-
Meta
· Meta Special Ad Category Requirements
The Financial Products and Services Special Ad Category applies to ads promoting financial products and services including cryptocurrency products and services, contracts for difference, and other complex financial products, requiring the designation and associated targeting restrictions....
Why it matters: This provision establishes a dedicated Special Ad Category for financial products and services, including cryptocurrency and complex derivatives, which carries its own targeting restrictions separate from the Credit category. Financial services advertisers offering investment products, crypto assets, or CFDs must apply this designation, and the inclusion of cryptocurrency and CFDs reflects the heightened regulatory scrutiny these products face across multiple jurisdictions....
-
Meta
· Meta Special Ad Category Requirements
The policy states that Meta may take action against an advertiser's account if it determines that the Special Ad Category tool has been misused or that an ad's category has been misrepresented....
Why it matters: This provision establishes that misclassification or misuse of the Special Ad Category designation carries potential account-level consequences beyond individual ad disapproval, creating operational exposure for advertisers whose campaign management processes do not include adequate classification review....
-
Twilio
· Twilio Privacy Notice
The notice deploys TrustArc as its consent management platform, with a consent banner script loaded on page visit and a separate consent wrapper for Segment analytics. Visitor cookie preferences are captured and stored, with consent categories determining which tracking scripts are activated....
Why it matters: This provision establishes the operational mechanism through which Twilio captures and records visitor consent for cookie-based tracking, which is the foundational compliance control for GDPR and ePrivacy obligations applicable to EU visitors and informs CCPA opt-out workflows for California residents....
-
Twilio
· Twilio Privacy Notice
The notice deploys Segment's analytics platform on twilio.com with a TrustArc consent wrapper. The configuration includes 'alwaysLoadSegment: true', which may affect whether Segment loads regardless of visitor consent state, with cookie configuration specifying a 90-day maxage, '.twilio.com' domain scope, and Lax SameSite setting....
Why it matters: This provision establishes Segment as an active data processor on twilio.com with a 90-day cookie window and domain-wide scope. The 'alwaysLoadSegment: true' parameter in the consent wrapper configuration warrants review to determine whether Segment's core library loads prior to or independent of visitor consent, which has direct implications for GDPR and ePrivacy compliance....
-
Twilio
· Twilio Privacy Notice
Google Tag Manager (container GTM-5JLZ694) is deployed on twilio.com and loads synchronously in the page head, enabling activation of additional tracking, analytics, and advertising tags through a centralized tag management container....
Why it matters: Google Tag Manager operates as a tag management system that can load and fire additional third-party scripts and pixels beyond those disclosed individually in the page source. The container GTM-5JLZ694 controls which additional data collection tools are deployed, and its full contents are not disclosed in the privacy notice page source....
-
Monitoring
These provisions have changed before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
-
Twilio
· Twilio Privacy Notice
Visual Website Optimizer (VWO account 1176295) is deployed on twilio.com for A/B testing and behavioral optimization, with a conditional consent handler that reads TrustArc consent category '2' from localStorage to determine whether to initialize VWO with full tracking, limited tracking, or opt-out status....
Why it matters: This provision establishes VWO as an active behavioral tracking and experimentation tool on twilio.com. The consent handler reads a specific TrustArc consent key from localStorage and maps it to VWO initialization states (1=allowed, 2=no consent data found, 3=denied), indicating a consent-conditional loading mechanism for this specific tool....
-
Twilio
· Twilio Privacy Notice
The notice provides a Japanese-language version of the privacy notice at a separate URL (twilio.com/ja-jp/legal/privacy) and includes hreflang metadata indicating the notice is available in English (en-us) and Japanese (ja-jp), suggesting Twilio has provided localized privacy disclosures for at least two jurisdictions....
Why it matters: The availability of region-specific privacy notice versions indicates Twilio has structured its privacy disclosures to address jurisdictional variation, which is relevant for assessing the adequacy of disclosures to users in different markets, including Japan (Act on the Protection of Personal Information) and US/EU markets....
-
Amplitude
· Amplitude Privacy Notice
The policy establishes that Amplitude acts as a data controller for personal information collected through its own website and marketing activities, and as a data processor or service provider when processing data submitted by business customers through the Amplitude platform....
