Provisions Index

California residents have specific rights under California privacy law, including the right to know what data is collected, request deletion, opt out of sale or sharing, and not be discriminated against for exercising these rights....

Why it matters: California law provides some of the strongest consumer privacy rights in the US, and Redfin is obligated to honor them — including the right to stop your data from being sold or shared with advertisers....

Even if you don't create an account, Redfin automatically collects data about you including your IP address, browser type, pages visited, properties viewed, cookies, and mobile advertising IDs....

Why it matters: Passive data collection begins the moment you visit Redfin's site, even without registering, meaning your browsing behavior and interests are tracked and can be used for advertising without you taking any active step....

Redfin retains your personal information for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements — even after you update or delete account information....

Why it matters: Deleting or updating your account information does not guarantee that Redfin removes all records of your data, as they may retain original copies for legal or operational reasons....

If you sign into Redfin using Facebook, Twitter, or another social media account, Redfin may use the data those services provide to customize your experience and share your data with those platforms for targeted advertising....

Why it matters: Connecting your social media account to Redfin creates a data bridge between your real estate activity and social media profile, potentially enabling highly targeted advertising on those platforms....

Privacy disputes are not governed solely by this policy — Redfin's Terms of Use, which include arbitration clauses and limits on damages, also apply to privacy-related disputes....

Why it matters: By using Redfin, you may be agreeing to resolve privacy disputes through arbitration rather than in court, and your ability to recover damages may be limited — even though these terms are not spelled out in the privacy policy itself....

Figma may use the data generated from your use of their services — including your design content and interactions — to train and improve their artificial intelligence and machine learning models....

Why it matters: This means your creative work and usage patterns could directly feed into commercial AI products, potentially without you being aware of the full scope of this use....

Figma shares your personal data with advertising partners so that you can be shown targeted advertisements based on your activity and profile....

Why it matters: Your usage data and personal information may be shared with external ad networks, meaning third parties beyond Figma gain access to your behavioral data....

If you are located in the EU, UK, or EEA, Figma transfers your personal data to the United States using Standard Contractual Clauses (SCCs) as the legal mechanism to protect that transfer....

Why it matters: Your data leaves the EU/UK and is subject to US law, which provides different privacy protections than European law — this is a significant consideration for enterprise users with compliance obligations....

If Figma is acquired, merges with another company, or sells its assets, your personal data may be transferred to the new owner as part of that deal....

Why it matters: A future acquisition could result in your data being controlled by an entirely different company with different privacy practices, without your consent being required....

California residents have specific rights under state law, including the right to know what data is collected, to delete it, to correct it, to opt out of its sale or sharing, and to not be discriminated against for exercising these rights....

Why it matters: California users have stronger legal protections than users in most other US states, and Figma is obligated to honor these rights upon request....

If you are in the EU or UK, you have rights under GDPR including the right to access your data, have it deleted, correct inaccuracies, restrict processing, receive a portable copy, and object to certain processing....

Why it matters: GDPR grants EU and UK users among the strongest data privacy rights in the world, and Figma must legally honor these requests in a timely manner....

Figma's services are not directed at children under the age of 16, and Figma states it does not knowingly collect personal data from users under 16....

Why it matters: If a minor under 16 uses Figma, their data may be collected without the legally required parental consent protections, creating both privacy and regulatory risk....

Figma retains your personal data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements....

Why it matters: Figma does not commit to a specific deletion timeline, meaning your data could be retained indefinitely while your account is active and for an unspecified period after....

Instead of going to court, you must resolve any legal dispute with Riot Games through binding individual arbitration, meaning a private arbitrator — not a judge or jury — decides the outcome....

Why it matters: This removes your right to sue Riot Games in court, including joining a class action lawsuit with other affected players, which can make it much harder to pursue small or individual claims....

You agree to resolve disputes with Riot Games only on an individual basis and give up the right to participate in any class action or group lawsuit....

Why it matters: Class actions allow many consumers to pool resources and take on large corporations together; waiving this right means each player must fight individually, which is often impractical for small financial disputes....

Any virtual currency or items you purchase in Riot Games (like Riot Points or in-game skins) are not owned by you — Riot grants you a limited license to use them, and they have no real-world monetary value....

Why it matters: This means Riot can remove, change, or eliminate your virtual items and currency without compensation, even if you paid real money for them....

Riot Games can suspend or permanently ban your account at any time and for any reason, including for violations of their rules, without prior warning or obligation to refund any purchases....

Why it matters: If your account is banned — even incorrectly — you lose access to all games, progress, and purchased content with no guaranteed right to a refund or appeal....

