-
Stripe
· Stripe Restricted Businesses List
The policy prohibits businesses whose practices constitute unfair, deceptive, or abusive acts or practices as defined by FTC, CFPB, or local consumer regulatory guidance, and enumerates specific prohibited business models including pyramid schemes, MLM, get-rich-quick schemes, fake testimonials, negative option marketing, and no-value-added resale....
Why it matters: This provision incorporates FTC and CFPB UDAAP standards directly into Stripe's contractual prohibited business list, meaning businesses that engage in practices regulated or prohibited by those agencies may also be in violation of Stripe's terms, creating a dual exposure to both regulatory enforcement and payment processing termination....
-
Stripe
· Stripe Restricted Businesses List
The policy establishes country-specific prohibited and restricted business categories that apply in addition to the global prohibited and restricted lists, with materially different permissibility determinations for the same product or service category depending on the merchant's operating jurisdiction....
Why it matters: This provision creates layered compliance obligations for merchants operating in multiple jurisdictions, requiring country-level assessment of permissibility for product and service categories that may be globally permitted but locally prohibited or restricted....
-
TikTok Ads
· TikTok Branded Content Policy
TikTok Shop Ads are available only in 16 named markets and only when the campaign objective is set to sales with TikTok Shop selected as the product source. Advertisers outside these markets or using other objectives cannot access this ad format....
Why it matters: This provision establishes eligibility conditions for TikTok Shop Ads that create a hard dependency on both geographic market and campaign configuration. Advertisers not meeting both conditions cannot access the Shop Ads format regardless of account status....
-
TikTok Ads
· TikTok Industry-Specific Ad Policies
The policy index lists Teen Safety and Wellbeing as a distinct advertising content category, indicating that separate rules govern advertising content that may reach or target users identified as teenagers on the platform....
Why it matters: This provision signals a dedicated policy layer governing advertising directed at or likely to reach minors, which intersects with COPPA obligations in the US and similar minor-protection frameworks in other jurisdictions, and may impose additional restrictions on targeting parameters, creative content, and product categories....
-
TikTok Ads
· TikTok Industry-Specific Ad Policies
The policy index lists a separate document establishing certificate requirements for certain industries in Southeast Asia and Northeast Asia, indicating that advertisers in those markets must obtain and submit documentation to qualify for ad approval in regulated categories....
Why it matters: Certificate requirements create a pre-approval gatekeeping mechanism that affects campaign launch eligibility and timelines for advertisers in regulated industries operating in Southeast Asian and Northeast Asian markets, and failure to obtain required certificates may result in ad disapproval or account restrictions....
-
These provisions have changed before
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
-
TikTok Ads
· TikTok Industry-Specific Ad Policies
The policy index lists a separate document governing regional self-regulatory advertising codes for the European Union, indicating that EU-market advertisers are subject to additional code-of-conduct level requirements beyond TikTok's general advertising policies....
Why it matters: EU regional self-regulatory advertising codes create an additional compliance layer for EU-market campaigns, and the interaction of these codes with GDPR, the Digital Services Act, and applicable national advertising standards bodies creates a multi-framework compliance environment for EU advertisers....
-
TikTok Ads
· TikTok Industry-Specific Ad Policies
The policy index lists politics, governments, and elections as a distinct advertising category, indicating that political and election-related advertising is subject to separate rules, restrictions, or prohibitions on TikTok's advertising platform....
Why it matters: Political and election advertising on digital platforms is subject to FEC disclosure requirements in the US and equivalent election law obligations in other jurisdictions, and platform-level restrictions in this category may include outright prohibitions or specific disclosure and targeting requirements that affect campaign eligibility....
-
TikTok Ads
· TikTok Industry-Specific Ad Policies
The policy index lists a separate Advertiser Account Policy as part of the governing framework, indicating that advertiser account eligibility, standing, and enforcement are subject to defined rules beyond general content restrictions....
Why it matters: An advertiser account policy typically establishes the conditions under which accounts may be restricted, suspended, or terminated, which has direct operational significance for businesses whose advertising programs depend on continuous platform access....
