Provisions Index

Stripe provides rights to access, correct, delete, restrict, or port your personal data, and allows you to object to certain processing — accessible through Stripe's Privacy Center or by emailing privacy@stripe.com....

Why it matters: Knowing and exercising these rights is the primary mechanism consumers have to control how Stripe uses their data, including requesting deletion or objecting to profiling for fraud prevention purposes....

Stripe keeps your personal data for as long as it needs to — which can be many years — to meet legal requirements like anti-money laundering rules, even after you stop using Stripe services....

Why it matters: Even if you request deletion of your data, Stripe may retain it for extended periods to comply with financial regulations, meaning your right to erasure is limited in the financial services context....

Stripe may send you marketing emails about its products and services, but you can unsubscribe at any time using the link in the email or by contacting privacy@stripe.com....

Why it matters: Stripe uses your contact information collected during payment processing or account creation to send promotional messages, and you need to actively opt out rather than being opted out by default....

Stripe shares your personal data with its affiliated companies and with outside vendors who help run its services — including analytics companies, marketing firms, and fraud prevention services....

Why it matters: Your personal data flows to Stripe's corporate affiliates and numerous third-party vendors, each of which has its own data practices and security posture, creating a broad data exposure footprint....

Pinterest states that it may use your personal data, including your activity and content on the platform, to train and improve its artificial intelligence and machine learning models....

Why it matters: Your personal browsing habits, pins, and interactions could be used to train AI systems, which raises concerns about consent and the long-term use of your data beyond the original purpose....

Pinterest shares your personal data with advertisers and advertising partners to deliver targeted ads based on your behavior both on and off the Pinterest platform....

Why it matters: Your browsing history and activity — including on other websites — can be used to target you with ads, which many consumers find intrusive and are unaware is happening....

Pinterest transfers your personal data to the United States and other countries, which may have different data protection standards than your home country....

Why it matters: If you are located in the EU, UK, or other regions with strong privacy laws, your data may be sent to countries with weaker protections, which carries privacy risks....

Pinterest collects data about people who have never signed up for Pinterest, through cookies, pixels, and other tracking technologies embedded on third-party websites....

Why it matters: Even if you have never created a Pinterest account, the company may be building a profile about your online behavior using tracking tools placed on other websites....

Pinterest provides different privacy rights depending on where you live — EU/EEA/UK users have the most comprehensive rights under GDPR, while US users' rights vary by state, with California residents having the broadest US rights....

Why it matters: The rights you have over your personal data — including the ability to delete it, access it, or stop it being shared — depend heavily on where you live, meaning many users worldwide have significantly fewer protections....

Pinterest retains your personal data for as long as it considers necessary for business purposes, which may extend beyond the period you actively use the platform....

Why it matters: Your data may be kept by Pinterest for an indefinite or extended period even after you stop using the service, limiting your control over your personal information....

Pinterest states its service is not directed at children under the age of 13 (or a higher age in some regions), and that it does not knowingly collect personal data from children....

Why it matters: While Pinterest prohibits use by young children, the platform's age verification mechanisms are limited, meaning younger users may still access the service and have their data collected....

Pinterest shares your personal data with a range of third parties including advertisers, analytics companies, business partners, and service providers who may use it for their own purposes....

Why it matters: Once your data is shared with third parties, Pinterest's privacy policy no longer governs how those parties use your information, meaning you have less control over your personal data....

Pinterest uses cookies, pixels, and similar tracking technologies to collect data about your behavior on and off Pinterest, and to enable advertising and analytics functions....

Why it matters: Cookies and trackers allow Pinterest and its partners to monitor your online behavior extensively, including on websites that have nothing to do with Pinterest, building a detailed profile about you....

Pinterest infers information about your interests, preferences, and characteristics from your activity, which may include sensitive categories such as health interests, political views, or religious beliefs....

Why it matters: Pinterest can build detailed profiles about sensitive aspects of your life based on what you search, save, and click — even if you never explicitly share this information....

Microsoft may use content you generate and interactions you have with Copilot and other AI-powered services to improve and train its AI models....

Why it matters: Your conversations, prompts, and outputs in AI tools like Copilot may contribute to training future AI systems, raising questions about the privacy of sensitive information shared in those sessions....

Microsoft combines data collected across different products and services — such as Bing searches, Windows activity, and Xbox usage — to build a profile of your interests and serve you targeted advertisements....

Why it matters: Data from completely different parts of your digital life is merged to target you with ads, which means your activity in one Microsoft product can influence what you see in others, with limited transparency into how this profile is built....

Microsoft generates inferences about your interests, preferences, and behaviour based on how you use their products, even if you never directly provided that information....

Why it matters: Microsoft can build a detailed profile about you from passive usage patterns — meaning data you never consciously shared can be used to make assumptions about your interests, lifestyle, or personal circumstances....

