Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
1Password's policy raises concerns regarding the extensive control business account administrators have over user data, including access, processing, and the ability to restrict services or delete accounts (risk_flags-1). Furthermore, users of business accounts risk losing access to their business products and employee vaults if their affiliation with the organization changes. The policy also indicates that user information may be shared with third-party marketing services, potentially constituting a sale of personal data (data_use-1), and that copies of updated or deleted information may persist in their systems as business records (data_use-2). Lastly, user data may be transferred to and processed in countries with different data protection laws (data_use-3).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
1 finding
Critical issues that pose significant risks to users.
high95% confidence
Account Administrator Access to User Data
For business accounts, the account administrator manages the 1Password account and any associated information, meaning they can access and process user data, including insights into how users interact with the services and any privacy controls.
Why it matters: Your business account administrator has significant control over your account, including the ability to access and process your data, see insights into your usage, manage your privacy controls, and restrict your access to services or data.
Your account administrator manages your 1Password account and any information associated with your account. This means that your account administrator can access and process your data, including insights derived from how you use and interact with the Services and any privacy controls associated with your account. Your account administrator controls which services you may access using your account, and can turn off particular services at their discretion. Your account administrator can also delete your account, recover your account and vault contents, or restrict you from accessing any data associated with your account.
How your data is collected, processed, and shared.
medium90% confidence
Data Sharing with Marketing Partners
Your information may be disclosed to third-party marketing services to help advertise services to you, which may be considered a sale or sharing of personal information under applicable privacy laws.
Why it matters: Your personal information might be shared with third-party marketing services for advertising purposes, which could be classified as a sale of your data depending on local privacy laws.
We may disclose your information to third-party marketing services which help us advertise our services to you. This may be considered a sale or sharing personal information data under applicable privacy laws.
HOW WE SHARE INFORMATION, paragraph 1 · Citation strength: strong
medium90% confidence
Retention of Data After Deletion
Copies of information that you have updated, modified, or deleted may continue to reside in their systems for a period of time, and they may maintain copies of this information as part of business records.
Why it matters: Even after you update, modify, or delete your information, copies may persist in their systems for a period and be kept as part of their business records.
Please note that copies of information that you have updated, modified, or deleted may continue to reside in our systems for a period of time, and we may maintain copies of this information as part of our business records.
KEEPING YOUR INFORMATION SAFE, paragraph 1 · Citation strength: strong
medium90% confidence
International Data Transfer to Countries with Different Laws
Service Data, Diagnostic Data, and other processed information may be accessed from, processed, or transferred to countries with data protection laws different from your country.
Why it matters: Your service data and other information may be transferred to and processed in countries with potentially different data protection laws than your home country.
Service Data, Diagnostic Data, and other information we process may be accessed from, processed, or transferred to countries other than the country in which you reside or in which the data is hosted. Our employees may access your information from various countries around the world. Those countries may have data protection laws that are different from the laws of your country.
INTERNATIONAL DATA TRANSFERS, paragraph 1 · Citation strength: strong
Cancellation and Renewal
All clear
Terms related to account cancellation, subscription renewal, and associated policies.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Gotchas
All clear
Potentially overlooked clauses that may be to the user's disadvantage.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
3 findings
Commitments and features that benefit users.
Protection95% confidence
Secure Data Ownership and Encryption
The Secure Data stored in your vaults is your property, and the company claims no rights to it beyond what is necessary to deliver services. This data is encrypted using secure cryptographic keys that only users or account admins control, and the company cannot access or decrypt it in a readable format.
Why it helps: You retain full ownership of your secure data, which is encrypted with keys only you control, ensuring strong privacy and preventing unauthorized access by the company.
Secure Data is the data you pay us to protect. It includes the information you decide to store within your vaults in your 1Password accounts. Your Secure Data is your property. We claim no rights to it beyond those necessary to deliver Services to you. You may add, modify, and delete Secure Data at your discretion. Secure Data is encrypted using secure cryptographic keys that exist only in the possession and under the control of users or admins of their accounts. We have no way of accessing or sharing Secure Data in a readable format or decrypting it, and we never receive copies of unencrypted Secure Data.
Information you provide to us, paragraph 1 · Citation strength: strong
Protection90% confidence
Right to Download Secure Data
Users can export a copy of their Secure Data from their 1Password account, although they will need their Account Password and Secret Key to decrypt it.
Why it helps: You have the ability to retrieve your secure data, allowing you to maintain a personal copy and preventing you from being locked out of your own information.
We want happy customers, not trapped ones. We will not lock you out of your own data. However, we are unable to decrypt your Secure Data; you will need your Account Password and Secret Key to decrypt it. You may export a copy of your Secure Data from your 1Password account.
INTERNATIONAL DATA TRANSFERS, paragraph 6 · Citation strength: strong
Protection95% confidence
Parental Consent for Underage Enrollment
Services are not intended for minors, and individuals under 16 require parental or legal custodian consent or authorization to use them. Family account organizers are responsible for this authorization when adding someone under 16 to an account.
Why it helps: Protects minors by requiring parental or legal guardian consent for service use and account inclusion, ensuring that their participation is approved by a responsible adult.
Our Services are not intended for minors. Those under the age of 16 may not use the services without the consent or authorization of their parent or legal custodian. Family account organizers are responsible for that authorization when they add someone under the age of 16 to an account.
INTERNATIONAL DATA TRANSFERS, paragraph 14 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.