Monitored company
UserGuiding
clause.watch tracks 2 legal documents published by UserGuiding, re-reading each one every six hours. Below is what each document covers, in plain English.
Privacy Policy
Privacy Policy Overview
1. Data Collection and Use
UserGuiding collects information depending on how you interact with it:
- Website visitors: Browser type, operating system, referring URLs, clickstream activity, and website usage. Cookies and similar technologies are used for functionality, preferences, analytics, advertising, and personalized content.
- Account users: Name, company, email, phone number, session information, and usage data. This supports account administration, product features, collaboration, notifications, and analytics.
- Chrome Extension users: A unique ID, operating system, and country, used to create and share onboarding materials.
- Subscribers/customers: Contact details, company information, and payment information for service delivery, billing, legal compliance, and communications.
- Support and marketing contacts: Contact information, job title, company, problem details, session and usage information, and potentially information obtained from third-party sources.
The stated legal bases include contract performance, legitimate interests, legal obligations, and consent—particularly for marketing cookies and certain marketing activities.
Important scope issue: If you are an end user of a third-party website that uses UserGuiding’s software, UserGuiding generally acts as the data processor, while that website operator is the data controller. Your privacy requests should normally be directed to that website operator, not UserGuiding.
2. User Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion, subject to legal retention requirements
- Restrict processing
- Receive data in a portable format
- Object to legitimate-interest processing or direct marketing
- Withdraw consent
- Complain to a data protection authority
California residents additionally have rights to know how information is used, request deletion, opt out of sale or sharing, and receive equal treatment for exercising privacy rights. UserGuiding states that it does not sell or share California personal information.
The policy does not clearly provide a dedicated privacy-request email address or detailed verification procedure. Users may need to contact the “UserGuiding Privacy Team” using the company’s general contact channels.
3. Third-Party Sharing
UserGuiding shares data with service providers supporting:
- Cloud hosting and storage
- Analytics
- Customer support and communications
- Security and content delivery
- Payment processing
- Advertising, marketing, and CRM
These providers are described as contractually limited to specified purposes and required to protect the data. However, the policy does not identify all providers or explain precisely what data each receives.
Data may be stored on AWS servers in the European Union and United States. International transfers rely on the EU-U.S. Data Privacy Framework, UK extension, Standard Contractual Clauses, or the UK IDTA.
4. AI/ML Training
The policy does not expressly state whether personal data, account content, usage information, support conversations, or other user-submitted material is used to train artificial intelligence or machine-learning models.
Accordingly, users should not assume that data is excluded from AI training. The policy’s general references to analytics, product improvement, marketing, and service providers leave this issue unresolved. Customers handling sensitive information should seek clarification or review the contract, Data Processing Agreement, and any AI-specific terms.
5. Key User Obligations and Restrictions
The policy imposes relatively few direct user obligations. Key practical points are:
- Users under 18 should not provide personal data; UserGuiding does not knowingly collect children’s data.
- Users should manage cookie preferences through the Cookie Policy tools.
- Account and subscription users should provide accurate information and use the service consistently with the separate Terms of Service.
- End users of subscriber websites should direct privacy requests to the relevant website operator.
The policy does not itself describe prohibited content, acceptable use rules, or account-security responsibilities; those likely appear in the Terms of Service.
6. Liability and Disputes
The policy states that UserGuiding uses “commercially reasonable” safeguards, including encryption, access controls, monitoring, and incident response, but does not guarantee absolute security.
It provides no detailed limitation of liability, governing-law clause, arbitration requirement, or general dispute procedure. Those issues must be checked in the separate Terms of Service. For EU-U.S. Data Privacy Framework complaints, UserGuiding states that unresolved complaints may involve regulatory authorities and, in some circumstances, binding arbitration. The company is subject to FTC enforcement for DPF compliance.
7. Policy Changes
UserGuiding may revise the policy for changes in practices, technology, or law. For material changes, it says it will provide notice by email and/or a prominent website notice where appropriate. Users are encouraged to review the policy periodically. The wording does not guarantee advance notice for every change or specify how much notice will be given.
Terms of Service
Terms of Service Review
Important Limitation
The material provided does not appear to be Terms of Service or a Privacy Policy. It is primarily marketing and navigation content for a product-adoption platform, listing features, resources, languages, and calls to action such as “Start for Free” and “Book a Demo.”
Accordingly, the document does not contain sufficient legal terms to determine the issues below. Users should obtain and review the company’s actual Terms of Service, Privacy Policy, Data Processing Addendum, and any AI-specific terms before using the service.
1. Data Collection & Usage
The text does not explain:
- What personal data is collected
- Whether the platform collects names, email addresses, account details, device information, or usage data
- Whether it uses cookies, tracking technologies, session recordings, surveys, or analytics
- How long data is retained
- The purposes for which data is used
- Whether customer-provided data may include information about a customer’s own users
The listed features—particularly Session Replay, Analytics, In-App Surveys, NPS Surveys, AI Assistant, and Knowledge Base—suggest that the service may process substantial behavioral, interaction, and content data. However, the excerpt does not establish what is actually collected or how those features operate.
2. User Rights
No user privacy rights are stated. The text does not address whether users may:
- Access or obtain a copy of their data
- Correct inaccurate data
- Delete data
- Restrict or object to processing
- Export data
- Withdraw consent
- Opt out of marketing communications or tracking
- Appeal automated decisions
These rights may depend on the user’s location and applicable laws, such as the GDPR, UK GDPR, or certain U.S. state privacy laws. The actual Privacy Policy should identify the process and contact details for making requests.
3. Third-Party Sharing
The document does not state whether data is shared with:
- Cloud hosting providers
- Analytics and advertising providers
- Customer-support or CRM platforms
- Payment processors
- Integration partners
- Affiliates or business successors
- Government authorities
The “Integrations” reference indicates that data may be exchanged with third-party services, but no specific permissions, safeguards, or list of providers is provided. Users should check whether the company acts as a processor/service provider for customer data and whether customers remain responsible for obtaining consent from their own end users.
4. AI/ML Training
The excerpt mentions an AI Assistant, but does not explain:
- Whether prompts, uploaded content, or outputs are stored
- Whether customer data is used to train general AI models
- Whether data is used only to provide the service
- Whether customers can opt out of model training
- Which AI vendors may receive data
- Whether human reviewers can access inputs or outputs
This is a significant unresolved issue. Users should not assume that data submitted to the AI Assistant is confidential or excluded from model training without an express contractual statement.
5. Key Obligations
No binding user obligations or restrictions are included. The missing Terms of Service should be reviewed for rules concerning:
- Prohibited or unlawful content
- Security of account credentials
- Responsibility for authorized users
- Intellectual-property rights
- Use of session replay and tracking features
- Compliance with privacy and consent laws
- Service limitations and acceptable-use rules
- Suspension or termination rights
Organizations using analytics, session recording, surveys, or onboarding tools may have additional obligations to notify and obtain consent from their own users.
6. Liability & Disputes
The excerpt contains no provisions regarding:
- Warranties or disclaimers
- Service availability
- Data-loss responsibility
- Security incidents
- Indemnification
- Liability caps or exclusions of consequential damages
- Governing law
- Arbitration, courts, venue, or class-action waivers
These terms can materially affect a user’s ability to recover damages or bring a claim.
7. Changes
No change-notification procedure is provided. The actual agreement should state:
- How users are notified of updates
- When changes become effective
- Whether continued use constitutes acceptance
- Whether material changes receive advance notice
- What happens if users reject the changes
Bottom Line
This excerpt is promotional content, not an operative legal agreement. It provides virtually no enforceable information about privacy, data use, AI training, user obligations, liability, disputes, or policy changes. Users should obtain the complete legal documents and pay particular attention to session replay, analytics, integrations, AI data use, data deletion, liability caps, and termination provisions.
Change history
2026-10-17 · Privacy Policy
Summary
The provided diff does not include the actual amended contractual language. It only states:
> “Added approximately 1916 words to the document”
Accordingly, it is not possible to identify the legal effect of the changes or determine whether the customer’s data may be used to train AI models.
AI-Training and Data-Use Review
No substantive language was provided addressing:
- Whether customer data may be used to train, fine-tune, or improve AI or machine-learning models.
- Whether prompts, inputs, outputs, uploaded files, or usage metadata are retained.
- Whether data is used for provider-wide model development or only for delivering the services.
