Privacy policy clauses for Replicate
Replicate is a cloud platform that runs open-source AI models to generate predictions from user inputs. Websites use Replicate to power AI features like image generation, text processing, and audio analysis without maintaining their own infrastructure.
Free scan · No signup · Results in 60 seconds
What data Replicate collects
Your privacy policy must disclose each of the following data types when you use Replicate.
When does Replicate trigger privacy obligations?
Installation triggers immediate obligations
The moment you integrate Replicate into your product, you begin transmitting user-generated content (text, images, audio) to Replicate Inc.'s U.S. servers for model inference. This data flow—not the integration itself—activates privacy obligations.
### GDPR (if you have EU users)
You become a data controller under GDPR Article 4(7) the instant user inputs are sent to Replicate's infrastructure. Replicate is your processor (Article 28). This triggers:
- –Article 13/14 transparency: You must disclose in your privacy policy that inputs are sent to a U.S. processor, identify Replicate by name, and explain the purpose (model inference).
- –
