MarTech Verdict

Reviews · AI data licensing

Polyshares Review 2026: What It Takes and How Data Is Handled

How Polyshares licenses company Slack, email, CRM, ticket and call data, who anonymizes it, and what its terms say, checked October 21, 2026

By the MarTech Verdict Editorial Team · Published October 21, 2026

How we put this together: We read Polyshares' homepage and its data-licensing, data-handling, track-record, team and answers pages on October 21, 2026, plus Business Insider's October 13, 2026 article on the company data market and a secondhand blog post about deal terms. The standard license terms link on Polyshares' site returned a page-not-found message that day. We haven't sold data to Polyshares, requested an offer or spoken to the company for this article. Figures are the company's own unless attributed.

Polyshares buys licenses to a company’s operational record (Slack, Teams, email, Drive, CRM history, support tickets, call recordings and accounting exports) and says a specialist PII partner strips names, emails, phone numbers and account numbers before Polyshares or any lab sees it. Deals are typically $100K to $2M, exclusive by default, per its pages read October 21, 2026.

Onfolio may earn a referral fee if you sign up to Polyshares through our links. This does not affect our editorial assessment.

Polyshares says it is the buyer, not a broker: it licenses data directly from the company, pays for it, builds it into data sets and supplies AI labs. That structure matters for ops teams, because the contract you sign is with Polyshares, and the labs that end up with the data aren’t named. This review covers what it asks for, how the data moves and which controls it publishes.

What Polyshares takes

Polyshares calls its target “the working record of the business” and says the length and texture of that record matter more than headcount or revenue. Its homepage and data-licensing page name these systems.

Data typeNamed by PolysharesWhat Polyshares says is stripped or kept
Slack and Microsoft TeamsYesNames, emails, phone numbers, account numbers and addresses removed or replaced; roles, timestamps and the work itself kept
EmailYesSame rule
Google Drive, SharePoint, spreadsheetsYesSame rule
CRM historyYesCustomer names, emails and account numbers stripped
Support ticketsYesSame rule
Design filesYesNot published beyond the general rule
Call recordingsYesNot published (no description of how audio is handled)
Accounting and ERP exportsYesAccount numbers stripped
Data you hold for your clientsExcludedThe license “does not cover what you hold on behalf of your own clients”
HR records, payroll, health dataNot publishedNot published

For a RevOps or IT lead, the list reads like a full workspace export: chat, mail, files, CRM and tickets. The pages don’t say whether each system can be licensed separately, though the data-handling page describes the license as covering “defined systems.”

How the data gets out of your systems

Polyshares doesn’t publish an extraction method. Its pages don’t say whether it uses connectors, OAuth access or files your team exports. The sequence it does describe runs like this.

  1. Intake by counts. Polyshares says intake asks for record counts, not files or exports, and “nothing leaves your systems until Polyshares has made an offer and you have accepted it.”
  2. Anonymization by a partner. A specialist PII partner removes or replaces identifying fields “before Polyshares or any buyer sees the record.” The partner isn’t named on the pages we read.
  3. Sample review. Someone at Polyshares reads an anonymized sample to price the record. Polyshares says it doesn’t pay for something it hasn’t seen.
  4. Offer. An offer arrives within one to two weeks of intake and is “papered right after.”
  5. Delivery and payment. Payment is net 30 to 60 once the data is approved, anonymized and delivered.

Two points need clarifying before any export. Polyshares doesn’t say whether the PII partner works inside your environment or on data transferred to it. Its pages also don’t explain how the anonymized pricing sample reaches the partner and Polyshares if nothing leaves before an accepted offer. By comparison, Scale AI says it anonymizes inside the customer’s environment before extraction.

Privacy and security controls

The controls below are Polyshares’ own claims from its data-handling page and homepage, read October 21, 2026.

ControlWhat Polyshares saysAsk for in writing
De-identificationA specialist PII partner removes names, emails, phone numbers, account numbers and addresses; roles and timestamps stayThe partner’s name, its method, where it runs, and a sample output
Re-checksIf a sample still reads as identifying, it goes back for another passThe acceptance test for “anonymized” and who signs it off
Internal accessTwo named people see a company’s identity alongside its dataTheir roles and how access is logged
Buyer viewBuyers see de-identified listings in a buyer portal, with a code instead of the company nameWhich buyers or buyer types can browse listings
End buyers“We do not disclose which labs take which data”Named end buyers, or a right to approve or be notified
Use limitsNo resale or use outside the license scopeThe resale and sublicensing clause
Security certificationsNot publishedA SOC 2 report or equivalent
Transfer and encryptionNot publishedTransfer method and encryption in transit and at rest
Retention and deletionNot publishedRetention period, deletion certificate, and what happens to models already trained
Sub-processorsPII partner not namedA sub-processor list

The data-handling page also says buyers never contact your customers or staff and that Polyshares is the sole counterparty. We couldn’t check these commitments against a contract, because the standard license terms link returned a not-found page on October 21, 2026.

Commercial terms in brief

These are Polyshares’ published terms, read October 21, 2026.

TermWhat Polyshares says
Stated deal size$100K to $2M, “and above for large records”
Published case studiesFour unnamed licenses: roofing $450,000, general contractor $300,000, solar $275,000, global marketing agency $110,000
Payment timingNet 30 to 60 after the data is approved, anonymized and delivered
ExclusivityExclusive by default unless agreed otherwise; all four case studies are “perpetual exclusive” licenses
Fee to sellerNone; no fee or commission
Headcount floorNone published

Three items on Polyshares’ own pages don’t line up. The homepage says “no marketplace, no listing,” while the data-handling page refers to listings in a buyer portal. The data-handling page describes “a defined term,” while every case study is a perpetual license. And the “standard license terms” link returned a page-not-found message on October 21, 2026, so we couldn’t read the standard terms.

