Provisions Index

Cash App discloses various fees for its prepaid account services, including instant transfer fees, ATM withdrawal fees, and foreign transaction fees, which are listed in the fee table in Section I....

Why it matters: Understanding these fees is essential for consumers who use Cash App as a primary banking alternative, as charges can add up quickly for ATM use, instant transfers, and international transactions....

Children aged 13 and older can use Cash App through a 'Sponsored Account' where a parent or guardian acts as the sponsor and takes responsibility for the minor's account activity....

Why it matters: Parents or guardians who sponsor a minor's account accept legal responsibility for that account, including any financial activity, and should be aware of the associated obligations and risks....

By using Cash App, you agree to receive all disclosures, notices, and communications electronically rather than on paper....

Why it matters: You may miss important notices about fee changes, account actions, or legal updates if you do not regularly check your email or the Cash App notifications associated with your account....

Cash App includes terms governing use of generative AI features within the app, covering what you can and cannot do with AI-generated outputs....

Why it matters: Generative AI features may use your data inputs to produce outputs, and the terms governing accuracy, liability for AI errors, and data use in AI contexts are important to understand....

Cash App collects and uses your data in connection with providing its services, as governed by its Privacy Notice; by using the app you consent to this data usage....

Why it matters: Cash App processes significant amounts of financial and personal data; understanding what is collected, how it is shared, and your rights to access or delete it is important for your privacy....

Microsoft publicly commits to building all its AI systems according to six ethical principles, including being fair, safe, private, and transparent....

Why it matters: These stated principles may establish a standard of care against which Microsoft's actual AI product behavior can be measured by regulators and courts....

Microsoft commits to designing AI systems that protect your private data and are secure against hacking or misuse....

Why it matters: This commitment, if not operationalised in actual product design, could be characterised as a deceptive practice by regulators, and does not specify what data Microsoft collects through its AI systems or how it is used....

Microsoft commits to explaining how its AI systems work so users can understand and make informed choices....

Why it matters: Transparency is a core requirement under GDPR Art. 13 and 14 (information to be provided to data subjects) and EU AI Act Art. 13, but this commitment does not specify what disclosures are actually made to users of specific AI products....

Microsoft has set up internal oversight bodies — including the Office of Responsible AI and the AETHER committee — to ensure humans remain responsible for AI system outcomes....

Why it matters: Internal governance structures are increasingly required by law under the EU AI Act, but this page does not describe external audit rights, third-party verification, or how affected individuals can trigger accountability mechanisms....

Microsoft commits to making AI systems that work correctly and safely in real-world situations, not just in testing environments....

Why it matters: AI system failures in safety-critical applications — healthcare, transportation, public safety — can cause physical harm; this commitment, without specified testing standards or third-party safety certifications, provides limited consumer assurance....

Shopify shares your personal data with a wide range of third-party vendors including hosting providers, payment processors, analytics companies, and app developers to operate its platform....

Why it matters: The breadth of third-party sharing — encompassing app developers in the Shopify App Store who may have independent privacy practices — means your data can flow to vendors whose data practices Shopify does not fully control, increasing the risk of secondary data misuse....

Shopify moves your personal data across international borders (including to the US and other countries) and relies primarily on EU Standard Contractual Clauses as the legal mechanism to authorize those transfers....

Why it matters: Post-Schrems II, Standard Contractual Clauses alone are insufficient without a Transfer Impact Assessment demonstrating equivalent protection in the destination country — failure to conduct this assessment exposes both Shopify and merchants to GDPR enforcement action....

Shopify can share your personal data with law enforcement or government agencies when legally required or when Shopify believes it is necessary to prevent harm, even without a court order in some circumstances....

Why it matters: The provision allows for disclosure based on Shopify's own assessment that disclosure is 'necessary' — without requiring a formal legal compulsion — which creates a degree of discretionary data sharing with government entities that may exceed what some consumers expect....

Shopify keeps your personal data for as long as it needs to — which can be indefinitely if Shopify determines it is needed for legal or business reasons, without specifying maximum retention periods....

Why it matters: The absence of specific maximum retention periods means Shopify retains broad discretion to hold your personal information for extended periods, which creates ongoing data exposure risk and may conflict with GDPR's storage limitation principle....

California residents have specific legal rights under the CPRA to access, delete, correct, and opt out of the sale or sharing of their personal data with Shopify....

Why it matters: California residents have the most comprehensive set of enforceable privacy rights against Shopify under CPRA, including the ability to stop Shopify from sharing behavioral data with advertisers — a right not available to users in most other US states....

Shopify uses cookies and third-party tracking tools on its websites to monitor your browsing behavior and serve you targeted ads through advertising partners....

