What is the difference between Customer Data and Usage Data?

Customer Data is the information you upload or process, which you own. Usage Data is metadata about how you use the platform, which vendors often claim ownership of for service improvement.

How can I protect my data rights in a SaaS contract?

Ensure your contract explicitly defines 'Customer Data' as your property, limits the vendor's license to use that data strictly for service delivery, and mandates data deletion upon contract termination.

A TermScore is an AI-generated risk rating from 0 to 100 that evaluates the fairness and risk level of any legal document. A score of 86-100 means the contract is highly favorable, while 0-30 indicates dangerous terms you should walk away from.

What types of documents can TermScore analyze?

TermScore analyzes any legal document including freelance contracts, employment agreements, residential leases, NDAs, brand sponsorship deals, SaaS vendor agreements, and rental applications. Upload PDFs, Word documents, or images.

How much does TermScore cost?

TermScore offers a free plan with 3 scores per month. The Team plan is $15/month for 30 scores, and the Professional plan is $50/month for 500 scores with team collaboration features. One-time purchases are also available: a single score for $5 or a 5-pack for $15, with no subscription required.

Is my document data secure?

Yes. Documents are processed in memory and analysis results are stored encrypted. TermScore never shares your document data with third parties and you can delete your data at any time from your dashboard.

Can a SaaS vendor claim ownership of data processed through their platform?

Q: Can a SaaS vendor claim ownership of data processed through their platform?

No, a SaaS vendor should not own your data. While vendors may claim ownership of 'Usage Data' or 'Aggregated Data,' your proprietary input data and output results must remain your exclusive property under the contract.

No, a SaaS vendor should not own your data. Under standard commercial law, you retain full ownership of the data you input into a platform. While vendors often claim rights to 'Usage Data' or 'Aggregated Data' to improve their services, your proprietary business data must remain your exclusive property.

The Ownership Distinction: Customer Data vs. Usage Data

To prevent vendor overreach, you must distinguish between two primary data categories in your SaaS agreements. Failure to define these clearly is the most common cause of intellectual property disputes.

Customer Data

This is the information you upload, process, or generate using the SaaS tool. This includes your trade secrets, customer lists, financial records, and proprietary workflows. You must ensure the contract states that you retain 100% ownership of this data.

Usage and Aggregated Data

Vendors often include clauses granting them ownership of 'Usage Data'—metadata regarding how you interact with the software (e.g., click-through rates, login times, feature usage). They also frequently claim rights to 'Aggregated Data,' which is your data stripped of personal identifiers and combined with other users' data.

Data Type	Typical Ownership	Permitted Use
Customer Data	Customer	Service delivery only
Usage Data	Vendor	Platform optimization
Aggregated Data	Vendor	Benchmarking/Analytics

Key takeaway: Always demand that 'Aggregated Data' be truly anonymized and de-identified. If the vendor can re-identify your data, it is not aggregated—it is your data, and you should own it.

Red Flags in SaaS Data Clauses

When reviewing your contract, look for these specific red flags that indicate a vendor is attempting to overstep their legal bounds:

Broad License Grants: Language that grants the vendor a 'perpetual, irrevocable, royalty-free license' to use your data for 'any purpose.'
Lack of Deletion Obligations: Contracts that do not specify a timeframe (e.g., 30 or 60 days) for the vendor to delete your data after the agreement ends.
Ownership of 'Results': Clauses claiming the vendor owns the output or 'insights' generated by your data. If the output is derived from your proprietary input, you should own it.
Feedback Clauses: Provisions that automatically assign ownership of any 'suggestions' or 'feedback' you provide to the vendor, potentially including your proprietary ideas.

Action Item: Audit your current contracts for the phrase 'perpetual license.' If found, strike it and replace it with a license that terminates automatically when the agreement ends.

Protecting Your Rights: A Step-by-Step Approach

Securing your data requires proactive contract management. Follow these steps to ensure your IP remains protected:

Define 'Customer Data' Broadly: Ensure the definition includes all data provided by you, your employees, and your end-users.
Restrict Vendor Access: Explicitly state that the vendor has a 'limited, non-exclusive license' to access your data solely for the purpose of providing the services.
Mandate Data Portability: Require the vendor to provide your data in a standard, machine-readable format (e.g., CSV, JSON, or SQL dump) upon request or termination.
Specify Deletion Protocols: Include a clause requiring the vendor to certify in writing that all your data has been purged from their systems within a set timeframe (usually 30 days post-termination).

Key takeaway: If a vendor refuses to include a data return or deletion clause, they are likely building their own proprietary models using your data. This is a significant security and IP risk.

Jurisdictional Considerations

Data ownership is also heavily influenced by regional regulations. In the EU, the GDPR grants you specific rights regarding the 'portability' of your data. In the US, the CCPA/CPRA provides similar protections for California residents. Regardless of your location, your contract should explicitly state that you are the 'Data Controller' and the vendor is merely the 'Data Processor.' This legal distinction prevents the vendor from claiming they have the right to 'process' your data for their own commercial gain.

Final Thoughts on Contract Auditing

Navigating the nuances of SaaS data ownership is complex, but it is essential for protecting your company's most valuable assets. You don't have to manually parse through hundreds of pages of legalese to find these risks. TermScore uses advanced AI to automatically analyze your contracts, flagging problematic ownership clauses and suggesting precise, legally sound alternatives to ensure you maintain full control over your data.