-
Waze
· Waze Privacy Policy
The policy states that Waze may collect location and travel data even when the app is not actively in use, subject to device and account settings, for purposes including drive predictions, traffic notifications, and parking assistance....
Why it matters: This provision establishes that location data collection is not limited to active app sessions; the scope of collection depends on device-level permissions and account settings, which users must actively manage to restrict....
-
Waze
· Waze Privacy Policy
The policy states that activating Invisible Mode prevents other Waze users from seeing a user's location on the map, but does not stop Waze from continuing to collect that user's location and route data for its own stated purposes....
Why it matters: This provision clarifies that Invisible Mode is a visibility control relative to other users only, and does not constitute an opt-out from Waze's own location data collection practices....
-
Waze
· Waze Privacy Policy
The policy states that Waze shares de-identified account settings, location and route data, and metadata with Google affiliate mapping and navigation products for development and improvement purposes, and shares information with Google Ads for advertising and measurement....
Why it matters: This provision establishes that data collected through Waze flows into Google's broader mapping and advertising infrastructure, including Google Ads, which operates under Google's separate privacy policy and data governance framework....
-
Waze
· Waze Privacy Policy
The policy states that Waze serves personalized ads using saved home and work addresses, drive history, search queries, and Google Account profile and activity, subject to user settings....
Why it matters: This provision establishes that precise location-derived data including home and work addresses and route history may be used for ad targeting, and that Google Account activity may additionally be incorporated into ad personalization where available based on device and account settings....
-
Waze
· Waze Privacy Policy
The policy states that account deletion requests trigger a process that generally takes approximately two months to complete, during which data may remain in backup systems, and that delays may occur due to maintenance or technical issues....
Why it matters: This provision establishes the operational timeline for data deletion following an account deletion request, disclosing that full deletion from storage systems may take up to approximately two months and that the stated timeline is subject to operational delays....
-
Waze
· Waze Privacy Policy
The policy states that Waze collects voice files when users record their voice or use voice command features, and that if users choose to share voice recordings, other users may download and use them, after which Waze states it may have no control over those files....
Why it matters: This provision establishes that voice and audio data is collected during voice feature use, and that shared voice recordings may be downloaded and used by third parties outside Waze's control....
-
Waze
· Waze Privacy Policy
The policy states that advertising-related data processing is conducted on the basis of legitimate interests, including the interests of third-party advertising partners, with reference to unspecified safeguards applied to protect privacy....
Why it matters: This provision identifies legitimate interests, including those of third-party advertisers, as a legal basis for processing that supports the advertising model, which is a basis that requires a documented balancing test under GDPR and may be subject to user objection rights....
-
Waze
· Waze Privacy Policy
The policy discloses that user data may be processed on servers outside the user's country of residence, and states that Waze applies consistent protections regardless of processing location....
Why it matters: This provision establishes that cross-border data transfers occur, including to servers in the EU and U.S. as noted elsewhere in the policy, but does not specify the transfer mechanisms relied upon for compliance with GDPR Chapter V or equivalent frameworks....
-
TikTok Ads
· TikTok Advertising Policies
The policy index references a Branded Content Policy article with market-specific requirements, governing disclosure and compliance obligations applicable to sponsored or paid-partnership content on the TikTok platform....
Why it matters: This provision establishes that branded content disclosure obligations vary by market, meaning advertisers and creators operating across multiple geographies are subject to jurisdiction-specific disclosure requirements that must be assessed on a market-by-market basis....
-
TikTok Ads
· TikTok Advertising Policies
The policy index references a standalone Advertiser Account Policy article governing the eligibility conditions and operational requirements that apply to advertiser accounts on TikTok's advertising platform....
Why it matters: This provision establishes the account-level policy framework governing advertiser eligibility, account standing, and enforcement actions including campaign disapproval and account suspension, which directly affects advertisers' access to TikTok's advertising infrastructure....
-
TikTok Ads
· TikTok Advertising Policies
The policy index references an article establishing certificate or documentation requirements for advertisers in regulated industries operating in Southeast Asia (SEA) and Northeast Asia (NEA) markets....