Why it matters: Third-party advertising cookies placed by Shopify's partners (such as Google Analytics and Meta Pixel) may track your behavior across the internet, not just on Shopify's own properties, creating a broad behavioral surveillance profile that is shared with ad networks....

You must be at least 13 years old to use Snapchat, and some features require you to be 18 or older; Snap will terminate accounts of users found to be under the minimum age....

Why it matters: Snapchat is widely used by teenagers, and the terms establish minimum protections for minors, though enforcement depends largely on users self-reporting their age....

Snapchat's terms are governed by California law, and any disputes not subject to arbitration must be brought in courts in Los Angeles County, California....

Why it matters: If you need to take legal action against Snap, you may have to do so in California under California law, which could be costly or impractical if you live elsewhere....

You can delete your Snapchat account at any time, but Snap may retain certain data after deletion for legal, safety, or operational reasons....

Why it matters: Deleting your account does not guarantee immediate or complete removal of all your data from Snap's systems, which affects your privacy after you stop using the service....

Snap can update or change these terms at any time, and continued use of the service after changes are posted means you accept the new terms....

Why it matters: Your rights and obligations under Snapchat can change without you actively agreeing to the new terms — simply continuing to use the app is treated as acceptance....

Once you pay for a Character.AI subscription, you generally cannot get a refund — though exceptions may apply depending on your local consumer protection laws....

Why it matters: If you cancel a paid subscription, you will not receive a refund for the remaining unused portion of the billing period....

Character.AI can share your content and conversation data with law enforcement, government agencies, or third parties if they believe it is necessary or legally required....

Why it matters: Your conversations with AI characters are not private and can be accessed, preserved, and disclosed by the company at its discretion for legal or safety reasons....

Character.AI can suspend or delete your account if you violate the Terms, if your account is inactive for a long time, or at their sole discretion for almost any reason....

Why it matters: You can lose access to the service and all content in your account without advance notice, and the company has broad discretion to define what counts as a violation....

Character.AI warns that AI responses can be inaccurate or offensive, and that you use all AI-generated content entirely at your own risk....

Why it matters: The company takes no responsibility for the accuracy, safety, or appropriateness of AI outputs, which is significant given the platform's potential use by vulnerable users and those seeking advice....

Character.AI may share or transfer your personal data to another company if it is acquired, merges with another business, or sells its assets....

Why it matters: In a merger or acquisition scenario, your personal data — including chat history, voice recordings, and account information — could transfer to a new owner with potentially different privacy practices....

Character.AI keeps your data for as long as needed for the purposes it was collected, or longer to comply with legal obligations, resolve disputes, or enforce agreements....

Why it matters: There is no specific maximum retention period stated, meaning your data could be held indefinitely under broad justifications such as 'legal obligations' or 'enforcing agreements'....

If you log in using a third-party account like Google or Facebook, Character.AI collects information from that account and may retain it even after you disconnect the connection....

Why it matters: Revoking permission for a third-party account login does not cause Character.AI to delete the data already collected from that account — it only prevents future data collection....

Character.AI may update this privacy policy at any time and will notify users of material changes via email or website posting; continued use of the service constitutes acceptance of the updated policy....

Why it matters: Continuing to use Character.AI after a privacy policy update — even without actively reading the new version — is treated as agreement to the new terms, which could include expanded data uses....

Microsoft has committed to six ethical principles that guide how all its AI products are built and used, including protecting your privacy and ensuring AI treats people fairly....

Why it matters: These principles set the baseline standard for how Microsoft AI systems that affect your life — from job applications screened by AI to healthcare tools — are supposed to behave, though they are voluntary commitments rather than legal guarantees....

Microsoft uses an internal standard and impact assessment process to evaluate AI products before release, and has made this standard publicly available....

Why it matters: The existence of a published standard and impact assessment process means Microsoft has created a benchmark against which its own AI products can be evaluated — and against which regulators or plaintiffs could measure compliance....

Microsoft commits to building AI systems that protect your personal data and support privacy laws, including backing for new legislation to protect individuals....

Why it matters: As Microsoft AI systems process increasing volumes of personal data to power tools like Copilot and Azure AI, this commitment determines the baseline privacy protections consumers can expect — and signals Microsoft's policy stance on privacy legislation....

Microsoft has created internal committees and an office specifically to oversee AI ethics and ensure its principles are followed in practice across the company....

Why it matters: The existence of named governance bodies creates an accountability structure that regulators and the public can reference — and their effectiveness (or lack thereof) will determine whether Microsoft's AI commitments are operationalized or remain aspirational....

Microsoft commits to making its AI systems understandable and ensuring people know when they are interacting with AI, what data trained it, and how it makes decisions....