Riot Games limits its total financial liability to you to $100 or the amount you paid them in the six months before the dispute, whichever is greater....

Why it matters: No matter how much money you have spent on Riot Games products or how significant the harm, Riot's maximum legal exposure to you is capped at $100 or six months of payments....

Players under 18 must have parental or guardian consent to use Riot Games services, and players under 13 (or the applicable age in their country) are not permitted to use the services at all....

Why it matters: Parents are legally responsible for monitoring their children's use of Riot Games, including any purchases made, and Riot may collect data on minors subject to COPPA and similar regulations....

If you create and share any content using Riot Games platforms — such as fan art, videos, or game clips — you grant Riot a broad, worldwide, royalty-free license to use, reproduce, and distribute that content....

Why it matters: Riot can use content you create for their own commercial and promotional purposes without paying you or seeking additional permission....

The Terms of Service prohibit you from initiating a chargeback (reversing a credit card charge) for purchases made on Riot's platform, and doing so may result in account suspension....

Why it matters: Chargebacks are a key consumer protection tool for disputing unauthorized or fraudulent charges; prohibiting them removes a fundamental financial safeguard for players....

Riot Games reserves the right to change these Terms of Service at any time, and continued use of their services after changes are made constitutes your acceptance of the new terms....

Why it matters: Riot can materially change your rights and obligations without your explicit consent — simply continuing to play games means you agree to whatever new terms Riot has introduced....

You agree to defend and pay for any legal costs Riot Games incurs as a result of your use of their services, your violation of the Terms, or your infringement of third-party rights....

Why it matters: If your in-game behavior or content causes Riot to face a lawsuit or legal claim, you could be held personally liable for their legal fees and damages — even for unintentional violations....

Square shares your personal and financial data with affiliates, service providers, and business partners for purposes including service delivery, marketing, and advertising....

Why it matters: Your financial and behavioral data can be shared broadly beyond Square itself, potentially with advertising networks and data brokers, affecting your privacy....

California residents have the right to opt out of Square selling or sharing their personal information with third parties for cross-context behavioral advertising....

Why it matters: This gives California users a legally enforceable right to stop their data from being used for targeted advertising, which can limit unwanted profiling....

Square retains your personal and financial data for a period after you close your account, citing legal, regulatory, and business purposes....

Why it matters: Closing your Square account does not immediately delete your data; Square may retain your financial records and personal information for extended periods....

Square uses your personal data, including transaction and behavioral data, to deliver targeted advertisements and to build profiles about your preferences and interests....

Why it matters: Square may use your spending habits and financial behavior to build advertising profiles and deliver targeted ads, which may feel intrusive and is not always transparent to users....

Consumers have the right to request access to, deletion of, and correction of personal information Square holds about them....

Why it matters: You can ask Square to show you what data they have, delete it, or fix inaccuracies — these are important rights that give you more control over your personal information....

Square collects sensitive personal information such as financial account details, government IDs, and precise geolocation, and uses it for service delivery and compliance purposes....

Why it matters: Collection of sensitive data like government IDs and financial account numbers increases privacy risk, and under California law you have the right to limit how this data is used....

Square uses your payment and transaction data to improve its services, detect fraud, and develop new products, in addition to processing your payments....

Why it matters: Your financial transactions are used for purposes beyond just completing payments, including building Square's products and conducting analytics on your financial behavior....

Square may send you promotional communications by email, text, or other channels, and you can opt out of these at any time....

Why it matters: You may receive marketing messages from Square unless you actively opt out, so it is worth knowing how to stop these if you do not want them....

When you connect your bank account through an app powered by Plaid, you authorize Plaid to access your financial data — including account numbers, balances, and transaction history — and share it with the requesting application....

Why it matters: This authorization is the core of Plaid's entire business model and determines exactly what banking information third-party apps can see about you....

Plaid shares your financial data with the third-party app developers who use Plaid's API, and those developers are governed by their own separate terms of service with Plaid....

Why it matters: Your financial data doesn't stay with Plaid — it flows to the app you're connecting to, and Plaid's agreements with those developers (not your direct agreement) govern how they must handle it....

Plaid limits how much it can be held financially responsible if something goes wrong — such as a data breach or unauthorized access to your financial information — typically capping damages at a relatively low amount....

Why it matters: If Plaid's systems are compromised and your financial data is exposed, this clause may significantly restrict your ability to recover meaningful compensation....

Disputes between you and Plaid may be required to go through private arbitration rather than a court, and you may be giving up your right to join a class action lawsuit....

Why it matters: Mandatory arbitration clauses prevent consumers from suing Plaid in court and from joining together with other consumers in class action lawsuits, which are often the only practical way to pursue claims against large companies....