Why it matters: This provision establishes that advertisers in regulated industries targeting SEA and NEA markets must meet additional pre-approval documentation requirements as a condition of campaign eligibility, creating a market-specific operational requirement beyond standard advertiser onboarding....
-
TikTok Ads
· TikTok Advertising Policies
The policy index references a dedicated article on Regional Self-Regulatory Ad Codes applicable to the European Union, governing compliance with EU-level advertising self-regulatory standards for advertisers targeting EU audiences on TikTok....
Why it matters: This provision establishes that EU-market advertising on TikTok is subject to regional self-regulatory codes in addition to TikTok's global advertising policies, creating a layered compliance framework for advertisers targeting EU audiences....
-
Uniswap
· Uniswap Terms of Service
Users who post any content through the Products grant Uniswap Labs a worldwide royalty-free license to use, copy, modify, and display that content for business purposes; users who submit suggestions or feedback separately grant a perpetual, irrevocable, transferable, sublicensable license to use that material and create derivative works for any purpose....
Why it matters: The feedback and suggestions license is perpetual, irrevocable, and extends to derivative works for any purpose, meaning Uniswap Labs retains rights to submitted feedback even after a user discontinues use of the Products; enterprise users with IP governance policies should evaluate whether this license scope is compatible with their internal content and innovation policies....
-
Uniswap
· Uniswap Terms of Service
The agreement states that use of the AI-powered Support Chatbot constitutes consent to processing of queries and interactions for support and service improvement purposes, and that Uniswap Labs may retain conversation transcripts for quality assurance and product development....
Why it matters: This provision establishes that interaction with the Support Chatbot constitutes consent to data processing and retention, and the agreement explicitly advises against submitting confidential, personal, or sensitive information through the chatbot; the scope of retention and the applicable Privacy Policy terms should be evaluated together to assess the full data processing framework....
-
Uniswap
· Uniswap Terms of Service
The agreement reserves Uniswap Labs' sole discretion to modify the terms at any time, with notice provided only by updating the date and posting a current version at the stated URL; continued use of any Product after posting constitutes acceptance of the modified terms....
Why it matters: This provision establishes that continued use of any Product following a terms update, regardless of whether the user actively reviewed the changes, constitutes binding acceptance; the notice mechanism relies on users proactively checking the terms URL or the document date rather than direct notification to users....
-
Uniswap
· Uniswap Terms of Service
Users agree to indemnify, defend, and hold harmless Uniswap Labs and its affiliates, officers, directors, employees, agents, and service providers from all claims, damages, costs, and expenses (including attorney's fees) arising from the user's access to or use of the Products, violations of the agreement, third-party access via the user's account, and disputes involving the user's own customers....
Why it matters: This indemnification provision extends to claims arising from third-party access to the Products using the user's account or device, and to disputes between the user and their own customers, which may create indemnification exposure for enterprise users beyond their direct use of the Products....
-
BeReal
· BeReal Terms of Service
When users share content publicly on BeReal, they grant BeReal a worldwide, royalty-free, and sublicensable licence to use, copy, reproduce, process, adapt, modify, publish, transmit, display, and distribute that content across any media or distribution method, without additional payment beyond access to the service....
Why it matters: This provision establishes the scope of rights BeReal holds over publicly posted user content, including sublicensing rights that permit third-party distribution. The assertion that app access constitutes sufficient compensation for this licence may require evaluation under applicable consumer contract fairness standards in the EU and UK....
-
BeReal
· BeReal Terms of Service
Content shared only with friends on BeReal is not automatically licensed to BeReal for commercial use; users may voluntarily opt in to grant BeReal a licence to use friends-only content for communication, commerce, and marketing purposes....
Why it matters: This provision establishes a separate, opt-in consent mechanism for commercial use of private friend-circle content, distinguishing it from the automatic licence granted for publicly shared content. The adequacy of the opt-in mechanism under GDPR consent standards, particularly the requirements of freely given, specific, informed, and unambiguous consent, warrants review....
-
BeReal
· BeReal Terms of Service
The agreement designates Paris courts and French law as the exclusive forum and governing law for all disputes, subject to a carve-out where this is prohibited by the user's local law....