Why it matters: This provision determines which legal obligations, data subject rights workflows, and contractual requirements apply depending on the data processing context. Organizations deploying Amplitude's SDK must assess their own controller responsibilities for end-user personal data processed through the platform, and should ensure a Data Processing Agreement with Amplitude is in place to govern the processor relationship....
-
Amplitude
· Amplitude Privacy Notice
The policy authorizes sharing of personal information with advertising networks, analytics providers, and social media companies for targeted advertising, and discloses an opt-out right for California residents through a designated link or privacy request portal....
Why it matters: This provision establishes Amplitude's participation in targeted advertising data sharing ecosystems and creates an opt-out obligation under CCPA/CPRA for California residents. Under CPRA, sharing personal information for cross-context behavioral advertising constitutes a regulated activity even where no monetary consideration is exchanged....
-
Amplitude
· Amplitude Privacy Notice
The policy reserves the right to use data collected through the Amplitude platform in aggregated or de-identified form for benchmarking, product improvement, and research, with the assertion that such data does not personally identify individuals....
Why it matters: This provision creates a secondary use of platform-processed data beyond the primary service delivery purpose, and the adequacy of the de-identification standard applied is not specified in the document. Under GDPR and CCPA/CPRA, the sufficiency of de-identification or anonymization determinations affects whether data protection obligations continue to apply....
-
Amplitude
· Amplitude Privacy Notice
The policy discloses that personal data of EU/EEA, UK, and Swiss residents may be transferred to the United States and other countries, and states that Standard Contractual Clauses approved by the European Commission are used as the transfer mechanism....
Why it matters: This provision establishes the legal basis for cross-border data transfers from the EU/EEA, UK, and Switzerland to the US, which requires ongoing adequacy and Schrems II compliance assessment. Organizations subject to GDPR must confirm that Amplitude's SCCs are current, include required supplementary measures where applicable, and cover all relevant data flows....
-
Amplitude
· Amplitude Privacy Notice
The policy discloses that residents of nine US states (California, Virginia, Colorado, Connecticut, Texas, Nevada, Oregon, Montana, and New Hampshire) may have rights to access, correct, delete, and opt out of sale, sharing, or targeted advertising with respect to their personal information....
Why it matters: This provision establishes the scope of US state privacy rights Amplitude recognizes and the jurisdictions in which those rights apply, creating a multi-state compliance framework. The specific rights available and associated procedural requirements vary by state, and the policy's single disclosure framework may not capture all state-specific procedural distinctions....
-
Amplitude
· Amplitude Privacy Notice
The policy discloses that Amplitude uses cookies, pixel tags, web beacons, and similar technologies to collect IP addresses, browser type, operating system, referring URLs, pages visited, and visit timestamps on its website for analytics, advertising, and personalization purposes....
Why it matters: This provision establishes the technical mechanisms through which Amplitude collects behavioral and device data from website visitors and authorizes their use for advertising and personalization, which engages cookie consent requirements under EU and UK law and opt-out rights under CCPA/CPRA....
-
Amplitude
· Amplitude Privacy Notice
The policy states that personal information is retained for the duration necessary to provide services, meet legal obligations, resolve disputes, and enforce agreements, after which it will be deleted or anonymized....
Why it matters: This provision establishes Amplitude's data retention framework but does not specify retention periods for particular categories of data, which may be relevant to GDPR Article 5(1)(e)'s storage limitation principle and to CCPA/CPRA's data minimization requirements....
-
Amplitude
· Amplitude Privacy Notice
The policy authorizes sharing of personal information with third-party service providers performing hosting, analytics, payment processing, email delivery, marketing, advertising, customer service, and data enrichment functions, subject to a stated limitation that such providers use data only as necessary for those services....
Why it matters: This provision establishes Amplitude's sub-processor and vendor data sharing framework and the contractual limitation imposed on third-party service providers. The inclusion of data enrichment services as a permitted category may create downstream data use considerations relevant to GDPR's purpose limitation principle and CCPA's service provider requirements....
-
Gumroad
· Gumroad Terms of Service
The agreement requires disputes between users and Gumroad to be resolved through binding individual arbitration rather than court proceedings, and waives participation in class action lawsuits and jury trials. Users may opt out of this arbitration requirement by submitting written notice within 30 days of first agreeing to the terms....
