Credit software data terms
4 of 12 credit software vendors whose terms we read reserve the right to use their customers' data in aggregated or anonymised form, read 27 October 2026.
Vendor keeps aggregated or anonymised use
Who owns the business's data
Training AI on the business's data
Export at exit
The full board, one vendor per row
One vendor to a row. Expand an answer for its source sentence, word for word, plus the document and the read date; "not stated" means that document does not cover the question.
| Vendor | Who owns the business's data | Vendor keeps aggregated or anonymised use | Training AI on the business's data | Export at exit |
|---|---|---|---|---|
| Canopy Servicing | not statedNot addressed in Canopy terms and conditions | not statedNot addressed in Canopy terms and conditions | not statedNot addressed in Canopy terms and conditions | not statedNot addressed in Canopy terms and conditions |
| Chaser | not statedNot addressed in Chaser terms of service | not statedNot addressed in Chaser terms of service | may train | 90 days |
| Creditsafe | not statedNot addressed in Creditsafe service terms and conditions (global) Not addressed in Creditsafe terms and conditions (GB) | reserved | not statedNot addressed in Creditsafe service terms and conditions (global) Not addressed in Creditsafe terms and conditions (GB) | not statedNot addressed in Creditsafe service terms and conditions (global) Not addressed in Creditsafe terms and conditions (GB) |
| Esker | the business Not addressed in Esker data processing addendum | not statedNot addressed in Esker terms of service (USA) Not addressed in Esker data processing addendum | not statedNot addressed in Esker terms of service (USA) Not addressed in Esker data processing addendum | on requestNot addressed in Esker terms of service (USA) |
| Growfin | the business | not statedNot addressed in Growfin terms of use | not statedNot addressed in Growfin terms of use | no export promised |
| Kolleno | the business | reserved | will not train | 30 days |
| LoanPro | the businessNot addressed in LoanPro privacy policy | reserved | not statedNot addressed in LoanPro privacy policy Not addressed in LoanPro end user terms of service | no export promised Not addressed in LoanPro end user terms of service |
| Taktile | not statedNot addressed in Taktile global data processing agreement | not statedNot addressed in Taktile global data processing agreement | not statedNot addressed in Taktile global data processing agreement | not statedNot addressed in Taktile global data processing agreement |
| Tesorio | the business Not addressed in Tesorio data processing addendum | not statedNot addressed in Tesorio terms of service Not addressed in Tesorio data processing addendum | not statedNot addressed in Tesorio terms of service Not addressed in Tesorio data processing addendum | on request Not addressed in Tesorio data processing addendum |
| TrueAccord | not statedNot addressed in TrueAccord privacy policy | reserved | may train | not statedNot addressed in TrueAccord privacy policy |
| Versapay | not statedNot addressed in Versapay terms of use | not statedNot addressed in Versapay terms of use | not statedNot addressed in Versapay terms of use | not statedNot addressed in Versapay terms of use |
| Zest AI | the business | not statedNot addressed in Zest AI LuLu terms of use | may train | not statedNot addressed in Zest AI LuLu terms of use |
The source sentence behind every answer (64)
- Canopy Servicing, Canopy terms and conditions, read 2026-10-27, Who owns the business's data: No answer on the document, which ran to 24,579 characters when read on 2026-10-27.
- Canopy Servicing, Canopy terms and conditions, read 2026-10-27, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 24,579 characters when read on 2026-10-27.
- Canopy Servicing, Canopy terms and conditions, read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 24,579 characters when read on 2026-10-27.
- Canopy Servicing, Canopy terms and conditions, read 2026-10-27, Export at exit: No answer on the document, which ran to 24,579 characters when read on 2026-10-27.
- Chaser, Chaser terms of service, read 2026-10-27, Who owns the business's data: No answer on the document, which ran to 80,154 characters when read on 2026-10-27.
- Chaser, Chaser terms of service, read 2026-10-27, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 80,154 characters when read on 2026-10-27.