California residents have specific rights under state law to know what personal data Plaid collects, request deletion of their data, and opt out of certain data sales or sharing....

Why it matters: California residents have stronger legal protections than users in most other states, including the right to see exactly what financial data Plaid holds about them and to demand it be deleted....

Companies and developers that use Plaid's API to build apps must follow Plaid's usage policies, which govern how they can use consumer financial data they receive through Plaid's infrastructure....

Why it matters: The rules Plaid imposes on its developer customers directly determine how safely your financial data is handled by the apps you connect to — if those rules are weak or unenforced, your data is at greater risk....

Plaid retains your financial data for defined periods and outlines under what circumstances it will delete data, including when you disconnect an app or submit a deletion request....

Why it matters: Even after you disconnect an app from your bank account, Plaid may retain copies of your financial data for a period of time, which consumers should be aware of....

Plaid or the apps using Plaid can terminate or suspend your access to services, and Plaid may discontinue connections between your bank account and specific applications....

Why it matters: If Plaid terminates your access or a developer's access, it can disrupt your ability to use financial apps that depend on Plaid for bank connectivity with little or no notice....

Developer customers using Plaid's API agree to indemnify and hold harmless Plaid from legal claims arising from their use of the platform or misuse of consumer data....

Why it matters: This shifts legal and financial liability away from Plaid and onto the app developers who use its services, which may affect how well-resourced your legal recourse is if a developer misuses your data....

Disputes with Plaid are governed by the laws of a specific state (typically California or Delaware) and must be brought in courts or arbitration in that jurisdiction....

Why it matters: If you have a legal dispute with Plaid, you may be required to pursue it under the laws of a different state than where you live, which can make legal action more complicated and expensive....

Headspace acts as a 'business associate' under HIPAA for its Care Providers (therapists, psychiatrists), meaning your health information from therapy or psychiatry sessions is subject to federal health privacy rules. Your Care Provider may give you a separate HIPAA Notice of Privacy Practices....

Why it matters: HIPAA provides important federal protections for your health data collected during clinical services, and knowing Headspace is covered means you have specific federal rights over that data....

For users in states with consumer health data laws (like Washington's My Health MY Data Act), Headspace has a separate Consumer Health Data Privacy Policy that provides additional protections for your health-related personal information beyond what standard privacy laws require....

Why it matters: State consumer health data laws give you stronger rights over sensitive health information collected outside traditional medical settings — including wellness apps — so this provision expands your protections significantly....

Headspace may share your personal information — including data about your use of the app — with third-party advertising and analytics companies to help serve you targeted ads and improve their marketing. This sharing may constitute a 'sale' or 'sharing' of personal data under some state privacy laws...

Why it matters: Your mental health app usage data could be shared with advertisers, which many users would not expect given the sensitive nature of mental wellness information....

When you visit Headspace's websites, they automatically collect information about you through cookies and other tracking tools, such as pixels and analytics scripts. You can control which cookies are used through the cookie settings on their websites....

Why it matters: Tracking technologies can collect detailed information about your browsing behavior across the web, including your interest in mental health topics, and this data may be shared with third parties....

Headspace gives all users — regardless of where they live — the right to request access to, deletion of, and corrections to their personal information. Additional rights may apply based on your location, such as California, EU, or UK-specific rights....

Why it matters: Having broad privacy rights regardless of your location means you can take control of your data, including requesting that Headspace delete your information even if you are not in a jurisdiction with legally mandated deletion rights....

Headspace's platform is generally intended for adults, and their services are not directed at children. There are limited exceptions depending on the specific product offering....

Why it matters: Parents should be aware that Headspace's standard services are not designed for children, and special considerations apply if a child accesses the platform through certain programs....

If your employer provides you access to Headspace, your use may be subject to additional privacy terms and notices, and your employer-related data sharing may be covered by separate agreements between Headspace and your employer....

Why it matters: Users accessing Headspace through their employer should understand that their employer may have visibility into certain usage data or that different privacy terms govern their access....

Headspace may transfer your personal data to other countries where data protection laws may differ from your own, and they use mechanisms like standard contractual clauses to make these transfers lawful under GDPR....

Why it matters: If you are in the EU or UK, your mental health and personal data may be transferred to countries with weaker privacy protections, and you should understand the legal safeguards in place....

Headspace keeps your personal information for as long as it is necessary for the purposes it was collected, and they apply appropriate security safeguards during that time. Retention periods may vary depending on the type of data and applicable legal requirements....

Why it matters: Knowing how long your sensitive mental health data is kept helps you understand your exposure — particularly if you stop using the service but your data persists....