DealHub

Summary

The provided diff does not include the actual contract language. It only states:

> “Added approximately 790 words to the document”

Accordingly, it is not possible to determine:

• Which provisions were added, deleted, or replaced;
• Whether liability, confidentiality, intellectual-property, security, or termination rights changed;
• Whether customer data may be used for advertising, analytics, product improvement, or other purposes; or
• Whether customer data may be used to train, fine-tune, evaluate, or otherwise develop AI or machine-learning models.

AI Training and Data-Use Review

No substantive AI-related language is included in the supplied diff. Therefore, no conclusion can be reached about whether the revised terms:

• Permit or prohibit training AI models using customer data;
• Distinguish between customer content, personal data, prompts, outputs, metadata, or de-identified data;
• Allow the provider to use data for generalized or cross-customer model training;
• Require customer consent or provide an opt-out;
• Restrict human review or use by service providers;
• Require deletion of training data after termination;
• Give the customer ownership or control over models trained using its data; or
• Address confidentiality, data protection, or security obligations related to AI training.

Information Needed

Please provide the complete marked-up text showing the additions, deletions, and replacements—for example:

• Additions in {curly braces};
• Deletions in [square brackets]; and
• Replacements in [deleted text]{added text}.

Once the actual language is provided, the analysis can identify the material legal changes, explain their practical effect, and highlight any new or expanded rights to use customer data for AI model training.

Summary

Key Change

• Approximately 744 words have been removed from the document.
• Because the deleted language is not provided, it is not possible to determine which contractual rights, obligations, limitations, or protections were affected.

AI Training and Customer Data

• The available diff does not identify whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
• It is therefore unclear whether the deletion:
• Removes a prohibition on using customer data for AI training;
• Removes a customer consent or opt-out mechanism;
• Expands or narrows the provider’s rights to use customer content;
• Changes whether de-identified, aggregated, or anonymized data may be used;
• Alters restrictions on human review or access to customer data;
• Changes data-retention or deletion obligations related to model training; or
• Affects ownership of inputs, outputs, models, or model-generated derivatives.

Potential Legal Risks

The deletion could create material risk if it removed any of the following:

• Purpose limitations restricting use of customer data to providing the services;
• Express prohibitions against using customer content to train general-purpose or third-party AI models;
• Consent, notice, or opt-out requirements for AI training;
• Confidentiality and security protections applying to data used in model development;
• Deletion and retention commitments after termination;
• Data-processing or privacy compliance provisions addressing personal information;
• Indemnities or liability provisions covering unauthorized data use; or
• Ownership and license limitations on customer content and outputs.

Conversely, if the deletion removed broad provider rights, it may reduce the provider’s ability to use data for service improvement but could also create ambiguity about permitted analytics or product development uses.

Assessment Limitation

A reliable legal analysis requires the actual deleted text, or at least the surrounding provisions and the new replacement language. The notation “Removed approximately 744 words” alone does not reveal the substance or legal effect of the change.

Structured Summary of Key Changes and Risks

1. Apparent replacement of the agreement’s identity and scope

The opening provisions are heavily altered. The former references to the “MASTER SUBSCRIPTION AGREEMENT (MSA)” are replaced with terms such as:

• “Solutions”
• “Configure”
• “Price”
• “Quote”
• “(CPQ) Contract”
• “Management”
• “DealRoom”
• “Billing”
• “Revenue”
• References to numerous products, integrations, and websites

The agreement’s title, product scope, and governing contractual document are therefore unclear. The additions appear to include website navigation and marketing content—such as “Company,” “Blog,” “Careers,” “Login,” and “Contact”—inside operative contract language.

Risk: The document may be internally corrupted or improperly merged with website content. It may be difficult to determine which provisions are legally binding, which products are covered, and which entity is actually contracting.

2. Acceptance and authority provisions are materially compromised

The acceptance language has been replaced or interspersed with website and product terms. The original requirement that the user have authority to bind a company remains conceptually present, but the surrounding text is no longer coherent.

Risks:

• Uncertainty over whether acceptance is valid.
• Potential ambiguity about which legal entity is the customer.
• Difficulty proving what terms were accepted and on whose behalf.
• Possible dispute over whether particular products or services are included.

3. Data-processing provisions appear substantially retained

The provisions defining “Your Data,” “Personal Data,” and “Breach Incident” remain visible. The provider continues to undertake obligations that resemble a GDPR data-processing addendum, including:

• Processing Personal Data only on documented customer instructions.
• Confidentiality obligations for authorized personnel.
• Article 32 security measures.
• Assistance with data-subject requests and GDPR compliance.
• Return or deletion of Personal Data after termination.
• Audit and compliance-information rights.

However, because the agreement has been interspersed with unrelated additions, the enforceability and completeness of these obligations may be uncertain.

4. AI-model training and use of customer data

No express provision authorizing or prohibiting the use of customer data to train AI models appears in the supplied diff.

There is no clear language addressing:

• Training, fine-tuning, or improving artificial-intelligence or machine-learning models.
• Use of customer data, prompts, outputs, telemetry, or usage data for model development.
• Whether data is aggregated, anonymized, or de-identified before such use.
• Opt-out rights or customer consent.
• Ownership or confidentiality of AI inputs and outputs.
• Restrictions on human review or use by subprocessors.

Risk: The absence of an express AI-use restriction leaves uncertainty. Although the GDPR-style provisions may limit processing to documented instructions, they do not clearly resolve whether de-identified, aggregated, or service-generated data may be used for AI training. A customer should seek an explicit clause stating that customer data will not be used to train or improve models without prior written consent, or clearly defining any permitted use.

5. Commercial and liability provisions remain, but context is uncertain

The text still includes provisions concerning:

• Payment disputes and suspension.
• Use of the customer’s logo.
• Confidentiality.
• Indemnification and exclusive remedies.
• Limitation of liability.
• Termination and survival.

Because the surrounding agreement is materially disordered, it is unclear whether these provisions apply consistently across all products and subscriptions. The logo license also remains broad enough to permit website and marketing use unless separately restricted.

6. Overall recommendation

The document should not be accepted in its current form without clarification. Request a clean, consolidated agreement that identifies:

1. The contracting parties and effective date.

2. The covered products and order forms.

3. The governing data-processing terms.

4. Explicit AI training and data-use restrictions.

5. Applicable liability, indemnity, termination, and marketing permissions.

Key Changes and Legal Risks

1. Broader consent through use and job applications

• The revised language states that users consent to the Privacy Policy and the collection, processing, and sharing of Personal Information when they:
• Use the Site or Service; or
• Apply for an open position or submit personal details, including a CV.
• The prior language indicated that Personal Information was not required merely to access general website information. The new language retains that users are not legally obligated to provide information, but more clearly ties submission or use of the Site/Service to consent.

Risk: Consent may be challenged as insufficiently specific or freely given, particularly where continued use is treated as acceptance or where employment applicants have limited practical choice. Separate consent mechanisms may be needed for marketing, recruiting, sensitive data, and other legally distinct purposes.

2. Express opt-out instruction

• A new provision states that users who do not agree to the Privacy Policy must not access or use the Site or Service.

Risk: This strengthens the company’s contractual position but does not necessarily satisfy privacy-law requirements for valid consent. It may also create tension with rights that cannot lawfully be conditioned on consent.

3. Unilateral policy-change right

• The company may now change the Privacy Policy at its discretion.
• Changes become effective ten days after posting, and continued use of the Services constitutes acceptance.

Risk: This permits material changes to data practices with relatively limited notice and no express requirement for direct notification or renewed consent. Changes affecting sensitive data, sharing, marketing, or AI-related processing may require more than passive acceptance under applicable law.

4. Revised description of collection methods

• The prior list of collection channels (including email, SMS, and named platforms) is replaced with broader language covering “any applicable communication channel.”
• The policy now expressly states that Personal Information may be collected from users through the Site and Service, while also covering information submitted in applications and CVs.

Risk: “Any applicable communication channel” is broad and potentially unclear. The policy should identify categories of data, sources, purposes, recipients, retention periods, and international transfers with sufficient specificity.