- Whether the customer can opt out of AI training or request deletion.
- Whether data is anonymized, aggregated, or de-identified before use.
- Whether third-party AI providers receive or process customer data.
- Ownership and permitted use of AI-generated outputs.
- Confidentiality, security, retention, and deletion obligations applicable to AI data processing.
Risk Assessment
The addition of approximately 1,916 words may represent significant new obligations or permissions, but no risks can be assessed without the actual text. In particular, the missing language could potentially:
- Expand the provider’s rights to use customer content or usage data.
- Permit disclosure to affiliates, subcontractors, or AI vendors.
- Allow data retention beyond the service term.
- Limit the customer’s ability to opt out or require deletion.
- Change liability, confidentiality, intellectual-property, or data-protection protections.
- Introduce broad rights to use customer data for model training or product improvement.
Information Needed
Please provide the complete diff, including the text shown in braces, brackets, and replacement notation. The AI-training provisions, data-use rights, confidentiality terms, retention and deletion provisions, and any related definitions should be included for a meaningful legal analysis.
2026-10-16 · Privacy Policy
Summary of Important Changes
1. Sign-in and product-navigation content changed
- The deleted text includes:
- “Sign in with Google”
- “Sign in with Google. Opens in new tab”
- “ProductPublic”
- This content was replaced with:
- “ProductPublic”
2. Potential legal and operational implications
- Google sign-in availability: The diff appears to remove or hide a “Sign in with Google” option. This may affect user access and authentication flows, although the change could also reflect a navigation or formatting update rather than a complete removal of the feature.
- Accessibility information: The deleted phrase “Opens in new tab” may have been accessibility or user-interface guidance. Removing it could reduce clarity for users relying on assistive technologies or expecting a new browser tab.
- Product labeling: “ProductPublic” remains, but its context appears to change. This could affect how the product is presented or categorized to users. The legal significance is unclear without the surrounding terms or definitions.
3. Customer data and AI-model training
- No express change concerning customer data, AI, machine learning, model training, data retention, or data sharing is shown in this diff.
- The visible text concerns website navigation, authentication, language selection, and product features. It does not add or remove permission to:
- Use customer content to train AI models;
- Use customer data for product improvement;
- Share data with AI providers or other third parties; or
- Retain prompts, outputs, recordings, analytics, or other customer information.
- Any AI-related risk would need to be assessed from the privacy policy, terms of service, data-processing agreement, or product-specific AI terms, none of which appear in the supplied diff.
Overall assessment
The diff appears primarily to modify website interface text and possibly remove a Google authentication entry. It does not show a substantive contractual change regarding customer data or AI training.
2026-10-16 · Privacy Policy
Summary
The diff states only that approximately 10 words were added, but it does not identify the actual wording or where those words were inserted.
Legal and Risk Analysis
- Substantive impact cannot be determined without seeing the added language.
- It is not possible to assess whether the change affects:
- Customer data ownership or control
- Data-use permissions
- Confidentiality obligations
- Privacy or security duties
- Liability, indemnification, or regulatory compliance
- Termination or data-deletion rights
- Intellectual-property rights
- Use of customer data to train, fine-tune, evaluate, or improve AI models
AI Training Implications
No conclusion can be reached regarding AI-model training because the diff does not show the 10 added words. The added language could be material if it authorizes use of customer data, prompts, outputs, or metadata for:
- Training or improving artificial-intelligence or machine-learning models
- Product development, analytics, or model evaluation
- Sharing with affiliates, vendors, or other third parties
- Retention after termination or deletion from production systems
The actual added text is required to identify any new permission, restriction, ambiguity, or risk.
2026-10-15 · Privacy Policy
Structured Summary of Important Changes
1. Website and navigation content substantially reorganized
The diff contains extensive changes to navigation labels, product categories, and footer links. These appear primarily editorial or site-structure changes, including:
- Reordering or renaming product features, such as AI Assistant, Knowledge Base, Product Updates, Surveys, Analytics, Onboarding Checklists, and Product Tours.
- Changes to links for the Product Roadmap, Feature Requests, Custom Alerts, Session Replay, and related resources.
- Changes to language and login links, including additions or rearrangements for Portuguese (Brazil), Spanish, French, and English.
- Updates to footer resources, comparison pages, blog links, and calls to action such as “Get Started Free,” “Book a Demo,” and “TryChameleon alternative.”
These changes may affect how users access features and legal notices, but they do not appear to change contractual rights by themselves.
2. Webinar and resource descriptions updated
The wording concerning the Webinar Library changes from access to an archive of workshops to access to an archive of “recorded workshops and expert sessions.” This is likely a marketing clarification and does not create a material legal obligation unless the provider is contractually promising availability or completeness of the archive.
3. Privacy Policy content appears in the diff, but no clear substantive replacement is shown
The diff includes a lengthy Privacy Policy describing:
- UserGuiding’s role as controller for website visitors and subscribers.
- UserGuiding’s role as processor/service provider for end-user data collected through customers’ websites.
- Collection of account, usage, support, marketing, payment, and tracking data.
- Use of cloud, analytics, communications, security, payment, and marketing providers.
- EU/US hosting and transfers using the EU-U.S. Data Privacy Framework, SCCs, and the UK IDTA.
- Retention, security, data-subject rights, and California privacy provisions.
However, because the same policy text is repeated across multiple diff sections, it is difficult to determine whether the policy was newly added, deleted, or merely moved. The final version should be checked directly to confirm whether any policy language was removed.
4. AI training and use of customer data
No express provision was identified stating that customer data may be used to train AI models. The diff mentions “AI” in product navigation and feature names, including AI Assistant and AI-related tools, but does not add language authorizing:
- Training, fine-tuning, or improving AI models using customer data;
- Use of customer prompts, outputs, content, telemetry, or end-user data for model development;
- Sharing customer data with AI model providers for training;
- An opt-out or opt-in mechanism for AI training;
- De-identification or aggregation standards for AI-related use.
The policy’s general statements about product improvement, analytics, service providers, and platform operation could potentially be broad enough to support some improvement activities, but they do not clearly or specifically authorize AI model training. This ambiguity is a material risk for customers handling confidential, personal, or regulated information.
5. Key customer risks and recommended follow-up
Customers should confirm:
1. Whether the DPA or Terms of Service separately address AI training.
2. Whether customer content and end-user data are excluded from model training by default.
3. Which AI vendors receive data and whether they retain or train on it.
4. Whether an enterprise opt-out, deletion process, or data-isolation commitment is available.
5. Whether the privacy policy’s processor restrictions are consistent with any AI functionality.
2026-10-15 · Privacy Policy
Summary of Important Changes
1. Major Addition: New Privacy Policy
The diff adds a comprehensive privacy policy for YNOT PARTNERS, INC., a wholly owned subsidiary of YNOT Partners Yazılım Pazarlama Danışmanlık Anonim Şirketi in Türkiye. The policy states that UserGuiding acts as:
- Data controller for website visitors and account subscribers; and
- Data processor for end users of customer websites using UserGuiding’s JavaScript snippet.
This controller/processor distinction is important because customer website end-user data is said to be governed by the customer’s privacy policy and the parties’ Data Processing Agreement (DPA), rather than this privacy policy.
2. Customer and End-User Data Processing
The new policy identifies collection or processing of:
- Names, company information, email addresses, phone numbers and payment information;
- Session and usage information;
- Browser, operating-system, clickstream and referring-URL data;
- Support and troubleshooting information; and
- Marketing and analytics data.
For customer website end users, UserGuiding claims to process data only on the customer’s instructions. However, the diff does not provide the DPA or explain whether the DPA permits product improvement, analytics, de-identification, or other secondary uses.
Risk: Customers should verify that the DPA expressly limits UserGuiding’s use of end-user data and addresses deletion, subprocessors, security, international transfers, and confidentiality.
3. AI and Model Training
The navigation now prominently references an “AI Assistant”, but the added privacy policy does not expressly state:
- Whether customer or end-user data is used to train, fine-tune, evaluate, or improve AI models;
- Whether prompts, outputs, feedback, session recordings, or support conversations are retained for AI purposes;
- Whether data is shared with third-party AI providers;
- Whether customer data is excluded from model training by default;
- Whether customers can opt out; or
- Whether submitted data is anonymized or aggregated before AI use.
The policy’s broad statements about using data to “improve products,” enhance user experience, analytics, support, and security could potentially be interpreted to permit some AI-related improvement activity, but they do not clearly authorize or prohibit model training.
