Is Domo safe with your data?
Domo
Domo, Inc.
Weak disclosure · grade D is 35–47 · high confidence
Scored 39 ± 5 (range 34–44)
The ±5 is measured, not chosen: re-running the grader on identical policy text landed inside this range for 96% of apps. Read a one-grade gap between two apps as noise. How we grade
Domo earns a D (39/100) because it leaves much about its data practices unstated.
Dealbreaker flag
- D1.4: You grant us a non-exclusive, worldwide, royalty-free license to access, use, copy, transmit, sublicense, store, aggregate, publish, distribute, analyze, process, and display Subscriber Data
#158
of 216 apps ranked
39
score · BI & analytics avg 49
-10
vs category average
Domo's privacy notice and service agreement cover individual rights, a 30-day post-termination export window and named transfer safeguards, but the service agreement grants Domo a sublicensable licence over customer data that survives termination, and the documents are silent on model training, children's protections and any named security certification.
What Domo's privacy policy and terms of service say about your data
Data licence reaches beyond service delivery
Customers keep ownership of Subscriber Data, but the agreement grants Domo a worldwide, royalty-free licence to sublicense, publish and distribute that data, and that licence is listed among the clauses that survive termination.
Export window is named, retention period is not
On written request before termination, the platform stays accessible for 30 days solely to download or export Subscriber Data, after which Domo has no obligation to retain it. For personal information held as a controller, retention runs "for as long as we have an ongoing legitimate need," with no stated period.
Rights are offered subject to law
Access, correction, erasure, portability and objection are listed with a privacy request form and a toll-free number, but the notice states some or all of these rights may not apply or may be subject to limitations depending on applicable law.
Silent on model training and children
The only training statement is a narrow commitment not to use Google Workspace APIs to train generalised AI or ML models. Neither document addresses whether customer data or inputs train Domo's own models, and neither sets an age gate or children's protections.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Domo privacy rating
Details
- Category
- BI & analytics
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-03-01
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Other bi & analytics apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.