Why it matters: This provision requires all disputes to proceed through individual binding arbitration under California law and the Federal Arbitration Act, precluding class or representative actions and jury trials absent a timely opt-out. The 30-day opt-out window creates a time-sensitive procedural obligation for users who wish to preserve access to court-based dispute resolution....
-
Gumroad
· Gumroad Terms of Service
Suppliers provide a suggested retail price for their products, but the agreement states that Gumroad reserves the right as merchant of record to set the final price at which products are offered to Buyers through the Services. The Supplier's suggested price is not binding on Gumroad....
Why it matters: This provision grants Gumroad unilateral authority to override a Supplier's suggested retail price when reselling the Supplier's digital products, which directly affects the revenue base from which the Gumroad Fee is deducted and the resulting Supplier Fee is calculated. Suppliers operating on the platform as a primary sales channel should account for this pricing authority in their revenue projections....
-
Gumroad
· Gumroad Terms of Service
The agreement authorizes Gumroad to withhold or reduce Supplier payouts by offsetting amounts it determines are owed or reasonably likely to become owed to Gumroad under the Terms of Service, in addition to reserving the right to change the payout settlement schedule at its discretion....
Why it matters: This provision authorizes Gumroad to offset Supplier payouts not only for confirmed obligations but also for amounts it determines are 'reasonably likely to become due,' which creates a forward-looking withholding mechanism without specifying defined triggers, caps, or notice requirements. The settlement schedule is also subject to unilateral change by Gumroad....
-
Gumroad
· Gumroad Terms of Service
The agreement states that Gumroad's services are provided on an 'as is' basis without warranty, as detailed in Section 20. Users agree to this warranty disclaimer as a condition of using the platform....
Why it matters: An 'as is' warranty disclaimer limits the warranties Gumroad provides with respect to service availability, functionality, and fitness for purpose. The practical effect of this clause depends on applicable consumer protection law, which in some jurisdictions limits the extent to which warranty disclaimers can be enforced against consumers....
-
Gumroad
· Gumroad Terms of Service
The agreement requires users to indemnify Gumroad for claims or losses arising from their use of, or inability to use, the Services, as described in Section 19. This indemnification obligation applies to both Suppliers and Buyers....
Why it matters: This provision establishes a user-side indemnification obligation that extends to claims arising from the user's inability to use the services, which is a broader indemnification trigger than provisions limited solely to user misconduct or breach. The practical scope of this obligation depends on the full text of Section 19, which was not fully reproduced in the provided document excerpt....
-
Gumroad
· Gumroad Terms of Service
By entering into the agreement or using the services, users consent to receiving communications from Gumroad and its affiliated companies via email, text message, phone calls, and push notifications, including messages generated by automatic telephone dialing systems. Communications may include account-related notices, promotional content from Gumroad and third-party partners, and industry news....
Why it matters: This provision obtains consent to autodialed calls and text messages through agreement to the Terms of Service, which engages the Telephone Consumer Protection Act (TCPA) and its requirements for prior express written consent for autodialed or prerecorded calls and texts to mobile numbers. The inclusion of third-party partner promotional communications as a covered communication type is operationally relevant for users who did not intend to consent to third-party marketing....
-
Gumroad
· Gumroad Terms of Service
By using Gumroad's payment services, users consent to being bound by Stripe's and PayPal's separate privacy policies and terms of service, and authorize Gumroad, Stripe, and PayPal to share the user's information and payment instructions with third-party payment providers to the extent required to complete transactions....
Why it matters: This provision binds users to the terms of service and privacy policies of two separate third-party payment processors as a condition of using Gumroad's payment services, and authorizes data sharing across Gumroad, Stripe, PayPal, and additional third-party payment providers. Users are subject to the data practices of multiple entities under distinct policy frameworks....
-
Gumroad
· Gumroad Terms of Service
The agreement reserves Gumroad's right to request identity verification information from both Buyers and Suppliers, including Social Security Numbers, bank account details, government-issued identification, and taxpayer identification numbers, for anti-fraud, anti-money laundering, and trade sanctions compliance purposes....
Why it matters: This provision authorizes collection of highly sensitive personal and financial data categories, including Social Security Numbers and bank account information, from both Suppliers and Buyers. The data collection is positioned as discretionary rather than universal, but the categories listed represent the most sensitive class of personal identifiers under US and international privacy frameworks....
