Provisions index

X requires users to be at least 13 years old and permits adults to accept the Terms on behalf of a minor, thereby binding the minor to the Terms. Use of the Services constitutes acceptance of the Terms....

Why it matters: This provision establishes the minimum age of 13 and creates a mechanism for adult authorization of minor accounts, with the adult warranting authority to bind the minor. The 13-year minimum age threshold engages COPPA in the US and GDPR age of digital consent provisions in the EU....

View provision → Watch X →

U.S. residents must attempt informal resolution for 60 days before initiating binding individual arbitration through JAMS under the Federal Arbitration Act; class actions, representative proceedings, and public injunction requests are prohibited. The arbitrator's decision is final except for limited FAA review, and courts retain authority only over arbitrability questions and enforcement of the class action prohibition....

Why it matters: This provision requires U.S. users to resolve disputes through individual JAMS arbitration rather than through court proceedings, and prohibits participation in class action lawsuits or representative actions. The terms establish a pre-arbitration notice requirement, a 60-day informal resolution period, and specific JAMS procedural rules that govern the arbitration process including a staged batch process for related cases involving 25 or more similarly situated claimants represented by coordinating counsel....

View provision → Watch Microsoft Copilot →

Users grant Microsoft a worldwide, royalty-free intellectual property license to use, copy, retain, transmit, reformat, display, and distribute their content through the services for the purposes of service provision, user protection, and improvement of Microsoft products and services. Content published in broadly accessible areas of the service may be used in promotional or demonstration materials....

Why it matters: This provision establishes a broad royalty-free license grant covering content uploaded, stored, or shared across all covered Microsoft consumer services. The license scope includes reformatting, reproduction, transmission, and distribution, and the agreement states that broadly published content may appear in promotional materials, which creates an operational consideration for users who share content in publicly accessible service areas....

View provision → Watch Microsoft Copilot →

Users are prohibited from using Microsoft AI services outputs, or any data derived from those services, to create, train, or improve any AI technology, whether directly or indirectly....

Why it matters: This provision restricts downstream use of AI service outputs across all Microsoft consumer AI services, including Copilot. The prohibition covers both direct and indirect use for AI training or improvement purposes, which may affect users who integrate Microsoft AI outputs into workflows that include machine learning pipelines, dataset construction, or AI model fine-tuning....

View provision → Watch Microsoft Copilot →

The agreement caps recoverable damages at one month of service fees for paid services, or ten dollars for free services, and prohibits recovery of consequential, lost profits, special, indirect, incidental, or punitive damages. This cap applies to all claims related to the terms, services, or associated software....

Why it matters: This provision establishes the maximum financial exposure Microsoft and its affiliates, resellers, distributors, and vendors accept under these terms. The damage cap applies to all covered claims regardless of the nature of the loss, including data loss, service unavailability, or breach of the agreement....

View provision → Watch Microsoft Copilot →

Microsoft reserves the right to modify the agreement at any time with notice to users; continued use of the services after changes take effect constitutes acceptance of the updated terms. Users who do not agree to changes must stop using all covered services and close their Microsoft accounts....

Why it matters: This provision establishes the mechanism by which Microsoft may update the contractual terms governing all covered services, with continued service use treated as acceptance of updated terms. The practical consequence is that material changes to data use, content licensing, arbitration, or other provisions become binding on active users who continue using the services after the effective date....

View provision → Watch Microsoft Copilot →

Upon account closure by either the user or Microsoft, access to services stops immediately, and Microsoft will delete or disassociate data and user content from the account unless law requires retention or transfer. Microsoft states it cannot retrieve content or data once the account is closed, and users may lose access to previously acquired products....

Why it matters: This provision governs what occurs to user data and purchased content upon account closure, whether voluntary or initiated by Microsoft as an enforcement action. The provision establishes that data deletion is the default outcome, acquired product access may be permanently lost, and Microsoft disclaims the ability to recover data after closure....

