-
Stripe
· Stripe Acceptable Use Policy
The policy prohibits users from transferring or moving software, technology, or services, including Stripe's software and encryption software, across country borders in any manner not permitted by applicable law....
Why it matters: This provision places an affirmative obligation on users to comply with applicable export control laws when transferring or moving any software or technology associated with the End User Services, with specific reference to encryption software, which is subject to export licensing requirements under U.S. and other national export control regimes....
-
ADP
· ADP Privacy Statement
The policy states that ADP processes client employee HR, payroll, and benefits data as a data processor acting under employer instruction, and directs employees to contact their employer to exercise data rights rather than contacting ADP....
Why it matters: This provision establishes that the employing organization, not ADP, bears the primary data controller obligations for employee data processed through ADP's platforms, creating a structural redirection of individual data subject rights requests and determining which entity is accountable under GDPR and equivalent frameworks....
-
ADP
· ADP Privacy Statement
The policy states that ADP processes payroll, benefits, HR, and tax data belonging to client employees in its capacity as a data processor, acting under the instruction of the employing organization as data controller....
Why it matters: This provision identifies the specific categories of personal data processed by ADP as a processor, which include payroll, tax, benefits, and HR records, categories that carry heightened sensitivity in some jurisdictions and that trigger specific regulatory obligations regarding accuracy, retention, and security....
-
Walgreens
· Walgreens Privacy Policy
The policy discloses that Walgreens shares personal information with advertising partners in ways that may qualify as a sale or sharing for cross-context behavioral advertising under California law, and states that California residents may opt out of this sharing....
Why it matters: This provision triggers opt-out rights under CCPA/CPRA for California residents and requires Walgreens to provide a clear and accessible opt-out mechanism, including recognition of the Global Privacy Control signal. The provision also implicates CPRA's annual data minimization obligations for data shared with advertising partners....
-
Walgreens
· Walgreens Privacy Policy
The policy states that Walgreens collects prescription information, health conditions, pharmacy interaction data, OTC purchase history, and health-related browsing activity across its digital and physical service channels....
Why it matters: This provision identifies a broad category of sensitive health-related data collected across both HIPAA-regulated pharmacy operations and non-HIPAA retail and digital channels. The policy does not consistently delineate which data flows are governed by HIPAA Notice of Privacy Practices and which fall solely under this privacy policy, creating potential gaps in regulatory coverage for health-adjacent data....
-
Monitoring
These provisions have changed before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
-
Walgreens
· Walgreens Privacy Policy
The policy identifies sensitive personal information categories collected by Walgreens, including health data, financial information, precise geolocation, and account credentials, and states that California residents may request limitation of use to service-necessary purposes....
Why it matters: Under CPRA, sensitive personal information is subject to heightened use limitations and consumers have a statutory right to limit its use beyond service delivery. This provision establishes the right but the operational scope of what constitutes service-necessary use for health and pharmacy data in an integrated retail-pharmacy context requires evaluation....
-
Walgreens
· Walgreens Privacy Policy
The policy authorizes sharing of personal information with advertising, analytics, and social media partners for targeted advertising and campaign measurement, and states these partners use tracking technologies including cookies and pixel tags on Walgreens services....
Why it matters: This provision authorizes third-party tracking technology deployment on Walgreens platforms, enabling advertising and analytics partners to independently collect device identifiers, browsing activity, and interaction data. The scope of data accessible to third-party pixels and cookies deployed on health-related pages creates specific regulatory exposure under state health data laws and FTC guidance....
-
ElevenLabs
· ElevenLabs Privacy Policy
ElevenLabs collects voice recordings and AI-generated voice models submitted by users and states that this data may be used to train and improve its AI systems, with consent obtained where legally required....
Why it matters: This provision directly implicates biometric privacy statutes in multiple U.S. jurisdictions, including Illinois BIPA, which requires opt-in written consent before collecting biometric identifiers, and may engage GDPR Article 9 if voice data is processed to uniquely identify individuals. The scope of consent required, and whether existing consent mechanisms satisfy applicable statutory standards, warrants legal evaluation....
-
Skillshare
· Skillshare Terms of Service
The agreement requires users and Skillshare to resolve disputes through individual binding arbitration administered by JAMS, rather than through court proceedings, and prohibits participation in class action lawsuits or class-wide arbitration....
Why it matters: This provision requires disputes to proceed through individual JAMS arbitration under New York law, which determines the procedural forum and applicable rules for any legal claims between users and Skillshare. The class action waiver component means that users cannot aggregate claims with other users, which may be relevant to the practical viability of small-value claims....