Microsoft requires parental or guardian consent before collecting personal data from children under the applicable age of digital consent (13 in the US, higher in some countries), and offers family safety tools to manage children's accounts....

Why it matters: Children using Microsoft products like Xbox or Microsoft 365 Education may have their data collected and processed, and parents need to actively manage family accounts to ensure appropriate privacy protections are in place....

You have the right to access the personal data Microsoft holds about you, request that it be corrected or deleted, and in some regions export a copy of your data....

Why it matters: These rights give consumers meaningful control over their personal information, but exercising them requires knowing where and how to submit requests — and some rights may be limited depending on the product or your location....

Microsoft may transfer your personal data to countries outside your own, including the United States, where data protection laws may differ from those in your home country....

Why it matters: If you are in the EU, UK, or another jurisdiction with strong privacy laws, your data may be processed in countries with fewer legal protections unless specific transfer safeguards are in place....

Microsoft collects certain sensitive categories of personal data, including health-related information and in some products biometric data, subject to additional protections described in the Consumer Health Data Privacy Policy....

Why it matters: Health and biometric data are among the most sensitive categories of personal information, and their collection by a technology company with broad data-sharing practices warrants careful scrutiny, particularly for users of health-adjacent features....

Microsoft shares your personal data with affiliates, subsidiaries, vendors, advertisers, and other third parties for purposes including service delivery, advertising, and legal compliance....

Why it matters: Your data does not stay solely with Microsoft — it flows to a wide ecosystem of partners and vendors, which expands the number of organisations that may process your personal information....

Microsoft automatically collects diagnostic and usage data from Windows and other products, including information about how you use your device, application crashes, and system performance....

Why it matters: Diagnostic data collection is largely automatic and enabled by default, meaning consumers passively share detailed device and usage information with Microsoft unless they actively reduce the level of data sharing in their settings....

Microsoft collects precise and coarse location data from your devices when location services are enabled, and may use this data for services, advertising, and product improvement....

Why it matters: Location data is highly sensitive and can reveal where you live, work, worship, or receive medical care; consumers should understand that location access granted to one Microsoft service may benefit multiple Microsoft products....

Snapchat collects your precise GPS location when you use certain features, and may also infer your location from other signals like your IP address even when you haven't granted location permission....

Why it matters: Precise location tracking can reveal sensitive information about your daily routine, home address, workplace, religious attendance, and medical visits....

Snapchat shares your personal data — including identifiers, interests, and behavioural data — with advertisers and advertising partners to enable targeted advertising on and off the platform....

Why it matters: Your personal information is shared broadly with third-party advertising networks, meaning your data profile extends well beyond Snapchat's own platforms....

Snapchat collects the names and phone numbers from your device's contact list if you grant permission, even for people who are not Snapchat users....

Why it matters: This means third parties who have not agreed to Snapchat's terms and have no relationship with Snap have their contact information collected and stored by the company....

Even after you delete Snaps or messages, Snapchat may retain copies of this content on its servers for a period of time before permanent deletion, and some data may be retained for legal or business purposes....

Why it matters: Content you believe has disappeared may still exist on Snapchat's servers temporarily, and certain data associated with your account may be kept even after you delete your account....

Snapchat's services are not directed at children under 13, and users must be at least 13 years old to use the platform, with some features requiring users to be older....

Why it matters: Despite age restrictions, minors may access the platform, and the policy's data collection and advertising practices raise concerns under laws specifically designed to protect children's data....

Snapchat may transfer your personal data to the United States and other countries that may not have the same level of data protection as your home country....

Why it matters: For users in the EEA, UK, and other regions with strong data protection laws, transferring data internationally can reduce the legal protections that apply to your personal information....

Snapchat provides users with rights to access a copy of their personal data, request deletion of their data, and in some regions, request portability of their data to another service....

Why it matters: These rights give you meaningful control over your personal information, but exercising them typically requires submitting formal requests and may be subject to legal exceptions....

Snapchat infers information about your interests, demographics, and characteristics based on your activity and uses this inferred data to build an advertising profile and serve targeted ads....

Why it matters: Inferred data can include sensitive inferences about your health, political views, or lifestyle that you never directly shared with Snapchat, which are then used for commercial purposes....

Snapchat may disclose your personal data to law enforcement, government authorities, or third parties when required by law, legal process, or to protect the safety of users or the public....

Why it matters: Your private messages, location history, and account data can be disclosed to authorities in response to legal requests, including subpoenas, court orders, or national security demands....

When you delete your Snapchat account, Snap retains certain data for a period of time before it is fully purged, and some data may be kept longer for legal, safety, or business reasons....

Why it matters: Deleting your account does not result in the immediate permanent deletion of all your data, meaning personal information can persist in Snap's systems after you have left the platform....

Stripe can hold back a portion of the money you earn through their platform for up to 180 days if they decide your business poses a financial risk — and they don't have to tell you in advance....

