Grade B- — Mostly fair (score 70/100)
Envato provides a transparent privacy policy that outlines data collection and sharing practices, though it lacks a specific, guaranteed data retention timeline.
Standard privacy policy. No forced arbitration. No clear deletion timeline.
With your explicit consent, such a third party identity verification service may require you to upload a government-issued photo ID document or, if applicable, business registration documents, as well as a “selfie” image that the identity verification service will compare to your government-issued photo ID using biometric facial recognition technology.
The company uses third-party biometric facial recognition to verify the identity of authors.
By continuing to use the Envato Sites after the effective date of any changes, you will be deemed to have been made aware of, and will be subject to the updated version of this policy.
The company can update its terms without providing direct notice, and continued use constitutes acceptance.
To exercise this right, you can click the “Do Not Sell or Share My Personal Information” link on the footer of our website.
The company provides a clear, self-serve mechanism to opt out of data sales.
We retain your personal information for as long as is necessary for the purposes outlined in this policy.
The company does not commit to a specific, fixed retention period, instead using a vague 'as long as necessary' standard.
We may disclose personal information to... regulators, law enforcement, government and public authorities.
The company reserves the right to share user data with government and law enforcement agencies.
Last reviewed 2026-08-02 under rubric v3.5.