Provisions Index

Pinterest provides its services 'as is' with no guarantees of availability, accuracy, or fitness for purpose, and does not promise the service will be uninterrupted or error-free....

Why it matters: Pinterest makes no legal commitment to keep the service running or ensure the accuracy of content, meaning outages, data loss, or service changes are at your own risk....

Shopify bans businesses that operate as multi-level marketing companies or pyramid schemes from using its platform....

Why it matters: Legitimate direct sales businesses that use tiered commission structures may be categorized as MLM and face account termination, requiring merchants to carefully assess whether their compensation structure could be characterized as multi-level marketing....

Shopify prohibits merchants from sending spam or unsolicited marketing emails and messages to people who have not opted in....

Why it matters: Merchants who use Shopify Email or third-party email apps connected to Shopify to send bulk marketing without proper consent face both AUP-based account termination and independent legal liability under CAN-SPAM and GDPR....

Coinbase can change the terms of this agreement at any time by posting updated terms and providing notice, and your continued use of the platform constitutes acceptance of the new terms....

Why it matters: Coinbase can alter the rules governing your account and funds without your explicit agreement — simply continuing to use the service is treated as consent to whatever changes they make....

Coinbase requires you to provide personal information to verify your identity before you can use the platform, including government ID and other documentation, and may request additional verification at any time....

Why it matters: You must share sensitive personal information including government-issued ID with Coinbase, and failure to provide requested documentation can result in your account being restricted or closed....

You agree to protect Coinbase from any legal claims, costs, or damages arising from your use of the platform, including legal fees, if your actions lead to Coinbase being sued or incurring expenses....

Why it matters: If your account activity causes Coinbase to face legal action or costs — even in circumstances where the law is unclear — you could be personally responsible for paying Coinbase's legal bills and any damages they suffer....

This agreement is governed by the laws of the State of California, and any disputes that do go to court must be filed in California courts....

Why it matters: If you live outside California and have a dispute that somehow reaches court, you would need to litigate in California — which can be costly and impractical for most consumers....

If you live in California, you have the legal right to ask Visa what data it has on you, request that it be deleted, and opt out of Visa selling or sharing your data — and Visa cannot penalize you for exercising these rights....

Why it matters: California residents have more actionable privacy protections than most U.S. consumers, and this provision gives them real tools to limit how Visa uses their spending data commercially....

Visa may send your personal data to other countries, including the U.S., where privacy laws may provide less protection than in your home country — though Visa says it takes steps to protect the data during these transfers....

Why it matters: For EU and UK users especially, cross-border data transfers to the U.S. are a significant legal and practical risk, and 'steps to ensure adequate protection' is a vague commitment without specific mechanisms named....

Visa keeps your personal information for as long as it decides is necessary, without specifying exact timeframes — the retention period is open-ended and determined by Visa....

Why it matters: Indefinite or open-ended data retention means Visa could hold detailed records of your financial transactions for years, increasing the risk of data breaches and limiting your ability to have your data fully deleted....

Visa tracks your activity on its websites using cookies and similar tools, and uses that data to personalize content and serve targeted ads....

Why it matters: Cookie-based tracking on financial services websites captures behavioral data beyond transaction records and may be shared with advertising technology partners, expanding Visa's data collection footprint....

Visa uses security measures to protect your data but cannot guarantee it will never be breached — the policy acknowledges the inherent security limitations of digital storage and transmission....

Why it matters: Given the volume and sensitivity of financial transaction data Visa holds, a breach could expose millions of consumers' spending histories — and this disclaimer limits Visa's legal accountability for security failures....

Shopify can raise its subscription or transaction fees at any time, and if you keep using the platform after 30 days, you are deemed to have accepted the new prices — even if you weren't actively watching for the notice....

Why it matters: Merchants on thin margins who miss a fee change notice could face unexpected cost increases with no recourse, since continued use of the platform constitutes automatic acceptance of the new rates....

When you upload product images, descriptions, or other content to your Shopify store, you give Shopify a permanent, worldwide, royalty-free license to use, copy, and modify that content to operate and improve its services....

Why it matters: Merchants who upload proprietary product content, brand assets, or customer-facing materials should understand that Shopify retains a broad license to use this content, potentially including for training AI models or improving platform features beyond simply displaying the merchant's store....

Merchants are fully responsible for everything that happens under their Shopify account, including actions taken by employees, contractors, or anyone else who has access — and for keeping their login credentials secure....

Why it matters: If an employee misuses your Shopify account or your credentials are compromised, Shopify bears no liability for the resulting harm — the entire risk falls on the merchant....

All legal disputes with Shopify must be resolved under Canadian law in Ontario courts — even if you are a merchant based in the United States, Europe, or elsewhere....

Why it matters: If you have a serious dispute with Shopify, you would need to pursue legal action under Canadian law in Ontario courts, which may be impractical and costly for merchants based in other countries....

Shopify is not responsible for third-party apps and tools available in the Shopify App Store, and merchants use them entirely at their own risk — Shopify provides no warranties and accepts no liability for these third-party services....