Key risk: The policy is materially ambiguous regarding AI training. Customers handling confidential, personal, regulated, or proprietary information should obtain a written commitment that their data—and their end users’ data—will not be used to train generalized AI models without express consent.
4. Third-Party Providers and Transfers
The policy adds broad categories of providers, including cloud hosting, analytics, communications, security, payment, marketing, and CRM providers. It also states that data may be stored in the EU and United States, relying on the EU-U.S. Data Privacy Framework, SCCs, and the UK IDTA.
Risks:
- No specific subprocessors or AI vendors are identified.
- The policy does not describe transfer impact assessments or supplementary safeguards.
- Customers should confirm whether AI providers receive data and whether they act as subprocessors.
5. Retention, Security and Rights
The policy adds general retention commitments, deletion or anonymization language, encryption, access controls, monitoring, and incident response. It provides broad GDPR-style rights and California privacy disclosures.
However, retention periods are not specified, and the policy merely refers to a separate Data Retention Policy.
6. Drafting and Implementation Concerns
The new text contains apparent drafting errors, including “how awe collect” and incomplete headings or sections such as “How We Use Your Information” and “How to Exercise Your Rights.” These omissions may create uncertainty about the actual scope of permitted processing.
2026-10-14 · Terms of Service
Summary
The provided diff does not include the actual contract language. It only states:
> “Added approximately 1174 words to the document”
As a result, it is not possible to identify:
- The specific legal changes;
- New obligations, rights, liabilities, or remedies;
- Changes to data ownership, confidentiality, security, or permitted use;
- Whether customer data may be used to train, fine-tune, evaluate, or improve AI models;
- Whether such use is opt-in, opt-out, or automatic;
- Whether data is anonymized, aggregated, de-identified, retained, or shared with third parties;
- Any changes to intellectual-property rights or customer control over outputs;
- New limitations of liability, indemnities, warranties, audit rights, or termination rights.
AI-Training Review
No language concerning AI models or the use of customer data for AI training appears in the supplied material. Therefore, no conclusion can be reached about whether the contract:
- Permits training on customer content or personal data;
- Restricts training to aggregated or de-identified information;
- Allows human review or vendor access to customer data;
- Permits use of data after termination;
- Gives the customer a deletion or exclusion right; or
- Applies different rules to inputs, outputs, prompts, logs, or telemetry.
Required Information
Please provide the actual redline or the added and deleted contract text. The analysis should include the surrounding section headings and any definitions referenced by the new language, because AI-training rights are often addressed indirectly through provisions on:
- “Customer Data” or “Usage Data”;
- Service improvement;
- Machine learning or artificial intelligence;
- Confidential information;
- De-identification or aggregation;
- Subprocessors;
- Data retention and deletion; and
- Intellectual-property ownership.
2026-10-14 · Privacy Policy
Summary of Important Changes
1. Sign-in option added
- The interface now includes “Sign in with Google”, with an accessibility note: “Opens in new tab.”
- This appears to be a product or website interface change rather than a contractual amendment.
2. “ProductPublic” text repositioned
- “ProductPublic” appears to have been removed from its prior position and retained after the new Google sign-in text.
- The diff does not clearly explain whether this is a navigation-label change, branding change, or formatting adjustment.
3. No apparent legal-term changes
- The provided diff contains no visible changes to:
- Customer data ownership or licensing
- Data processing or sharing
- Confidentiality
- Security obligations
- Warranties or liability
- Termination rights
- Governing law
- Subscription or payment terms
4. AI-model training and customer data
- No language in the diff addresses whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
- There is also no visible change concerning:
- Use of prompts, inputs, outputs, or telemetry for AI training
- Opt-in or opt-out rights
- Human review of customer content
- Retention of data used for model development
- De-identification or aggregation
- Third-party AI providers
- Restrictions on using customer data to train generative AI systems
Risk Assessment
Based solely on this diff, there is no identifiable new contractual risk relating to AI training or customer-data use. The change appears primarily cosmetic or functional, adding Google authentication.
However, the addition of Google sign-in may involve separate privacy and security considerations—such as sharing account identifiers or authentication data with Google—but those terms are not included in the supplied text. The applicable privacy policy, data-processing agreement, and Google authentication terms should be reviewed separately.
2026-10-14 · Terms of Service
Diff Analysis
Summary
The diff states only that approximately 1,174 words were removed from the document. The specific deleted language is not provided, so the legal and commercial effect of the changes cannot be determined reliably.
AI Training and Customer Data
- The diff does not identify whether any language concerning AI, machine learning, model training, or customer-data use was deleted.
- It is therefore impossible to determine whether the revised document:
- permits or restricts using customer data to train AI models;
- distinguishes between customer content, personal data, metadata, or de-identified data;
- allows use of customer data for service improvement or product development;
- requires consent, notice, or an opt-out;
- imposes retention, deletion, confidentiality, or security limits; or
- addresses whether data may be shared with AI vendors or subprocessors.
Potential Risks from the Deletion
Because the deleted provisions are unknown, the removal could potentially have eliminated important protections or limitations, including:
- restrictions on using customer data for advertising, analytics, or AI training;
- commitments to use data only to provide the contracted services;
- confidentiality and data-security obligations;
- customer ownership or license limitations;
- deletion and return-of-data requirements;
- restrictions on combining customer data with other users’ data;
- obligations relating to applicable privacy laws; or
- disclosures about automated processing and model outputs.
Alternatively, the deletions may have removed overly broad permissions or redundant language. The direction of the legal change cannot be determined from the information supplied.
Recommended Next Step
Provide either:
1. the full before-and-after text; or
2. the actual deleted passages, particularly any sections addressing data use, privacy, confidentiality, service improvement, machine learning, artificial intelligence, model training, or subprocessors.
Without the deleted text, no conclusion can be reached about whether customer data may now be used to train AI models or whether the customer’s protections have materially changed.
2026-10-13 · Privacy Policy
Summary
The provided diff appears to contain website navigation and user-interface text rather than contractual or legal terms.
Notable Changes
- Product navigation text was altered
- The text
ProductPublicappears in the revised version. - The original appears to have included
ProductandPublicas separate or duplicated navigation elements. - This looks like a formatting, concatenation, or menu-label change rather than a change to contractual rights or obligations.
- No substantive legal provisions identified
- The diff does not show changes to:
- Data ownership or licensing
- Privacy or confidentiality obligations
- Data retention or deletion
- Security commitments
- Liability or indemnification
- Service terms
- Customer consent requirements
- Intellectual-property rights
AI Training and Model Use
- No changes concerning AI training were identified.
- The diff does not state that customer data may be:
- Used to train, fine-tune, or improve AI models
- Shared with AI providers
- Used in aggregated or de-identified datasets
- Retained for model-training purposes
- It also does not add or remove any opt-out, consent, or restriction relating to AI model use.
Risk Assessment
Legal risk: Low based on the text provided. The visible changes appear limited to interface/navigation content. However, the excerpt may be incomplete or improperly formatted, so a definitive assessment would require the full contractual diff, especially any sections addressing privacy, data processing, product improvement, or AI services.
2026-10-12 · Privacy Policy
Summary
Scope of the Change
- The diff states only: “Added approximately 10 words to the document.”
- The actual added language is not provided.
- No deletions, replacements, or specific contractual provisions are shown.
Legal and Commercial Impact
- It is not possible to determine whether the change affects:
- Customer rights or obligations
- Data ownership or licensing
- Confidentiality
- Privacy and security obligations
- Liability, indemnification, or warranties
- Termination rights
- Fees or service scope
- The phrase describing the change is not itself sufficient to identify a legally meaningful amendment.
AI Training and Data Use
- No explicit change regarding the use of customer data to train, fine-tune, evaluate, or improve AI models is shown.
- The available diff does not establish whether customer data:
- May be used for model training
- May be shared with affiliates, vendors, or third parties
- Will be anonymized, aggregated, or de-identified
- May be retained after termination
- Is excluded from training by default or only upon opt-out
- The absence of visible AI-related language should not be treated as confirmation that no such change exists, because the underlying ten added words are missing.
Risk Assessment
- Assessment: Unable to determine.
- The actual wording of the approximately 10 added words is necessary to identify legal effect and any new risk.
