Recent policy changes

Google added a notice to the Google Play Terms of Service saying it is updating the terms on November 5, 2026, and that the current terms continue to apply until then. The notice links to a preview of the upcoming terms but does not itself say what will change, and the terms on the page are unchanged.

Meta added Exhibit C, “Hosted Platform Access”, to its Meta Model API Terms of Service, last updated October 2, 2026. It applies when the Meta Materials are used through a third-party cloud platform authorized by Meta. The platform provider may disclose “Platform Account Data” to Meta, which can include the customer's organization name and domain, account and billing identifiers, location, subscription details, usage volumes, and revenue, fee and billing metrics; Meta may use it to operate and secure the service and to administer its arrangements with platform providers. Meta states that it does not receive or process customer content, including inputs and outputs, accessed through a hosted platform, and does not use that content to train or improve its models. The terms' sections on accounts and API keys, discounted services, and fees and taxes do not apply to hosted-platform access, where the platform provider bills fees under its own agreement.

Google's Privacy Policy now gives an effective date of October 1, 2026, replacing May 26, 2026. One passage changed. It covers information Google collects when you are not signed in, which it stores with identifiers tied to your browser, app or device. The policy previously said this lets Google show more relevant search results or ads “based on your activity”; it now says “based on your activity across devices.”

Clarifies that third-party promotional partners may change or discontinue perks anytime and Mercury won't be responsible for honoring discontinued offers.

Added agentic calling feature with user-controlled data sharing and server-side transcript storage.

Expanded prohibited conduct on regulated goods to include 'providing access'; narrowed seller exception from registered to verified business accounts.

Restructured privacy policy to clarify processor vs. controller roles and expand disclosure of collected personal data categories.

Adds voice or audio recording collection to Identity Data category; expands AI definition to include large language models.

Restricts no-cause termination to non-subscription accounts; adds data collection limits for integrations; expands warranty disclaimers.

Expanded acceptable-use restrictions to prohibit automated access, content scraping, and commercial use; added mandatory Georgia jurisdiction for unauthorized-use disputes.

Adds Lightning Network feature enabling automatic Bitcoin-to-USD conversion with automatic crediting to Cash App Balance

Raises minimum age to 18, adds API access and organizational accounts, restructures payment model to include prepaid credits with 365-day expiration

Expanded privacy disclosures for DeepL Voice services, including audio retention periods, speaker matching, and voice processing details.

Adds explicit data-sharing authorization for multi-location merchant groups; clarifies text message phone number protections

Expanded disclosure of phone number collection, consent record retention, and organizer text messaging practices for event attendees.

Prohibits using Apple Pay services or content to train AI models; clarifies subscription commitment refund terms.

Expanded Enterprise Data Commitments with explicit opt-out controls, 30-day retention, logging disclosures, and compliance certifications for SaaS Platform customers.

Expanded arbitration to cover pre-existing and post-termination disputes; added explicit class action and jury trial waivers; introduced mandatory 60-day informal resolution process

Expanded API key restrictions to prohibit resale through aggregators; introduced Coding Harness Subscription model with separate governance.

Replaced three-strike suspension rule with graduated enforcement; added EU users formal appeal rights and decision transparency.

Restructured Korea-specific privacy disclosures to detail identity verification data collection, fraud detection practices, and overseas transfer to US vendors with opt-out mechanism.

Restructured privacy policy with new CCPA supplemental notice; removed sections on privacy rights, data retention, and international transfers.

Adds non-compete restriction on platform use; expands content licensing to include AI training; revises payment collection procedures.

Clarified ad-related data collection for Free and Go users; removed Sora and Atlas browser references.

Revised identity verification procedures to permit third-party services and made account conversion conditional on verification outcomes.

Expands device data collection to include website and app interactions; restructures Copilot personalization to permit cross-product data usage from Bing, Edge, and MSN.

Adds three new account-based storage features (Translation Memories, Translation Memory Generation, Adaptive Translation) with explicit language stating data is used only within user accounts and not

Expanded personal data collection categories and clarified data use purposes including purchase processing, marketing, and event-related activities.

Adds contractual restrictions on advertising partners' data use and expands state protections for sensitive personal information.

Added age restrictions requiring parental consent for ages 13-17; expanded account termination window; simplified arbitration language with explicit class action and jury trial waivers.