View provision → Watch Microsoft Copilot →

The agreement prohibits nine specific categories of AI service use, including consequential automated decision-making without human oversight, deception and subliminal manipulation, social scoring, biometric categorization for protected attributes, facial recognition database creation through untargeted scraping, real-time facial recognition by law enforcement, and emotional state inference from physical or behavioral characteristics....

Why it matters: This provision establishes specific prohibited use cases for all Microsoft AI services, including Copilot, that reflect requirements aligned with high-risk AI use categories identified in the EU AI Act. The nine enumerated prohibitions create defined compliance obligations for all users of covered AI services and may interact with enterprise AI governance frameworks....

View provision → Watch Microsoft Copilot →

Subscription purchases authorize recurring payments at the agreed interval until the subscription is terminated; users must cancel before the next billing date to avoid further charges. The agreement also states that initiating a chargeback or payment reversal is treated as cancellation from the date of the original payment, and Microsoft may immediately cancel service and revoke provided content....

Why it matters: This provision establishes the auto-renewal mechanism for all subscription services covered by the agreement, requires pre-billing cancellation to stop charges, and treats chargebacks as retroactive cancellation events that trigger immediate service termination and content revocation....

View provision → Watch Microsoft Copilot →

The schedule discloses that when Coinbase batches multiple user transactions together, the total estimated network fees charged to users in that batch may be higher than the actual network fee Coinbase ultimately pays, with Coinbase potentially retaining the difference....

Why it matters: This provision establishes a condition under which Coinbase may collect more in estimated network fees from users than it disburses to the network, with any differential retained by Coinbase. Compliance teams should evaluate whether this practice and its disclosure meet applicable consumer financial protection and fee transparency standards....

View provision → Watch Coinbase →

When users execute trades through Coinbase's DEX Trading feature, third-party DEX aggregators routing those trades may retain any price improvement above the quoted price as their own fee, meaning the user does not receive the benefit of a better execution price than quoted....

Why it matters: This provision establishes that a third-party fee in the form of retained price improvement may apply to DEX trades without a disclosed fixed amount or percentage, in addition to the standard Coinbase fee and DEX service fee. The operational significance is that users cannot determine the size of this third-party retention in advance....

View provision → Watch Coinbase →

Coinbase charges a commission of 35% of staking rewards for standard accounts across eight named assets, with reduced commission rates of 25.25% to 31.75% available to Coinbase One subscribers depending on their membership tier....

Why it matters: This provision establishes that Coinbase retains up to 35% of all staking rewards generated by users' staked assets, representing a material ongoing charge on staking returns that reduces the effective yield users receive. The commission applies automatically as rewards are generated without requiring a separate user action....

View provision → Watch Coinbase →

If a user borrows USD from Coinbase or a Coinbase affiliate under a loan agreement and Coinbase sells the user's BTC collateral, Coinbase charges a 2% flat fee on the total transaction amount of that collateral sale....

Why it matters: This provision establishes a specific fee trigger tied to a collateral liquidation event, which occurs under circumstances of default or threshold breach as defined in the applicable loan agreement. The 2% fee is charged in addition to any loss the user may experience from the collateral sale itself....

View provision → Watch Coinbase →

Coinbase charges a network fee for any recovery attempt of unsupported cryptocurrency, plus a 5% recovery fee on the recovered value above $100 for eligible recoveries, with the disclosed estimated value potentially differing from the actual market value received....

Why it matters: This provision establishes two separate charges for asset recovery: a network fee and a 5% commission on value above $100. The disclosure that the estimated value may differ from actual market value means the effective cost of recovery in percentage terms may vary from what the user anticipates at the time of the recovery request....

View provision → Watch Coinbase →

Coinbase charges a 0.10% processing fee on USDC net conversion volume exceeding $5 million within any 30-day rolling period, with net volume calculated by offsetting USDC-to-fiat conversions against fiat-to-USDC conversions....

Why it matters: This provision applies primarily to institutional and high-volume users, establishing a fee threshold and a specific netting methodology that determines when the 0.10% fee applies. The 30-day rolling calculation period and the specific netting formula are operationally significant for users managing large USDC positions....