Why it matters: This provision requires disputes to be submitted to Paris courts under French law, with a conditional carve-out for jurisdictions where mandatory local law prohibits such clauses. For users in the EU, UK, US, and other jurisdictions with mandatory consumer forum or governing law protections, the practical effect of this clause may be limited by applicable law....
-
BeReal
· BeReal Terms of Service
Account creation paired with phone number submission constitutes consent to receive SMS messages from BeReal, including promotional messages sent via automated systems, which the agreement states may be sent at any time to the extent permitted by local law. Users may withdraw promotional SMS consent via account settings or by replying STOP....
Why it matters: This provision bundles promotional SMS consent into the account creation process rather than soliciting it as a standalone, specific opt-in. In the US, the TCPA requires prior express written consent for automated promotional text messages, and the adequacy of bundled consent obtained through general terms acceptance warrants review against TCPA regulatory guidance and FCC rules....
-
BeReal
· BeReal Terms of Service
BeReal may suspend accounts for 30 days upon sharing unauthorized content, with permanent suspension after three such incidents; certain severe content violations result in immediate and permanent account suspension and a ban on creating new accounts. Users may contest suspensions by contacting customer support....
Why it matters: This provision establishes the enforcement mechanism for content policy violations, including a structured escalation process and an unconditional permanent ban on account creation following permanent suspension. The contestation mechanism is limited to contacting customer support, with no specified timeline, escalation path, or independent review procedure described in the document....
-
BeReal
· BeReal Terms of Service
The agreement sets a minimum age of 13 for all users and requires parental or guardian consent for users who have not reached the applicable age of consent in their country of residence....
Why it matters: This provision establishes jurisdiction-dependent parental consent obligations, which engage COPPA for US users under 13, GDPR Article 8 for EU users below the applicable national digital consent age (ranging from 13 to 16 across EU member states), and equivalent national frameworks. The document does not specify the mechanism by which parental consent is obtained or verified....
-
ADP
· ADP Privacy Statement
The policy authorizes ADP to process criminal records data and data relating to criminal behavior or proceedings for due diligence, security, and compliance purposes....
Why it matters: This provision authorizes processing of criminal records data — classified as a special category under GDPR — for due diligence and security purposes, which may engage fair credit reporting and background check statutes in the United States depending on the context and method of collection....
-
ADP
· ADP Privacy Statement
The policy authorizes ADP to share personal data including bank account information with business partners in the context of referral validation and related commercial transactions, subject to the condition that the individual has purchased from, interacted with, or authorized sharing with that partner....
Why it matters: This provision authorizes disclosure of bank account information to third-party business partners for referral validation purposes, which may engage financial data protection requirements under the Gramm-Leach-Bliley Act and applicable state financial privacy statutes depending on the nature of the business relationship....
-
ADP
· ADP Privacy Statement
ADP has adopted EU-approved Binding Corporate Rules as the legal mechanism governing cross-border transfers of personal data among ADP Group Companies worldwide, including transfers to entities outside the EU and EEA....
Why it matters: The BCR framework establishes the legal basis for ADP's cross-border personal data transfers under GDPR and UK GDPR, covering data flows across ADP's operations in more than 140 countries. The document states that ADP extended its BCR definition to include the UK following Brexit by decision of its General Counsel....
-
ADP
· ADP Privacy Statement
The policy discloses that third-party advertising companies place cookies on user devices for targeted advertising across ADP and other websites, while stating these companies do not collect personal data in this process. The policy also states that ADP websites do not recognize browser Do Not Track signals....
Why it matters: The disclosure that ADP websites do not recognize Do Not Track signals may engage applicable state privacy requirements, including California's requirement under the California Online Privacy Protection Act (CalOPPA) to disclose how a site responds to Do Not Track signals. The policy provides an opt-out mechanism via the NAI and a third-party opt-out URL....
-
ADP
· ADP Privacy Statement
The policy authorizes processing of racial or ethnic data for supplier diversity programs, physical or mental health data for disability accommodation and emergency health needs, and religious beliefs data for accommodation purposes such as dietary and holiday requests, without requiring prior explicit consent for these listed uses....