- Particular attention should be given to terms such as “improve,” “train,” “develop,” “analyze,” “aggregated,” “de-identified,” “service data,” or “customer data,” which could expand the provider’s rights to use customer information.
2026-10-11 · Privacy Policy
Structured Summary of Important Changes
1. New or substantially expanded privacy policy
The diff appears to add or replace the prior privacy-policy content with a detailed policy for YNOT PARTNERS, INC., identified as the provider of UserGuiding. It introduces:
- A distinction between:
- Website visitors and subscribers, for whom UserGuiding acts as a data controller; and
- End users of subscriber websites, for whom UserGuiding acts as a data processor under the subscriber’s instructions and the applicable DPA.
- Data collection descriptions for website visits, account use, the Chrome extension, subscriptions, customer support, and marketing.
- Purposes and legal bases for processing, including contract performance, legitimate interests, consent, and legal obligations.
- Categories of third-party providers, including cloud infrastructure, analytics, communications, security, payment, and marketing providers.
- Retention, security, international transfer, data-subject rights, and California privacy provisions.
2. Customer and end-user data allocation
The policy expressly states that subscriber end-user data is governed by the Data Processing Agreement, not this privacy policy. This may clarify the parties’ roles, but it also places responsibility on customers to:
- Maintain appropriate privacy notices for their own end users;
- Handle end-user rights requests; and
- Review the DPA for restrictions, subprocessors, security commitments, and permitted uses.
The policy also states that UserGuiding may use subcontracted service providers and that data may be stored in the EU and United States.
3. AI and model-training implications
The diff adds or preserves references to AI-related products, including “AI Assistant,” “Knowledge Base,” and “Checklists AI Assistant.” However:
- There is no express provision authorizing or prohibiting the use of customer or end-user data to train, fine-tune, evaluate, or improve AI models.
- The general statement that data is used for listed purposes is incomplete (“How We Use Your Information … for the following purposes”) and does not clearly address AI processing.
- The policy does not state whether prompts, uploaded knowledge-base content, analytics, session data, support communications, or end-user activity may be used for model training.
- It does not specify whether AI providers receive customer data, whether data is de-identified, whether training is opt-in/opt-out, or how long AI-related data is retained.
This ambiguity is a significant customer risk, particularly for confidential business information, personal data, regulated information, and subscriber end-user data. Customers should seek an explicit contractual commitment that their data—and their end users’ data—will not be used to train generalized or third-party AI models unless expressly authorized.
4. Other legal and drafting risks
- The policy relies on external documents, including the DPA, Cookie Policy, Data Retention Policy, and security materials, so those documents must be reviewed together.
- “Commercially reasonable” security language provides limited assurance and no specific compliance standard or incident-notification deadline.
- International-transfer language relies on the EU-U.S. Data Privacy Framework and SCCs/UK IDTA; continued validity and coverage should be verified.
- The diff contains substantial navigation and formatting corruption, creating a risk that the published policy may be incomplete, inaccurate, or difficult to interpret.
2026-10-09 · Terms of Service
Summary
The provided diff does not include the actual amended contract language. It only states:
> “Added approximately 1174 words to the document”
Because the additions, deletions, and replacements are not shown, it is not possible to reliably identify:
- Changes to the parties’ rights or obligations
- New liability, indemnity, confidentiality, or termination risks
- Changes to data ownership or licensing
- Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
- Whether such use is optional, mandatory, anonymized, aggregated, or subject to consent
- Restrictions on using personal, confidential, regulated, or sensitive data
- Whether the provider may share customer data with affiliates, vendors, or model providers
- Data retention, deletion, security, or audit obligations
- Whether the customer receives notice or an opt-out right regarding AI training
AI-Training Issues to Check
The full diff should be reviewed specifically for language stating that the provider may:
1. Use customer prompts, inputs, outputs, files, or usage data to train or improve models.
2. Use data in de-identified, anonymized, aggregated, or pseudonymized form.
3. Permit third-party AI providers or subcontractors to access customer data.
4. Retain data after termination for model training or system improvement.
5. Claim ownership of generated outputs or rights to reproduce customer content.
6. Use customer data without separate consent, payment, or an opt-out.
7. Exclude certain data categories from training, such as personal data, confidential information, or regulated data.
Information Needed
Please provide the actual redlined text, including the content represented by {...}, [...], and [...] {...}. Without that language, any assessment of legal effect or AI-training risk would be speculative.
2026-10-09 · Terms of Service
Structured Summary of Important Changes
1. AI-related changes
- The revised content adds or rearranges references to “AI Assistant” and “AI” among product navigation links and marketing materials.
- The diff does not add any contractual language stating that:
- Customer data, content, prompts, recordings, analytics, or other information may be used to train AI models;
- Customer data will be shared with AI providers or subprocessors for training;
- UserGuiding may retain, de-identify, aggregate, or commercialize data for model development; or
- Customers may opt out of AI training or request deletion from training datasets.
- The existing Terms of Service shown in the diff contain no express AI-training authorization or restriction.
- Risk: The presence of AI product references without corresponding data-use terms creates ambiguity. Customers cannot determine from this text whether data processed by AI features is used only to provide the service or also for model training, product improvement, or other secondary purposes. The privacy policy, security documentation, product-specific terms, and any data-processing agreement should be reviewed for those provisions.
2. Contractual terms
No substantive contractual changes are apparent in the displayed Terms of Service. The following provisions appear unchanged:
- Unilateral amendment rights by posting updated terms or another notice.
- Automatic monthly or annual renewal.
- Advance billing and authorization to charge payment instruments.
- No refunds or credits for partial or unused periods.
- Customer responsibility for applicable taxes.
- Broad rights to investigate, remove, or delete content.
- Termination or suspension for breach.
- Termination of inactive or unpaid accounts after 60 days.
- Possible deletion and irretrievable loss of account content after cancellation.
- UserGuiding’s right to modify or discontinue the service without notice.
These provisions continue to present customer risks, particularly unilateral changes, nonrefundable fees, broad termination rights, and permanent data loss after cancellation.
3. Website and marketing-content changes
The diff primarily reflects:
- Reorganized product-navigation links and feature names.
- Added or revised references to feature requests, roadmaps, alerts, session replay, AI Assistant, knowledge bases, surveys, analytics, and onboarding tools.
- Revised footer, resource, blog, webinar, language, and comparison-page content.
- Minor wording and formatting changes, including “recorded workshops and expert sessions.”
These appear to be website or navigation changes rather than changes to operative legal obligations.
4. Overall assessment
The principal legal issue is not an express new AI-training right, but the absence of clear terms addressing AI data use despite expanded AI functionality. A customer should seek express confirmation that customer data and end-user data will not be used to train generalized or third-party AI models without authorization, and should require controls covering subprocessors, retention, deletion, confidentiality, and opt-out rights.
2026-10-06 · Terms of Service
Summary
The provided diff does not include the actual amended contract language. It only states:
> “Added approximately 1174 words to the document”
Without the text of the additions, deletions, or replacements, it is not possible to reliably identify:
- New legal obligations or rights
- Changes to liability, indemnification, confidentiality, or termination
- Changes to data ownership or permitted data uses
- Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
- Whether data may be disclosed to affiliates, vendors, or third-party AI providers
- Any new retention, deletion, security, or compliance requirements
AI-Training Review
No conclusion can be drawn about AI model training from the information provided. The added language should be reviewed for terms such as:
- “train,” “fine-tune,” “develop,” “improve,” or “enhance” models or services
- “machine learning,” “artificial intelligence,” or “generative AI”
- Use of “customer data,” “content,” “inputs,” “outputs,” “usage data,” or “de-identified data”
- Rights granted to use data on an aggregated, anonymized, or de-identified basis
- Permission to share data with subprocessors or technology providers
- Opt-out rights, consent requirements, or restrictions on human review
- Data deletion and retention after termination
Required Information
Please provide the full marked-up text showing the additions, deletions, and replacements. The statement that approximately 1,174 words were added is not sufficient to perform a legal or risk analysis.
2026-10-06 · Terms of Service
Summary of Changes
Overall Effect
The diff states only that approximately 1,174 words were removed. It does not identify which clauses, definitions, or obligations were deleted. As a result, the legal and commercial impact cannot be determined reliably from the information provided.
Customer Data and AI Training
- The provided diff contains no identifiable language confirming whether customer data may be used to:
- Train, fine-tune, or improve artificial intelligence or machine-learning models;
- Develop products or services;
- Create datasets, analytics, or derived information;
- Share data with AI providers or other third parties; or
- Retain data after termination for model-training or similar purposes.
