Replit
Replit · Coding agent · US · replit.com
services/replit.yamlVendor data-handling terms
Replit's public privacy policy and terms of service make no statement on training with user code or Agent conversations; the terms only prohibit users from scraping the service for training. Enterprise agreements are not public.
“We take measures to delete your data or maintain it in a de-identified form when it is no longer necessary to be kept in identifiable form, unless we are required by law to keep this information for a longer period.”
“Cross-Border Data Transfers Our Services are primarily hosted in the United States and may also be hosted in locations outside of the jurisdiction in which you live.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| replit.com | app | vendor-documented |
| replit.dev | app | vendor-documented |
| replit.app | app | vendor-documented |
Assessment
Reasoning: A cloud IDE and app builder whose Agent writes and deploys code, with secrets, databases and hosted apps living on the platform. The public terms say nothing about training on code or prompts, retention is open-ended and hosting is US. Enterprise terms are private.
Flags: Training-use not stated · Code, secrets and databases hosted on the platform · US hosting · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Retention and hosting terms verified against the Replit privacy policy; training use not stated.
- 2026-09-16Added with vendor-documented domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.