Why it matters: Merchants who rely on third-party Shopify apps for critical business functions — such as inventory management, email marketing, or customer reviews — have no recourse against Shopify if those apps fail, expose customer data, or cause financial harm....

Merchants pay a monthly subscription fee in advance, and the fee is non-refundable — even if you cancel partway through the billing period. Additional transaction fees apply if you use Shopify Payments or third-party payment processors....

Why it matters: Because subscription fees are non-refundable, merchants who cancel their Shopify plan mid-month will not receive a prorated refund for the unused portion of their subscription period....

If LinkedIn changes its privacy policy and you keep using the service, LinkedIn treats that as your agreement to the new terms — even if you never actively clicked 'I agree'....

Why it matters: This provision uses passive behavior (not deleting your account) as a mechanism for obtaining consent to potentially significant new data uses, which may not meet the GDPR standard of freely given, specific, informed, and unambiguous consent....

You have the right to ask LinkedIn to delete your data, correct inaccuracies, limit how your data is used, and receive a copy of everything LinkedIn holds about you....

Why it matters: These rights are legally enforceable under GDPR and CCPA/CPRA, but exercising them requires you to actively submit requests — and LinkedIn's timeline and scope of compliance will vary by jurisdiction....

LinkedIn collects data about the messages you send through the platform, as well as your clicks, searches, and browsing behavior even when you are not logged into your account....

Why it matters: The collection of messaging data and off-session browsing behavior means LinkedIn maintains a behavioral profile that extends beyond your active, logged-in use of the platform....

Stripe collects device information, IP addresses, and behavioral data about people who complete payments on any website powered by Stripe — even if those people never created a Stripe account....

Why it matters: Millions of people who have never signed up for Stripe may have their data collected and profiled simply by checking out on a merchant website, without realizing Stripe is involved....

Stripe shares your personal and payment data with a broad network of banks, card networks, payment processors, and other financial institutions involved in processing your transactions....

Why it matters: Your financial data, identity information, and behavioral signals are shared across a wide ecosystem of third parties, many of whom you have no direct relationship with and whose own privacy practices are not governed by this policy....

Stripe sometimes controls how your data is used (as a 'controller'), and sometimes processes it only on behalf of the merchant you bought from (as a 'processor') — and the rules that protect your data differ depending on which role applies....

Why it matters: When Stripe acts as a processor, your privacy rights are primarily directed at the merchant, not Stripe — which can make it harder for consumers to know who is responsible for their data and where to direct complaints....

Stripe transfers your personal data from Europe to the US and other countries using legal mechanisms like Standard Contractual Clauses and the EU-US Data Privacy Framework to comply with EU and UK data protection laws....

Why it matters: EU and UK users' data is transferred internationally and protected by contractual safeguards, but those safeguards have faced legal challenges and may be subject to US government surveillance laws....

Stripe provides rights to access, correct, delete, restrict, or port your personal data, and allows you to object to certain processing — accessible through Stripe's Privacy Center or by emailing privacy@stripe.com....

Why it matters: Knowing and exercising these rights is the primary mechanism consumers have to control how Stripe uses their data, including requesting deletion or objecting to profiling for fraud prevention purposes....

Stripe keeps your personal data for as long as it needs to — which can be many years — to meet legal requirements like anti-money laundering rules, even after you stop using Stripe services....

Why it matters: Even if you request deletion of your data, Stripe may retain it for extended periods to comply with financial regulations, meaning your right to erasure is limited in the financial services context....

Stripe shares your personal data with its affiliated companies and with outside vendors who help run its services — including analytics companies, marketing firms, and fraud prevention services....

Why it matters: Your personal data flows to Stripe's corporate affiliates and numerous third-party vendors, each of which has its own data practices and security posture, creating a broad data exposure footprint....

Pinterest transfers your personal data to the United States and other countries, which may have different data protection standards than your home country....

Why it matters: If you are located in the EU, UK, or other regions with strong privacy laws, your data may be sent to countries with weaker protections, which carries privacy risks....

Pinterest provides different privacy rights depending on where you live — EU/EEA/UK users have the most comprehensive rights under GDPR, while US users' rights vary by state, with California residents having the broadest US rights....

Why it matters: The rights you have over your personal data — including the ability to delete it, access it, or stop it being shared — depend heavily on where you live, meaning many users worldwide have significantly fewer protections....

Pinterest retains your personal data for as long as it considers necessary for business purposes, which may extend beyond the period you actively use the platform....

Why it matters: Your data may be kept by Pinterest for an indefinite or extended period even after you stop using the service, limiting your control over your personal information....

Pinterest states its service is not directed at children under the age of 13 (or a higher age in some regions), and that it does not knowingly collect personal data from children....

Why it matters: While Pinterest prohibits use by young children, the platform's age verification mechanisms are limited, meaning younger users may still access the service and have their data collected....

Pinterest uses cookies, pixels, and similar tracking technologies to collect data about your behavior on and off Pinterest, and to enable advertising and analytics functions....