- Chaser, Chaser terms of service, read 2026-10-27, Training AI on the business's data:
You grant us a limited licence to use, store, process, analyse and copy Your Materials, any content derived from it, and any inputs and outputs from the Chaser Platform, so that we may: (a) provide the Services to you; (b) train and improve our models
- Chaser, Chaser terms of service, read 2026-10-27, Export at exit:
export the data within the Chaser Services in whole or in part to your own IT environment and/or systems within 90 days of termination.
- Creditsafe, Creditsafe terms and conditions (GB), read 2026-10-27, Who owns the business's data: No answer on the document, which ran to 54,789 characters when read on 2026-10-27.
- Creditsafe, Creditsafe terms and conditions (GB), read 2026-10-27, Vendor keeps aggregated or anonymised use:
The Customer grants Creditsafe a non-exclusive, perpetual licence to use any data and/or information uploaded by the Customer for analytical purposes.
- Creditsafe, Creditsafe terms and conditions (GB), read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 54,789 characters when read on 2026-10-27.
- Creditsafe, Creditsafe terms and conditions (GB), read 2026-10-27, Export at exit: No answer on the document, which ran to 54,789 characters when read on 2026-10-27.
- Creditsafe, Creditsafe service terms and conditions (global), read 2026-10-27, Who owns the business's data: No answer on the document, which ran to 45,622 characters when read on 2026-10-27.
- Creditsafe, Creditsafe service terms and conditions (global), read 2026-10-27, Vendor keeps aggregated or anonymised use:
The Customer grants Creditsafe a non-exclusive, perpetual licence to use any data and/or information uploaded by the Customer for analytical purposes.
- Creditsafe, Creditsafe service terms and conditions (global), read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 45,622 characters when read on 2026-10-27.
- Creditsafe, Creditsafe service terms and conditions (global), read 2026-10-27, Export at exit: No answer on the document, which ran to 45,622 characters when read on 2026-10-27.
- Esker, Esker data processing addendum, read 2026-10-27, Who owns the business's data: No answer on the document, which ran to 50,653 characters when read on 2026-10-27.
- Esker, Esker data processing addendum, read 2026-10-27, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 50,653 characters when read on 2026-10-27.
- Esker, Esker data processing addendum, read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 50,653 characters when read on 2026-10-27.
- Esker, Esker data processing addendum, read 2026-10-27, Export at exit:
In the event the Agreement is terminated for any reason, archived Documents shall be made available to Customer until the end of any archive commitment period.
- Esker, Esker terms of service (USA), read 2026-10-27, Who owns the business's data:
Customer owns all rights, title, and interest in and to all Documents and the information contained therein.
- Esker, Esker terms of service (USA), read 2026-10-27, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 74,296 characters when read on 2026-10-27.
- Esker, Esker terms of service (USA), read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 74,296 characters when read on 2026-10-27.
- Esker, Esker terms of service (USA), read 2026-10-27, Export at exit: No answer on the document, which ran to 74,296 characters when read on 2026-10-27.
- Growfin, Growfin terms of use, read 2026-10-27, Who owns the business's data:
You own the rights to the Customer Data that You provide to Us. We do not claim ownership over such Customer Data.
- Growfin, Growfin terms of use, read 2026-10-27, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 29,700 characters when read on 2026-10-27.
- Growfin, Growfin terms of use, read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 29,700 characters when read on 2026-10-27.
- Growfin, Growfin terms of use, read 2026-10-27, Export at exit:
Beyond the Data Retention Period, We reserve the right to delete all the Customer Data in our possession.
- Kolleno, Kolleno terms of service, read 2026-10-27, Who owns the business's data:
As between the parties, you own all right, title and interest in and to Your Data and the Outputs.
- Kolleno, Kolleno terms of service, read 2026-10-27, Vendor keeps aggregated or anonymised use:
We may disclose such analyses externally only as Aggregated Data. Aggregated Data does not constitute Your Data, your Confidential Information or Personal Data.
- Kolleno, Kolleno terms of service, read 2026-10-27, Training AI on the business's data:
Kolleno will not use Customer Data to train general-purpose AI models for the benefit of other customers, unless Customer gives prior written consent or the data is aggregated and anonymised so that Customer and individuals cannot be identified.
- Kolleno, Kolleno terms of service, read 2026-10-27, Export at exit:
we will, for a period of 30 (thirty) days following termination or expiry, make Your Data available for export by you through the Platform in a commonly used machine-readable format.
