Replit
- The policy allows AI training; it does not describe an opt-out.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
They collect code and prompts, use data for ads and ML, can terminate anytime.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Uses your content for AI training with no opt-out
Collected
Account info, your code and prompts, usage, device IDs, payments, and sometimes partner data.
Read the exact line
Privacy policy
“This could include code, project files, text, commands and prompts, and other inputs that you enter. We also collect content and responses generated through the Services”
Training
They use your data to run the service, market to you, and improve machine learning like code generation.
Read the exact line
Privacy policy
“we have a in using Personal Data for product development and internal analytics purposes, to improve the accuracy of our machine learning technologies such as code generation”
Sharing
Staff vendors, other users (your profile and posts), employers, ad partners, and companies in a sale.
Read the exact line
Privacy policy
“Your profile, including your name, username, profile picture, code, and other profile information may be viewable and searchable by other users and search indexed by online search engines.”
Kept
You can ask them to delete data, but they do not say how long they keep it after that.
Read the exact line
Privacy policy
“We take measures to delete your data or maintain it in a form when it is no longer necessary to be kept in identifiable form, unless we are required by law to keep this information for a longer period.”
Controls
You can delete via account settings or email, unsubscribe from marketing, and use a Do Not Sell link.
Read the exact line
Privacy policy
“You can also submit a request to delete your Personal Data through your account settings.”
Fine print
They can close your account; you them.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Opt out of sale or sharing of personal data
Do Not Sell link in the footer of https://replit.com/
of your personal data
Account settings, or email [email protected]
Cancel a paid subscription
Replit account Account Page
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They say they can use your personal data to make their AI code tools better. The policy does not describe a way to turn that off.
Read the exact line
Privacy policy
“to improve the accuracy of our machine learning technologies such as code generation, and otherwise to improve the safety, security, and performance of our Services.”
For example, code and prompts you type could be used to train their code-generation models.
They may share your data with ad partners for personalized ads and treat that as a sale you can opt out of.
Read the exact line
Privacy policy
“We may disclose Personal Data to advertising partners to provide you with personalized ads on third-party platforms, which may constitute a “sale” or “sharing” of Personal Data.”
For example, an ad network could use data about you to show Replit ads on other sites.
They can shut your account for almost any reason they choose, including inactivity.
Read the exact line
Terms of service
“Replit holds, in its sole discretion, the right to suspend or terminate your account. This may occur for various reasons, including but not limited to violations of these Terms, prohibited conduct, inactivity, or any other actions that Replit deems as detrimental”
For example, they could close a quiet account and you would lose access to hosted projects.
If someone sues them because of something you built or posted, you may have to cover their costs.
Read the exact line
Terms of service
“By using the Service, you agree to and hold Replit harmless from any loss or damage incurred by Replit as a result of your use of the Service.”
For example, if an app you hosted caused a legal claim, you could be asked to pay their lawyers.
Stuff you post, including code, can be public unless you change that.
Read the exact line
Privacy policy
“The content you post to the Services, including your code and forum posts, may be displayed on the platform and visible to other users by default.”
For example, a project you thought was just for you might show up for other users or search engines.
You keep ownership, but they get a license to copy and change your content so they can run the product, including through vendors.
Read the exact line
Terms of service
“To provide the Service, you grant Replit the right to copy, display, distribute, perform, reformat, and modify your content as necessary, and the right to such rights to any third party provider for the Service.”
For example, they can copy your repo onto cloud servers and show it to collaborators you invite.
Even private apps can be opened by Replit for support, product improvement, or safety.
Read the exact line
Terms of service
“Replit reserves the the content of your private apps for the purpose of troubleshooting, improving our service, and ensuring the safety and security of the Service.”
For example, a private project with secrets could be accessed if they are debugging or checking safety.
Paid plans keep charging until you cancel in your account.
Read the exact line
Terms of service
“Your subscription will automatically be rebilled at the end of your subscription term at the then-currently applicable rates until you cancel.”
For example, if you forget to cancel, they bill you again at the current price.
There is an in-account way to ask them to delete your personal data.
Read the exact line
Privacy policy
“You can also submit a request to delete your Personal Data through your account settings.”
For example, you can use account settings instead of only sending an email.
Words to know
Legal words from the lines above, in plain English.
- prompt
- What you type or say to an AI to get a response. For example, asking a chatbot to write a birthday message is a prompt, and it may be stored.
- inputs and outputs
- Inputs are what you type, say or upload to an AI; outputs are what it gives back to you. For example, the question you ask a chatbot is an input and its answer is an output, and both may be stored.
- legitimate interest
- A legal reason that lets a company use your data without asking, when it decides its own need outweighs your privacy. For example, an app may analyse how you use it to improve the product, without ever asking you.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- data subject rights
- The legal rights you have over your data, such as seeing it, fixing it, deleting it or moving it. For example, you can email the company and ask for a copy of everything it holds about you.
How we got here · grade D · score 38/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect account data, your code and prompts, usage, device identifiers including mobile ad IDs, payments, and inferred general location from IP.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
They say they use personal data to improve machine learning such as code generation and do not describe an opt-out.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use data for marketing on third-party platforms and use marketing cookies and ad partners.
Do they sell or share your data, and can you opt out?
They may share personal data with advertising partners as a sale or sharing, and they point to a Do Not Sell link.
What rights do they take over what you type and what the AI makes?
You keep your rights; you grant them a license to copy, display, modify, and sublicense content as needed to run the service.
How long do they keep your data after you delete it, and can you delete it in the app?
You can request deletion in account settings or by email, but they do not say it is gone within 30 or 90 days.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use technical, organizational, and physical safeguards but give no audit or leak history and make no security guarantee.
Is there a real age gate, and are teens protected?
You must be at least 13, and if under 18 you need a parent or guardian’s permission. There is no described age-check beyond that.
Will they tell you when the rules change, and is the policy specific?
The policies are dated. Privacy says they will notice material changes as required by law; terms say continued use after posting means you accept.
Can they close your account without warning, and can you get your data out first?
They may suspend or terminate your account at their sole discretion, including for inactivity, and they will not refund fees already paid.
If something goes wrong, who pays?
The service is as-is with broad liability limits, and you agree to indemnify them for claims from your use.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew until you cancel on the Account Page. They allow a full refund of the most recent subscription charge within 30 days; usage fees are not refundable.
The privacy policy is 2,828 words at a college graduate level (Flesch reading ease 30.9); the terms are 3,472 words at a college graduate level.