Why it matters: This clause gives Stripe near-unlimited discretion to freeze portions of your business revenue, potentially causing serious cash flow disruption, with limited ability to challenge their decision....

If you have a dispute with Stripe, you must resolve it through private arbitration — you cannot sue Stripe in court or join a class action lawsuit with other affected businesses....

Why it matters: This clause eliminates your ability to pursue collective legal action against Stripe, which is often the only practical remedy when individual damages are too small to litigate alone but widespread across many users....

Stripe can shut down your account or cut off your access to their payment services at any time, for any reason, simply by notifying you — leaving your business without payment processing....

Why it matters: For businesses that rely on Stripe as their primary payment processor, sudden termination without cause can immediately halt revenue collection and may coincide with funds being held in reserve, creating acute financial crisis....

If Stripe faces any legal claims, lawsuits, or costs because of your business or how you use their services, you are required to pay for Stripe's defense and any resulting damages — including their lawyers' fees....

Why it matters: The scope of this indemnification is extremely broad, extending to Stripe's affiliates, processors, and agents, and covers claims arising from your general business operations — not just your use of Stripe — which could expose you to significant and unpredictable liability....

By using Stripe, you give Stripe permission to access and use your business data and content worldwide — including for improving Stripe's products and services....

Why it matters: The license to use data for product 'improvement and development' is broader than simply providing services and could encompass training machine learning models, benchmarking, or product analytics using your business's transaction data....

No matter how much damage Stripe's actions cause your business, Stripe's maximum legal liability to you is capped at either three months of fees you paid them or $500 — whichever is higher....

Why it matters: For high-volume merchants paying substantial fees, three months of fees may still represent a tiny fraction of damages caused by service failures or wrongful fund withholding, making legal recovery largely impractical....

Stripe restricts which types of businesses can use its platform — certain industries are outright prohibited, and others require pre-approval. Using Stripe for activities not matching your registered business description can result in account termination....

Why it matters: Businesses that expand into new product lines or markets without updating their Stripe account description risk termination and fund withholding, even if the new activity is legal....

Stripe can change the terms of your agreement at any time by giving you notice, and if you keep using their services after the change, you are automatically considered to have agreed to the new terms....

Why it matters: This clause allows Stripe to materially alter the terms of your contract — including fee structures, reserve policies, and acceptable use restrictions — without your explicit consent, simply by notifying you....

Businesses are fully responsible for all customer disputes, chargebacks, and refunds — Stripe can automatically deduct these amounts from your account balance at any time....

Why it matters: This clause means that unexpected spikes in customer disputes or chargebacks can result in immediate automatic debits from your Stripe balance, potentially driving your account negative and requiring you to pay Stripe out of pocket....

Microsoft may collect biometric data (such as facial recognition or voice prints) and health-related information in certain products and services. This sensitive data is subject to additional protections but is still collected and processed....

Why it matters: Biometric and health data are among the most sensitive categories of personal information, and their collection by a major technology company carries significant privacy risks if misused or breached....

Microsoft uses data it collects about you — including your browsing habits, search history, and inferred interests — to show you personalised advertisements across its products and partner services....

Why it matters: Your personal data is being used to influence what advertisements you see, which may affect your purchasing decisions and means your data has commercial value to Microsoft and its advertising partners....

Microsoft combines data about you from across its many products and services — such as Windows, Office, Bing, and Xbox — to build a more complete profile that can be used for product features, personalisation, and advertising....

Why it matters: When data from multiple services is combined, the resulting profile is far more detailed and revealing than any single data point, increasing the risk of privacy harm and the commercial exploitation of your personal information....

Microsoft collects data from child accounts and requires parental consent for children under 13 in the US (and applicable ages in other countries) to use certain services, in compliance with children's privacy laws....

Why it matters: Children's personal data receives special legal protections, and parents should understand what data Microsoft collects from their children and how it is used....

For users in the European Economic Area and United Kingdom, Microsoft Ireland Operations Limited is designated as the data controller responsible for how your personal data is handled....

Why it matters: Knowing who the legal data controller is enables EU and UK users to direct data rights requests and regulatory complaints to the correct entity, and determines which supervisory authority has jurisdiction....

California residents have specific rights under CCPA, including the right to know what personal data Microsoft collects, to delete it, and to opt out of the sale or sharing of their personal information for advertising purposes....

Why it matters: California residents have stronger legal rights than most US consumers regarding their personal data, and Microsoft is required by law to honour these rights upon request....

Microsoft collects your voice commands (through Cortana and other voice-enabled features) and your search queries through Bing, and uses this data to improve services and personalise your experience....

Why it matters: Voice data is particularly sensitive because it can reveal not just your words but your identity, emotional state, and personal circumstances, and once collected may be stored and reviewed by Microsoft employees....