View provision → Watch Coinbase →

The schedule discloses that Coinbase may test and roll out fee and spread changes on a variable basis across different geographic regions, asset types, order sizes, and trade types, meaning different users may experience different fees for comparable transactions during testing periods....

Why it matters: This provision establishes that fees and spreads disclosed in the schedule are subject to change through testing processes that may produce different charges for different users based on region, asset, or order characteristics, without specifying notice requirements for individual users subject to tested changes....

View provision → Watch Coinbase →

The policy states that personal information provided by users may be used to develop AI tools and systems, with the scope of that use governed by a separate document called the Postman AI Terms....

Why it matters: This provision authorizes a category of data use, AI tool and system development, that is governed by a separate document not included in this policy, meaning the full scope of AI-related data processing is not disclosed within the privacy policy itself. Legal and compliance teams reviewing Postman's data practices must separately obtain and assess the Postman AI Terms to understand the complete data use framework....

View provision → Watch Postman →

The policy states that cookie-derived visitor information and hashed contact identifiers may be shared with or used by third parties for marketing and advertising purposes, while asserting that directly identifying information such as name and contact details is not sold to outside parties....

Why it matters: This provision distinguishes between the 'sale' of directly identifying data (which the policy states does not occur) and the disclosure of cookie-based visitor data and hashed contact identifiers to advertising partners (which the policy authorizes). Under CCPA and analogous state laws, disclosure of personal information for cross-context behavioral advertising may constitute 'sharing' regardless of whether monetary consideration is exchanged, and this provision may require evaluation under those definitions....

View provision → Watch Postman →

The policy states that Postman personnel do not access private workspace content except for six enumerated purposes including security, support, service integrity, legal compliance, suspected law violations, and user consent, and that Postman may scan server content to detect security tokens, malware, known vulnerabilities, and Terms of Service violations....

Why it matters: This provision establishes the conditions under which Postman may access content stored in private workspaces, which for developer users frequently includes API keys, credentials, environment variables, and proprietary code. The scanning exception for security signatures, malware, and Terms of Service violations is operationally significant for enterprise customers with data confidentiality obligations....

View provision → Watch Postman →

The policy states that when a user accesses Postman with a work email address, account information including name, profile picture, contact information, account content, and past usage history may become accessible to the employing organization's account administrator and other users on the same domain....

Why it matters: This provision establishes that associating a work email with a Postman account, including retroactively, may result in an employing organization's administrators gaining visibility into the user's account content and historical usage data. Users who created personal accounts before joining an organization and later associated a work email address may be affected....

View provision → Watch Postman →

The policy states that Postman is certified under the EU-U.S. DPF, UK DPF Extension, and Swiss-U.S. DPF, that unresolved DPF complaints are referred to JAMS for resolution at no cost to the complainant, and that in certain circumstances DPF complaints may ultimately proceed to binding arbitration under DPF Annex I....

Why it matters: This provision establishes the dispute resolution pathway for EU, UK, and Swiss individuals whose personal data is transferred to Postman in reliance on DPF certification, including a final binding arbitration mechanism under DPF Annex I. Postman's DPF certification is subject to FTC enforcement, and the DPF framework requires specific complaint handling timelines including a 45-day response window before JAMS escalation is available....

View provision → Watch Postman →

The policy states that personal data may be transferred to and processed in ten listed countries including the United States, Australia, Brazil, Canada, the EEA (Germany for EU instance), India, Nigeria, the Philippines, Ukraine, and the United Kingdom, by employees and independent contractors performing day-to-day responsibilities....

Why it matters: The policy explicitly lists ten countries where personal data may be accessed and processed, including jurisdictions such as Nigeria, Ukraine, and the Philippines that the policy acknowledges may not have equivalent data protection frameworks to users' home countries. Standard Contractual Clauses or DPF mechanisms are cited as the transfer safeguards for EEA, UK, and Swiss data....