5. Use and disclosure language

• The revised text focuses on using Personal Information to provide the Service, respond to requests, and share information with people or organizations the user specifically asks the company to contact.
• Some prior wording concerning disclosure appears reorganized or removed, so the final consolidated policy should be reviewed for omissions and internal numbering consistency.

6. AI-model training

• No express authorization to use Customer Data or Personal Information to train, fine-tune, evaluate, or improve AI models appears in the provided changes.
• Customer Data remains stated to be handled in accordance with the separate Terms.

Risk: The Terms should be checked separately for AI-training rights. If AI training is intended, the documents should clearly address data scope, de-identification, opt-out rights, model retention, provider access, confidentiality, and whether customer content may be used to improve general-purpose models.

Summary of Important Changes

1. Expanded scope of the Privacy Policy

The revised language expressly covers:

• DealHub Ltd. and DealHub Inc.
• The website dealhub.io, its subdomains, content, and services (the “Site”)
• The sales engagement tool (the “Service”)
• Access through web browsers or applications
• Personal Information collected, received, or stored in connection with the Site and Service
• Personal Information relating to job candidates and individuals submitting CVs

Risk: The policy now applies to a broader range of products, services, websites, and individuals. Users may be subject to the policy even when interacting with services beyond the core DealHub product.

2. Third-party hosting and international data transfers

The revised text states that:

• DealHub does not host the Site or Service itself.
• Hosting is performed by third-party service providers.
• Providers may be located anywhere in the world, including the United States.
• Data may be replicated across multiple servers and countries.
• Users are described as consenting to these international transfers.

Risk: This broad disclosure may permit extensive cross-border processing and replication. The language does not identify the providers, countries, transfer mechanisms, retention periods, or specific safeguards. A general statement of consent may not satisfy all applicable privacy-law requirements, particularly under GDPR or similar regimes.

3. Customer Data is governed primarily by the Terms

The revised policy adds a specific section stating that users may submit “Customer Data” and that DealHub’s use of Customer Data is governed by the Terms of Service, including the enterprise subscription agreement/MSA.

Risk: Important data-use rights are moved outside the Privacy Policy and into another contract. Customers should review the MSA, Terms, and any Data Processing Addendum together. The excerpt does not clarify whether DealHub acts as a processor/service provider or whether it may use Customer Data for its own purposes.

4. AI-model training

No express provision concerning AI or model training appears in the diff. The changes do not clearly state whether Customer Data or Personal Information may or may not be:

• Used to train, fine-tune, or improve artificial-intelligence models
• Shared with AI providers
• Included in prompts, embeddings, logs, or model outputs
• De-identified before model training
• Used for product analytics or generalized service improvement

Key risk: Because the policy defers Customer Data use to the Terms and broadly refers to third-party providers, the absence of an explicit AI-training restriction creates uncertainty. Customers should obtain written confirmation that their data will not be used to train generalized or third-party AI models unless expressly authorized.

5. Broader disclosure and communications rights

The revised text permits use of Personal Information through multiple communication channels and disclosure:

• To persons or organizations the user asks DealHub to share with
• To a customer organization when resolving issues involving a user’s team
• For product updates, news, and administrative communications

Risk: These provisions may allow broader internal and customer-directed sharing than the prior wording, particularly where the user’s employer or account customer is involved.

6. Incorporation of additional terms

The Privacy Policy is expressly made part of the Terms of Service, with undefined capitalized terms taking their meaning from those Terms.

Risk: Data-use permissions, liability limits, and dispute provisions may be affected by documents not included in this diff. Reviewing the complete contractual package is necessary before accepting the revised policy.

Summary

Available Information

The only provided change is:

> “Added approximately 790 words to the document”

No actual added, deleted, or replacement language is included.

Legal and Risk Analysis

Because the substantive text is missing, it is not possible to determine:

• What contractual obligations or rights changed.
• Whether liability, indemnification, warranties, confidentiality, termination, pricing, or dispute-resolution terms were modified.
• Whether new data-processing permissions or restrictions were added.
• Whether the customer’s data may be used to train, fine-tune, evaluate, or improve artificial intelligence or machine-learning models.
• Whether customer data may be shared with affiliates, vendors, subprocessors, or other third parties.
• Whether the provider obtains ownership or broad license rights in customer data, prompts, outputs, usage data, or derived data.
• Whether the provider must delete or return data after termination.
• Whether the provider has security, confidentiality, or compliance obligations relating to AI use.

AI-Training Review

No conclusion can be reached regarding AI-model training from the information provided. The added language should be checked for terms such as:

• “train,” “fine-tune,” “develop,” “improve,” or “enhance” models or services;
• “inputs,” “outputs,” “customer data,” “content,” “usage data,” or “ telemetry”;
• rights to use data in “aggregated,” “de-identified,” or “anonymized” form;
• permission to use data for model evaluation, benchmarking, or product development;
• opt-out, consent, retention, deletion, or human-review provisions; and
• restrictions on using confidential, personal, regulated, or sensitive information.

Required for Further Analysis

Please provide the actual redlined text, including the approximately 790 added words and any surrounding provisions. Without the text, a reliable legal-risk assessment is not possible.

Summary of Important Changes

1. Privacy Policy content appears to have been removed or replaced

The diff removes nearly all substantive Privacy Policy language and replaces it with website navigation, product listings, marketing content, and fragmented text. The resulting document is not a coherent privacy policy and may be legally ambiguous or potentially unenforceable.

Important removed material includes:

• The policy’s description of how DealHub uses Personal Information.
• Definitions of “Personal Information.”
• References to the Site, Service, Terms of Service, and Customer Data.
• Data collection and use provisions.
• Disclosure and sharing provisions.
• Data retention, opt-out, access, accuracy, security, and children’s privacy provisions.
• California privacy rights and “Do Not Track” provisions.
• Merger, sale, and bankruptcy data-transfer provisions.

2. Corporate identity and scope are unclear

The original language identified DealHub Ltd. and DealHub Inc., described as operating or owning dealhub.io. The replacement text contains incomplete references to DealHub entities and numerous unrelated product and website labels.

This creates uncertainty about:

• Which legal entity is the data controller or service provider.
• Which websites, products, and services are covered.
• Whether the policy applies to customers, users, job applicants, website visitors, or all of them.
• Which contractual document governs Customer Data.

3. Hosting and international transfers

The prior policy stated that:

• DealHub uses third-party hosting and service providers.
• Customer-provided data may be hosted on those providers’ servers.
• Servers may be located anywhere, including the United States.
• Data may be replicated across multiple countries.
• Users consent to international transfers.

Those provisions appear to have been deleted. Their removal does not necessarily stop international transfers, but it removes an important disclosure and may create compliance and transparency concerns, particularly under GDPR, UK GDPR, and other cross-border transfer regimes.

4. Customer Data and AI-model training

The diff does not add any express language authorizing DealHub to use Customer Data to train, fine-tune, or improve artificial-intelligence or machine-learning models.

The prior policy stated that users may submit Customer Data and that DealHub’s use of Customer Data is governed by the Terms. That language appears to have been removed or rendered incomplete. Because the operative Terms and Data Processing Addendum are not included, this diff cannot establish whether AI-training rights exist elsewhere.

Key risk:

• The revised text provides no clear limitation or permission concerning AI training.
• Customers should review the Terms, DPA, product-specific AI terms, and any subprocessor disclosures for language allowing use of Customer Data, prompts, outputs, or telemetry to train or improve models.
• If AI-training rights are intended, the absence of clear language creates ambiguity regarding consent, purpose limitation, confidentiality, and controller/processor roles.

5. Overall legal risk

This appears less like a targeted policy amendment and more like a corrupted or improperly generated webpage replacement. The principal risk is loss of required privacy disclosures and uncertainty over governing terms, data uses, international transfers, and responsible entities.

Executive Summary

The diff appears materially corrupted or misapplied. Large portions of the original legal text have been replaced with product names, website-navigation terms, and marketing content. The later section largely reproduces the same replacement text, creating uncertainty about which terms are intended to govern.

