All apps

Is Chroma safe with your data?

D
Chroma icon

Chroma

35/100

Weak disclosure · high confidence

Chroma earns a D (35/100) because it leaves much about its data practices unstated.

#174

of 216 apps ranked

35

score · Data platform avg 48

-13

vs category average

Grade scaleA · 70–100B · 60–69C · 48–59D · 35–47F · 0–34

Chroma promises in its terms that it will not train models on customer data without permission, but the same section takes a worldwide sublicensable licence over that data, names no retention period, and offers its data rights only to users in Europe.

What Chroma's privacy policy and terms of service say about your data

No training by default

The terms state that unless the customer expressly permits it, Chroma will not use customer data to train artificial intelligence or machine learning models.

Broad content licence

The same clause has the customer grant Chroma a non-exclusive, worldwide, sublicensable right to use, copy, disclose, modify and create derivative works from customer data.

Rights limited to Europe

Access, deletion, portability and correction are offered under a heading for users located in the EEA or the UK, and the globally available choices are limited to marketing unsubscribe and blocking cookies.

No retention clock

The policy names no retention period, saying only that Chroma determines it by weighing various criteria, though customers do get a 30-day window after termination to request a copy of their data.

What the policy is silent or vague on

  • Not stated: a way to opt out of training
  • Not stated: whether training use differs by plan
  • Not stated: your ownership of generated outputs
  • Not stated: a right to access your data

Chroma privacy rating

Training-data use1 of 4 disclosed
Keeps user inputs out of model training, or makes training opt-inDisclosed
Names a way to opt out of or into trainingSilent
Says whether training use differs by plan or tierSilent
Lets the user keep ownership of generated outputsSilent
Data-subject rights0 of 5 disclosed
Grants a right to access your dataSilent
Grants a right to delete your dataSilent
Offers data portability in a usable formatSilent
Grants a right to correct your dataSilent
Grants a way to object to or opt out of processingPartial
Retention and deletion1 of 4 disclosed
States a retention period for your dataPartial
States a deletion timeline after closure or requestDisclosed
Sets a shorter retention for AI conversation logsSilent
Commits to collecting only the data it needsPartial
Third-party sharing3 of 5 disclosed
Lists the categories of third parties it shares withDisclosed
References a sub-processor list or data processing agreementDisclosed
Does not sell or share data for advertising, or offers opt-outSilent
Names a safeguard for international data transfersDisclosed
States a standard for government and law-enforcement accessPartial
Transparency1 of 4 disclosed
Discloses that you are interacting with AISilent
Marks AI-generated or synthetic outputNot applicable
Enumerates the categories of data it collectsDisclosed
Maps processing purposes to legal basesPartial
Is versioned and dated, with change noticePartial
Sensitive data and children0 of 2 disclosed
Discloses automated decisions and a human-review pathNot applicable
Limits the use of special-category dataPartial
Governs biometric data specificallyNot applicable
States protections for children's dataPartial
Security and accountability0 of 3 disclosed
Describes its security safeguardsPartial
Commits to breach notificationSilent
Names a certification or a privacy contactPartial
DisclosedPartialSilentAdverseNot applicable

Details

Category
Data platform
Modalities
text
Processes biometrics
No
Policy last updated
2024-10-02
Region scored
Global / US-default
Last assessed
2026-10-13

Documents examined

Other data platform apps

Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.

Is Chroma safe with your data? Grade D | VerifyWise