Why it matters: The right to know you are interacting with AI — and to understand how it makes decisions affecting you — is increasingly recognized as a fundamental requirement by regulators globally, and this commitment sets expectations for all Microsoft AI products....

Any legal dispute with LinkedIn must be handled under California law in courts located in Santa Clara County, California — regardless of where you live....

Why it matters: If you live outside California and have a dispute with LinkedIn, you would generally need to litigate in California courts, which creates a significant practical and financial barrier to pursuing legal claims....

LinkedIn is only for people aged 16 and over, or older if your country's law requires it — and LinkedIn relies on users to self-report their age rather than verifying it....

Why it matters: LinkedIn does not actively verify user ages, meaning minors could potentially access the service, and the legal protection for their data depends on users being honest about their age at registration....

LinkedIn does not promise that its service will work correctly, be available at all times, or that information on the platform is accurate — you use it at your own risk....

Why it matters: This means that if LinkedIn experiences outages, provides inaccurate job listings, or surfaces misleading professional information, you generally have no contractual right to compensation....

LinkedIn prohibits automated data collection (scraping), bots, and using the platform to gather information for competing services — violations can result in account termination....

Why it matters: These restrictions affect developers, researchers, and businesses that may rely on LinkedIn data, and violations can result in immediate account suspension as well as potential legal action under the Computer Fraud and Abuse Act....

What you post on LinkedIn — including your profile, comments, and reactions — may be visible to other users, visitors, and people outside LinkedIn, depending on your privacy settings....

Why it matters: Professional information shared on LinkedIn, including employment history, endorsements, and activity, can be visible beyond your intended audience if privacy settings are not actively managed....

Robinhood uses this page as the central location for all its legal agreements and regulatory disclosures, meaning you must navigate through multiple linked documents to understand your full legal obligations....

Why it matters: If you don't find and read the individual linked documents, you may miss critical terms like arbitration clauses, fee disclosures, or data sharing practices....

Robinhood's disclosure library references California-specific privacy rights, meaning California residents have additional legal protections regarding their financial and personal data....

Why it matters: California residents can request to know what personal and financial data Robinhood holds about them, request deletion, and opt out of certain data sales under the CCPA....

While Robinhood advertises commission-free trading, it acknowledges that limitations and other fees may still apply, and the company earns revenue through payment for order flow and other means....

Why it matters: Commission-free does not mean cost-free — Robinhood receives payment from market makers for routing your trades, which may result in slightly worse prices than you would receive on other platforms....

Robinhood's services are available only to eligible users in the United States who meet applicable legal and regulatory requirements, including age and identity verification....

Why it matters: Robinhood requires users to be at least 18 years old and a U.S. resident, and the platform can restrict or terminate account access if eligibility conditions are not met....

Uber collects background check information including criminal history, driving record, and identity verification data, which is processed by third-party background check providers....

Why it matters: Sensitive background check data is held by Uber and third-party processors, and errors in this data can affect your ability to work on the platform....

Uber collects your bank account or payment information to process earnings payments, and this financial data is shared with payment processing partners....

Why it matters: Your banking and financial details are stored by Uber and third-party payment processors, creating potential exposure if those systems are compromised....

California residents have rights under the CCPA/CPRA to know what personal data is collected, request deletion, opt out of data sales, and not be discriminated against for exercising these rights....

Why it matters: California drivers have enhanced legal rights to control their personal data and can take specific actions to limit how Uber uses and shares it....

Uber may transfer your personal data to countries outside your home country, including the United States, which may have different levels of data protection....

Why it matters: When your data is transferred internationally, the legal protections that apply may be weaker than those in your home country, particularly for EU and UK drivers....

Uber shares driver data including trip information, location data, and performance metrics with insurance providers to facilitate insurance coverage during trips....

Why it matters: Detailed driving behavior and performance data shared with insurers could affect your insurability or insurance premiums beyond the Uber platform....

Drivers and delivery workers have the right to access their personal data, request its deletion, correct inaccurate data, and in some regions receive a copy of their data in a portable format....

Why it matters: These rights give you meaningful control over your personal data and the ability to challenge inaccuracies that might affect your work on the platform....

California residents have specific rights under CCPA/CPRA including the right to know what data is collected, the right to delete their data, the right to correct inaccurate data, the right to opt out of data sale or sharing, and the right to limit use of sensitive personal information....

Why it matters: These are legally enforceable rights that give California consumers meaningful control over their personal data held by Stash, including the ability to stop their data from being sold or shared....

Stash explicitly states that it does not respond to browser 'Do Not Track' signals, meaning that even if your browser is set to request that websites not track you, Stash will continue to track your behavior....

Why it matters: Consumers who rely on browser privacy settings to limit tracking will find those controls have no effect on Stash's data collection practices....