Important Changes and Risks

1. Replacement of the contracting document and parties

The agreement title and references change from:

• “Master Subscription Agreement”
• “MSA”
• “Our products and/or services”

to terms such as:

• “Solutions”
• “Configure”
• “CPQ Contract”
• “DealRoom”
• “Billing”
• “Revenue”
• “Salesforce”
• “HubSpot”
• “Microsoft Dynamics”
• “NetSuite”
• “Slack”
• “Gong”
• “DocuSign”
• “DealHub”

The counterparty is also changed or identified as DealHub Ltd.

Risk: These changes may alter the identity of the contracting entity, the scope of products covered, and the agreement incorporated into each order. If the text is not merely a formatting error, it may create ambiguity about which services and legal entity are bound.

2. Substantial deletion of operative provisions

The original text appears to have included a complete agreement, but much of it is deleted or replaced by website content, including the apparent removal or disruption of:

• Use restrictions
• Definitions
• Data-processing obligations
• Fees and payment terms
• Intellectual-property provisions
• Confidentiality
• Warranties and disclaimers
• Indemnities
• Liability limitations
• Termination
• General provisions

Although some headings and clauses remain visible, the structure is no longer reliable.

Risk: Missing or corrupted provisions can create uncertainty regarding payment, suspension, termination, liability caps, indemnification, confidentiality, and ownership of customer data.

3. Data protection provisions

The surviving text includes GDPR-style processor obligations, including requirements to:

• Process Personal Data only on documented customer instructions
• Maintain confidentiality
• Implement Article 32 security measures
• Assist with data-subject requests and compliance obligations
• Delete or return Personal Data after termination
• Permit compliance audits

These provisions are favorable to the customer in principle, but the diff does not show a complete data-processing addendum or all associated terms.

Risk: The surviving clauses may be incomplete, and important matters—such as subprocessors, international transfers, breach-notification timing, and allocation of regulatory responsibility—may be missing.

4. AI model training and use of customer data

No express provision authorizing or prohibiting use of customer data to train AI models appears in the supplied diff.

The definition of “Your Data” is broad and covers data submitted to, or collected and processed using, the services. However, the visible language does not clarify whether DealHub may:

• Use customer data to train, fine-tune, or improve AI models
• Use prompts, outputs, metadata, or usage data for model development
• Create aggregated or de-identified datasets
• Permit third-party AI providers to retain or train on the data

Risk: The absence of a clear AI-data clause creates uncertainty. The customer should require an express prohibition on using Customer Data, prompts, and outputs for AI training unless separately and specifically authorized in writing, with controls for de-identification, retention, subprocessors, and opt-out rights.

5. Logo and marketing rights

The customer grants DealHub a royalty-free license to use its logo on DealHub’s website and marketing materials.

Risk: Consider requiring prior written approval, limiting use to the agreement term, and allowing withdrawal of consent.

Analysis

The supplied diff does not include the actual amended legal language. It only states:

> “Added approximately 598 words to the document”

Accordingly, it is not possible to determine:

• What contractual terms were added or changed;
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models;
• Whether use of customer data is limited to providing the services;
• Whether data may be shared with affiliates, vendors, or model providers;
• Whether the customer retains ownership of its data;
• Whether the provider receives a broad or perpetual license;
• Whether data is anonymized, aggregated, or de-identified before AI use;
• Whether customers can opt out of AI training;
• Whether deletion, confidentiality, security, or audit rights have changed; or
• Whether the provider may use prompts, outputs, metadata, usage data, or personal information for model development.

Information Needed

Please provide the actual redlined text, using the stated notation:

• Additions: {new text}
• Deletions: [deleted text]
• Replacements: [old text]{new text}

Once provided, the analysis can identify:

1. Material contractual changes

2. New customer obligations

3. Expanded provider rights

4. Data ownership and licensing implications

5. AI training and model-improvement provisions

6. Privacy, confidentiality, and security risks

7. Termination, deletion, and post-termination data use

8. Recommended negotiation points

Summary

The supplied diff does not include the actual amended contract language. It only states:

> “Added approximately 790 words to the document”

Accordingly, it is not possible to identify:

• Which contractual provisions changed;
• New obligations, rights, fees, liabilities, or termination rights;
• Whether customer data may be collected, accessed, disclosed, retained, or shared;
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models;
• Whether data may be used for generalized model training or only to provide the contracted services;
• Any opt-out, consent, deletion, confidentiality, security, or data-processing limitations; or
• Whether the changes create new intellectual-property or ownership risks.

AI Training Risk Assessment

No conclusion can be reached regarding AI-model training because the text of the additions is missing. The statement that approximately 790 words were added does not reveal whether the new language:

• Authorizes training on customer content, prompts, outputs, or usage data;
• Permits use of data in aggregated, anonymized, or de-identified form;
• Allows human review or sharing with affiliates, vendors, or model providers;
• Grants the provider a broad, perpetual, worldwide, transferable license;
• Applies training rights by default or only with the customer’s consent; or
• Provides meaningful deletion, exclusion, or opt-out rights.

Information Needed

Please provide the complete redline or the actual added, deleted, and replacement language. The AI-related provisions should be reviewed in particular for terms such as “train,” “fine-tune,” “improve,” “develop,” “machine learning,” “AI models,” “aggregated,” “de-identified,” “service data,” “content,” “usage data,” “license,” and “retain.”

Structured Summary of Important Changes

1. Apparent Replacement of the Contract With Website/Marketing Content

The diff appears to replace substantial portions of the agreement with unrelated website navigation and marketing text, including references to:

• “Solutions,” “Price,” “Quote,” “Contract,” and “Management”
• Product names such as Rev, RevAmp, Salesforce, HubSpot, Microsoft Dynamics, NetSuite, Slack, Gong, and DocuSign
• Website links and navigation such as “About Us,” “Blog,” “Careers,” “Contact,” “Login,” and “Knowledge Base”
• Marketing and compliance labels such as “Security,” “Terms,” “Policy,” and “Copyright”

This may indicate either:

1. A defective document-conversion or redlining process;

2. Accidental insertion of website content; or

3. An attempt to replace the original master subscription agreement with a different CPQ, quote, or order-form framework.

Risk: The resulting document may be ambiguous, internally inconsistent, or incapable of clearly identifying the governing legal terms. The parties should confirm the intended agreement, contracting entity, product scope, order form, and precedence rules before execution.

2. Contracting Entity and Agreement Structure

The original language identifies DealHub Ltd. as “We,” “Us,” or “Our,” and defines the customer as the entity accepting the agreement. The inserted content appears to introduce different commercial concepts, including “Solutions,” “Quote,” “CPQ Contract,” “Subscription,” and “Management.”

Risk: It is unclear whether the document is still a master subscription agreement, a quote, an order form, or a CPQ-related contract. This could create uncertainty regarding:

• Which services are purchased;
• Which entity is the counterparty;
• Whether an order form controls over the master agreement; and
• Who has authority to bind the customer.

3. Customer Data and Privacy

The text retains provisions defining:

• “Your Data”;
• “Personal Data”; and
• “Breach Incident.”

It also retains GDPR-style processor obligations, including processing Personal Data only on documented instructions, confidentiality, security measures, assistance with data-subject rights, breach and impact-assessment support, deletion or return of data, and audit rights.

Risk: These provisions appear incomplete or renumbered inconsistently, and the diff does not show a complete data-processing agreement or details such as subprocessors, international transfers, security schedules, or applicable non-GDPR privacy laws.

4. AI Model Training

No express provision was identified that authorizes or prohibits using customer data to train, fine-tune, evaluate, or improve AI models.

The retained definition of “Your Data” is broad, covering data submitted to or collected and processed through the services. However, the shown language does not expressly grant a separate AI-training license.

Risk: The absence of clear AI language leaves uncertainty about whether customer data, prompts, outputs, telemetry, or derived data may be used for model training or product improvement. The customer should seek an express prohibition on using customer data for AI training unless specifically authorized in writing.

