Replit

Replit · Coding agent · US · replit.com

Last verified 2026-09-16
Entry services/replit.yaml
Training on your data (default tier)
Not stated; the privacy policy and terms do not say whether code, prompts or agent sessions are used to train models
Retention
Deleted or de-identified when no longer necessary; stored data deleted on account deletion under the retention policy
Data residency
Primarily hosted in the United States, possibly elsewhere

Vendor data-handling terms

Training on your data (default tier)
Not stated; the privacy policy and terms do not say whether code, prompts or agent sessions are used to train models

Replit's public privacy policy and terms of service make no statement on training with user code or Agent conversations; the terms only prohibit users from scraping the service for training. Enterprise agreements are not public.

not stated by vendor
Retention
Deleted or de-identified when no longer necessary; stored data deleted on account deletion under the retention policy
We take measures to delete your data or maintain it in a de-identified form when it is no longer necessary to be kept in identifiable form, unless we are required by law to keep this information for a longer period.
checked 2026-09-16
Replit Privacy Policy
Data residency
Primarily hosted in the United States, possibly elsewhere
Cross-Border Data Transfers Our Services are primarily hosted in the United States and may also be hosted in locations outside of the jurisdiction in which you live.
checked 2026-09-16
Replit Privacy Policy

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
replit.comappvendor-documented
replit.devappvendor-documented
replit.appappvendor-documented

Assessment

Personal accounts: highEnterprise: medium

Reasoning: A cloud IDE and app builder whose Agent writes and deploys code, with secrets, databases and hosted apps living on the platform. The public terms say nothing about training on code or prompts, retention is open-ended and hosting is US. Enterprise terms are private.

Flags: Training-use not stated · Code, secrets and databases hosted on the platform · US hosting · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Retention and hosting terms verified against the Replit privacy policy; training use not stated.
  • 2026-09-16Added with vendor-documented domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub