Is Apollo.io safe with your data?
Apollo.io
ZenProspect, Inc.
Partial disclosure · high confidence
Apollo.io earns a C (48/100) because it discloses its data practices only in part.
Dealbreaker flag
- D1.1: We may use information collected through the Services, including Contributor Database records and Usage Data, to train internal models.
- D1.4: You grant Apollo an irrevocable, perpetual, worldwide, transferable, sublicensable, and royalty-free license to analyze Customer Data using artificial intelligence to improve the Platform
#118
of 211 apps ranked
48
score · Sales & marketing avg 47
+1
vs category average
Apollo.io is a registered B2B data broker whose policy openly states it trains internal models on Contributor Database records and takes an irrevocable perpetual sublicensable licence over Customer Data, offset by a well specified set of named privacy request mechanisms and ISO 27001 and SOC 2 certification.
What Apollo.io's privacy policy and terms of service say about your data
Training and content licence are both adverse
Apollo states plainly that it "may use information collected through the Services, including Contributor Database records and Usage Data, to train internal models" with no opt-out anywhere in the text. The terms separately grant Apollo "an irrevocable, perpetual, worldwide, transferable, sublicensable, and royalty-free license" over Customer Data, and the attached aggregation proviso does not cure the perpetual sublicensable grant.
Portability and correction are legally conditioned
Portability applies only "Where required by applicable law" and correction only "To the extent required by applicable law", each with further carve-outs plus a commercially reasonable efforts qualifier. These are conditional versions of the rights rather than unconditional grants.
Transfer safeguards apply to Europe only
The named Standard Contractual Clauses and Data Privacy Framework safeguard sits in Section 11.2 and the purpose-to-legal-basis mapping sits in Section 11, both headed "Information for Residents of the European Economic Area, the UK, and Switzerland". The global default in Section 10 says only that safeguards "may include" a list.
Sale, retention and AI logging stay weak
Apollo confirms it sells Contributor Database records, with an opt-out available through the Removal Page. No retention number appears anywhere, and the only AI retention language is "deletion of inputs and outputs after a defined retention period" imposed on third parties, with no period disclosed for Apollo's own MCP request logs.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Apollo.io privacy rating
Details
- Category
- Sales & marketing
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-08-10
- Region scored
- Global / US-default
- Last assessed
- 2026-08-13
Documents examined
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.