A blog post by Franklin Bryant IV (October 8, 2026) says Ryan Lock published “market standard” terms including two-year exclusivity, a 30-day acceptance window, net-60 payout and third-party de-identification. It isn’t clear whether those are Polyshares’ own contract terms or general market terms, and we couldn’t confirm them on Polyshares’ site.

What data you can and can’t license

Polyshares’ own exclusion is the starting point: its license doesn’t cover data you hold on behalf of clients. For a marketing agency or MSP, that removes a large share of the workspace.

Usually firm-owned and licensable once scrubbedUsually not yours to license, or high risk
Your SOPs, playbooks, templates and internal knowledge baseClient ad accounts, client ESP lists and client deliverables under NDA
Internal tickets and project history, with client names removedClient Slack Connect channels and shared client folders
Your own campaign process docs and CRM pipeline records, with contact details strippedContact-level CRM personal data (names, emails, phones)
Design files and marketing assets you made for yourselfHR systems, performance reviews, compensation and health data
Internal chat about how work gets done, de-identifiedCall recordings made without all-party consent where it’s required

The general rules behind the right-hand column:

  • Personal data. CCPA/CPRA has covered employee and B2B contact data since January 1, 2023. GDPR applies to EU and UK people in your records.
  • Employee chat. NLRA Section 7 protects employee discussions of pay and working conditions, which often sit in Slack.
  • Call recordings. Polyshares lists call recordings as operational data. Consent rules differ by state, and Brewer v. Otter.ai (August 2025) alleges wiretap violations. Treat recordings as high risk.
  • Platform terms. Slack’s API terms (August 2025) bar bulk export and LLM training via the API, per Hunton. Google Workspace API policies restrict using data to train non-personalized models.
  • Your own privacy notice. The FTC said in February 2024 that retroactively changing privacy terms to allow AI training can be deceptive.

Risks for the ops team

  • Client confidentiality. Many 2026 agency contracts carry a “no client data used to train AI” warranty, and a service provider’s access to client data doesn’t authorize monetizing it (RICHT law firm, October 18, 2026). Check client contracts before scoping.
  • Exclusivity. Exclusive by default, with perpetual exclusive case studies, means you can’t license the same record again. Epoch AI’s interviews (January 12, 2026) found exclusive deals for AI training environments run 4 to 5 times the price of non-exclusive ones, so ask what exclusivity adds to the price.
  • Deletion vs trained models. Polyshares doesn’t publish deletion terms. Deleting data doesn’t remove it from models already trained on it.
  • Buyer opacity. Polyshares doesn’t disclose which labs take which data.
  • Payment timing. Your team does the export work before money arrives, and payment is net 30 to 60 after delivery.
  • Short deadlines. Business Insider (October 13, 2026) reported that six-figure offers expiring in 48 hours have become common across this market. In the same article, Lock compared the market to the early Texas oil boom and said his firm aims to give owners more transparency on value.
  • M&A diligence. A prior data license, its exclusivity and any change-of-control terms surface in due diligence (Frankfurt Kurnit via Mondaq, October 2026).

Pre-export checklist

  1. List every system in scope and its record counts, matching the “defined systems” the offer names.
  2. Pull client contracts and flag any AI-training, confidentiality or data-ownership clauses.
  3. Remove client workspaces, Slack Connect channels, client ad accounts and ESP lists from scope.
  4. Exclude HR, payroll, health data and call recordings unless counsel clears them.
  5. Request the PII partner’s name, method and processing location in writing.
  6. Ask how the pricing sample is produced and where it is processed.
  7. Get the full license terms, including term length, exclusivity, deletion and resale limits.
  8. Check whether your Slack and Google Workspace export method complies with each platform’s terms.
  9. Confirm who signs, who pays and the payment date before your team starts the export.

Deciding whether to sell at all? onfolio.com’s Polyshares review covers it from the owner’s side: whether it’s legit, what you might get and what can go wrong.

Sources

Polyshares’ data handling page

Considering licensing your company’s data? Apply to Polyshares for an assessment.

FAQ

What is Polyshares?
Polyshares, Inc. describes itself as a data lab that buys licenses to company operational data and supplies it to AI labs. It says it is the counterparty on each deal, not a marketplace or agent, and charges the seller no fee. Its managing partners, per its team page, are Nathan Mathews and Ryan Lock. Business Insider places Lock in Dallas.
Is Polyshares legit?
Polyshares publishes named partners, a data-handling page and four case studies from $110,000 to $450,000, but the companies are unnamed, so the deals can't be checked independently. Its standard license terms link returned a not-found page on October 21, 2026. Trustpilot search results that day showed 4 stars from 5 reviews; we couldn't confirm the review content, and five reviews is too few to judge.
Does Polyshares buy company data?
Yes, as a license rather than an outright purchase. Polyshares says it licenses defined operational data directly from the company, pays for it itself and keeps no equity or debt in the deal. The seller keeps the business and the underlying data. Polyshares says typical deals run $100K to $2M and above.
How does a Polyshares offer work?
Polyshares says intake asks for record counts, not files, then it reads an anonymized sample to price the record and makes an offer within one to two weeks of intake. Terms are papered after that. Payment is net 30 to 60 once the data is approved, anonymized and delivered. The license is exclusive by default unless agreed otherwise.