View provision → Watch Postman →

The policy states that account information is retained for the duration of account activity plus 15 days after account closure, and that content shared with team members or other users may persist on the platform after account deletion to preserve other users' access to that content....

Why it matters: This provision establishes that account deletion does not guarantee removal of all user content from Postman's platform, as content shared within teams or public workspaces may be retained to preserve other users' access. The 15-day post-closure retention window for account information is a defined operational timeline....

View provision → Watch Postman →

The policy prohibits Postman accounts for users under 13 in the United States and under 18 outside the United States, states that Postman does not knowingly collect information from children under 13, and states that accounts found to belong to underage users will be closed....

Why it matters: This provision establishes a higher minimum age threshold for non-U.S. users (18) compared to the U.S. threshold (13), which is consistent with certain international regulatory frameworks and aligns with the policy's broader geographic scope. The COPPA-compliant statement regarding children under 13 applies specifically to U.S. regulatory obligations....

View provision → Watch Postman →

The policy asserts legitimate business interests as the legal basis for a broad range of processing activities including service delivery, research and development, marketing, safety and security, legal protection, and merger and acquisition facilitation, with consent cited as an additional basis for certain marketing and testimonial activities....

Why it matters: The policy asserts legitimate interests as the legal basis for multiple processing purposes including marketing, R&D, and M&A activity. Under GDPR, legitimate interests processing requires a balancing test against the data subject's rights and interests; the policy asserts this basis for a range of activities without providing further detail on the balancing assessments conducted....

View provision → Watch Postman →

Upon subscribing to or purchasing from a creator, Patreon shares the fan's full name, email address, profile information, shipping address, phone number, Discord account identifier, purchase details, and aggregated usage analytics directly with that creator....

Why it matters: This provision establishes a direct data transfer from Patreon to individual creators covering multiple personal data categories, subject to the Creator Privacy Promise and Data Processing Agreement but not to uniform third-party service controls, creating a data flow that compliance teams should evaluate against GDPR Article 28 and CCPA disclosure requirements....

View provision → Watch Patreon →

Creators may share fan personal data with third-party services they select to operate their memberships, with Patreon's app directory listing many but not all such services; the handling of fan data by those third parties is governed by their own privacy policies rather than Patreon's....

Why it matters: This provision establishes that fan personal data received by creators may flow to an open-ended set of third-party services not all of which are enumerated by Patreon, with data handling governed by those third parties' own policies rather than the terms of this privacy policy....

View provision → Watch Patreon →

The policy states that Patreon uses collected information to make inferences about users including demographic attributes such as age and binary gender, and to estimate potential earnings for creator accounts....

Why it matters: This provision discloses that Patreon engages in automated profiling to derive demographic characteristics and financial estimates about users, which may engage GDPR profiling provisions, CCPA inference data disclosure requirements, and FTC guidance on data-driven consumer profiling....

View provision → Watch Patreon →

The policy states that Patreon does not monitor or respond to browser Do Not Track signals, citing the absence of an industry-standard interpretation of those signals....

Why it matters: This provision establishes that browser-level Do Not Track signals have no operational effect on Patreon's data collection or tracking practices, which is a standard industry disclosure but is relevant for users who rely on browser-level controls....

View provision → Watch Patreon →

Patreon reserves the right to modify the privacy policy at any time at its sole discretion, with material changes notified by email or phone to existing users and a 60-day effective date window for existing accounts, after which continued use constitutes acceptance....

Why it matters: This provision establishes that existing users have a 60-day window before updated policy terms take effect, but characterizes continued use of the platform as acceptance, and Patreon determines unilaterally whether a change is material enough to require notice....

View provision → Watch Patreon →

Patreon may share creator age verification data and, where collected, consent and age verification data for persons depicted in Adult/18+ content with payment partners upon their request, to demonstrate compliance with payment partner rules....

Why it matters: This provision establishes a conditional data sharing mechanism in which sensitive identity verification data about creators and persons depicted in Adult/18+ content may be disclosed to payment partners, with disclosure triggered by payment partner requests rather than solely by Patreon's own operational requirements....

