Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Section 5.5 grants Contentsquare a perpetual, worldwide, royalty-free license to use Customer Data in anonymized or aggregated form for benchmarking, machine learning, product development, analytics, and marketing, and to use Usage Data for industry analysis and training its services. This license survives termination of the agreement per Section 7.4.
This analysis describes what Heap's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision grants a data use license that is perpetual and survives contract termination, covering anonymized Customer Data and Usage Data for machine learning model training, benchmarking, product improvement, and marketing analytics. Compliance teams should assess whether this perpetual license is consistent with their data minimization and purpose limitation obligations under applicable data protection law.
The agreement grants Contentsquare and its Affiliates a perpetual, royalty-free license to use anonymized or aggregated Customer Data and Usage Data for benchmarking, machine learning, product development, and industry analytics. This license continues after the contract term ends, as specified in Section 7.4 (Survival).
Cross-platform context
See how other platforms handle Perpetual Anonymized Data Use License and similar clauses.
Compare across platforms →Monitoring
Heap has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Customer authorizes and grants Contentsquare and its Affiliates a non-exclusive, perpetual, worldwide, royalty-free, right and license to (i) compile, access and use Customer Data, strictly in order to research, develop, modify, improve or support the services provided by Contentsquare and its Affiliates; (ii) use Customer Data in an anonymous or aggregated form where no such information could directly identify or will reasonably be used to identify Customer, Customer's Users or its Visitors, for benchmarking or machine learning purposes; (iii) collect and use Usage Data for its business purposes, including industry analysis, analytics, marketing, and developing, training and improving its products and services ("Internal Development"); and (iv) anonymize or aggregate Visitor Data for any further internal business uses, including Internal Development, creating and distributing statistical insights, reports and other materials. In no event shall Contentsquare or its Affiliates sell Customer Data to third parties for any marketing or advertising purposes whatsoever.Excerpt from Heap's Terms of Service
1) REGULATORY LANDSCAPE: This provision may require evaluation under GDPR Articles 5(1)(b) and 5(1)(e) (purpose limitation and storage limitation principles) and CCPA/CPRA provisions governing secondary use of consumer data, as well as Singapore's PDPA and Japan's APPI. Enforcement authorities include EU data protection authorities, the UK ICO, and the California Privacy Protection Agency. Whether anonymization is sufficient to remove GDPR obligations depends on the robustness of the anonymization process, which the document does not specify in detail. 2) GOVERNANCE EXPOSURE: Medium. The perpetual and post-termination nature of the license, combined with its application to machine learning and benchmarking, creates a compliance review obligation for enterprise customers with their own data minimization commitments. The document states that Customer Data will not be sold to third parties for marketing or advertising, which limits one category of secondary use risk, but does not restrict internal use for product development or model training. 3) JURISDICTION FLAGS: EU and UK customers face heightened exposure given GDPR purpose limitation requirements. California customers should evaluate whether the use of Usage Data for marketing analytics engages CPRA's sensitive data or cross-context behavioral advertising provisions. The adequacy of anonymization as a deidentification standard may be assessed differently across jurisdictions. 4) CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should confirm whether this perpetual license is compatible with their upstream data processing agreements with their own customers or end users. The clause does not define the anonymization standard applied, which may be a due diligence gap for enterprise customers with strict data governance requirements. 5) COMPLIANCE CONSIDERATIONS: Legal teams should review whether the Customer's visitor-facing privacy notice discloses secondary use of anonymized data for benchmarking and machine learning as required by applicable law. Data mapping exercises should account for the post-termination continuation of this license. Teams should also verify that the anonymization methodology Contentsquare applies meets applicable regulatory standards in their operating jurisdictions.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision grants a data use license that is perpetual and survives contract termination, covering anonymized Customer Data and Usage Data for machine learning model training, benchmarking, product improvement, and marketing analytics. Compliance teams should assess whether this perpetual license is consistent with their data minimization and purpose limitation obligations under applicable data protection law.
The agreement grants Contentsquare and its Affiliates a perpetual, royalty-free license to use anonymized or aggregated Customer Data and Usage Data for benchmarking, machine learning, product development, and industry analytics. This license continues after the contract term ends, as specified in Section 7.4 (Survival).
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Heap.