Provisions Index

If you use Revolut's cryptocurrency features, additional product-specific terms apply, and cryptocurrency assets are not covered by traditional banking protections such as FDIC insurance....

Why it matters: Cryptocurrency holdings on Revolut are not insured, meaning you could lose your entire investment if something goes wrong with the platform or the asset....

Bumble collects biometric information — such as facial recognition data — when you use their profile verification or ID verification features to confirm your identity....

Why it matters: Biometric data is among the most sensitive personal information and cannot be changed if compromised; its collection and storage by a dating app poses significant privacy and security risks....

Bumble collects and processes sensitive categories of personal data including your sexual orientation, religious beliefs, political views, ethnicity, and health information that you voluntarily provide on your profile....

Why it matters: This type of highly sensitive data — including information about your sexual identity or religion — carries significant risks if exposed or misused, and its processing is subject to the strictest legal protections....

Bumble uses automated algorithms to analyse your profile, behaviour, and preferences to determine who you are shown and matched with, which constitutes automated decision-making and profiling....

Why it matters: Automated profiling can significantly affect your experience on the platform — including who you can connect with — and raises rights under GDPR Article 22 to not be subject to solely automated decisions with significant effects....

Bumble shares your personal information with third-party advertising and analytics partners to serve you targeted ads and measure marketing effectiveness....

Why it matters: Your personal data — including behavioural patterns and profile details — may be shared with external advertising companies, creating privacy risks beyond Bumble's own systems....

Bumble may transfer your personal information to the United States and other countries outside your home country, which may have different (and potentially weaker) privacy protections....

Why it matters: When your data is transferred internationally, it may be subject to foreign government access requests or weaker privacy laws, reducing your ability to enforce your rights....

Bumble collects your precise location data when you use the app to help show you matches nearby, and this data is stored and processed as part of your profile....

Why it matters: Precise location tracking on a dating app can reveal sensitive information about where you live, work, or spend time, and could pose safety risks if exposed or misused....

You have the right to access, correct, delete, or export your personal data, and to object to or restrict certain types of processing, with additional rights for California residents under CCPA/CPRA....

Why it matters: These rights give you meaningful control over your personal information and allow you to hold Bumble accountable for how your data is used....

Bumble keeps your personal information only as long as necessary for the purposes it was collected, but the specific retention periods vary by data type and applicable law....

Why it matters: Vague retention periods mean your data could be held for extended periods even after you stop using the app, and you may not know how long sensitive information about you remains in Bumble's systems....

Bumble reserves the right to update this privacy policy at any time, and will notify users of material changes by email or in-app notice, with the latest version always controlling....

Why it matters: Policy changes can affect how your data is used, and while Bumble commits to notifying you of material changes, continued use of the app after changes constitutes acceptance....

California residents have specific rights under CCPA/CPRA, including the right to know what data is collected, the right to delete it, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights....

Why it matters: California residents have among the strongest privacy rights in the US, and Bumble is legally obligated to honour these rights, including providing an easy opt-out from data sharing with advertising partners....

Chegg sells or shares your personal information — including identifiers, browsing behavior, and inferences — with third-party advertising partners for cross-context behavioral advertising purposes....

Why it matters: This means your data collected on Chegg's platform may be used to target you with ads across other websites and apps, and Chegg receives value in return, which qualifies as a 'sale' under California law....

Chegg does not knowingly collect personal information from children under 13 and requires parental consent before doing so; if such data is collected inadvertently, Chegg states it will delete it....

Why it matters: This provision is legally required under the Children's Online Privacy Protection Act (COPPA) and provides important protections for minors using the platform....

California residents have the right to know what personal data Chegg collects, request its deletion or correction, opt out of its sale or sharing, and limit the use of sensitive personal information....

Why it matters: These are legally enforceable rights under California law, meaning Chegg must respond to valid requests within 45 days and cannot discriminate against you for exercising them....

Chegg acknowledges that certain student data may constitute education records under FERPA and states it acts as a school official with legitimate educational interests when processing such data on behalf of educational institutions....

Why it matters: FERPA provides federal protections for student education records, and Chegg's role as a processor of such data creates obligations around data use, disclosure, and breach notification that affect students at participating institutions....

Chegg collects sensitive personal information including account credentials, payment card details, and precise geolocation, and states it uses this data for limited purposes such as providing services and security....

Why it matters: The collection of sensitive data creates elevated privacy and security risks; under CPRA, California residents have the right to limit how Chegg uses this category of information....

Chegg uses cookies, pixels, and similar tracking technologies to collect data about your browsing behavior both on and off its platform, and uses this to serve you targeted advertisements....