View provision → Watch Patreon →

Patreon states it will disclose user personal data to law enforcement and government agencies in response to valid legal process including subpoenas and warrants, and will attempt to notify affected users by email or phone when legally permitted to do so....

Why it matters: This provision establishes the conditions under which Patreon will disclose personal data to government and law enforcement authorities, including a conditional user notification commitment that is subject to legal permissibility and the availability of current contact information....

View provision → Watch Patreon →

The policy states that California residents have CCPA rights to access categories and specific pieces of personal information collected, the sources, purposes, and categories of third-party recipients, and that Patreon extends access, portability, and deletion rights to all users through the Privacy Center....

Why it matters: This provision establishes the CCPA rights available to California residents and extends access, portability, and deletion rights to all platform users regardless of California residency, with non-discrimination assurance for users who exercise those rights....

View provision → Watch Patreon →

Patreon automatically collects IP address, approximate location, browser and device type, operating system, screen size, language settings, referring URL, mobile carrier, device and application IDs, search terms including unsubmitted queries, clicked links, pages visited, session length, dwell time, media view duration, and cookie information, including from users who have not created an account....

Why it matters: This provision establishes that behavioral and technical data collection occurs across all platform interaction surfaces including Patreon embeds on third-party websites and email interactions, and applies to non-account holders, which is relevant for privacy notice obligations and cookie consent frameworks....

View provision → Watch Patreon →

The policy requires users to authorize Webull to transfer, store, process, and use their personal information in any country where Webull operates, with an acknowledgment that data protection standards and government access rules vary by country....

Why it matters: This provision establishes a consent-based cross-border data transfer mechanism applicable to all users globally. The provision's reliance on user consent as the transfer authorization basis may require evaluation under GDPR, which does not recognize consent alone as a sufficient mechanism for ongoing international data transfers absent the safeguards described in GDPR Article 46....

View provision → Watch Webull →

The policy authorizes Webull to make material changes to its privacy terms by posting updates on its website or app, without sending a direct notification to users, and treats continued use of the service as acceptance of the revised terms....

Why it matters: This provision establishes that users are bound by revised policy terms upon continued use, even without receiving direct notification. Compliance teams should evaluate whether this mechanism satisfies notice requirements under GDPR, UK GDPR, and CCPA where material changes to data processing practices may require active user notification or renewed consent....

View provision → Watch Webull →

The policy states that Webull does not respond to Do Not Track browser signals and authorizes third-party analytics providers to collect personal information about users' online activities over time and across different applications and websites....

Why it matters: This provision discloses that third parties may collect cross-site and cross-app behavioral data from Webull users, which may interact with CCPA and CPRA definitions of 'sharing' personal information for cross-context behavioral advertising purposes. Compliance teams should assess whether this third-party data collection constitutes a sale or sharing of personal information under applicable California law....

View provision → Watch Webull →

The policy states that Webull does not sell personal information to third parties but discloses that it permits third parties to collect information through its services for advertising and marketing delivery purposes on other platforms....

Why it matters: This provision asserts that Webull does not engage in the 'sale' of personal information under CCPA while simultaneously disclosing that third parties collect user data through Webull's services for advertising purposes. Compliance teams should evaluate whether this third-party collection arrangement meets the CPRA definition of 'sharing' personal information for cross-context behavioral advertising, which carries its own opt-out obligations distinct from the sale opt-out....

View provision → Watch Webull →

The policy establishes a 30-day restoration window following account deactivation, after which Webull begins account deletion from its systems, a process that may take up to one additional week. The policy also separately states that Webull retains personal information for as long as necessary to meet legal, regulatory, and legitimate interest obligations....

Why it matters: This provision establishes the procedural timeline for account deletion and data removal, which compliance teams should map against applicable data subject rights response timelines under GDPR (30 calendar days from request) and CCPA (45 calendar days from request). The separate data retention clause, which permits retention for legal, regulatory, and legitimate interest purposes without specifying categories or durations, creates a broad retention authorization that may require evaluation under applicable minimization and storage limitation principles....