- Because approximately 1,174 words were removed, it is possible that provisions addressing AI training, data usage, confidentiality, or retention were deleted. However, this cannot be confirmed without the actual deleted text.
- If an authorization to use customer data for AI training was removed, that could reduce the provider’s rights and improve the customer’s privacy and confidentiality position.
- Conversely, if restrictions, consent requirements, deletion obligations, or confidentiality protections were removed, the change could materially increase the customer’s risk.
Other Potentially Affected Areas
The deleted material may have addressed important terms such as:
- Ownership and permitted use of customer data;
- Confidentiality and data-security obligations;
- Data retention and deletion;
- Privacy-law compliance;
- Subprocessors and third-party disclosures;
- Indemnities and limitations of liability;
- Audit rights;
- Service levels or termination rights; and
- Governing law and dispute resolution.
Key Risk
The principal risk is lack of visibility: a large deletion may materially change the agreement, but the current diff does not reveal whether customer protections or provider rights were removed.
Recommended Next Step
Obtain the full redline or the text of the deleted provisions before approving the change. In particular, compare the versions for any language concerning:
1. “Customer Data,” “Content,” or “Usage Data”;
2. Training, fine-tuning, improving, or developing AI or machine-learning models;
3. Aggregated, de-identified, or derived data;
4. Data retention and deletion after termination; and
5. Disclosure to affiliates, subprocessors, or AI service providers.
2026-10-05 · Terms of Service
Summary of Important Changes
1. New Terms of Service added
The diff appears to add a substantially complete set of Terms of Service for UserGuiding, including:
- Identification of the provider: YNOT Partners Yaz. Paz ve Dan. A.Ş.
- Agreement formation by accessing or using the website/service.
- Unilateral right to modify the Terms by posting updates or other notice.
- Right to terminate accounts for violations, including without notice.
- Subscription billing, renewal, payment authorization, taxes, and failed-payment procedures.
- No-refund policy for monthly and annual subscriptions, including unused periods and plan changes.
- Rights to investigate violations, cooperate with law enforcement, and remove content at UserGuiding’s discretion.
- Termination of inactive unpaid accounts after 60 days.
- Customer responsibility for cancellation by emailing customer support.
- Potential deletion, forfeiture, and permanent loss of account content after cancellation.
- Broad right to modify or discontinue the service without notice.
2. Customer financial and operational risks
Automatic renewal and cancellation
Subscriptions automatically renew unless canceled. Cancellation must be initiated by the account owner through a specified email process. The Terms do not provide a clear advance-notice deadline, creating a risk of accidental renewal.
Nonrefundable fees
Customers receive no refunds or credits for:
- Partial billing periods;
- Upgrades or downgrades;
- Unused service time; or
- Open accounts that are later canceled.
Data and content loss
Upon cancellation, UserGuiding may deactivate or delete the account and forfeit all account content. The Terms expressly state that this information cannot be recovered. There is no stated post-termination export period, backup obligation, or transition assistance.
Unilateral service changes
UserGuiding may modify or discontinue the service, temporarily or permanently, with or without notice. There is no express service-level commitment, compensation, or termination right for customers if material functionality is removed.
3. AI-related provisions
The navigation and marketing content now references AI-related products, including:
- “AI Assistant”
- “AI Tools”
- “Releasing AI Tools” blog content
However, the diff does not add a substantive provision stating that customer data, account content, usage data, prompts, recordings, surveys, or other inputs may be used to train artificial-intelligence or machine-learning models.
There is also no express statement addressing:
- Whether customer data is used for model training;
- Whether training is opt-in or opt-out;
- Use of data to improve AI systems;
- Human review of AI inputs or outputs;
- Retention or deletion of AI-related data;
- Ownership of prompts, outputs, or derived models; or
- Restrictions on using confidential or personal information with AI features.
Accordingly, the AI-training position remains unclear and should be confirmed in the Privacy Policy, Data Processing Agreement, or a dedicated AI/data-use addendum.
4. Drafting and implementation concerns
The diff contains extensive duplicated and malformed website-navigation text, suggesting a scraping, formatting, or publication error. Before relying on the updated Terms, confirm that:
1. The correct legal text is displayed to customers;
2. Navigation text is not accidentally incorporated into the agreement;
3. Effective-date and version information are included; and
4. Customers receive legally sufficient notice of the updated Terms.
2026-10-05 · Terms of Service
Executive Summary
The diff appears largely to reflect website navigation, footer, localization, and content-formatting changes rather than substantive amendments to the Terms of Service. The Terms text shown in the additions is materially the same as the surrounding/repeated text. However, the diff is highly malformed, so a definitive legal comparison would require clean “before” and “after” documents.
Important Changes and Risks
1. New product and marketing content
The revised content adds or reorganizes references to:
- Feature Requests and a Public Roadmap
- Custom Alerts and Session Replay
- AI Assistant and AI Knowledge Base
- Onboarding Checklists, Product Tours, Tooltips, Surveys, Analytics, and related products
- Product updates, webinars, blogs, and other marketing resources
Risk: These references appear promotional and do not themselves create clear contractual commitments regarding product functionality, availability, service levels, or roadmap delivery. Customers should not assume that roadmap items will be delivered.
2. AI-related changes
The diff introduces or prominently lists products called “AI Assistant” and “AI Knowledge Base.” It also adds “AI” to the product/navigation structure.
No express AI-training provision is visible. In particular, the diff does not appear to add language stating whether:
- Customer Content or personal data may be used to train, fine-tune, or improve AI models;
- Customer data is shared with third-party AI providers;
- inputs or outputs are retained;
- data is anonymized, aggregated, or de-identified before use;
- customers can opt out of model training; or
- customer data is excluded from training by default.
Accordingly, the diff does not clearly authorize or prohibit AI model training. Any such rights may instead appear in a separate Privacy Policy, Data Processing Agreement, Security Policy, or AI-specific terms. This lack of clarity is a material contractual and privacy risk, especially for confidential, personal, or regulated data submitted to AI features.
3. Terms of Service provisions retained or restated
The displayed Terms continue to provide that:
- UserGuiding may change the Terms by posting updated terms or giving notice.
- Subscriptions automatically renew.
- Payments are generally nonrefundable.
- UserGuiding may suspend or terminate accounts.
- Cancellation may result in deletion and irreversible loss of account content.
- UserGuiding may modify or discontinue the service without notice.
These provisions create continuing risks concerning unilateral amendments, service changes, data loss, and limited refund rights.
4. Diff-quality concern
The extensive duplication and scrambled link text suggest an HTML extraction or localization artifact. Before relying on this diff, compare clean versions of the actual Terms, Privacy Policy, DPA, and any AI terms.
2026-10-04 · Terms of Service
Diff Analysis
Key limitation
The supplied diff does not include the actual added language. It only states:
> “Added approximately 1174 words to the document”
Without the text of those additions—or the original and revised versions—it is not possible to identify specific legal changes, obligations, or risks.
AI Training and Customer Data
No conclusion can be reached about whether the revised terms:
- Permit the provider to use customer data to train artificial intelligence or machine-learning models;
- Allow use of customer content for product improvement, analytics, benchmarking, or service development;
- Distinguish between customer content, personal data, usage data, prompts, outputs, metadata, or de-identified data;
- Require customer consent or provide an opt-out;
- Limit training to aggregated or anonymized data;
- Allow subcontractors or third-party AI providers to use the data;
- Retain data after termination for training or model improvement; or
- Grant the provider ownership or broad usage rights over customer data and AI outputs.
These provisions can materially affect confidentiality, privacy compliance, intellectual-property ownership, regulatory exposure, and the customer’s ability to control or delete its data.
Information Needed
Please provide either:
1. The complete redline using the stated notation; or
2. The text of the approximately 1,174 new words, together with the surrounding existing provisions.
Once provided, the analysis should specifically compare:
- Permitted data uses
- AI training and model-improvement rights
- Opt-out and consent mechanisms
- Data retention and deletion
- Confidentiality and security
- Ownership and licensing
- Use of third-party AI services
- Liability, indemnities, and regulatory compliance
- Changes that apply retroactively to previously collected data
On the current information, the only reliable conclusion is that a substantial addition was made, but its legal effect and any AI-training risks cannot be determined.
