Reclaim and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. Reclaim and its providers will not use Personal Data, including calendar data, to train large language or generative AI models unless the user separately consents or opts in.

Vendor's wording: “We will not use and will not authorize any of our third-party service providers to use your Personal Data (including your Calendar Data or App Data) to train any large language or other generative AI models”

Source: reclaim.aiPrivacy Policy > Generative AI TechnologiesChecked on 19 October 2026

United States: all data is hosted on AWS in the USA, with redundancy between the us-east-1 and us-east-2 regions.

Vendor's wording: “All data is hosted in the USA, with redundancy between us-east-1 and us-east-2 regions.”

Source: reclaim.aiSecurity page > Amazon Web ServicesChecked on 19 October 2026

DPA in the terms.

Yes. A Data Processing Addendum is incorporated into the Business Terms of Service and is published at reclaim.ai/dpa (last updated December 7, 2023).

Vendor's wording: “Reclaim has self-serve data deletion processes and a Data Processing Addendum that is incorporated into our Business Terms of Service.”

Source: reclaim.aiSecurity page FAQ: Is Reclaim compliant with privacy lawsChecked on 19 October 2026

Published.

Yes, public: https://reclaim.ai/subprocessors (updated May 21, 2025). 19 entries. AI provider: OpenAI, opt-in only.

Vendor's wording: “### AI Sub-Processors (by opt-in - no customer data sent without consent/permission)”

Source: reclaim.aiReclaim Sub-Processors > AI Sub-ProcessorsChecked on 19 October 2026

On the list.

Active (Dropbox, Inc., which the search shows for 'Reclaim.ai' as a covered entity; EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Reclaim.ai'Checked on 19 October 2026

Kept as long as reasonably necessary or required by law; the customer can delete the account in-app and Reclaim wipes calendar data from its systems within one hour.

Vendor's wording: “our software will automatically kick off a job to wipe all your calendar data from our systems within one hour”

Source: reclaim.aiSecurity page > Data deletionChecked on 19 October 2026

1 named: SOC 2 Type II; the security page also names GDPR, CCPA and Data Privacy Framework compliance.

Vendor's wording: “Reclaim is SOC2 certified. SOC2 Type II is the highest standard for security certification and compliance”

Source: reclaim.aiSecurity page FAQ: Is Reclaim SOC2 certified?Checked on 19 October 2026