5. Other Material Terms Retained

The text retains provisions concerning:

• Payment disputes;
• Use of the customer’s logo;
• Confidentiality;
• Mutual indemnification and exclusive remedies;
• Liability limitations;
• Termination and surviving provisions; and
• Independent-contractor status.

These should be reviewed against the intended replacement document because the inserted content may have displaced related definitions or operative terms.

Summary

The diff only states that approximately 598 words were removed, but does not identify which provisions were deleted or provide replacement language.

Key Legal Implications

• Substantive review is not possible: Without the actual deleted text, it is impossible to determine whether the changes affect liability, confidentiality, security, intellectual property, termination, data processing, or other rights.
• Potential loss of customer protections: The deletion may have removed important customer-favorable provisions, such as warranties, audit rights, security obligations, indemnities, deletion requirements, or limits on data use.
• Potential expansion of provider rights: If restrictions were removed, the remaining agreement could give the provider broader rights to use, disclose, retain, or commercialize customer information.
• Undefined effect on AI training: The supplied diff contains no language showing whether customer data:
• May be used to train, fine-tune, or improve AI models;
• Is excluded from model training;
• May be used in aggregated, de-identified, or anonymized form;
• May be used for human review or product improvement;
• Is retained after termination; or
• Is used to train models shared with other customers or third parties.

Risk Assessment

Assessment: Unable to determine. The deletion itself is potentially significant, but its legal effect cannot be evaluated without the actual text removed and any replacement wording.

Information Needed

To complete the review, provide:

1. The full text of the approximately 598 deleted words;

2. Any text added or substituted elsewhere;

3. The relevant section headings or surrounding provisions; and

4. Any version of the agreement before and after the change.

In particular, the review should compare all provisions addressing customer data, prompts, outputs, service improvement, model training, retention, de-identification, and deletion.

Summary of Important Changes

1. Agreement scope and acceptance

• The document is converted from a product-specific “Solutions Configure/Price Quote/Contract Management…” subscription document into a broader Master Subscription Agreement governing DealHub’s products and services.
• The agreement now expressly covers products, services, and integrations, including Salesforce, HubSpot, Microsoft Dynamics 365, NetSuite, Slack, Gong, DocuSign, DealHub API integrations, and various DealHub offerings.
• Acceptance is expanded: the customer agrees to the terms by accepting the agreement or by using the products or services.
• A representative warrants that they have authority to bind the customer or other legal entity. If they lack authority, or do not agree to the terms, they may not use the services.
• New restrictions prohibit access by direct competitors without DealHub’s prior written consent and prohibit monitoring, benchmarking, or competitive purposes. Use is limited to the customer’s internal business purposes.

2. New definitions and data-protection provisions

The additions introduce a substantial GDPR-oriented framework, including definitions for:

• “Your Data”
• “Personal Data”
• “Breach Incident”
• “Services”
• “Order Form”
• “Malicious Code”
• “User”

DealHub undertakes to:

• Process Personal Data only on the customer’s documented instructions.
• Require confidentiality commitments from authorized personnel.
• Maintain Article 32 GDPR security measures.
• Assist with data-subject requests, security obligations, breach response, and impact assessments, at the customer’s expense.
• Delete or return Personal Data after termination, subject to legal retention requirements.
• Permit compliance audits and inspections.

Risk: These provisions may function as a limited data-processing addendum, but the excerpt does not address several commonly negotiated issues, such as subprocessors, international transfers, breach-notification deadlines, allocation of regulatory liability, or specific security standards.

3. AI-model training and use of customer data

• The diff contains no express authorization for DealHub to use customer data to train, fine-tune, validate, or improve AI models.
• It also contains no express prohibition on such use.
• “Your Data” is defined broadly as data submitted to, or collected and processed using, the services. However, the data-processing language says Personal Data will be processed only on the customer’s documented instructions, which may limit—but does not clearly resolve—AI-training rights.
• “Agentforce” appears only as part of a product or service reference; it does not create a specific AI-training permission.
• Because AI-training terms are absent, customers should seek an express provision stating whether customer data, prompts, outputs, usage data, metadata, or de-identified/aggregated data may be used for model training or product improvement.

4. Commercial and operational changes

• Payment disputes are added as an exception to late-payment remedies and service suspension, provided the dispute is reasonable, made in good faith, and diligently pursued.
• DealHub receives a restricted, royalty-free, non-transferable license to use the customer’s logo in customer lists, websites, and marketing materials.
• Indemnification is expressly made the exclusive remedy for covered claims.
• The agreement’s term and survival provisions are clarified; Sections 4–11 survive termination.

Key customer risks

• Broad internal-use and anti-competitive restrictions.
• Automatic acceptance through use.
• Marketing use of the customer’s logo.
• Customer-funded privacy compliance assistance.
• No clear contractual treatment of AI training or model improvement using customer data.

Key Changes and Risks

1. Customer Data is now governed primarily by the Terms

• The prior language stated that users could submit personal details, including CVs, and expressly consented to the Privacy Policy’s collection, processing, and sharing provisions.
• The revised language introduces a separate “Customer Data” concept and states that use of Customer Data is “in accordance with the Terms.”
• Risk: The Privacy Policy no longer clearly explains how Customer Data will be processed. The parties must review the Terms to determine whether they authorize broader uses, disclosures, retention, sublicensing, or processing by service providers.

2. No express AI-training authorization appears in this diff

• The changes do not expressly state that Customer Data or Personal Information may be used to train, fine-tune, evaluate, or improve artificial-intelligence or machine-learning models.
• They also do not expressly prohibit such use.
• Risk: If the Terms contain AI-training language, the new incorporation by reference could indirectly subject Customer Data to that use. If the Terms are silent, the revised wording creates ambiguity rather than a clear customer protection.
• The agreement should expressly address whether Customer Data—including prompts, uploaded documents, CVs, outputs, usage data, and derived or de-identified data—may be used for AI training, and whether customer consent is required.

3. Consent language is substantially removed or narrowed

• The previous statement that users voluntarily provided Personal Information and consented to the Privacy Policy is replaced with language stating that Personal Information is not currently required merely to access general Site information.
• The revised text says Personal Information may nevertheless be received or collected through various methods.
• Risk: This may weaken the transparency of the consent framework and create uncertainty regarding the legal basis for processing, particularly for sensitive information or information submitted in connection with the Service.

4. Broader and more specific uses of Personal Information

The revised policy permits use:

• Through multiple communication channels, including email, SMS, DEALHUB, DEALBOARD, and DEALSTREAM.
• To send Service and product updates.
• To respond to administrative or “Contact Us” requests.
• To disclose information to people or organizations the user asks the company to share with.
• To share team-related support concerns with the relevant Customer.

Risk: The additions broaden operational and marketing communications and permit disclosure to Customers in support situations. The policy does not clearly distinguish required service communications from marketing or explain opt-out rights in the revised text.

5. Change-notice protection is removed

• The prior policy allowed changes to take effect only after ten days’ notice and treated continued use as acceptance.
• That notice-and-acceptance language is deleted.
• Risk: The company may have greater flexibility to amend the Privacy Policy without a stated notice period, potentially reducing users’ ability to object before new processing practices apply.

6. Expanded transaction-related transfer rights

• The company may transfer or assign Personal Information and any other information provided in an acquisition, merger, bankruptcy, or comparable event.
• Risk: The transfer language is broader and may include Customer Data and other confidential business information, without stated limits or safeguards.

Summary

The provided diff states only:

> “Added approximately 744 words to the document”

It does not include the actual added, deleted, or replaced legal language. As a result, the substantive contractual changes cannot be analyzed reliably.

AI Training and Customer Data

• No specific language is provided addressing whether customer data may be:
• Used to train, fine-tune, or improve artificial intelligence or machine-learning models;
• Used to train models shared with other customers or the public;
• De-identified, aggregated, or otherwise processed for model development;
• Retained after termination for AI-training purposes;
• Used by service providers, affiliates, or subprocessors for AI development;
• Excluded from training unless the customer opts in or opts out;
• Subject to confidentiality, security, deletion, or data-use restrictions.