-
Gumroad
· Gumroad Terms of Service
The agreement authorizes Gumroad to suspend or terminate a user's account and refuse future service access if it determines that registration information is inaccurate or if it has reasonable grounds to suspect inaccuracy. Gumroad also reserves the right to remove or reclaim usernames at any time and for any reason....
Why it matters: This provision authorizes account suspension or termination based on Gumroad's reasonable suspicion of inaccurate information, without specifying an appeal, notice, or cure process in the excerpted text. For Suppliers, account suspension would interrupt access to payout funds and product listings, creating material operational exposure....
-
Gumroad
· Gumroad Terms of Service
Suppliers grant Gumroad a non-exclusive, worldwide, royalty-free license to their digital products for the duration of the agreement, as described in Section 6.5. The full scope of permitted uses under this license is not fully reproduced in the provided document excerpt....
Why it matters: This provision establishes that Suppliers grant Gumroad a worldwide, royalty-free license to their products as part of the reseller relationship. The full scope of the license, including permitted uses, sublicensing rights, and post-termination obligations, is not determinable from the truncated excerpt provided....
-
Teachable
· Teachable Terms of Use
The agreement requires that most disputes between users and Teachable be resolved through individual binding arbitration rather than court litigation, and prohibits class action or consolidated proceedings....
Why it matters: This provision requires users to pursue claims individually through arbitration, which means disputes cannot be aggregated into class actions. The clause also waives the right to a jury trial for covered disputes. Enforceability of class action waivers may be limited in certain jurisdictions, including California under some consumer protection contexts and EU member states under consumer rights directives....
-
Teachable
· Teachable Terms of Use
Creators grant Teachable a worldwide, royalty-free, non-exclusive license to use, reproduce, adapt, publish, and distribute uploaded content across any current or future media or distribution methods for the purpose of operating the platform....
Why it matters: This provision authorizes Teachable to use creator-uploaded course content, materials, and media across any distribution channel now known or later developed. The license scope is broad in terms of geographic reach and media coverage, though the terms describe its purpose as platform operation....
-
Teachable
· Teachable Terms of Use
Creators are required to defend and financially indemnify Teachable against any third-party claims, damages, or legal costs arising from their content, products, business practices, or violations of the terms....
Why it matters: This provision places the financial burden of third-party claims related to creator content or business practices on the creator rather than the platform. This includes claims arising from course content, product sales, consumer disputes, or regulatory actions connected to the creator's use of the platform....
-
Teachable
· Teachable Terms of Use
The agreement limits Teachable's total financial liability to a user to the greater of $100 or fees paid to Teachable in the preceding twelve months, and excludes liability for indirect, incidental, consequential, or punitive damages....
Why it matters: This provision caps the maximum amount a user can recover from Teachable in any dispute at twelve months of fees paid or $100, whichever is greater, and excludes categories of loss including lost profits, data loss, and goodwill. The practical effect is that creators who lose significant revenue due to platform issues may have limited contractual recourse against Teachable beyond this cap....
-
Teachable
· Teachable Terms of Use
The agreement authorizes Teachable to suspend or terminate any account at any time, for any reason including perceived violations of the terms, without incurring liability to the affected user....
Why it matters: This provision establishes that Teachable retains unilateral authority to suspend or terminate creator accounts, which would interrupt access to course content, student data, revenue streams, and payout processing. The no-liability carve-out interacts with the broader limitation of liability clause....
-
Teachable
· Teachable Terms of Use
The agreement assigns full responsibility for sales tax, VAT, and other transaction-related tax obligations to creators, explicitly stating that Teachable bears no responsibility for determining, collecting, or remitting taxes on creator sales....
Why it matters: This provision places the obligation to determine applicable tax requirements, collect applicable taxes, and remit them to relevant tax authorities entirely on the creator. For creators selling to international audiences, this includes VAT, digital services taxes, and other jurisdiction-specific obligations....
-
Teachable
· Teachable Terms of Use
The agreement prohibits creators from uploading content that infringes intellectual property rights, violates law, is fraudulent or misleading, is defamatory or obscene, promotes discrimination or violence, or promotes illegal activities....
Why it matters: This provision establishes the content standards Teachable uses to evaluate whether creator content is permissible on the platform, and violations can trigger account suspension or termination under the termination clause. The prohibition on misleading or deceptive content is particularly relevant given FTC enforcement focus on online course and coaching marketing claims....