-
Skillshare
· Skillshare Terms of Service
The agreement prohibits users from participating in or initiating class action lawsuits or class-wide arbitration proceedings against Skillshare....
Why it matters: This provision, combined with the mandatory arbitration clause, requires that any legal claims against Skillshare be pursued individually. This applies to all users globally, including those who may have transitioned from Superpeer following the acquisition....
-
Skillshare
· Skillshare Terms of Service
Users grant Skillshare a worldwide, royalty-free, sublicensable, and transferable license to use, reproduce, distribute, create derivative works of, and publicly display user-submitted content in connection with operating and promoting the platform and Skillshare's business....
Why it matters: This provision authorizes Skillshare to use, reproduce, modify, and distribute all user-submitted content, including course materials, videos, images, and other instructional assets, for business purposes beyond the original upload context. The sublicensable and transferable nature of the license means third parties may receive rights to user content through Skillshare's sublicensing....
-
Roblox
· Roblox Privacy Policy
The policy states that Roblox collects IP addresses and unique device identifiers from users under 13 for specified internal operations including contextual advertising frequency capping, authentication, and security, without requiring separate parental consent for these identifiers under the COPPA internal operations exception....
Why it matters: This provision invokes the COPPA internal operations exception to justify collecting persistent identifiers from children without separate verifiable parental consent. The scope of permitted uses, including contextual advertising frequency capping, may warrant evaluation against FTC guidance on what constitutes permissible internal operations under COPPA....
-
Roblox
· Roblox Privacy Policy
The policy states that Roblox may collect facial images including selfies from users for the purpose of estimating age, with those images deleted upon completion of the age assurance process....
Why it matters: This provision discloses collection of facial images for age estimation purposes, which may constitute biometric data collection under applicable state and national laws including Illinois BIPA, Texas CUBI, Washington My Health MY Data Act, and GDPR's special category data provisions. The stated deletion practice upon process completion does not eliminate the collection itself as a regulatory trigger in jurisdictions with strict biometric data consent requirements....
-
Rumble
· Rumble Terms of Service
Uploading content to Rumble grants the platform a worldwide, royalty-free, sublicensable license to use, reproduce, modify, publish, display, and distribute that content across all current and future media formats, including through third-party syndication and broadcast partners....
Why it matters: This provision authorizes Rumble to sublicense uploaded content to third-party media and distribution partners without requiring per-transaction creator approval, and the license is perpetual and irrevocable, meaning it persists even if the creator removes the content or closes their account....
-
Rumble
· Rumble Terms of Service
Uploading content to Rumble constitutes the uploader's appointment of Rumble as their non-exclusive agent, authorizing Rumble to negotiate and execute content licensing agreements with third parties including television networks and digital media platforms on the creator's behalf....
Why it matters: This provision establishes a formal agency relationship under which Rumble has authority to bind creators to third-party licensing agreements without requiring individual creator approval for each transaction, within the scope of the revenue share structure....
-
Rumble
· Rumble Terms of Service
All disputes between users and Rumble must be resolved through individual binding arbitration under U.S. Federal Arbitration Act governance, with no right to jury trial and no participation in class, representative, or consolidated proceedings....
Why it matters: This provision requires all disputes to proceed through individual binding arbitration rather than court proceedings, and the class action waiver means users cannot aggregate claims with other users regardless of the nature or scale of the dispute....
-
Rumble
· Rumble Terms of Service
Users and Rumble may only bring claims against each other on an individual basis and may not act as a plaintiff or class member in any class or representative proceeding....
Why it matters: This provision, in conjunction with the mandatory arbitration clause, requires that any claims against Rumble be pursued individually rather than collectively, regardless of whether multiple users may share the same grievance....
-
OpenRouter
· OpenRouter Terms of Service
The agreement establishes that organizational accounts are controlled by an Admin User who configures service settings for all Authorized Users within the organization, including enabling or disabling prompt logging, chat logging, zero data retention, and model training at the organizational level....
Why it matters: This provision delegates data handling configuration, including prompt logging and model training enablement, to organizational Admin Users rather than to individual Authorized Users. The data handling posture of Authorized Users, including whether their prompts are logged or used for model training, is determined by Admin User settings rather than individual consent....