Why it matters: Processing of racial or ethnic origin, health, and religious beliefs data constitutes processing of special categories of personal data under GDPR Article 9, requiring an explicit legal basis such as explicit consent, vital interests, or other Article 9(2) grounds. The policy states prior explicit consent is required only for uses outside the listed categories, while asserting these enumerated uses are covered under the BCR framework....
-
Grindr
· Grindr Privacy Policy
The policy states that Grindr retains device identifiers (IDFV and Android ID) and limited log information for up to two years after account deletion for internal reporting, metrics, and statistics purposes, separate from the general 28-day deletion timeline....
Why it matters: This provision establishes that device identifiers linked to deleted accounts are retained for up to two years, which may engage data minimization and storage limitation obligations under GDPR Article 5 and equivalent frameworks, and requires assessment of whether internal reporting and metrics constitute a lawful basis for retention of identifiers associated with deleted user accounts....
-
Grindr
· Grindr Privacy Policy
The policy discloses that Grindr has no EU/EEA/UK/Swiss establishments and that personal information of users in those jurisdictions is transferred to and processed in the United States and other third countries, with stated reliance on EU-U.S. Data Privacy Framework certification and Standard Contractual Clauses as transfer mechanisms....
Why it matters: This provision establishes the cross-border data transfer mechanisms Grindr relies on for GDPR-compliant transfers of personal information from the EU/EEA, UK, and Switzerland to the United States and other third countries; the absence of EU/EEA/UK/Swiss establishments means all processing is conducted from the U.S., with EDPO appointed as representative in each jurisdiction....
-
Grindr
· Grindr Privacy Policy
The policy discloses that Grindr and its partners scan, analyze, and collect information from user-uploaded videos, images, audio, messages, and other content and metadata, extracting content characteristics and attributes for recommendations, service delivery, and other operations....
Why it matters: This provision establishes that message content, images, audio, and video uploaded by users are subject to scanning and analysis by Grindr and its partners for attribute extraction and recommendation purposes; the policy states this analysis may be associated with user profiles consistent with user choices....
-
BeReal
· BeReal Privacy Policy
The policy states that BeReal uses AI to infer a user's likely gender from their username, first name, and biography, and to infer likely interests from the visual content of photos, with both used exclusively as internal criteria for selecting ads shown within the app....
Why it matters: This provision establishes AI-based processing of profile data and photo content to generate inferred attributes used for ad targeting. The legal basis and data protection compliance of inferring a characteristic associated with a protected category (gender) from profile text, and of analyzing user-generated photo content for interest signals, may require evaluation under GDPR automated processing provisions and applicable U.S. state sensitive data frameworks....
-
BeReal
· BeReal Privacy Policy
The policy states that advertisers may provide BeReal with hashed lists of their customers' phone numbers, which BeReal matches against hashed phone numbers in its user account database to identify which BeReal users to show that advertiser's ads to, with the hashed values from advertisers deleted after the matching process....
Why it matters: This provision establishes a custom audience matching workflow using hashed phone numbers as the matching identifier. The policy asserts that matched audience lists and BeReal user phone numbers are not disclosed back to advertisers, but the processing of user phone numbers for advertiser targeting purposes may constitute a 'sale' or 'sharing' under applicable U.S. state privacy laws, as acknowledged in Section 9.5....
-
BeReal
· BeReal Privacy Policy
The policy states that BeReal does not sell personal information in the traditional sense but acknowledges that certain advertising activities may qualify as a sale, sharing, or targeted advertising processing under applicable U.S. state privacy laws, covering identifiers, device identifiers, mobile advertising IDs, network activity, approximate geolocation, and advertising-related inferences....
Why it matters: This provision establishes the categories of personal information that may have been involved in advertising-related disclosures or processing activities that qualify as sale, sharing, or targeted advertising under U.S. state law, and identifies the opt-out mechanism available to users....
-
BeReal
· BeReal Privacy Policy
The policy states that in the event of a merger, acquisition, reorganization, asset sale, or bankruptcy, BeReal may share, sell, or transfer user information to the relevant party, with the current Privacy Policy stated to apply to transferred information....