-
Teachable
· Teachable Terms of Use
The agreement delegates payment processing to third-party processors and authorizes Teachable to withhold or reverse creator payouts in cases of fraud, chargebacks, or policy violations according to a payout schedule that Teachable may update....
Why it matters: This provision establishes that creator revenue is subject to withholding or reversal at Teachable's discretion in fraud or chargeback situations, and that payout timing is governed by a schedule that can be modified without contractual renegotiation. Creators should understand that payout eligibility is contingent on ongoing compliance with platform policies....
-
Teachable
· Teachable Terms of Use
The agreement authorizes Teachable to modify the Terms of Use at any time, with notice provided by email, in-platform notification, or updated date. Continued platform use after notice constitutes acceptance of the modified terms....
Why it matters: This provision establishes that Teachable can unilaterally change contractual terms with no fixed notice period required before changes take effect, and that continued platform use constitutes acceptance of new terms. Creators who rely on the platform for business operations may be bound by materially different terms without affirmative consent....
-
Teachable
· Teachable Terms of Use
The agreement designates New York law as the governing law for disputes and requires non-arbitration legal proceedings to be brought exclusively in New York federal or state courts....
Why it matters: This provision requires that any court proceedings not resolved through arbitration be brought in New York courts under New York law, which may impose geographic and legal burden on users outside New York who seek judicial resolution of disputes....
-
Kajabi
· Kajabi Terms of Use
The agreement requires that nearly all disputes between users and Kajabi be resolved through individual binding arbitration rather than court proceedings, and waives the right to bring or participate in class-action lawsuits or class-wide arbitration. Certain dispute types are excluded from this requirement as described in Section 15....
Why it matters: This provision requires that disputes proceed through individual binding arbitration and establishes a contractual waiver of class-action participation, which channels dispute resolution away from court proceedings and consolidates claims into individual arbitration under the rules and forum specified in Section 15....
-
Kajabi
· Kajabi Terms of Use
The agreement defines Content broadly to include creator intellectual property, course materials, media, communications, personal data, and AI-generated outputs, and grants Kajabi a license to use this content for the purpose of operating and improving the services. The exact license scope, including whether it is royalty-free, worldwide, and sublicensable, is stated in the body of the terms beyond the definition section....
Why it matters: The breadth of the Content definition, which includes trademarks, copyrighted works, personal data, and AI-generated outputs, means the associated license grant applies to a wide range of creator-owned intellectual property and data submitted to the platform....
-
Kajabi
· Kajabi Terms of Use
The agreement requires account holders to be at least 18 years old, or the legal age of majority in their jurisdiction, and restricts platform access to individuals meeting this age threshold....
Why it matters: This provision establishes a minimum age threshold for account creation that applies globally, with a jurisdiction-specific alternative referencing local age of majority, which affects eligibility and creates an age verification obligation at account signup....
-
Kajabi
· Kajabi Terms of Use
The agreement incorporates the Acceptable Use Policy by reference as a binding contractual obligation, meaning violations of the AUP constitute violations of the Terms and can trigger account enforcement, suspension, or termination....
Why it matters: Incorporation of the AUP by reference makes that document's content and enforcement provisions an operative part of the contract; account suspension or termination for AUP violations is available to Kajabi under the combined terms structure....
-
Kajabi
· Kajabi Terms of Use
The agreement's definition of Content expressly includes outputs generated by Kajabi's generative AI services in response to user queries, meaning AI-generated material is treated as user Content and subject to the same license grant and policy obligations as other creator content....
Why it matters: By classifying AI-generated outputs as user Content, the terms apply the content license grant and Acceptable Use Policy obligations to material produced by Kajabi's own AI tools at the user's direction, which has implications for IP ownership, licensing, and acceptable use enforcement....
-
Kajabi
· Kajabi Terms of Use
The agreement incorporates the AUP, Privacy Notice, and any other applicable policies by reference, and states that new features and tools will automatically fall under the Terms without requiring a separate agreement. The current version of the Terms is maintained at a specified URL....
Why it matters: This provision establishes that the contractual framework is defined by a set of external documents that may be updated over time, and that new platform features are automatically governed by the existing Terms, which means the scope of the agreement can expand as the platform evolves....
