-
AI21 Labs Terms of Use
Removed explicit opt-out mechanism for data sales and targeted advertising; replaced with general cookie consent framework.
Why it matters: The updated terms restructure how users access privacy controls and opt-out rights. Rather than providing an explicit button dedicated to opting out of data sales and targeted advertising, the revised language embeds consent management within a general cookie framework. This change affects the accessibility and prominence of privacy choices, and may impact compliance with statutory privacy law requirements in California and the EU that mandate clear, accessible opt-out mechanisms. Organizations relying on AI21's services should verify that the revised framework remains adequate for their vendor compliance obligations.
-
Oura Privacy Policy
Adds explicit disclosure of AI assistant and machine learning features, including user choice on partner data sharing
Why it matters: The updated terms establish explicit transparency about AI-powered processing and feature development, which strengthens disclosure compliance and clarifies how personal health data may be used. The addition of user choice over partner data sharing provides a concrete control mechanism within the AI feature ecosystem.
-
Whatnot Privacy Policy
Replaced court-based dispute resolution with mandatory arbitration for Australian sellers under main Terms of Service.
Why it matters: The updated terms eliminate court access and jury trial rights for Australian sellers, consolidating all disputes under mandatory individual arbitration. This materially changes the dispute resolution mechanism available to sellers and may affect how they evaluate risk and enforce claims against Whatnot.
-
AWS Service Terms
Adds explicit metadata sharing authorization with Anthropic models and launches WAF AI traffic monetization payment facilitation feature.
Why it matters: The updated terms establish explicit authorization for AWS to share request metadata with Anthropic for usage tracking, which modifies the data-processing relationship and may require organizations to update their privacy notices and data-processing agreements if they handle regulated data. The introduction of AWS WAF AI traffic monetization formalizes a new optional payment-facilitation service that involves sharing user configuration and payment information with third parties, requiring organizations to understand their own vendor relationships and liability frameworks.
-
Inflection AI Privacy Policy
Expanded data collection scope to include voice, audio, precise location, and third-party platform access (contacts, emails, calendar, documents).
Why it matters: The updated policy establishes explicit authorization for collection of voice, audio, and location data, moving beyond the previously disclosed text-based input model. This expansion affects the scope of personal data Inflection AI may process and requires users and organizations relying on the service to understand the full range of data collection practices now authorized under the policy.
-
SoFi Terms of Service
Replaces blanket cookie consent with category-based preference controls and clearer disclosure of tracking purposes and partners
Why it matters: The updated terms establish a privacy control mechanism that operationally requires affirmative user choice for non-essential tracking rather than deploying tracking technology by default unless users actively opt out. This shift aligns SoFi's consent model with GDPR requirements for valid consent and reflects regulatory emphasis on transparent, granular user control over data collection practices. The change affects how SoFi collects and shares user data with advertising and analytics partners, since those data flows now depend on users affirmatively selecting corresponding cookie categories.
-
Google Terms of Service
Replaced broad as-is warranty disclaimers with affirmative warranty commitment and issue-resolution procedure.
Why it matters: The updated terms establish an affirmative warranty commitment and dispute-resolution procedure, replacing a categorical disclaimer framework. This change affects how service quality is defined and contested contractually, and may create measurable obligations for Google to address reported quality issues, which was previously disclaimed entirely.
-
OpenAI Privacy Policy
Removed advertiser data partnership language and ad personalization controls; added contact scanning and content monitoring disclosures
Why it matters: The updated terms remove specific disclosures of advertiser data sourcing and user controls over ad personalization, which may reduce transparency about how Free and Go users' data is used in advertising contexts. Simultaneously, the policy adds explicit authorization for contact identification and universal content monitoring, centralizing these practices in the main policy purposes section. Together, these changes shift the balance between disclosed advertiser practices and explicit data-processing authorities, with potential implications for how users understand data flows and what controls remain available to them.