Why it matters: Cookies and trackers allow Pinterest and its partners to monitor your online behavior extensively, including on websites that have nothing to do with Pinterest, building a detailed profile about you....

Microsoft generates inferences about your interests, preferences, and behaviour based on how you use their products, even if you never directly provided that information....

Why it matters: Microsoft can build a detailed profile about you from passive usage patterns — meaning data you never consciously shared can be used to make assumptions about your interests, lifestyle, or personal circumstances....

You have the right to access the personal data Microsoft holds about you, request that it be corrected or deleted, and in some regions export a copy of your data....

Why it matters: These rights give consumers meaningful control over their personal information, but exercising them requires knowing where and how to submit requests — and some rights may be limited depending on the product or your location....

Microsoft may transfer your personal data to countries outside your own, including the United States, where data protection laws may differ from those in your home country....

Why it matters: If you are in the EU, UK, or another jurisdiction with strong privacy laws, your data may be processed in countries with fewer legal protections unless specific transfer safeguards are in place....

Microsoft shares your personal data with affiliates, subsidiaries, vendors, advertisers, and other third parties for purposes including service delivery, advertising, and legal compliance....

Why it matters: Your data does not stay solely with Microsoft — it flows to a wide ecosystem of partners and vendors, which expands the number of organisations that may process your personal information....

Microsoft automatically collects diagnostic and usage data from Windows and other products, including information about how you use your device, application crashes, and system performance....

Why it matters: Diagnostic data collection is largely automatic and enabled by default, meaning consumers passively share detailed device and usage information with Microsoft unless they actively reduce the level of data sharing in their settings....

Microsoft collects precise and coarse location data from your devices when location services are enabled, and may use this data for services, advertising, and product improvement....

Why it matters: Location data is highly sensitive and can reveal where you live, work, worship, or receive medical care; consumers should understand that location access granted to one Microsoft service may benefit multiple Microsoft products....

Even after you delete Snaps or messages, Snapchat may retain copies of this content on its servers for a period of time before permanent deletion, and some data may be retained for legal or business purposes....

Why it matters: Content you believe has disappeared may still exist on Snapchat's servers temporarily, and certain data associated with your account may be kept even after you delete your account....

Snapchat may transfer your personal data to the United States and other countries that may not have the same level of data protection as your home country....

Why it matters: For users in the EEA, UK, and other regions with strong data protection laws, transferring data internationally can reduce the legal protections that apply to your personal information....

Snapchat provides users with rights to access a copy of their personal data, request deletion of their data, and in some regions, request portability of their data to another service....

Why it matters: These rights give you meaningful control over your personal information, but exercising them typically requires submitting formal requests and may be subject to legal exceptions....

Snapchat may disclose your personal data to law enforcement, government authorities, or third parties when required by law, legal process, or to protect the safety of users or the public....

Why it matters: Your private messages, location history, and account data can be disclosed to authorities in response to legal requests, including subpoenas, court orders, or national security demands....

When you delete your Snapchat account, Snap retains certain data for a period of time before it is fully purged, and some data may be kept longer for legal, safety, or business reasons....

Why it matters: Deleting your account does not result in the immediate permanent deletion of all your data, meaning personal information can persist in Snap's systems after you have left the platform....

By using Stripe, you give Stripe permission to access and use your business data and content worldwide — including for improving Stripe's products and services....

Why it matters: The license to use data for product 'improvement and development' is broader than simply providing services and could encompass training machine learning models, benchmarking, or product analytics using your business's transaction data....

Stripe restricts which types of businesses can use its platform — certain industries are outright prohibited, and others require pre-approval. Using Stripe for activities not matching your registered business description can result in account termination....

Why it matters: Businesses that expand into new product lines or markets without updating their Stripe account description risk termination and fund withholding, even if the new activity is legal....

Stripe can change the terms of your agreement at any time by giving you notice, and if you keep using their services after the change, you are automatically considered to have agreed to the new terms....

Why it matters: This clause allows Stripe to materially alter the terms of your contract — including fee structures, reserve policies, and acceptable use restrictions — without your explicit consent, simply by notifying you....

For users in the European Economic Area and United Kingdom, Microsoft Ireland Operations Limited is designated as the data controller responsible for how your personal data is handled....

Why it matters: Knowing who the legal data controller is enables EU and UK users to direct data rights requests and regulatory complaints to the correct entity, and determines which supervisory authority has jurisdiction....

California residents have specific rights under CCPA, including the right to know what personal data Microsoft collects, to delete it, and to opt out of the sale or sharing of their personal information for advertising purposes....

Why it matters: California residents have stronger legal rights than most US consumers regarding their personal data, and Microsoft is required by law to honour these rights upon request....

Microsoft retains your personal data for as long as necessary to provide services, comply with legal obligations, or resolve disputes, and you have the right to request deletion of your data subject to certain exceptions....

Why it matters: Understanding how long Microsoft keeps your data — and the limitations on deletion rights — is critical for assessing your ongoing privacy exposure, particularly for sensitive data collected over many years of product use....