2026-10-03 · Terms of Service
Summary
The diff appears to contain website navigation and product-list text rather than substantive contractual provisions.
Key changes
- Navigation/product text changed
- The text
ProductPublicappears to replace or combineProductandPublic. - This may be a formatting, extraction, or redlining artifact rather than an intentional legal amendment.
- The surrounding list includes product features such as:
- AI Assistant
- Knowledge Base
- Session Replay
- Analytics
- In-App Surveys
- Product Tours
- Sign-in wording
- The phrase
Sign in with GoogleSign in with Google. Opens in new tabappears to have been replaced with{ProductPublic}in the marked-up text. - This looks like a user-interface or content-extraction change, not a contractual modification.
Customer data and AI training
- No express changes identified
- The diff does not add, delete, or modify language governing:
- Customer data ownership
- Data processing or permitted uses
- Use of customer content to train artificial intelligence or machine-learning models
- Whether customer data is used to improve AI systems
- Opt-in or opt-out rights for AI training
- De-identification, aggregation, or anonymization
- Retention, deletion, or security of data used for AI purposes
- Restrictions on human review or third-party AI providers
- Although “AI Assistant” is listed among the products, that reference alone does not authorize the provider to use customer data for model training. Any such authorization would normally need to appear in a data-use clause, privacy policy, product terms, or AI-specific terms.
Risk assessment
- Low apparent legal impact from the provided diff: No substantive legal terms are visible.
- Primary concern: The markup appears corrupted or incomplete. Because the text includes bracketed and braced fragments without surrounding contractual language, it is not possible to determine whether relevant provisions were omitted from the excerpt.
- Recommended follow-up: Compare the complete versions of the agreement, including privacy, data-processing, product-specific, and AI terms. Specifically search for terms such as “train,” “training,” “improve,” “machine learning,” “artificial intelligence,” “customer data,” “content,” and “model.”
2026-10-03 · Privacy Policy
Summary of Important Changes
1. New Privacy Policy
The diff adds a comprehensive Privacy Policy for YNOT PARTNERS, INC., a wholly owned subsidiary of YNOT Partners Yazılım Pazarlama Danışmanlık Anonim Şirketi in Türkiye. The policy applies to:
- Website visitors, for whom UserGuiding acts as a data controller.
- Subscribers’ representatives and employees, also treated as data subjects whose data UserGuiding controls.
The policy expressly excludes end users of customers’ websites. For those individuals, UserGuiding states that it acts as a data processor, while the customer remains the controller. Processing is said to be governed by the customer’s DPA rather than this Privacy Policy.
2. Expanded Data Collection and Uses
The policy identifies collection of:
- Browser, operating-system, referring-URL, clickstream, and website-use data.
- Account, contact, company, telephone, session, and usage information.
- Chrome Extension identifiers, operating system, and country.
- Payment information.
- Customer-support information, including problem details and session/usage data.
- Marketing information, including job title and data obtained from third parties.
Purposes include providing and improving services, analytics, personalized content, advertising, lead generation, customer support, security, collaboration, and product features. The broad “improve products” and “analytics” language may permit secondary uses beyond strictly delivering the contracted service.
3. AI and Model-Training Implications
The diff contains references to “AI Assistant” and related product navigation, but it does not expressly state that customer data, subscriber data, support conversations, session recordings, usage data, or end-user data will be used to train, fine-tune, evaluate, or improve AI models.
This is an important omission rather than a clear authorization:
- No distinction is made between data used to operate an AI feature and data used to train general-purpose or UserGuiding models.
- The broad purposes of “improve products,” analytics, and support enhancement could potentially be interpreted as allowing model-improvement activities, depending on the contractual terms and DPA.
- The policy does not address whether AI providers receive data, whether inputs are retained, whether data is anonymized, or whether customers can opt out.
- Customers should confirm the applicable Terms of Service, DPA, AI terms, and subprocessors list before permitting confidential or personal data to be processed through AI features.
4. Vendors, Transfers, and Retention
UserGuiding adds broad categories of service providers, including cloud hosting, analytics, communications, security, payment, marketing, and CRM providers. Data may be stored in the EU and United States, with reliance on the EU-U.S. Data Privacy Framework, SCCs, and the UK IDTA.
Retention is described generally as lasting for the account or subscription period, legal-compliance periods, or as otherwise necessary. Specific periods are deferred to a separate Data Retention Policy.
5. Legal and Drafting Risks
- The controller/processor distinction for subscriber end-user data should be verified against the actual service configuration and DPA.
- The policy uses broad, non-specific purposes and “commercially reasonable” security language.
- The policy references rights and procedures but provides limited operational detail on submitting requests.
- The diff contains substantial duplicated and corrupted website-navigation text, which may create publication, version-control, or interpretation concerns.
2026-10-03 · Terms of Service
Summary
The provided diff only states: “Added approximately 10 words to the document.” It does not identify the words added or show their location.
Legal and Commercial Impact
- No specific contractual change can be assessed from the information provided.
- It is not possible to determine whether the addition affects:
- Customer rights or obligations
- Liability, indemnification, confidentiality, or termination
- Data ownership, use, disclosure, or security
- Service levels, pricing, or intellectual-property rights
AI Training and Customer Data
- The diff contains no identifiable language concerning the use of customer data to train, fine-tune, evaluate, or improve AI models.
- Accordingly, no conclusion can be drawn about whether:
- Customer data may be used for model training
- Data may be shared with affiliates, vendors, or third parties
- Customer content may be retained after service termination
- Training is conducted on an opt-in, opt-out, or mandatory basis
- Personal, confidential, or proprietary information receives additional protections
Required Information
To perform a meaningful legal review, the actual ten added words—and their surrounding clause or section—are needed.
2026-10-03 · Privacy Policy
Structured Summary of Important Changes
1. New or Expanded Privacy Policy Framework
The diff introduces a substantially expanded Privacy Policy for YNOT PARTNERS, INC., including:
- Identification of the company and its Turkish parent company.
- Description of UserGuiding as a SaaS provider.
- Separate treatment of:
- Website visitors and subscribers, for whom UserGuiding acts as a data controller.
- End users of subscribers’ websites, for whom UserGuiding acts as a data processor under the subscriber’s instructions and DPA.
- New sections addressing collection, purposes, legal bases, service providers, retention, security, international transfers, data-subject rights, California privacy rights, and children’s privacy.
2. Customer and End-User Data Roles
The policy states that UserGuiding processes end-user data on behalf of subscribers and that subscribers remain the controllers. This is important because:
- The policy largely excludes end-user processing from its own terms.
- End users must contact the subscriber for privacy requests.
- The applicable rights, uses, retention periods, security obligations, and permitted disclosures may instead be governed by the subscriber’s DPA.
Risk: Customers should review the DPA carefully. The Privacy Policy does not itself establish all processor obligations or clearly describe the full scope of processing performed through the JavaScript snippet, session tools, analytics, surveys, or replay features.
3. Data Uses and Legal Bases
The policy identifies data collected in connection with:
- Website visits and cookies.
- Account creation and login.
- Chrome-extension use.
- Subscriptions and payments.
- Customer support.
- Marketing activities.
Purposes include service delivery, analytics, personalization, advertising, lead generation, security, and product improvement.
Risk: Some purposes are broad, and the “How We Use Your Information” section appears incomplete or contains a heading without corresponding detail. This may create ambiguity regarding secondary uses and the precise legal basis for each activity.
4. AI-Training Provisions
No express provision in the supplied diff states that customer data, subscriber content, session recordings, feedback, support communications, or end-user data may be used to:
- Train, fine-tune, or evaluate AI models;
- Improve general-purpose AI systems;
- Create aggregated or de-identified training datasets; or
- Be disclosed to AI providers for those purposes.
“AI” appears primarily in product-navigation text, such as “AI Assistant,” rather than as a substantive data-use authorization.
Important conclusion: The revised text does not clearly grant or prohibit AI-model training rights. Customers should seek explicit contractual language confirming whether their data is excluded from model training, particularly for subscriber end-user data and confidential content.
5. Third-Party Providers and Transfers
The policy adds broad categories of providers, including cloud hosting, analytics, communications, security, payments, and marketing providers. Data may be stored in the EU and United States, using the EU-U.S. Data Privacy Framework, SCCs, and the UK IDTA.
Risks:
- No specific vendor list or detailed subcontractor controls are provided.