Accordingly, it is impossible to determine whether the amendment expands or restricts the provider’s rights to use customer data for AI training.

Other Potentially Important Changes

Because the actual text is missing, no conclusions can be drawn regarding changes to:

• Data ownership or licensing rights;
• Confidentiality obligations;
• Privacy and data-protection compliance;
• Security requirements or breach notification;
• Data retention and deletion;
• Subprocessor or third-party access;
• Liability, indemnification, or limitation of liability;
• Audit rights or customer controls;
• Suspension, termination, or post-termination data handling.

Risk Assessment

The fact that approximately 744 words were added is not itself enough to identify legal risk. The new language could materially alter the customer’s rights and obligations, but the direction and significance of those changes cannot be evaluated without the wording.

Recommended next step: Provide the full redline or the exact 744 words added, including any surrounding provisions. Particular attention should be given to terms such as “train,” “improve,” “develop,” “machine learning,” “artificial intelligence,” “de-identified,” “aggregated,” “usage data,” “service data,” and “customer data.”

Summary of Changes

Overall Change

• Approximately 744 words have been removed from the document.
• No replacement language or details of the deleted provisions were provided.
• Because the deleted text is unavailable, the legal effect of the changes cannot be determined with confidence.

Customer Data and AI Training

• The diff does not identify whether any language concerning customer data, machine learning, or AI-model training was removed.
• The deleted provisions could have addressed matters such as:
• Whether the provider may use customer data to train, fine-tune, or improve AI models;
• Whether customer prompts, inputs, outputs, or personal information may be retained or analyzed;
• Whether data is used only in de-identified or aggregated form;
• Whether the customer can opt out of AI training or request deletion;
• Ownership or licensing rights in customer data and AI-generated outputs; or
• Security, confidentiality, and limits on disclosure to model providers or subprocessors.
• If any of these protections were removed, the customer could face broader data-use rights, reduced confidentiality, fewer deletion or opt-out rights, or increased exposure of personal or proprietary information.
• Conversely, the deletion could also remove provider-favorable permissions, so the direction of the change cannot be established without the original and revised text.

Other Potential Risks

The removed language may have affected:

• Data-retention periods and deletion obligations;
• Confidentiality requirements;
• Liability limits, indemnities, or remedies;
• Security commitments and breach-notification duties;
• Subprocessor or third-party data-sharing rights;
• Intellectual-property ownership and license scope;
• Compliance obligations; or
• Termination and post-termination data handling.

Recommended Review

Obtain both the pre-change and post-change versions or a redline showing the deleted text. The deletion should be specifically checked for provisions containing terms such as “train,” “training,” “machine learning,” “AI,” “model,” “improve,” “customer data,” “inputs,” “outputs,” “de-identified,” “aggregated,” “retain,” “delete,” and “license.”

Bottom line: The deletion is potentially significant, but the available diff does not permit a reliable conclusion about whether customer-data or AI-training rights became broader or narrower.

Executive Summary

The revision substantially replaces the former account-focused privacy language with a broader framework covering Customer Data, Personal Information, communications, sharing, retention, candidates, California rights, and business transfers. It also introduces a new “Customer Data” concept whose treatment is deferred to the separate Terms.

Key Changes and Risks

1. Customer Data and AI-model training

• The prior language focused on information required to create a User Account, including name, email address, password, and optional profile information.
• The revised language states that users “may submit” Customer Data during use of the Service and that the company’s use of Customer Data is “in accordance with the Terms.”
• This is a material shift because the privacy policy no longer explains how Customer Data is used, stored, disclosed, retained, or deleted. Those issues are now controlled by the Terms.
• No express provision in the supplied diff authorizes or prohibits using Customer Data to train, fine-tune, evaluate, or improve AI models. However, the incorporation of the Terms creates a significant risk if the Terms contain broad rights to analyze, improve, develop, or commercialize the Service. The relevant Terms should be reviewed for:
• AI training or machine-learning rights;
• rights to use prompts, outputs, uploaded files, or usage data;
• de-identification or aggregation rights;
• retention after termination; and
• opt-out, deletion, confidentiality, and model-output protections.
• If Customer Data may include confidential business information, the revised language should expressly state whether it may be used for AI training and, if so, impose limits and safeguards.

2. Broader collection and use of Personal Information

• Collection is expanded from account registration to information submitted or collected through the entire Site and Service.
• Permitted uses now expressly include service improvement, marketing and advertising, authentication, product updates, and communications through email, SMS, DEALHUB, DEALBOARD, and DEALSTREAM.
• Marketing communications may be sent by the company, while contact details may also be shared with business partners or affiliates for promotional purposes.

3. Expanded disclosures

• The company may share information with affiliates, service providers, partners, Salesforce, Rackspace, Google, people or organizations selected by the user, and the customer organization associated with a team.
• Information may be transferred internationally.
• The business-transfer clause now expressly covers acquisition, merger, bankruptcy, or comparable events and permits transfer or assignment of Personal Information and other user-provided information.

4. Retention and deletion

• A new retention section permits retention for broadly defined business, legal, contractual, relationship, and dispute-related purposes.
• The company may delete, anonymize, or restrict access to data at any time and for any reason, with or without notice, unless another obligation applies. This may conflict with customer expectations or contractual data-retention requirements.

5. Additional compliance and transparency provisions

• New provisions address anonymous information, candidate/CV data, cookies, analytics, integrations, children’s privacy, security, California rights, and deletion of content by California minors.
• Some contact details remain blank, including addresses for access, children’s privacy, security, and California requests. This reduces operational clarity and may undermine the effectiveness of stated rights.

Structured Summary of Important Changes

1. Diff appears materially corrupted

The first portion of the diff shows widespread word-for-word substitutions, such as:

• “MASTER SUBSCRIPTION AGREEMENT” → “Solutions Price Quote”
• “MSA” → “CPQ Contract”
• “DealHub Ltd.” and service references replaced by large blocks of website/navigation terms
• Ordinary legal text replaced with terms such as “Salesforce,” “Revenue Management,” “What,” and “is”

The entire agreement is then repeated in the second portion with essentially the original wording. This suggests a document-conversion, redlining, or search-and-replace error rather than intentional contractual amendments.

Risk: If the first portion is intended to be operative, it substantially damages readability and may create uncertainty about the parties, services, defined terms, and enforceability. The parties should obtain a clean, verified version and confirm which text governs.

2. AI training and use of customer data

No express provision was added or identified that authorizes the provider to:

• train artificial intelligence or machine-learning models using customer data;
• use customer data to improve generalized or shared AI models;
• retain prompts, outputs, or uploaded data for model training;
• permit human review of data for AI development; or
• grant a specific license for AI training.

The existing language states that Personal Data may be used only for service performance, enforcement of the agreement, or provision of the services. It also permits use for “statistical and analytical purposes” if identifying personal attributes are removed.

Important ambiguity: “Statistical and analytical purposes” is not expressly limited to internal reporting or service analytics and does not clearly exclude AI or machine-learning training. Although it requires removal of identifying personal attributes, anonymization may not eliminate re-identification, confidentiality, trade-secret, or model-extraction risks. Customers should request language expressly stating whether customer data, Personal Data, prompts, outputs, and metadata may or may not be used to train AI models.

3. Existing data-related risks

• The provider may obtain Personal Data directly from customers or prospects, increasing compliance responsibilities.
• Subprocessors may be used with notice and an opportunity to object, subject to GDPR transfer conditions.
• The provider may retain data for up to three years, and longer retention may incur fees.
• Data export is available only if requested within 30 days after termination; deletion may follow.
• The provider may use customer feedback in the Services without restriction.
• Liability is capped at amounts paid, with broad exclusions for indirect damages.

4. Recommended action

Do not approve this diff as presented. Request:

1. a clean redline against the correct prior agreement;

2. confirmation of the governing party and service description;

3. an express prohibition or authorization concerning AI training and model improvement;

4. detailed rules for prompts, outputs, metadata, retention, and human review; and

5. confirmation that anonymized data cannot be used to reconstruct or infer customer information.

