Replicate can change its privacy policy at any time and is only required to update the date at the top — it does not commit to notifying you directly about changes.
Without a proactive notification obligation, Replicate could expand how it uses your personal data — including training data — simply by updating the policy date, with no direct notice to you and no opt-out window.
Cross-platform context
See how other platforms handle Policy Change Without Proactive Notice and similar clauses.
Compare across platforms →Material changes to data collection or use practices could take effect without you being told, meaning the way your data is used could change significantly without your knowledge or consent.
(1) REGULATORY FRAMEWORK: Unilateral policy changes without notice implicate GDPR Art. 13/14 (transparency obligations requiring notification of material changes to processing), CCPA/CPRA (which require updated privacy notices to reflect current practices), and FTC Act Section 5 (deceptive practices if changes are materially inconsistent with prior representations on which users relied). The FTC's 2012 Privacy Report and subsequent enforcement guidance establish that retroactive changes to privacy policies without notice and consent can constitute unfair or deceptive acts. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.