Why it matters: This provision reserves the right to transfer user data to an acquiring or successor entity in a range of corporate transactions. The assertion that the current Privacy Policy would apply to transferred information does not bind the acquiring entity to maintain the same practices, and the actual privacy treatment of transferred data would depend on the acquiring entity's policies and applicable law....
-
BeReal
· BeReal Privacy Policy
The policy states that advertising network and mediation partners may collect data directly from users' devices through SDKs or cookies embedded in the BeReal app, operating under those partners' own privacy policies rather than BeReal's policy....
Why it matters: This provision establishes that third-party ad partners operate their own data collection infrastructure within the BeReal app, processing user data under their own privacy policies. BeReal directs users to a separate partner list for information about those practices and to exercise rights directly with those partners....
-
BeReal
· BeReal Privacy Policy
The policy states that BeReal does not knowingly collect personal data from users under 13 years of age and directs users under 13 not to use the app....
Why it matters: This provision establishes the app's age minimum and COPPA-related data collection commitment. The policy also contains separate provisions governing minors' location data defaults (approximate location rather than precise, by default) and a general advisory for minors to consult a trusted adult before using the service....
-
Twilio
· Twilio Terms of Service
The agreement states that all fees, taxes, and communications surcharges paid to Twilio are non-refundable and that payment obligations are non-cancelable, except as otherwise expressly stated in the agreement....
Why it matters: This provision establishes that customers cannot recover fees already paid, and cannot cancel payment obligations once incurred, which is operationally significant for customers on usage-based billing who encounter service issues or disputes outside the sixty-day dispute window....
-
Twilio
· Twilio Terms of Service
The agreement grants Twilio a license to use and display the customer's name, logo, and use case descriptions in marketing materials, earnings releases, investor calls, and on Twilio's website, subject to any trademark guidelines the customer expressly provides....
Why it matters: This provision authorizes Twilio to use customer names and logos in investor-facing communications such as earnings releases and calls, in addition to marketing materials, unless the customer proactively provides trademark usage guidelines. The license applies by default upon acceptance of the agreement....
-
Twilio
· Twilio Terms of Service
The agreement limits each party's liability for indirect, consequential, and similar damages, and caps total aggregate liability at the greater of fees paid in the preceding twelve months or $500, with exceptions for customer indemnification obligations, payment obligations, and confidentiality breaches....
Why it matters: This provision caps Twilio's total liability to the customer at twelve months of fees paid or $500, whichever is greater, and excludes consequential and indirect damages entirely, including loss of profits, revenue, and business. The cap exceptions apply to customer obligations but not symmetrically to Twilio's obligations in all circumstances....
-
Twilio
· Twilio Terms of Service
The agreement grants Twilio and its affiliates the right to process Customer Data to provide the services, and defines data derived from service use that is anonymized, de-identified, or aggregated as Twilio Data, which Twilio owns and may use without restriction....
Why it matters: This provision establishes that Twilio owns any Customer Data that is anonymized, de-identified, or aggregated, and that such data constitutes Twilio Data subject to no customer ownership claim. The processing license extends to Twilio's affiliates, and the terms of data processing are governed by the separately incorporated Twilio Data Protection Addendum....
-
Twilio
· Twilio Terms of Service
The agreement authorizes Twilio to update its terms with at least thirty days of written notice for material changes, except where changes result from law, regulation, or telecommunications provider requirements. Continued use of the services after the effective date constitutes acceptance of the updated terms....
Why it matters: This provision establishes that continued use of Twilio services after the effective date of an update constitutes binding acceptance of the new terms, and that the thirty-day notice period does not apply where updates are driven by regulatory or telecommunications carrier changes....
-
Betterment
· Betterment Privacy Policy
The policy discloses that Betterment shares customer personal information with generative AI service providers, including large language model vendors, and states that Betterment receives assurances from those providers that the data is not used to train their models....
Why it matters: This provision discloses a category of third-party data processor not commonly detailed in financial services privacy policies and relies on vendor-provided assurances rather than specifying the contractual or auditable mechanisms that enforce the model training restriction....