Yes

Summary of Important Changes and Risks

1. New Master Agreement Replaces Product-Specific Introduction

The introductory text is replaced with a broad Master Agreement governing DealHub products and services, including CPQ, subscription management, billing, revenue intelligence, integrations, and related offerings.

Key effects:

• The agreement applies across multiple products and services rather than a single product.
• An Order Form will identify the specific Services purchased.
• The customer represents that the person accepting the agreement has authority to bind the relevant entity.
• Unauthorized users, including competitors attempting to benchmark or monitor the Services, are prohibited from accessing the Services.

2. New Data-Processing and Security Terms

The agreement adds detailed provisions concerning customer and personal data:

• “Your Data” includes electronic information submitted to, collected by, or processed through the Services.
• DealHub may process personal data belonging to users, customers, and prospects, including names, email addresses, phone numbers, and information used to send proposals, contracts, messages, and other documents.
• DealHub must generally process personal data only on the customer’s documented instructions and in accordance with GDPR Article 28.
• DealHub may use subprocessors, subject to notice and an opportunity for the customer to object.
• DealHub promises security safeguards and breach notification “without undue delay.”
• Assistance with data-subject requests, security obligations, and audits is provided at the customer’s expense.
• Data may be returned or deleted after the Services end, but post-termination portability is limited to requests made within 30 days.

Risk: The agreement does not provide a specific breach-notification deadline, detailed security standards, or a comprehensive data-processing annex. The customer also bears costs for certain compliance assistance.

3. AI Training and Model-Development Rights

There is no express provision authorizing DealHub to use customer data to train, fine-tune, or develop AI models.

Relevant language provides that:

• DealHub may use personal data for “statistical and analytical purposes” if identifying personal attributes are removed.
• DealHub receives a limited license to host, copy, transmit, and display customer data as necessary to provide the Services.
• DealHub may use customer feedback and incorporate it into the Services without restriction.

Risk: Although the agreement does not expressly permit AI training, “statistical and analytical purposes” is broad and could potentially encompass analytics or model development using de-identified or aggregated data. The agreement does not define “anonymized,” “de-identified,” or “aggregated,” nor does it expressly prohibit re-identification or use of customer content, prompts, outputs, or business data for AI improvement. Customers seeking a strict no-training commitment should request express language stating that customer data will not be used to train or improve general-purpose or third-party AI models without prior written consent.

4. Commercial and Operational Risks

• Automatic renewal applies unless notice is given at least 30 days before renewal.
• Renewal pricing may increase by up to 5% or CPI, subject to specified notice provisions.
• Excess usage may be automatically billed based on actual usage or a higher tier.
• Services may be suspended for amounts 30 days overdue, and DealHub reserves the right to delete data after notice.
• Data export is available only for 30 days after termination or expiration.
• DealHub may amend the agreement by posting revisions online, with termination as the customer’s principal remedy.
• Liability is capped at amounts paid in the prior 12 months, with broad exclusions for indirect and consequential damages.
• New York law and New York courts govern disputes.

Summary

The provided diff contains only the statement:

> “Added approximately 2670 words to the document”

It does not include the actual added, deleted, or replaced contract language. As a result, the substantive legal changes cannot be analyzed.

AI Training and Customer Data

There is no contract text identifying whether:

• Customer data may be used to train, fine-tune, or improve AI models;
• Customer prompts, inputs, outputs, files, or usage metadata may be retained or reviewed;
• Data may be shared with affiliates, vendors, or third-party AI providers;
• Customer data may be used in aggregated, de-identified, or anonymized form;
• Customers can opt out of AI training or request deletion;
• The provider claims ownership or broad license rights over customer data or outputs; or
• Special restrictions apply to confidential, personal, regulated, or sensitive information.

Accordingly, no conclusion can be reached about whether the new language creates additional risks relating to AI model training or data use.

Information Needed

Please provide the actual redlined language, including the text represented by:

• Additions: {new language}
• Deletions: [deleted language]
• Replacements: [old language]{new language}

Once provided, the changes can be evaluated for effects on data ownership, confidentiality, privacy, security, retention, AI training, intellectual property, liability, and termination rights.

Summary of Important Changes

1. Policy scope is substantially expanded

The revised text replaces what appears to be website navigation and product-specific language with a formal privacy policy covering:

• DealHub Ltd. and DealHub Inc.
• The DealHub website, subdomains, content, and services (the “Site”)
• The sales engagement tool (the “Service”)
• Individuals who submit job applications or CVs

This broadens the policy beyond a single product or website and may cover multiple DealHub offerings and service interactions.

2. New third-party hosting and international transfer language

The new language states that:

• DealHub uses third-party service providers to host data.
• Providers may be located anywhere in the world, including the United States.
• Data may be replicated across servers in multiple countries.
• Users consent to transfers to third-party providers worldwide.

Risk

This is a broad international-transfer disclosure and consent provision. It does not identify the providers, countries, transfer mechanisms, or specific safeguards. Customers may need to assess whether this is sufficient for GDPR, UK GDPR, or other applicable data-transfer requirements. The language also appears to apply broadly to data submitted to the Site or Service.

3. Customer Data is incorporated by reference to the Terms

The revised policy adds a “Customer Data” section stating that use of Customer Data is governed by the Terms of Service, including the enterprise subscription agreement/MSA.

Risk

The privacy policy does not itself explain:

• What DealHub may do with Customer Data
• Whether DealHub may use it for product improvement, analytics, benchmarking, or model development
• How Customer Data is separated from Personal Information
• Whether customer instructions or an applicable Data Processing Addendum control in case of conflict

Customers should review the MSA and DPA together with this policy.

4. AI model training

No express provision was added stating that customer data may or may not be used to train artificial intelligence or machine-learning models.

Key implication

The revised text is silent on AI training. However, the broad references to using Personal Information, handling Customer Data under the Terms, and sharing data with service providers could create uncertainty about whether data may be processed by AI vendors or used for model training.

Customers should seek express contractual confirmation that:

• Customer Data and Personal Information will not be used to train general-purpose or third-party AI models without authorization.
• Any AI processing is limited to providing the contracted service.
• AI subprocessors are disclosed and subject to confidentiality, security, deletion, and no-training obligations.
• Customer Data is not used to improve models for other customers.

5. New consent and policy-change mechanism

Use of the Site or Service, or submission of personal details, is described as consent to collection, processing, and sharing. DealHub may amend the policy, with changes effective ten days after posting; continued use constitutes acceptance.

Risk

This may permit unilateral changes on short notice and may be insufficient as a substitute for specific consent where legally required.

Summary of Changes

Scope of the Diff

The diff states only that approximately 744 words were removed. The actual deleted language is not provided.

Because the text of the deletions is unavailable, it is not possible to determine:

• Which contractual rights or obligations changed;
• Whether liability, confidentiality, security, termination, or service terms were affected;
• Whether any customer protections were removed; or
• Whether the changes are legally favorable or unfavorable to either party.

Customer Data and AI Training

No specific conclusion can be reached about the use of customer data to train AI models.

The deleted language could have addressed issues such as:

• Whether customer data may be used to train, fine-tune, or improve AI models;
• Whether data is used only in de-identified or aggregated form;
• Whether the provider may use inputs, outputs, prompts, files, or usage data for model development;
• Whether the customer can opt out of AI training;
• Whether human reviewers or third-party AI providers may access the data;
• Ownership of customer data, prompts, and AI-generated outputs;
• Retention and deletion of data used for training; or
• Security, confidentiality, and regulatory limitations on AI processing.

If any restriction or opt-out right was among the deleted provisions, the change could materially expand the provider’s ability to use customer data. Conversely, deletion of a broad permission to use data could narrow that ability. The available diff does not establish which occurred.

Key Risk

The principal risk is loss of visibility into potentially material deleted terms. A reduction of approximately 744 words may remove substantive protections, including limitations on data use, confidentiality obligations, warranties, indemnities, or liability provisions.

