Is Airbyte safe with your data?
Airbyte
Airbyte, Inc.
Good disclosure · high confidence
Airbyte earns a B (67/100) because it discloses most of its data practices.
Dealbreaker flag
- D1.4: Customer hereby grants to Airbyte a non-exclusive, worldwide, royalty-free, fully paid up, sublicensable (through multiple tiers), right and license
#16
of 216 apps ranked
67
score · Data platform avg 46
+21
vs category average
Airbyte publishes a clear no-training commitment, a named Privacy Center for access, deletion, correction and portability, a public subprocessor list and Standard Contractual Clauses for EU transfers, but the terms take a sublicensable licence over customer data, the policy shares user information with advertising partners for lookalike audiences, and no retention period, deletion deadline or legal basis is stated.
What Airbyte's privacy policy and terms of service say about your data
No training on customer data
Airbyte states it does not collect or use customer data to develop, improve, or train generalized AI or machine learning models, and says the third-party model providers behind Airbyte Agents are contractually prohibited from training on customer data.
Replicated data is not persistently stored
For data replication, the policy says data passes through Airbyte's infrastructure in transit and is purged after transfer. For Airbyte Agents, data indexed in the Context Store is kept for as long as the connection or context store stays active, with no named period and no stated deletion deadline.
Broad licence over customer data in the terms
The terms say the customer owns the data it integrates, but in the same clause the customer grants Airbyte a worldwide, royalty-free licence that is sublicensable through multiple tiers for the term of the agreement.
Ad partners receive user information
The policy says Airbyte does not sell, rent, license, or lease personal information, yet it also shares information about users with advertising and social media companies to build lookalike audiences, and states it does not respond to Do Not Track signals.
What the policy is silent or vague on
- Not stated: your ownership of generated outputs
- Not stated: shorter retention for AI conversation logs
- Not stated: a data-minimisation commitment
- Not stated: a mapping of processing purposes to legal bases
Airbyte privacy rating
Details
- Category
- Data platform
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-04-14
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Other data platform apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.