- U.S. storage and transfers may create regulatory and customer-contract concerns.
- The policy does not expressly address AI vendors or prohibit their use of data for training.
6. Other Drafting and Compliance Concerns
- Apparent drafting errors, including “awe collect.”
- “How to Exercise Your Rights” and “Deleting Your Account” appear incomplete.
- Retention periods are deferred to a separate Data Retention Policy.
- “Commercially reasonable” security commitments may be weaker than customer-specific contractual standards.
- The California section contains broad service-provider certifications but should be reconciled with actual data uses and subcontractor practices.
2026-10-02 · Terms of Service
Summary
Nature of the Changes
The provided diff appears to involve website navigation and user-interface text rather than contractual or legal terms. The principal change is:
- Removal of duplicated or malformed navigation text, including:
- “Sign in with Google”
- “Sign in with Google. Opens in new tab”
- “Product”
- Replacement with:
- “ProductPublic”
The remaining text lists product features such as Roadmap, Session Replay, AI Assistant, Knowledge Base, Analytics, and Surveys.
Legal and Commercial Impact
- No identifiable changes to contractual obligations were provided.
- No changes to ownership, licensing, confidentiality, privacy, security, data retention, or liability terms appear in the diff.
- The change may affect how the website’s navigation or product categories are displayed, but it does not appear to alter customer rights or obligations.
AI Training and Use of Customer Data
- The diff contains the product label “AI Assistant,” but does not include any language concerning:
- Whether customer data is used to train AI models;
- Whether prompts, outputs, or other customer content are retained;
- Whether data is shared with third-party model providers;
- Opt-in or opt-out rights for model training;
- Use of data for service improvement or machine learning;
- Ownership or permitted use of AI-generated outputs.
Accordingly, no change relating to AI-model training or the use of customer data for AI purposes can be identified from this excerpt.
Risk Assessment
Risk level based on this excerpt: Low.
However, the diff appears incomplete or may contain only website text. A separate review of the applicable Privacy Policy, Terms of Service, Data Processing Addendum, and AI-specific terms would be necessary to determine whether customer data may be used to train models.
2026-10-02 · Terms of Service
Summary
The provided diff states only: “Added approximately 10 words to the document.” It does not identify the actual words added or show their location in the agreement.
Legal and Commercial Impact
- Changes cannot be assessed: Without the specific wording, it is not possible to determine whether the amendment affects liability, confidentiality, intellectual property, data protection, termination, pricing, or other rights.
- AI training implications: The diff does not reveal whether customer data may be:
- used to train, fine-tune, or improve AI models;
- used for product development or analytics;
- shared with affiliates, vendors, or other customers;
- retained for training after termination; or
- excluded from model training or required to be deleted.
- Risk level: Indeterminate. Ten words could nevertheless materially expand the provider’s rights—for example, by adding consent to use customer content for “service improvement” or “machine learning.”
Required Information
Please provide the actual ten-word addition, including any surrounding language and the relevant section heading. Without that text, no reliable legal-risk or AI-data-use analysis can be performed.
2026-10-01 · Privacy Policy
Structured Summary of Important Changes
1. New Privacy Policy Added
The diff adds a comprehensive Privacy Policy for YNOT PARTNERS, INC., identified as a wholly owned subsidiary of YNOT Partners Yazılım Pazarlama Danışmanlık A.Ş. in Türkiye. It covers:
- Website visitors, for whom UserGuiding acts as a data controller
- Subscribers, including representatives and employees, also as a data controller
- End users of customers’ websites, for whom UserGuiding acts as a data processor
Risk/Impact
The policy creates a clear separation between UserGuiding’s own data and customer end-user data. However, customers remain responsible for ensuring their own privacy notices and data-processing arrangements properly cover UserGuiding’s JavaScript tracking and other processing.
2. Customer End-User Data
The policy states that data collected from end users of customer websites:
- Is processed on the customer’s instructions
- Is governed by the customer’s DPA with UserGuiding, not this Privacy Policy
- Is not covered by UserGuiding’s direct controller-facing commitments in the policy
UserGuiding also states, for California data, that it acts as a Service Provider, will not sell or share the data, and will not combine it with unrelated data except as permitted in connection with its services.
Risk/Impact
The policy provides useful processor/service-provider limitations, but the actual protections depend heavily on the separate DPA, which is not included in the diff. Customers should verify whether the DPA addresses subprocessors, security, deletion, audit rights, international transfers, data use, and AI processing.
3. AI Training and Model Use
The diff does not expressly authorize UserGuiding to use customer data, subscriber data, or end-user data to train, fine-tune, or improve AI models.
“AI Assistant” appears in product/navigation content, and the policy refers generally to using data to “improve products.” However, it does not:
- State whether customer content is used for AI training
- Exclude customer data from model training
- Explain whether prompts, outputs, recordings, analytics, or support data are sent to AI providers
- Identify AI subprocessors or model providers
- Provide an opt-out or deletion mechanism for AI training data
AI Risk
The broad “improve products” language could create ambiguity, particularly if AI features process customer content or usage data. Customers should obtain a written commitment that their data and end-user data will not be used for model training except with express authorization.
4. Data Collection and Purposes Expanded/Clarified
The policy identifies collection of:
- Browser, clickstream, session, and usage information
- Account, billing, support, and marketing information
- Data obtained from third-party sources
- Chrome Extension identifiers, operating system, and country
Purposes include analytics, advertising, personalization, product improvement, security, marketing, and lead generation.
Risk/Impact
Several purposes are broad, and the section titled “How We Use Your Information” appears incomplete. This may create transparency and purpose-limitation concerns.
5. Third Parties, Retention, and Transfers
The policy identifies provider categories including hosting, analytics, communications, security/CDN, payments, and marketing. It states that data may be stored in the EU and United States and relies on the EU-U.S. Data Privacy Framework, SCCs, and the UK IDTA.
Retention is described generally rather than by specific periods, with further details deferred to a separate Data Retention Policy.
Risk/Impact
Customers should review the separate retention policy, subprocessor list, and transfer safeguards. U.S. storage and reliance on the DPF may create regulatory or contracting considerations for restricted data.
6. Drafting and Implementation Issues
The added text contains apparent formatting and drafting errors, including “how awe collect,” missing or incomplete headings, and concatenated navigation text.
Risk/Impact
These errors could make the notice difficult to understand and may undermine its transparency and enforceability.
2026-10-01 · Terms of Service
Structured Summary of Important Changes
Executive Summary
The diff is highly noisy and appears to combine webpage navigation, footer content, and the Terms of Service. Most apparent “changes” are reordered or reformatted website links rather than substantive contractual amendments. The Terms of Service text appears materially unchanged in the provided diff.
1. Website and Product-Content Changes
- A new or revised marketing/navigation section promotes the ability to let users:
- Request features;
- Follow a product roadmap; and
- Receive custom alerts.
- Navigation labels and product categories have been reorganized, including references to:
- AI Assistant;
- Knowledge Base;
- Product Updates;
- Announcement Modals;
- Tooltips;
- Surveys;
- Analytics;
- Product Tours; and
- Resource Centers.
- “Webinar Library” language changes from access to an archive of “recorded workshops” to an archive of “recorded workshops and expert sessions.”
- Footer and resource links have been updated or rearranged, including additional or changed references to product alternatives, blogs, newsletters, and educational resources.
These appear to be presentation or marketing changes, not contractual commitments.
2. Terms of Service
No clear substantive amendments to the Terms of Service are identifiable. The following provisions remain present:
- Automatic subscription renewal;
- Advance billing and payment authorization;
- No refunds or credits for partial or unused periods;
- Customer responsibility for applicable taxes;
- Broad rights to investigate Terms violations and remove content;
- Termination of inactive unpaid accounts after 60 days;
- Account suspension or termination for breach;
- Potential deletion and irreversible loss of account content after cancellation;
- The right to modify or discontinue the service without notice; and
- The right to update the Terms at the provider’s sole discretion by posting revised terms.
These provisions continue to present customer risks, particularly unilateral changes, nonrefundable fees, service discontinuation, broad termination rights, and possible permanent loss of customer content.
3. Customer Data and AI-Model Training
No express change was identified concerning the use of customer data to train AI models.
Although the diff adds or rearranges references to an “AI Assistant” and related AI products, it does not add language stating:
- Whether customer data may be used to train, fine-tune, or improve AI models;
- Whether customer data is shared with AI vendors or subprocessors;
- Whether data is anonymized or aggregated before such use;
- Whether customers may opt out; or
- Whether customer content is excluded from model training by default.