Recommended Review

Obtain the full redline or the prior and revised versions of the agreement. In particular, compare provisions concerning:

1. Customer data and service data;

2. AI, machine learning, model training, and product improvement;

3. De-identification and aggregation;

4. Third-party processors and AI providers;

5. Data retention, deletion, and security;

6. Confidentiality and intellectual-property ownership; and

7. Customer opt-out or consent requirements.

No definitive legal assessment of the AI-data changes can be made from the deletion notation alone.

Diff Analysis

Summary

The diff only states that approximately 790 words were removed from the document. It does not identify which provisions, sections, or legal terms were deleted.

AI Training and Customer Data

• No determination is possible regarding whether the changes affect the use of customer data to train AI models.
• The deletion may have removed provisions concerning:
• Whether customer data may be used to train, fine-tune, or improve AI models;
• Whether data is used for service improvement, analytics, or product development;
• Whether customer content is anonymized, aggregated, or de-identified before use;
• Customer opt-out, consent, or objection rights;
• Retention and deletion of data used for training;
• Human review or access to customer data;
• Ownership of model outputs, improvements, or derivatives;
• Restrictions on using confidential, personal, or regulated data.

Potential Legal Risks

Because the deleted language is not provided, the following risks cannot be confirmed but should be investigated:

1. Expanded or unclear data-use rights

If limitations on AI training were removed, the provider may have broader rights to use customer data.

2. Loss of customer protections

Deleted language may have contained confidentiality, security, deletion, opt-out, or data-minimization commitments.

3. Regulatory exposure

Removing restrictions or disclosures could affect compliance with privacy, data protection, confidentiality, sector-specific, or AI regulations.

4. Unclear contractual interpretation

If related definitions or exceptions were deleted, the remaining agreement may create ambiguity about what constitutes “customer data,” “service data,” or permitted use.

Recommended Review

Obtain both the prior and revised full versions of the document, preferably with a redline showing the actual deleted text. Review in particular the sections addressing:

• Data ownership and permitted uses;
• Confidentiality and privacy;
• AI, machine learning, or model training;
• Data retention and deletion;
• Security and subprocessors;
• Opt-out or consent rights;
• Warranties, indemnities, and liability limits.

No reliable conclusion about AI-training terms or other substantive legal changes can be made from the description alone.

Summary

The provided diff does not include the actual amended contract language. It only states:

> “Added approximately 146 words to the document”

Accordingly, it is not possible to determine what legal terms changed or assess any new risks.

AI Training and Customer Data

• No language concerning the use of customer data to train, fine-tune, evaluate, or improve AI models is included in the diff.
• It is therefore unclear whether the new language:
• Permits or restricts AI training using customer data;
• Applies to personal data, confidential information, prompts, outputs, or usage metadata;
• Allows data to be shared with affiliates, vendors, or third-party model providers;
• Permits retention of data for model development;
• Provides opt-out, deletion, or data-isolation rights; or
• Limits use of customer data to aggregated, anonymized, or de-identified information.

Other Legal Risks

Because the added 146 words are not provided, the following potential changes cannot be evaluated:

• Expansion of the provider’s license or rights to customer content;
• New data-processing, confidentiality, or security obligations;
• Changes to ownership of inputs, outputs, or derived data;
• New warranties, disclaimers, indemnities, or liability limitations;
• Changes to termination, deletion, retention, or audit rights; and
• New compliance obligations or permissions to use subcontractors.

Information Needed

Please provide the actual added and deleted contract language, including any text marked with {}, [], or []{}. Without that text, no reliable comparison or legal-risk analysis can be performed.

Summary of Important Changes

1. Customer Data and AI-model training

• The revised text adds a new section stating that, during use of the Service, users may submit “Customer Data” and that the company’s use of Customer Data is governed by the Terms.
• The prior language expressly referred to collection, processing, and sharing of users’ personal details, including CVs, under the Privacy Policy. That language has been removed and replaced with a cross-reference to the Terms.
• No express authorization or prohibition regarding training AI models appears in this diff. The revised Privacy Policy therefore does not clarify whether Customer Data, Personal Information, prompts, uploaded documents, or Service outputs may be used to train, fine-tune, evaluate, or improve AI models.
• This creates a material interpretation risk: if the Terms contain broad rights to use Customer Data, the company may argue that those rights include AI development or model training. Conversely, the Privacy Policy does not give customers clear notice of such use. The Terms should be reviewed and, ideally, expressly state:
• whether Customer Data may be used for AI training;
• whether data is used for the company’s own models or third-party models;
• whether data is de-identified or aggregated;
• whether customers can opt out;
• whether customer content is retained after termination; and
• whether human reviewers or subprocessors may access it.

2. Consent and collection

• The prior statement that users voluntarily provide Personal Information and consent to collection, processing, and sharing through use of the Site/Service is deleted.
• The replacement says Personal Information is not required merely to access general information on the Site, but confirms that the company does receive and collect Personal Information in specified ways.
• This is a shift from broad “consent by use” language toward a collection notice. It may reduce reliance on implied consent, but it also makes the company’s lawful basis and purposes less clear.

3. Expanded communications and disclosures

• The company may use designated email addresses for Service and product updates and administrative responses.
• Personal Information or other submitted information may be shared with people or organizations the user specifically asks to share with.
• Issues raised by a user may be shared with the relevant Customer where the user is associated with that Customer.
• Communications may occur through email, SMS, DEALHUB, DEALBOARD, DEALSTREAM, and other channels, potentially expanding marketing and operational contact.

4. Policy changes and business transfers

• The former mechanism allowing Privacy Policy changes after ten days’ notice and continued use is removed.
• New language permits transfer or assignment of Personal Information and other provided information in an acquisition, merger, bankruptcy, or comparable event, including to third parties.

5. Drafting and compliance concerns

• The diff appears to create malformed numbering, duplicated sections, and conflicting text.
• Several privacy-rights, retention, deletion, security, and opt-out provisions are referenced but their substantive wording is not shown. The complete revised policy should be checked before adoption.

Summary of Important Changes

1. Expanded scope of the Privacy Policy

The revised text:

• Identifies DealHub Ltd. and DealHub Inc. as the relevant entities.
• Defines “DealHub,” “we,” “our,” and “us” to include those entities.
• Covers use of Personal Information in connection with:
• The DealHub website and its subdomains, content, and services (the “Site”).
• The sales engagement tool (the “Service”).
• Job applications and CV submissions.

Risk: The policy now applies to a broader range of websites, services, and interactions than the prior wording. Users may be deemed to consent to processing connected with recruiting activities as well as product use.

2. Broader third-party hosting and international transfers

The new language states that:

• DealHub uses third-party service providers for hosting.
• Providers may be located anywhere in the world, including the United States.
• Data may be replicated across servers in multiple countries.
• Users consent to international transfers to those providers.

Risk: This is a broad transfer authorization with no visible list of providers, specific countries, retention limits, or detailed safeguards in the added language. Customers should verify whether the Data Processing Addendum provides appropriate transfer mechanisms and processor obligations.

3. Customer Data remains governed by the Terms

The revised policy expressly states:

> “In the course of using the Service, you may submit your Customer Data. Our use of such Customer Data is in accordance with the Terms.”

Risk: The Privacy Policy does not itself explain how Customer Data is used, retained, disclosed, or protected. Important rights and permissions may therefore be located in the separate Terms, including the MSA and any DPA. Customers should review those documents together rather than relying on this policy alone.

4. Broader consent and policy-change mechanism

The policy states that:

• Providing Personal Information is voluntary.
• Using the Site or Service, applying for a role, or submitting personal details constitutes consent to collection, processing, and sharing.
• Changes become effective 10 days after posting, with continued use treated as acceptance.

Risk: This creates a relatively short notice period and may be inadequate for customers that require contractual notice, approval, or a formal amendment before accepting material privacy changes.

5. Expanded disclosure and operational uses

The policy permits use through multiple communication channels and disclosure:

• To send product updates and respond to requests.
• To people or organizations the individual specifically asks DealHub to share with.
• To a customer where necessary to resolve a user issue involving that customer.

Risk: The language is broad and could permit disclosure of user-submitted information to the customer organization in support contexts.

