Backfrom Poolside’s own policies · verified 2026-09-02 · some facts not published
Poolside: data residency & retention
Headquarters
🇺🇸 United States (US)
Where inference runs
US, Other
Privacy policy: 'The Services are hosted and operated using infrastructure located in multiple jurisdictions, including the United States and other countries where our hosting and other service providers maintain data centers.' It adds: 'The specific jurisdiction(s) in which your data is processed at any given time may vary and may not be fixed to a single country or region.'
Region pinning
No
Policy explicitly states processing location may vary and is not fixed; no customer-selectable residency controls disclosed (a DPA exists for enterprise, contents not public).
Prompt retention
Retained · not disclosed
Retains data 'as long as necessary to provide you with our Services or to perform our business or commercial purposes' — no specific window for prompts/API inputs.
Trains on API data
Yes, by default
Privacy policy lists 'training our machine learning models (unless you opt-out)' under improving the Services — training on user data is default-on with an opt-out.
Zero data retention
Not disclosed
Training opt-out exists but no zero-data-retention offering is disclosed. Terms of Use page could not be retrieved (legal index only; /legal/terms-of-use 404s).
Compiled from Poolside’s published privacy policy, terms, and documentation on 2026-09-02. “Not disclosed” means Poolside publishes nothing on the point. Policies change without notice, so verify against the sources above before relying on this for compliance decisions.