-
OpenRouter
· OpenRouter Privacy Policy
The policy states that OpenRouter does not control or bear responsibility for how large language model providers handle user Inputs or Outputs transmitted through the Service, including potential use for model training by those providers....
Why it matters: This provision establishes that personal data or sensitive content embedded in user Inputs may be processed by third-party AI providers under terms and data practices that OpenRouter neither governs nor warrants, creating a compliance boundary that enterprise and regulated-industry customers should evaluate independently....
-
Canva
· Canva Terms of Use
US users are required to resolve most disputes with Canva through binding individual arbitration administered by the American Arbitration Association, and waive the right to jury trial and participation in class action or representative proceedings, with limited exceptions for small claims court and intellectual property injunctive relief....
Why it matters: This provision requires that disputes between US users and Canva proceed through individual arbitration rather than court litigation or class proceedings, which limits the procedural mechanisms available to users for resolving claims against Canva. The clause establishes the AAA Consumer Arbitration Rules as the governing procedural framework and permits users to opt out within 30 days of account creation or receipt of notice of a material change....
-
Stripe
· Stripe Restricted Businesses List
The policy establishes a set of business categories that are entirely prohibited from using Stripe's services, and acceptance of the Stripe Services Agreement constitutes an affirmative representation by the user that their business does not fall within any prohibited category....
Why it matters: This provision requires all Stripe users to represent, at the point of contracting, that their business does not fall within any prohibited category; a subsequent determination by Stripe that a business is prohibited can trigger account termination under the Services Agreement and may constitute a breach of the user's representations....
-
Stripe
· Stripe Restricted Businesses List
Businesses in the restricted category must obtain Stripe's prior written approval before accepting the Services Agreement or using any Stripe services; failure to obtain this approval before onboarding constitutes a violation of the policy....
Why it matters: This provision establishes a pre-clearance obligation that must be satisfied before any payment processing commences; businesses that onboard without obtaining written approval while operating in a restricted category are in violation of the terms regardless of whether their business would otherwise qualify for approval....
-
Stripe
· Stripe Restricted Businesses List
The policy prohibits or restricts businesses that provide adult content, pornography, adult video-on-demand, adult escort services, prostitution, or adult live chat features from using Stripe's payment processing services, with specific treatment depending on the jurisdiction and product type....
Why it matters: This provision directly affects platform businesses that host or facilitate adult content monetization, requiring them to assess whether their model falls within the prohibited or restricted category before processing payments through Stripe; operators of platforms in this space that have not obtained written approval face the risk of account termination....
-
Stripe
· Stripe Restricted Businesses List
The policy restricts or prohibits gambling-related businesses including online and offline gambling operators, gambling software providers, lottery and raffle operators, fantasy sports platforms with cash prizes, and sweepstakes from using Stripe without prior written approval or at all depending on the specific activity....
Why it matters: This provision directly affects the growing online gambling, gaming, and fantasy sports sectors, requiring operators to obtain pre-clearance from Stripe before processing payments; the inclusion of fantasy sports with cash prizes and sweepstakes is operationally significant for businesses that may not self-identify as gambling operators....
-
Stripe
· Stripe Restricted Businesses List
The policy prohibits or restricts financial services businesses operating without the required licenses or regulatory approvals in their jurisdiction from using Stripe's payment processing, including unlicensed money transmitters and cryptocurrency exchanges....
Why it matters: This provision requires financial services businesses to hold applicable licenses before accessing Stripe's payment infrastructure; businesses in the cryptocurrency or payments space that have not yet obtained required licenses in all operating jurisdictions are ineligible to use Stripe's services in those markets....
-
Writer
· Writer Terms of Service
This provision requires users and Writer to resolve disputes through binding individual arbitration administered by the AAA, and prohibits participation in class action lawsuits or class arbitrations against Writer....
Why it matters: This clause requires disputes to proceed through individual arbitration rather than court litigation, and precludes users from joining or initiating class action proceedings against Writer. The enforceability of this provision may vary by jurisdiction, including under California law and EU consumer protection frameworks....
-
Writer
· Writer Terms of Service
This provision caps Writer's total liability for any claim arising from the terms or use of the services at the amount the user paid to Writer in the 12 months prior to the claim....
Why it matters: This clause establishes a ceiling on Writer's financial exposure for any single claim or aggregate claims, which may be materially insufficient for enterprise customers whose use cases involve high-value business processes or regulated activities. The phrase 'to the maximum extent permitted by law' acknowledges that applicable law may constrain this cap in certain jurisdictions....
