your Third-Party Social Media Service's account, such as Your name, Your email address, Your activities or Your contact list associated with that account.”
For example, signing in with Facebook could let them store your Facebook contact list.
If they change the rules and you keep using the site, they treat that as you agreeing, even if you missed the post.
Read the exact line
Terms of service
“The User’s continued use of the Website or the Services following the posting of revised Terms of Use means that the User accepts and agrees to the changes.”
For example.
You must be 18 or the legal adult age where you live. They rely on you saying so.
Read the exact line
Terms of service
“By using this Website, the User represents and warrants that the User is at least the higher of legal age to form a binding contract with the Company in the User’s applicable or eighteen (18) years of age”
For example, a 17-year-old who clicks through is still treated as having promised they are old enough.
They say they try to protect data with ordinary commercial measures but do not promise it will stay safe.
Read the exact line
Privacy policy
“While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.”
For example, if a breach happens, they have already warned they cannot guarantee security.
You can block cookies in your browser, but some parts of the site may stop working.
Read the exact line
Privacy policy
“You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent.”
For example, turning off cookies might break login or saved preferences.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- governing law
- Which country's or state's laws are used to settle any dispute, no matter where you live. For example, a user in Ohio may find the terms are judged under California law.
How we got here · grade F · score 29/100 · 15 of 15 policy answers backed by a verified quote · 7 not stated
What does the app collect beyond what it needs to work?
They collect account details, blockchain addresses, usage data, IP addresses, and device identifiers. Social login may also bring a contact list.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Not stated in the documents.
Do they sell or share your data, and can you opt out?
They share personal information with affiliates and business partners for products and promotions, and they do not describe an opt-out.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use commercially acceptable means to protect data but cannot guarantee absolute security. No audit or leak history is described.
Is there a real age gate, and are teens protected?
You must be 18 or the legal age to contract. They rely on you representing that; no extra age check is described.
Will they tell you when the rules change, and is the policy specific?
Terms changes take effect when posted and continued use means you accept. Privacy says they may email or post a notice, but the privacy page has no last-updated date.
Can they close your account without warning, and can you get your data out first?
They may terminate or suspend access for any or no reason, and they may disable usernames or block IPs at any time in their sole discretion.
If something goes wrong, who pays?
The service is “as is,” liability is capped at $100 or six months of payments, and you must indemnify them for claims tied to your use.
Do subscriptions renew on their own, and can you get a refund?
The documents describe blockchain network fees, not Immunefi subscriptions, auto-renewal, or refunds.
The privacy policy is 2,409 words at a college level (Flesch reading ease 45.5); the terms are 7,244 words at a professional or legal expert level.
