Instinct

The terms, privacy policy and web-app settings document no export of the agent and no import or restore path. The agent runs only on Instinct-operated infrastructure.

• Instinct Terms of Service
• Instinct Privacy Policy
• Instinct web app settings page (client code)

With no export, every class of agent state (memories, conversations, Vault items, integrations, agent mailbox and phone identity) stays with the provider. The settings page mentions 'memories' and 'conversations' but offers no download.

• Instinct web app settings page (client code)
• Instinct web app workspace page (client code)

The agent runs on Instinct's servers and needs an Instinct account. The licence is personal, non-transferable and ends automatically on breach, and the company 'may suspend, disable, or delete your Account and/or the Services ... with or without notice, for any or no reason.'

• Instinct Terms of Service (s.6, s.11 Termination)

The homepage describes 'Instinct's core model', which Instinct trains itself. No public source documents a way for the owner to choose another model or a local open-weight model.

• Instinct homepage
• Instinct Terms of Service (s.8 Third party LLMs)

The company may delete the account 'with or without notice, for any or no reason', and on deletion 'may, but is not obligated to, delete any of your Materials'. No post-termination export window, owner-held backup or shutdown plan is published.

• Instinct Terms of Service (s.11 Termination)

Memory, conversations, Vault items and indexed external data are stored on the provider's servers. They can be read only through Instinct's apps and service, and no format or schema is published.

• Instinct Privacy Policy
• Instinct web app settings page (client code)

Both shortfalls apply. The base prompt and assembled context are not exposed to the owner. The model identity and version are not disclosed ('Instinct's core model', plus unnamed 'third party large language models'). The web chat client handles tool-invocation records, but no documentation says the full context or effective settings can be viewed.

• Instinct homepage
• Instinct Terms of Service (s.8)
• Instinct web app agent chat page (client code)

The privacy policy discloses no retention period for any class of data. Instinct collects clickstream data including keystrokes and cursor positions. Indexed data from a disconnected service is kept and may still be used until the owner separately requests deletion. Derived data and de-identified data may be used 'for any purpose'.

• Instinct Privacy Policy
• Instinct Terms of Service (s.3 Connected services)

The agent books rides and services and makes purchases through built-in commerce integrations (Shop Pay, Shop Wallet, Stripe Link). No public source says whether vendor choices involve paid placement or self-preference, and there is no binding commitment either way.

• Instinct Terms of Service (s.3 Actions)
• Instinct web app workspace page (client code)

No documented, durable action log exists. The terms state that 'Records of Actions available through the Services may not always be accurate', so recording can fail silently. By G12, the undocumented coverage of proactive, provider-side actions and the undocumented retention count as further shortfalls.

• Instinct Terms of Service (s.3 Responsibilities)

No integrity data, signing or verifier is documented for any action record. Records are held by the provider.

• Instinct Terms of Service

No public source says whether the agent can alter, delete or suppress records of its own actions.

• Instinct Terms of Service

The runtime, model and service are closed and provider-hosted. The terms forbid decompiling or reverse engineering the Services.

• Instinct Terms of Service (s.6 Restrictions, s.7 Ownership)

The agent's identities are provider-issued: an Instinct-hosted agent mailbox address ('Pick a new name for your Instinct inbox'), Instinct's messaging number, and trusted-people links issued by the service. The provider can revoke all of them.

• Instinct web app workspace page (client code)
• Instinct web app trusted networks page (client code)

No change history, attribution or rollback is documented for memory, instructions, settings or the model. The terms note that some changes (for example Beta Offerings) may not be reversible.

• Instinct Terms of Service (s.6 Beta offerings)

The base instructions and behaviour live in Instinct's hosted service and trained model. No public source documents a way to view or replace the base prompt or default skills. The owner can only give instructions in conversation.

• Instinct homepage
• Instinct web app settings page (client code)

The service keeps 'memories' and uses prior interactions for personalisation, but no public source or settings screen lists memory items with edit or delete controls. Only bulk deletion of indexed external data and location history is offered.

• Instinct web app settings page (client code)
• Instinct Privacy Policy

The owner can connect and disconnect integrations from a provider catalogue (Google Workspace, Outlook, Slack, Notion, Linear, GitHub, Granola, WHOOP, Shop Pay, Link and others). No interface for owner-built tools is documented, and built-in capabilities (computer and phone use, messaging) cannot be removed.

• Instinct web app workspace page (client code)

The provider sets safeguards and confirmation requirements on Actions at its discretion. The Acceptable Use Policy forbids circumventing 'usage restrictions or other safety measures' or enabling 'functionality disabled by the Company'. No owner override is documented.

• Instinct Terms of Service (s.3)
• Instinct Acceptable Use Policy

The terms reserve the right to change 'the content, features, and other services' at any time, with no advance notice or opt-in. No version pinning of model, instructions or runtime is offered.

• Instinct Terms of Service (s.11 Changes to the services)

At least two shortfalls apply. Spend limits are missing, even though the agent can pay through stored cards and Shop Pay/Link. No documented per-recipient limit on who the agent contacts by email or phone. No documented control over whose instructions it follows. Agent-to-agent messaging does have per-person trust and block lists and a pause switch.

• Instinct web app trusted networks page (client code)
• Instinct web app Vault page (client code)
• Instinct Terms of Service (s.3 Actions)

The owner authorises the Services to take Actions 'as the Services may deem are responsive'. Any confirmation requirements are set by the provider ('We may implement safeguards, confirmation requirements...'). No owner-configurable approval gates are documented. Third-party reporting, which does not affect the grade, describes an email sent without prior approval.

• Instinct Terms of Service (s.3 Actions and Responsibilities)
• TechCrunch (third-party): Instinct's powerful AI assistant is raising privacy and security concerns

No public source documents an owner control that halts all agent activity, including proactive and provider-side work. The only documented pause covers agent-to-agent connections. Under the C3 note, a desk review without a documented guarantee records this test as Unverified.

• Instinct web app trusted networks page (client code)

By default Instinct uses Materials and Usage Data, including keystroke-level clickstream, to train its AI models. The settings toggle 'Improve Instinct for everyone' stays on unless the owner opts out, and safety-flagged content is used for training even after opting out. Data may go to 'third-party business partners who may use the information for their own purposes', aggregated or anonymised. Contact details are used for marketing. Changes to data terms apply on notice, without specific consent.

• Instinct Privacy Policy
• Instinct Terms of Service (s.3 Materials, s.11)
• Instinct web app settings page (client code)

Vault items (logins, cards, authenticators, including items the agent created) and connected integrations are listed and can be removed one by one. The provider does not say where credentials are held, and does not commit to deleting provider-side copies on revocation. Disconnecting an integration 'does not automatically delete data collected from that integration'.

• Instinct web app Vault page (client code)
• Instinct web app workspace page (client code)
• Instinct Privacy Policy

Settings offer one-step 'Delete account' ('Deletion usually completes within an hour'). However, the terms state that on account deletion the Company 'may, but is not obligated to, delete any of your Materials'. Backups, third-party model providers and previously trained models are not covered, so provider-side copies can survive.

• Instinct web app settings page (client code)
• Instinct Terms of Service (s.11 Termination)
• Instinct Privacy Policy