- LoanPro, LoanPro privacy policy, read 2026-10-27, Who owns the business's data: No answer on the document, which ran to 31,004 characters when read on 2026-10-27.
- LoanPro, LoanPro privacy policy, read 2026-10-27, Vendor keeps aggregated or anonymised use:
Such de-identified data may be retained and used by LoanPro to improve and enhance its products and services and for other proper purposes
- LoanPro, LoanPro privacy policy, read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 31,004 characters when read on 2026-10-27.
- LoanPro, LoanPro privacy policy, read 2026-10-27, Export at exit:
LoanPro reserves the right to delete a Client's data, including Personal Information provided by that Client, from its system after its license agreement with that Client terminates.
- LoanPro, LoanPro end user terms of service, read 2026-10-27, Who owns the business's data:
remain the property of the Customer, subject to the rights of use contained in these Terms and LoanPro's Privacy Policy.
- LoanPro, LoanPro end user terms of service, read 2026-10-27, Vendor keeps aggregated or anonymised use:
LoanPro shall have the perpetual right to collect, aggregate, use, distribute and sell such Usage Data for any legal purpose
- LoanPro, LoanPro end user terms of service, read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 12,788 characters when read on 2026-10-27.
- LoanPro, LoanPro end user terms of service, read 2026-10-27, Export at exit: No answer on the document, which ran to 12,788 characters when read on 2026-10-27.
- Taktile, Taktile global data processing agreement, read 2026-10-27, Who owns the business's data: No answer on the document, which ran to 70,571 characters when read on 2026-10-27.
- Taktile, Taktile global data processing agreement, read 2026-10-27, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 70,571 characters when read on 2026-10-27.
- Taktile, Taktile global data processing agreement, read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 70,571 characters when read on 2026-10-27.
- Taktile, Taktile global data processing agreement, read 2026-10-27, Export at exit: No answer on the document, which ran to 70,571 characters when read on 2026-10-27.
- Tesorio, Tesorio data processing addendum, read 2026-10-27, Who owns the business's data: No answer on the document, which ran to 19,669 characters when read on 2026-10-27.
- Tesorio, Tesorio data processing addendum, read 2026-10-27, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 19,669 characters when read on 2026-10-27.
- Tesorio, Tesorio data processing addendum, read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 19,669 characters when read on 2026-10-27.
- Tesorio, Tesorio data processing addendum, read 2026-10-27, Export at exit: No answer on the document, which ran to 19,669 characters when read on 2026-10-27.
- Tesorio, Tesorio terms of service, read 2026-10-27, Who owns the business's data:
Customer owns all right, title and interest in and to the Customer Data as well as any data that is based on or derived from the Customer Data
- Tesorio, Tesorio terms of service, read 2026-10-27, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 27,210 characters when read on 2026-10-27.
- Tesorio, Tesorio terms of service, read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 27,210 characters when read on 2026-10-27.
- Tesorio, Tesorio terms of service, read 2026-10-27, Export at exit:
During the subscription term, Customer may export Customer Data from the Service.
- TrueAccord, TrueAccord privacy policy, read 2026-10-27, Who owns the business's data: No answer on the document, which ran to 25,214 characters when read on 2026-10-27.
- TrueAccord, TrueAccord privacy policy, read 2026-10-27, Vendor keeps aggregated or anonymised use:
We may aggregate or deidentify your personal information, so that the information cannot reasonably be used to infer information about, or otherwise be linked to, you.
- TrueAccord, TrueAccord privacy policy, read 2026-10-27, Training AI on the business's data:
We may share personal information with our affiliates, TrueML Products LLC and TrueML Technologies LLC, which may include for the purpose of internal research, technological development, and the improvement of shared machine learning models.
- TrueAccord, TrueAccord privacy policy, read 2026-10-27, Export at exit: No answer on the document, which ran to 25,214 characters when read on 2026-10-27.
- Versapay, Versapay terms of use, read 2026-10-27, Who owns the business's data: No answer on the document, which ran to 26,072 characters when read on 2026-10-27.