The AI-related product references therefore create potential ambiguity, but the provided diff does not establish a new training right. The Privacy Policy, data-processing terms, and AI-specific terms should be reviewed separately for those provisions.
2026-09-30 · Privacy Policy
Summary of Important Changes
1. Website/navigation content changed
- “Sign in with Google” and related accessibility text were removed, including:
- “Sign in with Google”
- “Opens in new tab”
- The text appears to be replaced with “ProductPublic”.
- The surrounding product-navigation labels remain, including features such as AI Assistant, Knowledge Base, Analytics, and Product Tours.
2. Potential user-experience and compliance impact
- Removing the “Sign in with Google” label may make the login option unclear or inaccessible to users relying on screen readers.
- Removing “Opens in new tab” may reduce accessibility information if the login flow still opens a new browser tab.
- If “ProductPublic” is intended as a product or navigation label, the replacement may be confusing because it does not clearly describe a login function.
- These changes could create usability or accessibility concerns, but the diff does not by itself establish a legal violation.
3. Customer data and AI-model training
- No changes in this diff address customer data, data ownership, privacy, confidentiality, or the use of customer data to train AI models.
- Although “AI Assistant” remains listed as a product feature, there is no new or amended language stating that:
- Customer data may be used to train, fine-tune, or improve AI models;
- Customer data will be excluded from model training;
- Data will be anonymized, aggregated, or retained for AI purposes; or
- Customers can opt out of AI training.
- Accordingly, this diff creates no identifiable new contractual permission or restriction concerning AI training. Any such rights or risks would need to be assessed in the applicable terms of service, data-processing agreement, privacy policy, or AI-specific terms.
2026-09-30 · Privacy Policy
Summary of Available Change
The diff only states that approximately 1,906 words were removed. It does not identify which provisions were deleted or provide replacement language.
Key Legal Impact
Because the deleted text is not included, it is not possible to determine:
- Which rights or obligations were removed.
- Whether liability, indemnity, confidentiality, security, or termination terms changed.
- Whether customer data ownership or permitted uses were modified.
- Whether audit, compliance, or data-retention protections were weakened.
- Whether any commercial or operational commitments were eliminated.
AI Training and Customer Data
No specific AI-related language is shown in the available diff. Accordingly, it cannot be determined whether the revision:
- Permits or restricts using customer data to train, fine-tune, or improve AI models.
- Allows use of customer prompts, inputs, outputs, or derived data for model development.
- Requires customer consent before AI training or product improvement.
- Limits training to aggregated, anonymized, or de-identified data.
- Prohibits using confidential or personal data for training.
- Requires deletion or segregation of customer data from training datasets.
- Gives the provider ownership or broad licensing rights over data or model outputs.
Risk Assessment
The absence of the deleted text creates a material review limitation. A deletion of approximately 1,906 words could remove important customer protections, but the direction and significance of the change cannot be assessed without the underlying language.
If the removed provisions addressed data use or AI, potential risks could include:
- Broader provider rights to use customer data.
- Loss of restrictions on AI training or model improvement.
- Reduced confidentiality or privacy protections.
- Elimination of notice, consent, opt-out, or deletion rights.
- Unclear ownership of inputs, outputs, or derived models.
Recommended Follow-Up
Obtain either:
1. The full prior and revised versions; or
2. The actual deleted text and any replacement provisions.
The AI/data-use provisions should be specifically checked for express language concerning training, fine-tuning, improving, developing, evaluating, or operating AI models.
2026-09-29 · Terms of Service
Summary of Important Changes and Risks
1. New Terms of Service added
The diff adds a full set of Terms of Service for UserGuiding, creating an express legal agreement between UserGuiding and each user. By accessing or using the service, the user agrees to the terms; users who disagree are prohibited from using the service.
Risk: The terms appear to apply through website access or use, potentially binding users even where there is no separately signed order form.
2. Unilateral amendments
UserGuiding may change or update the Terms at any time and in its sole discretion by posting revised terms on the website or providing another notice. User rights are governed by the version posted at the time of use.
Risk: Customers may be bound by material changes without an express requirement for advance notice, affirmative acceptance, or a right to terminate.
3. Subscription, renewal, and payment obligations
The new terms provide that:
- Subscriptions are billed in advance on monthly or annual billing cycles.
- Subscriptions automatically renew unless cancelled.
- Cancellation must be requested through customer support.
- A valid credit card authorizes UserGuiding to charge subscription fees.
- Failed payments may result in an invoice requiring manual payment.
- All payments are nonrefundable, including unused service periods and upgrades or downgrades.
- Customers must pay applicable taxes, other than specified U.S. federal or state taxes.
Risks: Automatic renewal, potentially cumbersome cancellation, broad payment authorization, and no-refund provisions may create unexpected charges and limit recovery of prepaid fees.
4. Monitoring and content removal
UserGuiding disclaims any obligation to prescreen or monitor access or content, but expressly reserves the right to do so. It may remove or delete information or content it considers to violate the terms or otherwise objectionable.
Risk: The discretion to monitor and remove content is broad and lacks detailed procedures, notice requirements, or an appeal process.
5. Suspension, termination, and data loss
UserGuiding may:
- Terminate inactive unpaid accounts after 60 days.
- Suspend or terminate accounts for breach, in its sole discretion.
- Delete or deactivate accounts after cancellation.
- Deny access and permanently forfeit all account content, stating that it cannot be recovered.
Risks: There is no stated data-export period, backup obligation, transition assistance, or retrieval right. Customers should independently maintain backups and clarify post-termination data handling.
6. Service changes and discontinuation
UserGuiding may modify or discontinue the website or any part of the service, temporarily or permanently, with or without notice. Cancellation takes effect at the end of the current service period, with no refund for unused time.
Risk: The terms provide no service-level commitment, minimum functionality, or remedy if important features are removed.
7. AI model training and customer data
The diff adds navigation references to products including “AI Assistant” and “Knowledge Base,” but it does not add an express provision stating that customer data, account content, prompts, transcripts, usage data, or end-user data may be used to train, fine-tune, evaluate, or improve AI models.
However, the Terms also contain no clear restriction prohibiting such use and no detailed data-use, ownership, confidentiality, retention, or deletion provisions.
Key concern: The AI-related data practices remain unclear and should be addressed in the Privacy Policy, DPA, or contract. Obtain explicit confirmation that customer content and personal data will not be used for AI training without authorization, or require defined opt-in/opt-out controls and safeguards.
2026-09-29 · Terms of Service
Summary of Important Changes
1. Navigation and Product Label Changes
- The text “ProductPublic” appears to have been changed or retained as “ProductPublic”, suggesting a formatting or markup-related change rather than a substantive contractual revision.
- The surrounding navigation content lists product features, including:
- AI Assistant
- Knowledge Base
- Session Replay
- Analytics
- Surveys and onboarding tools
2. Sign-In Text Removed
- The prior text included:
- “Sign in with Google”
- “Sign in with Google. Opens in new tab”
- This content is deleted in the diff.
- This appears to be a website-interface or accessibility change, not a change to legal rights or obligations. However, removing the accessibility description could affect usability for screen-reader users.
3. AI-Related Terms
- The navigation includes an “AI Assistant” feature.
- No language in the diff:
- Authorizes the provider to use customer data to train AI models;
- Prohibits or limits AI training;
- Describes whether customer data, prompts, outputs, or usage data are retained;
- Addresses model improvement, third-party AI providers, or data de-identification; or
- Changes ownership or confidentiality protections for AI-related data.
4. Legal and Commercial Risk Assessment
- No clear substantive contractual change is visible in this excerpt.
- The presence of an “AI Assistant” feature may warrant review of the full agreement, privacy policy, and AI-specific terms, because those documents may contain separate data-use provisions not shown here.
- In particular, confirm whether customer content submitted to the AI Assistant may be:
- Used to train or fine-tune models;
- Reviewed by personnel or third-party vendors;
- Combined with other customer data;
- Retained after account termination; or
- Used to generate generalized product improvements.
Overall Conclusion
The diff primarily reflects website navigation and sign-in text changes. It does not show any express change concerning the use of customer data to train AI models. Nevertheless, the inclusion of an AI Assistant feature makes the provider’s separate AI and privacy terms important to review.