Intigriti
- The documents do not say whether your data trains AI.
- The documents do not say whether your data is used for ads.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
Bug-bounty terms: they keep CRM data for years, can close you instantly, and cap their at €1,500.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Name, contact, job, payments, emails, chats, site activity, metadata, and lead data from other companies.
Read the exact line
Privacy policy
“Currently, in the context of lead generation and prospect management, we might collect personal data from external sources.”
Training
They use it for contracts, marketing, fraud checks, support, and machine-learning analysis of usage.
Read the exact line
Privacy policy
“improve the performance of our websites, products and services and customer support, identify potential customers, opportunities and potential new product areas, ascertain trends, improve our websites’ functionality, improve our security, and provide us with general business intelligence, including through the use of machine learning technology.”
Sharing
Staff, payment firms, authorities, advisors, and suppliers who must follow their instructions.
Read the exact line
Privacy policy
“Furthermore, we use various suppliers and service providers and may share personal data with them, where this is needed or useful to enable them to provide their assistance or services to us”
Kept
Many records are kept about 10 years after a deal ends; marketing data about 2 years.
Read the exact line
Privacy policy
“As from termination of the agreement with the concerned customer: retention during the period relevant for legal action (10 years).”
Controls
You can ask by email to access, fix, delete, or object; newsletters have an unsubscribe link.
Read the exact line
Privacy policy
“In order to exercise your rights contact us per email via: privacy@intigriti.com.”
Fine print
They can close your account at once; their is capped at €1,500; Belgian courts apply.
Read the exact line
Terms of service
“Intigriti may, without prejudice to any other rights it may have, in its sole discretion, at any time and with immediate effect, suspend or permanently disable access to your account”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Email to use rights (access, delete, object)
privacy@intigriti.com
Unsubscribe from newsletters
Unsubscribe button at the bottom of the email
Ask them to stop marketing contact
Contact details in the Introduction of the privacy statement
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can lock you out of the platform right away, without warning, if they think you broke the rules.
Read the exact line
Terms of service
“Intigriti may, without prejudice to any other rights it may have, in its sole discretion, at any time and with immediate effect, suspend or permanently disable access to your account and/or to the Platform or any part thereof”
For example, if they suspect you shared a bug report outside the platform, your login can stop working the same day.
If they mess up, they say they will not pay you more than 1500 euros in a year.
Read the exact line
Terms of service
“Intigriti’s to you or to any third party is limited to a maximum amount of 1500,00 EUR per claim and per year in total.”
For example, if a platform outage costs you a large bounty, they still cap what they will pay at 1500 euros.
If you fight with a company on the platform, you agree not to make Intigriti pay for that fight.
Read the exact line
Terms of service
“lf you have a dispute with one or more Companies, you release and Intigriti from claims, demands and damages (actual and consequential) of every kind of nature”
For example, if a client refuses a bounty and you sue, you cannot drag Intigriti into paying your legal bills.
Customer and similar records can sit in their files for a decade after the relationship ends.
Read the exact line
Privacy policy
“As from termination of the agreement with the concerned customer: retention during the period relevant for legal action (10 years).”
For example, your old invoices and emails with them could still be stored in 2036.
You still own your write-up, but they get a forever right to use and share it inside the company and with the client.
Read the exact line
Terms of service
“to Intigriti an , in time unlimited, non-exclusive, worldwide, license to use, reproduce, copy, display, modify, translate and disclose (within its organisation and to the Company to whom your Submission is addressed) any content of your Submissions”
For example, they can keep and reuse your vulnerability report even after you leave the platform.
They may pull your name, phone, email, and job from sales-data companies without you filling a form.
Read the exact line
Privacy policy
“We have two third-party resources where we might collect the above mentioned personal data indirectly:”
For example, a recruiter profile on ZoomInfo could land you on their prospect list.
They do not promise the site will work or be safe, and they drop most .
Read the exact line
Terms of service
“You agree that you are accessing the Platform at your own risk, and that it is being provided to you "AS IS" and "AS AVAILABLE".”
For example, if the platform is down when you try to file a report, they say that is your risk.
They say they will warn you before big privacy-rule changes.
Read the exact line
Privacy policy
“If we make any material updates, we will provide you with a prior notice regarding by email or on the platform.”
For example, if they start keeping data longer, they should email you or post a notice first.
You must be 18, or 16 with a parent’s OK, to register as a researcher.
Read the exact line
Terms of service
“have reached the age of 18 years old (or have reached the aged of 16 years old and have permission from your parent or guardian);”
For example, a 15-year-old cannot honestly create a researcher account.
Newsletter mail has a one-click opt-out.
Read the exact line
Privacy policy
“You may at any time unsubscribe, by clicking on the unsubscribe button included at the bottom of the applicable communication”
For example, you can stop their news emails without writing to support.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
How we got here · grade C · score 44/100 · 14 of 15 policy answers backed by a verified quote · 4 not stated
What does the app collect beyond what it needs to work?
They collect account and contact details plus usage, metadata, chats, payments, and lead data from third-party databases.
Does it record your voice, face or body, and what happens to that?
The documents do not say they collect voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Not stated in the documents.
Do they sell or share your data, and can you opt out?
They share with staff, payment firms, authorities, advisors, and suppliers who process only on their instructions, plus possible sale of the business.
What rights do they take over what you type and what the AI makes?
You keep ownership of submissions, but you grant Intigriti an irrevocable, unlimited license to use them to run the platform.
How long do they keep your data after you delete it, and can you delete it in the app?
Many categories are kept for about 10 years after a contract ends; deletion is by written request, not a simple in-app wipe.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use reasonable efforts to keep services safe and that researchers must use technical measures, but no audit or bug-bounty-for-themselves program is described in these texts.
Is there a real age gate, and are teens protected?
Researchers must be 18, or 16 with parent permission; the site is not directed at children. Age is declared, not verified in these documents.
Will they tell you when the rules change, and is the policy specific?
The privacy statement is dated and promises prior notice by email or on the platform for material updates; terms promise 15 days’ notice for big changes.
Can they close your account without warning, and can you get your data out first?
They may suspend or permanently disable your account at any time with immediate effect.
If something goes wrong, who pays?
The platform is as-is, liability is capped at 1500 euros, and you indemnify Intigriti for disputes with companies.
Do subscriptions renew on their own, and can you get a refund?
These documents describe bounties paid to researchers, not a user subscription that auto-renews.
The privacy policy is 3,027 words at a college graduate level (Flesch reading ease 38.9); the terms are 5,388 words at a college graduate level.
