NEWS
Verax AI Risk Assessment is live. See what's exposed
Mixo
Mixo
 
Risk Overview
Moderate Risk
5.1
/10
Website Generation
·
Text Generation
·
UI Design
·
Top Risks

Broadest content license in this batch: perpetual, irrevocable, sublicensable through multiple tiers — effectively enables training use without restriction. No training opt-out mechanism. Australian jurisdiction with Five Eyes exposure. No major security certifications. Unilateral term modifications without notice. Irrevocable license survives account deletion.

Mitigations

Australian consumer law provides some baseline protections. 30-day refund policy. Governing law is court-based (no forced arbitration). GDPR compliance tools available for user-created websites. Company states content used 'in accordance with Terms of Use and Privacy Policy.' Relatively small-scale company with limited data monetization infrastructure.

Get started
Is your team using 
Mixo
 
safely?

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Training Use

No explicit no-training commitment found in ToS or Privacy Policy. Section 4B grants Mixo a 'non-exclusive, worldwide, perpetual, irrevocable, royalty-free, sub-licensable (through multiple tiers) right to exercise the copyright, publicity, database rights or any other rights' in user Content. This extremely broad license would cover training use. No opt-out mechanism described. 'We will only use your information in accordance with the Terms of Use and Privacy Policy' is a circular commitment without specificity.
6
/10

Security Posture

No SOC 2 Type II, ISO 27001, or other security certifications found. GDPR compliance tools provided for user websites (cookie consent, privacy policy creator) but these are for users' sites, not for Mixo's own data handling. Security page/documentation not prominently featured. No trust center identified. Australian Privacy Act compliance implied. Thinner security posture than most competitors.
6
/10

Data Retention

Privacy policy states 'once the retention period expires, personal information shall be deleted.' However, the content license granted is 'perpetual and irrevocable' — meaning even if the personal data is deleted, the content license to use uploaded materials remains. This creates a tension between data deletion rights and the irrevocable content license. No specific retention timeline.
5
/10

Unlock the complete assessment

Run a free assessment to access the full AI tool risk analysis.
Start Free Assessment
Updated July 2026 • AI-assisted research • Reviewed by Verax • Report an issue

Reference Documentation

Official documentation and policies referenced as part of this assessment.