AI Training Practices
Training on Personal Data
Unclear
Training on User Interactions
Unclear
Training on Public Content
Unclear
AI Data Sharing
Unclear
AI Use Cases
- Other — Providing generative AI services through third-party service providers.
- Personalization — Profiling users to suggest content relevant to their interests.
- Recommendation — Suggesting content on the platform based on user profiling.
- Moderation — Using automated systems to flag content that may violate content guidelines or terms of use.
- Content Processing — Automated scanning of direct messages for spam, malicious content, and child abuse material.
Risk Assessment
Substack demonstrates strong privacy practices with a comprehensive policy, explicit support for GDPR and CCPA, and a dedicated privacy contact. While data collection and sharing are extensive due to the platform's nature (e.g., with Creators and other users), these practices are clearly disclosed. The primary area for improvement is the absence of a self-service data request form.
Recommended Actions
- Carefully review Substack's privacy policy, especially sections on data sharing with Creators and other users, to understand how your information is utilized.
- Actively manage your privacy settings and personal information through your account settings to control what is visible or shared.
- For specific data access or deletion requests, contact privacy@substackinc.com directly, as there is no self-service form available.
- Be mindful of the content shared in direct messages, as this data is collected and subject to the privacy policy.
AI Overview
Trains on user dataNo
Trains on interactionsNo
Opt-out availableNo
AI disclosureYes
Third-party AIYes
AI Training Opt-Out
No opt-out mechanism available.