-
Writer
· Writer Terms of Service
This provision grants Writer a non-exclusive, worldwide, royalty-free license to use, reproduce, adapt, modify, publish, and distribute user-submitted content across any media or distribution method for the purposes of providing and improving the platform....
Why it matters: The license scope includes the right to use content to improve the services, which may encompass use of submitted content to train or refine Writer's AI models. The phrase 'any and all media or distribution methods now known or later developed' is broad in temporal and channel scope. Enterprise customers submitting confidential business information should evaluate this license against their data governance and confidentiality obligations....
-
Writer
· Writer Terms of Service
This provision disclaims all implied and express warranties for the Writer platform, including warranties of accuracy, reliability, fitness for a particular purpose, and uninterrupted service availability, and states that Writer makes no warranty regarding the accuracy or completeness of AI-generated content....
Why it matters: The disclaimer of accuracy and reliability warranties is particularly significant for enterprise customers deploying Writer in high-stakes use cases such as clinical trials, financial research, or legal document generation, as referenced in Writer's own platform description. Under this clause, users assume risk for reliance on AI-generated outputs....
-
Amazon
· Amazon Conditions of Use
This provision requires users and Amazon to resolve disputes through binding individual arbitration rather than court litigation, and prohibits class or representative actions. An exception exists for qualifying small claims court matters....
Why it matters: This clause establishes binding individual arbitration as the exclusive dispute resolution mechanism for claims arising from Amazon services, and the class action waiver prohibits users from joining or initiating class proceedings. The provision includes a 30-day opt-out window from the date of first service use or material amendment....
-
Amazon
· Amazon Conditions of Use
This provision caps Amazon's total financial liability to a user for any claim at the greater of the amount the user paid Amazon in the prior 12 months or $100, and excludes indirect, consequential, punitive, and exemplary damages....
Why it matters: This clause establishes a financial ceiling on Amazon's liability exposure per user claim and excludes entire categories of damages. The cap may be practically low for users who sustained losses exceeding amounts paid to Amazon or who did not make recent payments....
-
Threads
· Threads Privacy Policy
The policy authorizes Meta to combine data collected on Threads with data from Facebook, Instagram, and other Meta-family products, as well as third-party partner data, to deliver personalized content and targeted advertising across its platforms....
Why it matters: This provision establishes that activity data generated on Threads is not siloed within the Threads product but may be combined with data from other Meta platforms and third-party sources to build advertising profiles and inform ad targeting across Meta's ecosystem. The scope of this combination affects users regardless of whether they actively use other Meta products....
-
Wise
· Wise Terms of Use
The agreement requires users and Wise to resolve all disputes through individual binding arbitration rather than court proceedings, with limited exceptions for small claims and intellectual property injunctions....
Why it matters: This provision requires disputes to proceed through JAMS individual arbitration, which forecloses court litigation as the default dispute resolution mechanism for claims arising from account use, transactions, or agreement interpretation....
-
Wise
· Wise Terms of Use
The agreement prohibits users from participating in class action lawsuits or representative proceedings against Wise, requiring all claims to be brought individually....
Why it matters: This provision requires that any claim against Wise be brought on an individual basis, which means users cannot join or initiate class or representative actions arising from common grievances related to the service....
-
Wise
· Wise Terms of Use
The agreement caps Wise's total financial liability to any individual user at the greater of fees paid to Wise in the prior 12 months or $100, regardless of the type or scale of the claim....
Why it matters: This provision establishes a ceiling on Wise's monetary exposure to individual users that, for users who paid minimal fees, could be as low as $100, regardless of the amount of any disputed transaction or loss....
-
Luma AI
· Luma AI Terms of Service
Users on free-tier plans grant Luma a perpetual, irrevocable license to publicly display, reproduce, distribute, create derivative works of, and publicly perform their uploaded content across any media formats and channels, including for AI model training and product development. This license is permanent and irrevocable with respect to Input already incorporated into Luma's systems....
Why it matters: This provision establishes that free-tier users grant rights substantially broader than the paid-tier license, including public display and distribution rights over user-submitted content in any media format. The perpetual and irrevocable nature of the license as applied to already-incorporated Input means these rights persist regardless of subsequent account deletion or plan changes....
-
Luma AI
· Luma AI Terms of Service
The agreement states that deleting a Luma account does not terminate the licenses granted over Input or Output that Luma has already incorporated into its systems, AI models, or aggregated data before the deletion request was made....