6. AI-model training

No express new provision authorizing DealHub to use Customer Data or Personal Information to train, fine-tune, or improve AI models appears in the supplied diff.

However, the revised policy also does not expressly prohibit such use. Because Customer Data use is deferred to the separate Terms, any AI-training permission may exist there or in product-specific terms.

Action point: Confirm in the MSA, DPA, AI terms, and service documentation whether Customer Data—including prompts, outputs, business records, or support content—may be used for model training or product improvement, and whether customers can opt out.

Summary

Key Limitation

The diff states only that approximately 744 words were removed. It does not identify:

• Which clauses were deleted;
• Whether any language was added or replaced;
• Whether the deletions affect data use, confidentiality, intellectual property, liability, or termination; or
• Whether the contract contains provisions concerning AI training or model improvement.

Accordingly, it is not possible to determine the substantive legal impact of the changes from the information provided.

Potential Risks From Deletions

Removing contract language can create risk if the deleted provisions previously:

• Restricted the provider’s use of customer data;
• Required consent before using data for analytics, product improvement, or AI training;
• Prohibited disclosure to affiliates, vendors, or third parties;
• Required deletion or return of customer data;
• Defined ownership of customer content, outputs, or derived data;
• Imposed security, confidentiality, or breach-notification obligations;
• Limited the provider’s liability; or
• Gave the customer audit, opt-out, or termination rights.

The deletion could either improve the customer’s position—for example, by removing a broad data-use permission—or weaken it by removing safeguards or remedies. The direction cannot be determined without the deleted text and the surrounding provisions.

AI Training and Model Use

No specific change concerning the use of customer data to train AI models can be identified from this summary.

The deleted language should be reviewed for terms such as:

• “train,” “fine-tune,” “improve,” or “develop” models;
• “machine learning,” “artificial intelligence,” or “generative AI”;
• “de-identified,” “aggregated,” or “derived data”;
• “service improvement” or “product development”; and
• Rights to retain data after termination or use data across customers.

Particular attention should be given to whether deletion:

1. Removes an express prohibition on AI training;

2. Removes a customer consent or opt-out requirement;

3. Expands permitted use through broader “service improvement” language;

4. Eliminates restrictions on human review or third-party model providers; or

5. Changes whether customer data, prompts, outputs, or metadata may be retained.

Information Needed

A reliable legal analysis requires the actual redlined text, including the words removed and any replacement language. Without that text, the only definite conclusion is that the contract became shorter by approximately 744 words, with the substantive and AI-related consequences undetermined.

Key Changes

1. Consent is broader and more explicit

• The policy now states that providing Personal Information is voluntary and that users consent to the policy by:
• Using the Site or Service;
• Applying for an open position; or
• Submitting personal details, including a CV.
• Consent expressly covers the company’s collection, processing, and sharing of Personal Information for the purposes described in the policy.
• Users who do not agree are instructed not to access or use the Site or Service.

Risk: Consent is framed broadly and may be treated as covering multiple activities without separate consent for specific purposes. The policy should clearly identify the legal bases, purposes, retention periods, and categories of recipients for each type of data.

2. New unilateral policy-change right

• The company may now change the Privacy Policy at its discretion.
• Changes become effective 10 days after posting on the Site.
• Continued use of the Services after that period constitutes acceptance.

Risk: This permits material changes to data practices without obtaining affirmative consent. Users may not notice the revised policy, and the provision does not appear to require direct notice. Depending on applicable law, continued use may not be sufficient consent for materially different processing activities.

3. Customer Data language relocated and revised

• The former statement that Customer Data is used in accordance with the Terms has been moved into a new section concerning collection of Personal Information.
• The revised language states that users may submit Customer Data while using the Service and that its use remains governed by the Terms.

Risk: The Privacy Policy no longer clearly explains how Customer Data is used, protected, retained, deleted, or shared. Users must consult another document, creating ambiguity about the relationship between the Privacy Policy and the Terms.

4. Expanded collection channels

The policy now refers generally to Personal Information collected through “any applicable communication channel,” including:

• Email;
• SMS;
• DEALHUB;
• DEALBOARD; and
• DEALSTREAM.

Risk: This expands or clarifies the potential collection environment but does not specify what information is collected through each channel or whether third-party platform data is included.

5. Use and disclosure provisions reorganized

The revised text expressly permits use of Personal Information to:

• Send service and product updates;
• Respond to administrative or “Contact Us” requests; and
• Share information with people or organizations the user specifically asks the company to contact.

The wording also refers more broadly to “any information” submitted through the Site or Service.

Risk: “Any information” is broad and could encompass sensitive or confidential content unless limited by definition and purpose.

AI-Training Implications

• The provided diff contains no express authorization to use Customer Data or Personal Information to train, fine-tune, evaluate, or improve AI models.
• It also contains no express prohibition on such use.
• The broad references to processing, sharing, “any information,” and use in accordance with the Terms could create uncertainty if the Terms separately permit AI-related processing.

Recommendation: Add a specific AI clause stating whether Customer Data and Personal Information may be used for model training, whether data is de-identified, whether human review occurs, whether inputs are retained, and how users can opt out or request deletion.

Summary of Important Changes

1. Consent language removed and privacy policy scope changed

• The prior wording stated that users were not legally obligated to provide Personal Information and that providing it was voluntary.
• It also stated that use of the Site/Service or submission of job-related information constituted consent to the Privacy Policy’s collection, processing, and sharing terms.
• This language is replaced with a statement that Personal Information is not currently required merely to access general information on the Site, while confirming that the company does receive and collect Personal Information in specified circumstances.

Risk: The revised wording is less direct about consent and may create uncertainty regarding the legal basis for collecting and using data, particularly for regulated users or jurisdictions requiring affirmative consent.

2. Customer Data is moved to the Terms

The revised text adds:

> “In the course of using the Service, you may submit your Customer Data. Our use of such Customer Data is in accordance with the Terms.”

This removes the prior description of users submitting personal details, including CVs, through the website and shifts the governing rules for Customer Data to the separate Terms.

Risk: Customers must review the Terms carefully. Important data-use rights, restrictions, ownership provisions, and permitted processing may no longer be visible in the Privacy Policy. The phrase “in accordance with the Terms” is broad and does not itself specify purposes, retention, security obligations, or permitted disclosures.

3. No express AI-training authorization identified

The diff does **not expressly add language authorizing the company to use Customer Data or Personal Information to train, fine-tune, evaluate, or improve AI models.

However:

• Customer Data is now governed by the Terms, so any AI-training permission may exist there rather than in this Privacy Policy.
• The revised language does not expressly prohibit AI training or secondary use.
• The general Personal Information provisions may permit broad use for purposes described elsewhere, depending on the complete document.

Action point: Confirm whether the Terms or another incorporated policy permits using Customer Data—including confidential, personal, CV, or user-generated content—to train or improve AI systems. Seek an express prohibition or opt-in requirement if such use is not intended.

4. Expanded communications and use of Personal Information

The revision expressly permits use through multiple channels, including:

• Email
• SMS
• DEALHUB
• DEALBOARD
• DEALSTREAM

It also authorizes use of a designated email address for service/product updates and responses to administrative requests.

Risk: This may expand marketing and operational communications and could create compliance obligations under electronic communications and telemarketing laws. The diff does not clearly state consent, opt-out mechanics, or frequency limits.

5. Broader disclosure to Customers

The company may share user concerns with the relevant Customer when resolving an issue involving a team of which the user is a member.

Risk: “Customer,” “concern,” and the scope of shared information are not clearly limited. Sensitive information could be disclosed more broadly than users expect.

6. Corporate transaction transfer expanded

The company may transfer or assign Personal Information and any other information provided in connection with an acquisition, merger, bankruptcy, or comparable event.

Risk: This expands the transferred data beyond Personal Information and may allow disclosure of confidential business or user-submitted content to successors without additional consent.

7. Policy-change mechanism removed

The prior ten-day notice and continued-use acceptance mechanism is removed. The revised text appears to eliminate a clear notice period for policy changes.

Risk: Users may have less advance notice of future privacy changes, and enforceability may be less clear.