Guardian

The supplied document (belonging to Iconic BIM LLC, not Guardian) says nothing about ownership of user-submitted data, prompts, or files. No input-ownership terms exist in the accessible text, and the document does not appear to govern the Guardian tool at all.

The document is silent on ownership of AI-generated output. It is a generic website privacy policy with no reference to generated content or AI outputs, and it does not appear to be Guardian's policy.

The policy makes no reference to AI or machine-learning training. It states data is used to 'improve the Service' generically, but there is no disclosure of whether user inputs feed model training. Silence on this for a purported AI tool is a significant risk.

The document contains no retention schedule, no deletion SLA, and no self-service deletion mechanism. It only mentions removing children's data upon becoming aware of it. There are no retention or deletion commitments applicable to general users.

The policy discloses sharing with service providers and use of Google Analytics, and notes Google may use collected data to personalize its own advertising network. Sharing is disclosed but extends to an ad network, which goes beyond bare service provision. No selling of data is described.

The only opt-out mechanism disclosed is the Google Analytics browser add-on and the ability to refuse cookies. There is no opt-out from model training or broader data sharing, but a limited opt-out for analytics does exist.

No compliance frameworks or certifications from the universal baseline (GDPR, CCPA, SOC 2, ISO 27001, ISO 42001, etc.) are mentioned anywhere. The document is a generic template with no attestations, audit references, or trust center. Sector is unknown, so only the universal baseline was assessed — and none of it is present.

The document provides no information on model transparency, explainability, or enterprise auditing. It does not mention AI/ML at all, so no explainability or auditability commitments exist.

Security disclosure is limited to a generic disclaimer that no method of transmission is fully secure, with no mention of encryption, access controls, penetration testing, or incident response. No breach history and no trust center/security page are referenced.

No tiering, paid plans, or enterprise-versus-consumer distinctions are described in the document. The policy is silent on any differential data handling between tiers.

The document does not address whether staff or the vendor may access, read, or review user prompts or outputs. It is entirely silent on human review.

The policy contains a standard legal-disclosure clause allowing disclosure of Personal Data to comply with legal obligations and protect rights. There are no references to specific government requests, litigation, or law enforcement history, but the broad disclosure language is present.

The policy discloses collection of standard PII: email, first and last name, phone number, IP address, device identifiers, browser data, and usage data. No SPI (financial, health, biometric) collection is described, and purposes are stated, but there is no purpose limitation or minimization commitment for AI processing.

The document is dated 'Last Updated: November 07, 2018' — nearly 8 years before the analysis date — far exceeding the 24-month staleness threshold. It also belongs to a different entity (Iconic BIM LLC / iconicBIM.com), never mentions AI/ML, and no product surface was supplied. This is a RED on recency grounds alone, independent of the missing coverage evidence.

Only one document was retrievable, so a cross-document consistency check is impossible. Note, however, a critical documentary mismatch: the supplied policy governs 'Iconic BIM LLC' / iconicBIM.com, not the Guardian tool at getguardian.tech under review. No contradictions are reported because no second document exists to compare.