Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
This privacy policy raises several concerns regarding user data control and privacy. For business subscription accounts with a recovery master key, a Recovery Administrator may access your encrypted content (risk_flags-1). When you share content, it goes out of your control, remaining accessible to those you've granted access even if you try to delete it (risk_flags-2). When sharing or requesting content, your IP address, approximate location, platform, and email for verification may become visible to the sender/requester and other authorized users (risk_flags-3, risk_flags-4). During electronic signature processes, your IP, email, and signing details are visible to the initiator and other users with access rights, and a digital certificate containing this information is permanently embedded in the signed file, viewable by anyone with the file (risk_flags-5, risk_flags-6). Additionally, call recordings, including your voice and personal data, are processed for sales insights and bot support. You cannot opt out of certain service messages, including security alerts and legal notices (gotchas-1), and the company is not responsible for personal data you share with others (gotchas-2). Finally, your continued use of their services implies acknowledgment of policy changes (gotchas-3).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
3 findings
Areas that pose significant risks to user rights or privacy, often due to broad grants of power to the company or waivers of user protections.
high95% confidence
Access to Encrypted Content by Recovery Administrator in Business Subscriptions
For accounts that are part of a Business Subscription with a recovery master key, Your Encrypted Content may be accessed by your Recovery Administrator.
Why it matters: If you have an account that is part of a Business Subscription with a recovery master key, your encrypted content may be accessed by your Recovery Administrator.
However, if you have an account that is part of a Business Subscription with recovery master key, Your Encrypted Content may also be accessed by your Recovery Administrator (Tresorit Business Subscriptions are administered by one person who has an extended set of rights – the Recovery Administrator. They manage the billing and users, and can also put security measures in place to protect confidential company data.) .
Our Data Privacy Commitment, paragraph 3 · Citation strength: strong
high95% confidence
Content shared by you goes out of your control
Once you share all or part of your Encrypted Content using their service with someone who accepted your invitation, the content goes out of your control and remains accessible to the extent you granted access.
Why it matters: Content you share with others may no longer be under your control, remaining accessible to those you granted access, even if you try to delete or remove it.
You understand that once you shared all or a part of Your Encrypted Content by using Our Service with any person who accepted your invitation, such content goes out of your Control and remains accessible by such person to the extent you granted such person access, even if you select to delete or remove Your Encrypted Content.
B) Your Encrypted Content, paragraph 2 · Citation strength: strong
medium90% confidence
Digital certificate for e-signed files viewable by anyone with the file
Once the signing process for an electronic document is completed, a digital certificate is included in the electronically signed file. Anyone in possession of the electronically signed file may view information above based on the digital certificate at any time.
Why it matters: Anyone who has the electronically signed file can view information based on the digital certificate at any time.
Also, once the signing process is completed, a digital certificate is included in the electronically signed file. Anyone in possession of the electronically signed file may view information above based on the digital certificate at any time.
A) Data that you provide to us, paragraph 18 · Citation strength: strong
Data Use
All clear
This section outlines how the company collects, uses, and shares your data, and the implications for your privacy.
✓
Looking good
No data-use concerns flagged
Verbaterm only flags concerns it can cite. No source-backed data-use findings are shown here.
Cancellation & Renewal
Not clearly stated
This section examines the terms related to subscription cancellation, auto-renewal, and refund policies, highlighting potential pitfalls for users.
?
Not clearly stated
No cited billing terms — wording is unclear
No information about cancellation, refund, or renewal policies was found.
Gotchas
3 findings
Unexpected or less obvious clauses that might have significant implications for users, often found in the fine print.
medium95% confidence
Unable to opt-out of certain service messages
You cannot opt out of receiving certain service messages, including necessary security alerts and legal notices.
Why it matters: You will receive certain service messages, security alerts, and legal notices, and you cannot opt out of them.
Please be aware that you cannot opt out of receiving certain service messages from us, including necessary security alerts and legal notices.
Company not responsible for personal data shared with others
The company is not responsible for your use of any personal data you make available to others via invitations, or the activities of other users or third parties to whom you give or make available your information.
Why it matters: You are responsible for personal data you share with others through the service; the company is not responsible for how others use that data.
We are not responsible for your use of any otherwise personal data, which you make available to others via invitations, or the activities of other users or other third parties to whom you give or make available your information.
Your continued use of their website or services constitutes your acknowledgement of any changes to this policy.
Why it matters: If you continue to use the website or services after policy changes, you are acknowledging and agreeing to those changes.
Your continued use of our website or our services constitutes your acknowledgement of such changes to this policy.
Changes to this policy, paragraph 2 · Citation strength: strong
Protections
2 findings
These are the commitments and features that safeguard your rights and data. We highlight company practices that benefit you.
Protection95% confidence
Ability to object to data processing based on legitimate interest
You have the right to object at any time to the processing of personal data concerning you which is based on legitimate interest, as per Art. 21(1) of the GDPR.
Why it helps: This gives you control over your personal data by allowing you to object to its processing if it's based on legitimate interest, enhancing your privacy rights.
Under Art. 21(1) of the GDPR, you have the right to object , on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interest.
When you delete a Tresorit Folder, your Encrypted Content will be automatically deleted within 90 days, and for technical and support reasons, they may keep your data for 60 days from deletion, after which it will be destroyed and cannot be restored.
Why it helps: This ensures that your encrypted content is permanently deleted and made irrecoverable after a set period once you delete a Tresorit Folder.
Once you delete a Tresorit Folder for any reason, Your Encrypted Content will also be automatically deleted within 90 days. For technical and support reasons, we may keep your data for 60 days from the date when you delete a Tresorit Folder. Please note that after this date, Your Encrypted Content will be destroyed in a way that those cannot be restored and will not be available again to anyone, including you.
B) Your Encrypted Content, paragraph 1 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.