- Versapay, Versapay terms of use, read 2026-10-27, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 26,072 characters when read on 2026-10-27.
- Versapay, Versapay terms of use, read 2026-10-27, Training AI on the business's data: No answer on the document, which ran to 26,072 characters when read on 2026-10-27.
- Versapay, Versapay terms of use, read 2026-10-27, Export at exit: No answer on the document, which ran to 26,072 characters when read on 2026-10-27.
- Zest AI, Zest AI LuLu terms of use, read 2026-10-27, Who owns the business's data:
As between Customer and ZEST AI, and to the extent permitted by applicable law, Customer owns all rights in the Input.
- Zest AI, Zest AI LuLu terms of use, read 2026-10-27, Vendor keeps aggregated or anonymised use: No answer on the document, which ran to 43,152 characters when read on 2026-10-27.
- Zest AI, Zest AI LuLu terms of use, read 2026-10-27, Training AI on the business's data:
Customer hereby grants to ZEST AI and its contractors and service providers a non-exclusive, perpetual, royalty-free, fully paid-up license to use the Input to develop, train, and improve the Services
- Zest AI, Zest AI LuLu terms of use, read 2026-10-27, Export at exit: No answer on the document, which ran to 43,152 characters when read on 2026-10-27.
Read and excluded
25 named documents were read but are not the kind of document this board answers from; see why below. They are counted and never answered.
- Creditsafe Canada, Data Studio terms: a reseller agreement for Equifax Canada's commercial credit reports; Creditsafe's own service terms are sources 1 and 2
- Taktile, privacy notice: Taktile's privacy notice for its own processing as a controller (website, contacts, recruitment); a customer's data is governed by the processing agreement, source 6
- Zest AI, privacy policy: Zest AI's privacy policy covers personal information of the people who use its website and services; the customer's data is governed by its product terms, source 8
- HighRadius, privacy policy: HighRadius's privacy policy covers personal information of its website visitors and registered users; it does not address the customer data its receivables software holds
- Oscilar, terms of service: Oscilar's website terms of use; they govern the Site, not a customer's data in its risk platform
- Oscilar, privacy statement: Oscilar's privacy statement for personal information it collects as a business; it does not address the customer data its platform processes
- TrueAccord, terms of service: TrueAccord's website terms of use; how it handles the data its clients place with it is in its privacy policy, source 20
- Lendflow, terms of service: Lendflow's terms for loan applicants who use its forms; they do not govern a lender's data on its platform
- Gaviti, platform terms of use: Gaviti's terms for the payers who use its platform to pay a Gaviti customer; they do not govern the customer's receivables data
- GDS Link, privacy policy: GDS Link's website privacy policy and site terms; they do not address the customer data its decisioning platform holds
- Zoot Solutions, privacy policy: Zoot's privacy policy covers website visitors and job applicants; it does not address the customer data its decisioning platform holds
- Scienaptic, privacy policy: Scienaptic's website and app privacy policy for its users; it does not address a lender's data on its platform
- HES FinTech, privacy policy: HES FinTech's internal personal-data protection policy; it states no term about a customer's data on its lending platform
- HES FinTech, terms of use: HES FinTech's website terms of use; they govern the website, not a customer's data on its platform
- Cforia, privacy policy: Cforia's website privacy statement; it does not address the customer data its receivables software holds
- Emagia, privacy policy: Emagia's website privacy policy; it does not address the customer data its receivables software holds
- Emagia, legal page: Emagia's website legal notice; a disclaimer about the website's information, no term about customer data
- EXUS, privacy policy: EXUS's privacy page as read is a cookie notice with no terms text
- defi SOLUTIONS, privacy policy: defi SOLUTIONS's website privacy policy; it does not address the lender data its origination and servicing platforms hold
- Serrala, terms and conditions: Serrala's terms page as read is an index of downloadable documents with no terms text
- Serrala, data processing agreement: Serrala's processing agreement page as read is an index of downloadable annexes with no terms text
- Upflow, master service agreement: Upflow's agreement page as read is a download link to the agreement with no terms text
- Provenir, privacy policy: Provenir's privacy page as read is an opening paragraph with no terms text
- C&R Software, privacy policy: C&R Software's privacy page as read is an opening paragraph with no terms text
- the universe, rule 1: a discovery rule, not a document: the category listing that names the vendors
How the figures are worked out
Each vendor's own published terms were read through estate-fetch and stored whole (sha256 on every row).
