Recent policy changes

Expanded credit assessment data disclosure and added retailer dispute mechanism for credit limit decisions.

Expanded payment information collection to cover any payment initiation, not just access to paid products

Restructured tax liability procedures, added stablecoin card governance, clarified AI-generated content ownership, and moved AI training restrictions to Acceptable Use Policy.

Restructured acceptable use policy with new weapons prohibitions, Cyber Verification Program for dual-use research, and clarified enforcement procedures.

Adds Beta Release provisions with no warranties or liability; clarifies contracting entity based on purchase method; expands fee payment mechanisms.

Adds content moderation procedures, internal appeal process, and indirect tax remittance services effective December 1, 2026.

Google added a notice to the Google Play Terms of Service saying it is updating the terms on November 5, 2026, and that the current terms continue to apply until then. The notice links to a preview of the upcoming terms but does not itself say what will change, and the terms on the page are unchanged.

Adds explicit disclosure of AI and machine learning use in personal data processing; reorganizes data collection and processing disclosures

Meta added Exhibit C, “Hosted Platform Access”, to its Meta Model API Terms of Service, last updated October 2, 2026. It applies when the Meta Materials are used through a third-party cloud platform authorized by Meta. The platform provider may disclose “Platform Account Data” to Meta, which can include the customer's organization name and domain, account and billing identifiers, location, subscription details, usage volumes, and revenue, fee and billing metrics; Meta may use it to operate and secure the service and to administer its arrangements with platform providers. Meta states that it does not receive or process customer content, including inputs and outputs, accessed through a hosted platform, and does not use that content to train or improve its models. The terms' sections on accounts and API keys, discounted services, and fees and taxes do not apply to hosted-platform access, where the platform provider bills fees under its own agreement.

Google's Privacy Policy now gives an effective date of October 1, 2026, replacing May 26, 2026. One passage changed. It covers information Google collects when you are not signed in, which it stores with identifiers tied to your browser, app or device. The policy previously said this lets Google show more relevant search results or ads “based on your activity”; it now says “based on your activity across devices.”

Restructured Terms of Service with prominent arbitration and class action waiver notice; clarified corporate counterparty by residency; expanded Services definition to include memberships.

Added liability disclaimers and indemnification requirements for third-party AI agents used to manage reservations.

Expanded disclosure of AI-assisted processing of customer communications, calls, and data analysis; added third-party AI providers to vendor list.

Expanded data collection disclosure to include audio, video, and image inputs from demo experiences; clarified controller status.

Removed explicit 'no sale' and 'no targeted advertising' disclosure; narrowed statement to sensitive data only.

Expanded language accessibility to 23 languages and added CMS ACCESS Program health data sharing disclosures.

Clarified 21-day deposit and subscription windows for referral bonuses; added reimbursement authority for program violations.

Adds disclosure of outbound sales call recording for UK and EU business representatives with GDPR-based rights and 365-day retention limit.

Adds disclosure of Invest My Tips data collection and sharing; restricts third-party sharing of text messaging opt-in data.

Expanded employer obligations on child labor compliance; broadened demographic data collection scope; removed Sponsored Jobs API usage caps and billing restrictions.

Added mandatory oversight and responsibility terms for autonomous agents; added Sign in with ChatGPT account-sharing framework

Adds disclosure of payment card data collection through rewards programs and opt-out mechanism

Introduces Card-Linked Offers program enabling users to earn Grubhub credits through in-store purchases with linked payment cards

Adds AI Agent liability framework, restricts Stripe Output Data use, and tightens data breach notification to 48-hour window.

Added Digital Agent rules requiring AI/bot identification and compliance; switched arbitration administrator from AAA to JAMS; expanded dispute notice requirements.

Removed customer objection and continued-use rights for material term updates; now requires acceptance or service termination.

Clarifies that third-party promotional partners may change or discontinue perks anytime and Mercury won't be responsible for honoring discontinued offers.

Added agentic calling feature with user-controlled data sharing and server-side transcript storage.

Expanded prohibited conduct on regulated goods to include 'providing access'; narrowed seller exception from registered to verified business accounts.

Restructured privacy policy to clarify processor vs. controller roles and expand disclosure of collected personal data categories.