Ichi Automation
ichi.proIchi.pro presents significant privacy and compliance risks for professional use. The privacy policy is outdated (2016), contains no AI-specific provisions, lacks critical enterprise protections, and provides no clarity on data ownership, retention, or security practices. The absence of any terms of service document and the policy's focus on advertising rather than automation services raises serious concerns about using this for any business-critical or sensitive applications.
AI Transparency Facts
Independent analysis by TermsWatchdog · © 2026 TermsWatchdog
Input Data Ownership
The policy contains no provisions regarding ownership of user-submitted data, prompts, or files. This silence creates significant uncertainty about whether users retain ownership of their inputs.
Output Data Ownership
The policy is completely silent on ownership of AI-generated outputs or any content created by the service. This creates major legal uncertainty for professional users.
Training Data Usage
No mention of whether user data is used to train AI models. The policy's vague language about using information 'to improve our products and services' could potentially include model training without explicit disclosure.
Data Retention & Deletion
The policy contains no data retention schedules, deletion procedures, or user rights to request data removal. This violates modern privacy law requirements and creates indefinite data exposure.
Third-Party Data Sharing
While the policy claims not to sell personal information, it explicitly shares data with advertisers and provides no restrictions on aggregated data sharing. The heavy focus on advertising partners suggests data monetization is a primary business model.
Opt-Out Rights
Limited opt-out rights exist only for Google's advertising cookies. No opt-out mechanisms for data collection, processing, or other third-party sharing are provided.
Compliance & Certifications
No compliance frameworks, certifications, or regulatory adherence mentioned. The 2016 policy predates GDPR and other modern privacy laws, suggesting non-compliance with current regulations.
Model Explainability & Auditability
No provisions for AI model transparency, explainability, or enterprise audit rights. The policy doesn't even acknowledge AI or automation capabilities.
Security Practices & Breach History
Extremely vague security statement with no specific controls, encryption standards, or breach notification procedures mentioned. No security certifications or dedicated security documentation referenced.
Enterprise vs. Consumer Risk Delta
No distinction between consumer and enterprise use cases. The policy appears designed for a consumer website with advertising, not a professional automation tool.
Human Review of User Inputs
No explicit provisions limiting human access to user data. The vague language about using information for various purposes could permit unrestricted employee access.
Regulatory & Litigation Exposure
No disclosures about government data requests, law enforcement cooperation, or legal compliance procedures. This lack of transparency creates unknown regulatory exposure.
PII & SPI Data Inventory
Basic PII collection is disclosed (name, email, address) along with technical data and cookies. However, no mention of sensitive data categories or limitations on collection scope.
You've read all 15 risk ratings for Ichi Automation. Create a free account to see the exact policy wording behind each rating.