For every document, four questions were answered from the vendor's own words: who owns the business's data, vendor keeps aggregated or anonymised use, training AI on the business's data, export at exit.
Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the document read does not address the question.
A vendor with several documents reads 'varies' where they disagree.
12 vendors, 16 documents.
Where we looked (41)
- Creditsafe, global terms and conditions (from the vendor's own published terms; reproduced for comment)
- Creditsafe, GB terms and conditions (from the vendor's own published terms; reproduced for comment)
- Creditsafe Canada, Data Studio terms (read, set aside)
- Esker, terms of service (USA) (from the vendor's own published terms; reproduced for comment)
- Esker, data processing addendum (from the vendor's own published terms; reproduced for comment)
- Taktile, global data processing agreement (from the vendor's own published terms; reproduced for comment)
- Taktile, privacy notice (read, set aside)
- Zest AI, LuLu terms of use (from the vendor's own published terms; reproduced for comment)
- Zest AI, privacy policy (read, set aside)
- HighRadius, privacy policy (read, set aside)
- LoanPro, privacy policy (PDF) (from the vendor's own published terms; reproduced for comment)
- LoanPro, end user terms of service (from the vendor's own published terms; reproduced for comment)
- Canopy Servicing, terms and conditions (from the vendor's own published terms; reproduced for comment)
- Oscilar, terms of service (read, set aside)
- Oscilar, privacy statement (read, set aside)
- Tesorio, terms of service (from the vendor's own published terms; reproduced for comment)
- Tesorio, data processing addendum (from the vendor's own published terms; reproduced for comment)
- Chaser, terms of service (from the vendor's own published terms; reproduced for comment)
- TrueAccord, terms of service (read, set aside)
- TrueAccord, privacy policy (from the vendor's own published terms; reproduced for comment)
- Lendflow, terms of service (read, set aside)
- Kolleno, terms of service (from the vendor's own published terms; reproduced for comment)
- Growfin, terms of use (from the vendor's own published terms; reproduced for comment)
- Gaviti, platform terms of use (read, set aside)
- Versapay, terms of use (from the vendor's own published terms; reproduced for comment)
- GDS Link, privacy policy (read, set aside)
- Zoot Solutions, privacy policy (read, set aside)
- Scienaptic, privacy policy (read, set aside)
- HES FinTech, privacy policy (read, set aside)
- HES FinTech, terms of use (read, set aside)
- Cforia, privacy policy (read, set aside)
- Emagia, privacy policy (read, set aside)
- Emagia, legal page (read, set aside)
- EXUS, privacy policy (read, set aside)
- defi SOLUTIONS, privacy policy (read, set aside)
- Serrala, terms and conditions (read, set aside)
- Serrala, data processing agreement (read, set aside)
- Upflow, master service agreement (read, set aside)
- Provenir, privacy policy (read, set aside)
- C&R Software, privacy policy (read, set aside)
- the universe, rule 1 (read, set aside)
Use this figure
4 of 12 credit software vendors whose terms we read reserve the right to use their customers' data in aggregated or anonymised form, read 27 October 2026.
Who owns the business's data, by vendor: the business 6 of 12, not stated 6 of 12 (credit software terms, read 27 October 2026).
Vendor keeps aggregated or anonymised use, by vendor: not stated 8 of 12, reserved 4 of 12 (credit software terms, read 27 October 2026).
Training AI on the business's data, by vendor: not stated 8 of 12, may train 3 of 12, will not train 1 of 12 (credit software terms, read 27 October 2026).
Export at exit, by vendor: not stated 6 of 12, a number of days 2 of 12, no export promised 2 of 12, on request 2 of 12 (credit software terms, read 27 October 2026).
Reference: "Credit software data terms", updated 2026-10-27, https://sellcreditdatatoai.com/datasets/credit-software-data-terms/.
Download as CSV (64 answers, worked out 2026-10-27)