Is Weaviate safe with your data?

Weaviate

47/100

Weak disclosure · high confidence

Weaviate earns a D (47/100) because it leaves much about its data practices unstated.

#98

of 216 apps ranked

score · Data platform avg 47

vs category average

Grade scaleA · 70–100B · 60–69C · 48–59D · 35–47F · 0–34

Weaviate publishes a detailed GDPR-style privacy policy with named sub-processors, a five-year retention figure and named security certifications, but it says nothing about AI model training, advertising data sales, breach notification or children's protections.

What Weaviate's privacy policy and terms of service say about your data

Named third parties

The policy lists its data recipients by name and purpose, including Sendgrid for mailings, HubSpot for customer relationship management, Stripe for payments and Zendesk for support.

Retention is long

Personal data is kept for five years, or as long as needed to meet the objectives described in the policy, and no shorter window is named for logs or closed accounts.

Security named, breach handling absent

Weaviate cites SOC2 Type 1, SOC2 Type 2 and ISO27001 along with end-to-end encryption for stored personal data, yet the policy never says whether or how quickly users would be told about a breach.

Silence on AI training

Neither the privacy policy nor the self-serve terms say whether customer data or inputs are used to train models, and no training opt-out is offered.

What the policy is silent or vague on

Not stated: keeping user inputs out of model training
Not stated: a way to opt out of training
Not stated: a deletion timeline after closure or request
Not stated: shorter retention for AI conversation logs

Weaviate privacy rating

Training-data use0 of 4 disclosed

Keeps user inputs out of model training, or makes training opt-inSilent

Names a way to opt out of or into trainingSilent

Says whether training use differs by plan or tierPartial

Lets the user keep ownership of generated outputsPartial

Data-subject rights3 of 5 disclosed

Grants a right to access your dataDisclosed

Grants a right to delete your dataPartial

Offers data portability in a usable formatPartial

Grants a right to correct your dataDisclosed

Grants a way to object to or opt out of processingDisclosed

Retention and deletion0 of 4 disclosed

States a retention period for your dataPartial

States a deletion timeline after closure or requestSilent

Sets a shorter retention for AI conversation logsSilent

Commits to collecting only the data it needsPartial

Third-party sharing1 of 5 disclosed

Lists the categories of third parties it shares withDisclosed

References a sub-processor list or data processing agreementPartial

Does not sell or share data for advertising, or offers opt-outSilent

Names a safeguard for international data transfersPartial

States a standard for government and law-enforcement accessPartial

Transparency2 of 4 disclosed

Discloses that you are interacting with AISilent

Marks AI-generated or synthetic outputNot applicable

Enumerates the categories of data it collectsDisclosed

Maps processing purposes to legal basesDisclosed

Is versioned and dated, with change noticePartial

Sensitive data and children0 of 2 disclosed

Discloses automated decisions and a human-review pathNot applicable

Limits the use of special-category dataSilent

Governs biometric data specificallyNot applicable

States protections for children's dataSilent

Security and accountability1 of 3 disclosed

Describes its security safeguardsPartial

Commits to breach notificationSilent

Names a certification or a privacy contactDisclosed

DisclosedPartialSilentAdverseNot applicable

Details

Category: Data platform
Modalities: text
Processes biometrics: No
Policy last updated: 2026-03
Region scored: Global / US-default
Last assessed: 2026-10-13

Documents examined

Other data platform apps

Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.