View provision → Watch Webull →

The policy authorizes Webull to share full payment card details, including card number, expiration date, CVV code, and billing address, with third-party payment services providers for payment processing, fraud investigation, and dispute resolution purposes....

Why it matters: This provision discloses the transmission of full payment card data, including CVV codes, to third-party payment processors. Compliance teams should note that the sharing of CVV codes with processors is subject to Payment Card Industry Data Security Standard (PCI DSS) restrictions, and the policy's disclosure of this practice warrants review to confirm that such sharing is limited to contexts permitted under PCI DSS and applicable card network rules....

View provision → Watch Webull →

The policy establishes that EEA and UK residents may exercise GDPR and UK data protection rights, including access, correction, deletion, restriction, objection, and portability, by contacting Webull, and may opt out of marketing emails via the unsubscribe mechanism....

Why it matters: This provision formally acknowledges GDPR and UK GDPR data subject rights for EEA and UK residents and directs them to contact Webull to exercise those rights. The provision also reserves Webull's right to retain information in its archives as necessary to comply with legal obligations, resolve disputes, and enforce agreements, which qualifies the scope of the deletion and erasure rights disclosed....

View provision → Watch Webull →

The policy discloses that users applying to open a trading account with a Webull affiliate may be required to provide detailed identity information, including government ID numbers, nationality, marital status, date of birth, and copies of identification documents and proof of address, for anti-money laundering compliance purposes....

Why it matters: This provision identifies a specific set of sensitive personal data categories collected under regulatory obligation for trading account applicants, including government-issued identification numbers and document copies. The collection of this data category triggers heightened data security, retention, and cross-border transfer obligations under applicable financial services, anti-money laundering, and data protection regulations....

View provision → Watch Webull →

The policy authorizes Webull to transfer user personal information to successor entities in the event of a bankruptcy, merger, acquisition, reorganization, or asset sale, and to share user information with corporate affiliates, including financial services affiliates, for service improvement purposes....

Why it matters: This provision establishes that user personal information may be transferred to new entities in corporate transactions without requiring separate user consent, subject to the policy continuing to apply. The authorization to share information with financial services affiliates for service improvement purposes is operationally significant for users who did not intend to share their data with affiliated broker-dealers or financial institutions....

View provision → Watch Webull →

The agreement states that Webull retains proprietary ownership of all user accounts and may suspend or permanently reclaim any account at any time without stated cause or process....

Why it matters: This provision establishes that users do not hold proprietary rights to their Webull accounts and that Webull may exercise suspension or termination without procedural constraint, explanation, or advance notice, which is operationally significant for users who rely on the platform for market data access....

View provision → Watch Webull →

The agreement authorizes Webull to modify the Terms at any time without prior notice, publishing changes to the app or website, with continued platform use constituting user acceptance of the modified Terms....

Why it matters: This provision establishes a unilateral modification mechanism under which material changes to user rights, data practices, or liability terms take effect without affirmative user consent or advance notification, creating ongoing monitoring obligations for users and compliance teams....

View provision → Watch Webull →

The agreement states that Webull treats all actions taken on an account following a correct-password login as the account holder's actions, with the user bearing full responsibility for consequences regardless of whether the user authorized those actions....

Why it matters: This provision establishes that Webull's attribution of account actions to users is based solely on login credentials, without distinguishing between authorized and unauthorized use following correct-password access, which may limit the practical scope of user recourse in cases of credential-based fraud or unauthorized access....

View provision → Watch Webull →

The agreement requires users to pay litigation costs and attorneys' fees incurred by Webull or its affiliates if the user's platform use exceeds permitted scope or constitutes a breach of the Terms....

Why it matters: This provision establishes a user-facing indemnification obligation for Webull's litigation costs and damages arising from Terms breaches, which is operationally significant because the scope of 'permitted use' is defined by Webull's Terms, which are subject to unilateral modification without advance notice....

View provision → Watch Webull →