Why it matters: This provision establishes that the account deletion right does not function as a complete data rights mechanism where Input has already been used in model training or aggregated data. The operational scope of this carve-out depends on Luma's internal data pipeline timelines, which are not disclosed in the document....
-
Luma AI
· Luma AI Terms of Service
The agreement requires that most disputes between users and Luma be resolved through binding individual arbitration rather than court proceedings, and states that both parties waive the right to a jury trial and to participate in class action or representative proceedings....
Why it matters: This provision requires disputes to proceed through individual arbitration rather than court litigation, and prohibits class action participation. The agreement references certain exceptions in Section 16.2, though the full text of those exceptions was not available in the provided document excerpt....
-
Luma AI
· Luma AI Terms of Service
The agreement disclaims all warranties and liability for third-party AI tools integrated into the Services, including actions taken by those tools on behalf of users when acting as virtual agents interacting with the internet or other systems....
Why it matters: This provision establishes that when Luma's virtual agents or third-party AI tools take actions on behalf of users (such as interacting with external systems or the internet), all risk and liability for those actions rests entirely with the user. The scope of potential actions is defined broadly to include any activity enabled through settings or prompts....
-
Luma AI
· Luma AI Terms of Service
The agreement states that Luma's Services are not HIPAA-compliant, that Luma does not function as a HIPAA Business Associate, and that Luma accepts no liability for use of the Services with prohibited data categories or for high-risk activities....
Why it matters: This provision explicitly excludes healthcare-related data use cases from the scope of the Services and disclaims all liability for prohibited data or high-risk activity use, which may affect healthcare-adjacent organizations that consider using the platform for clinical, administrative, or research purposes....
-
Oura
· Oura Privacy Policy
When a user consents to share their Oura health and biometric data with a Data Recipient (employer, researcher, coach, doctor, or other entity) via the Oura Platform, that recipient becomes an independent data controller, and Oura's direct privacy obligations do not govern the recipient's subsequent processing of that data....
Why it matters: This provision establishes that Oura's privacy obligations cease to directly govern user health data once it is shared with a Data Recipient, shifting data controller responsibility to the receiving entity. Compliance teams evaluating employer wellness deployments or research partnerships should assess whether the consent mechanism presented to users meets applicable standards for valid, freely given consent, particularly under GDPR Article 9 in employment contexts....
-
Google Gemini
· Gemini Apps Privacy Notice
The notice states that even after a user deletes their Gemini Apps Activity, reviewer copies of conversations may be retained by Google for up to three years under applicable retention policies....
Why it matters: This provision establishes that the user-initiated deletion of Gemini Apps Activity does not result in immediate or complete deletion of conversation data, as reviewer copies are retained on a separate retention schedule of up to three years. This creates a discrepancy between the deletion action available to users and the actual data lifecycle that compliance teams must account for when evaluating deletion request workflows....
-
OpenAI
· OpenAI Business Terms
The agreement requires users and OpenAI to resolve most disputes through binding individual arbitration rather than through court proceedings, and the scope of this requirement includes disputes about the arbitration clause itself....
Why it matters: This provision requires that covered disputes proceed through individual arbitration administered under specified rules, and it delegates questions of the clause's own enforceability to the arbitrator rather than a court. The provision includes a 30-day opt-out mechanism for users who do not wish to be bound by arbitration....
-
OpenAI
· OpenAI Business Terms
The agreement prohibits users from bringing or participating in class action or representative action lawsuits against OpenAI, requiring any claims to be brought individually....
Why it matters: This provision, combined with the arbitration clause, requires that each user pursue any claim against OpenAI individually rather than as part of a group proceeding. This applies to both arbitration and any court proceedings where the arbitration clause is found inapplicable....
-
Whatnot
· Whatnot Terms of Service
The agreement requires all disputes between users and Whatnot to be resolved through binding arbitration rather than court litigation, with a limited exception for intellectual property claims seeking injunctive relief....
Why it matters: This provision requires users to submit disputes to individual binding arbitration under AAA rules, excluding the option of court proceedings for most claim types, and operates alongside the class action waiver to limit collective or representative claims....
-
Whatnot
· Whatnot Terms of Service
The agreement requires users and Whatnot to bring any claims only in an individual capacity, prohibiting participation in class action or representative action proceedings....
Why it matters: This clause, in conjunction with the mandatory arbitration provision, requires all claims to proceed individually, which may affect the practical ability of users to pursue low-value claims where individual arbitration costs may be disproportionate to potential recovery....