-
Kajabi
· Kajabi Terms of Use
The agreement binds not only the individual signing up but also the business entity they represent and all affiliates of that entity, meaning the Terms apply across the full organizational structure of any business using the platform....
Why it matters: By extending the definition of the contracting party to include all affiliates of a represented business, this provision means that the arbitration clause, content license, and all other obligations apply to the broader corporate group, not solely the individual account holder or primary entity....
-
ActiveCampaign
· ActiveCampaign Terms of Service
The terms authorize ActiveCampaign to suspend or terminate account access immediately and without advance notice for breaches of the Terms of Service or other specified reasons, ending the customer's right to use the platform at that moment....
Why it matters: This provision establishes that account access can be discontinued without a prior notification requirement, which creates operational continuity risk for business customers whose marketing, CRM, or automation workflows depend on uninterrupted platform access....
-
ActiveCampaign
· ActiveCampaign Terms of Service
The agreement excludes ActiveCampaign's liability for indirect, consequential, incidental, and punitive damages, and caps total financial liability to the customer at fees paid in the prior twelve months....
Why it matters: This provision limits the maximum financial recovery available to customers for claims against ActiveCampaign to twelve months of subscription fees, regardless of the scale of operational or data-related losses incurred, which is a material consideration for enterprise customers with significant revenue or data exposure tied to the platform....
-
ActiveCampaign
· ActiveCampaign Terms of Service
The agreement requires customers to defend and indemnify ActiveCampaign against all third-party claims, damages, and legal costs arising from the customer's use of the platform, breach of the terms, or content the customer posts or transmits....
Why it matters: This provision places financial and legal defense obligations on the customer for a broad range of claims arising from platform use, including claims by third parties such as the customer's own contacts, which is operationally significant for organizations that use the platform to process large volumes of personal data or conduct marketing campaigns....
-
ActiveCampaign
· ActiveCampaign Terms of Service
The agreement requires customers to warrant that they hold all necessary rights to any data they upload, including contact personal data, and places sole responsibility on the customer for obtaining required consents and complying with anti-spam and data protection laws....
Why it matters: This provision allocates the legal and compliance burden for contact list legality, consent documentation, and anti-spam law adherence entirely to the customer, creating direct regulatory exposure for customers whose contact acquisition or consent management practices are not compliant with GDPR, CAN-SPAM, CASL, or other applicable frameworks....
-
ActiveCampaign
· ActiveCampaign Terms of Service
The agreement states that customers retain ownership of their data but grants ActiveCampaign a worldwide, royalty-free license to use, reproduce, modify, and adapt that data for the purposes of providing and improving the platform....
Why it matters: The license scope includes improving and developing the Services, which is broader than providing the contracted service alone and may encompass use of customer data, including contact data, for product development or machine learning purposes, subject to the limitations stated in the Privacy Policy and Data Processing Agreement....
-
ActiveCampaign
· ActiveCampaign Terms of Service
The terms authorize ActiveCampaign to modify the Terms of Service at its sole discretion, with an attempt to provide 30 days notice for material changes; continued use of the platform after the effective date constitutes acceptance of the revised terms....
Why it matters: This provision allows the contractual terms governing platform access and data use to be updated unilaterally, with the obligation to provide advance notice characterized as an attempt rather than a guarantee, and continued use treated as binding acceptance without affirmative consent....
-
ActiveCampaign
· ActiveCampaign Terms of Service
The agreement establishes that subscription fees are charged in advance on an auto-renewing basis, with no refunds unless required by law or explicitly provided in the terms, and cancellation must occur before the end of the current billing period to avoid the next charge....
Why it matters: The non-refundable, auto-renewal billing structure means that customers who do not cancel before a renewal date will be charged for the next subscription period without recourse to a refund under the stated terms, which is operationally significant for customers managing annual or multi-period subscriptions....
-
ActiveCampaign
· ActiveCampaign Terms of Service
The agreement incorporates the Acceptable Use Policy by reference, binding customers to its restrictions as part of the Terms of Service, with violations of the AUP constituting grounds for account termination under the suspension provisions....
Why it matters: Incorporation by reference means that the operational restrictions governing permitted platform use, including email content standards, prohibited industries, and sending behavior requirements, are contractually binding even though they are contained in a separate document that may be updated independently....