Why it matters: Cross-site tracking enables advertisers to build detailed profiles of your online behavior across multiple websites, which many users find invasive and which triggers opt-out rights in several jurisdictions....

Users in the European Union and United Kingdom have rights under GDPR and UK GDPR, including rights to access, rectify, erase, restrict processing, data portability, and object to processing of their personal data....

Why it matters: These are legally enforceable rights under EU and UK law; Chegg must have a lawful basis for processing your data and must honor valid rights requests, typically within 30 days....

Chegg retains your personal information for as long as your account is active or as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements....

Why it matters: Open-ended retention periods mean Chegg may hold your personal data indefinitely unless you take action to delete your account or request data erasure, which limits your practical control over your information....

Chegg's platform may contain links to third-party websites and integrations with external services that have their own privacy policies, and Chegg is not responsible for their data practices....

Why it matters: When you click through to third-party sites or use integrated services, your data may be collected by those third parties under their own terms, and Chegg's privacy protections no longer apply....

Users can request deletion of their personal data or close their account, and Chegg will delete or anonymize personal information subject to legal retention obligations and certain exceptions....

Why it matters: While you have the right to request deletion, Chegg may retain some data for legal compliance, fraud prevention, or dispute resolution purposes, meaning full deletion is not always guaranteed....

US and Canadian users must resolve nearly all disputes with Taskrabbit through binding private arbitration rather than going to court, and cannot join class action lawsuits against the company....

Why it matters: This provision removes your right to have a judge or jury hear your case and prevents you from joining with other affected users in a class action, which can be the most practical way to address small financial harms....

Taskrabbit states it is not responsible for almost anything that happens on or through its platform — including harm caused by Taskers, poor quality work, or losses arising from using the service....

Why it matters: If a Tasker damages your property, injures someone, or fails to complete a job properly, Taskrabbit's Terms significantly limit or eliminate its financial responsibility, leaving you with limited recourse against the company....

You agree to defend and pay Taskrabbit's legal costs if they are sued or incur losses because of something you did while using the platform....

Why it matters: If your actions as a user lead to a lawsuit or claim against Taskrabbit, you could be personally required to cover Taskrabbit's legal fees and any damages — a potentially significant financial liability....

Taskrabbit classifies all Taskers as independent contractors, not employees, meaning Taskers receive no employment benefits, workers' compensation, or tax withholdings from Taskrabbit....

Why it matters: Taskers are solely responsible for their own taxes, insurance, licenses, and compliance with employment laws — they have no employment protections from Taskrabbit even if the platform is their primary source of income....

Taskrabbit says it may conduct background checks on Taskers but takes no responsibility for the accuracy of those checks or for any false information provided by Taskers....

Why it matters: Clients who rely on background check badges or verification labels to feel safe booking a Tasker should know that Taskrabbit expressly disclaims any guarantee that these checks are accurate or complete....

All communications about tasks — including pricing, scheduling, and payments — must go through Taskrabbit's platform before, during, and after a task is completed....

Why it matters: Taking conversations or payments off-platform may void your protections under the Terms and could result in account suspension, leaving you without recourse if something goes wrong....

When you post content on Taskrabbit — such as reviews, photos, or messages — you grant Taskrabbit a broad, royalty-free license to use that content for their business purposes....

Why it matters: Content you create and share on the platform can be used by Taskrabbit for marketing, product development, or other commercial purposes without additional payment or specific consent from you....

Taskrabbit can suspend or terminate your account at any time, including for violations of the Terms or for business reasons, potentially with little or no advance notice....

Why it matters: Your access to the platform — and for Taskers, your primary income source — can be cut off by Taskrabbit without guaranteed notice or an automatic right to appeal....

For US users, disputes are governed by California law; for Canadian users, by Ontario law; for EU and UK users, by local laws — but the arbitration clause may override your right to go to local courts....

Why it matters: The choice of governing law affects which consumer protections apply to you, and for US and Canadian users, the arbitration clause limits where and how you can bring claims regardless of where you live....

By agreeing to these Terms, you also agree to Taskrabbit's separate Privacy Policy, which governs all personal data collected about you through the platform....

Why it matters: Your personal data rights — including how Taskrabbit collects, shares, and retains your information — are governed by a separate document that you are legally bound to without necessarily reading it separately....

Gusto collects highly sensitive data including Social Security numbers, bank account numbers, health and medical information, biometric data, and immigration status as part of its payroll and HR services....

Why it matters: This is among the most sensitive data a company can hold about you — a breach or misuse could lead to identity theft, financial fraud, or discrimination....

Gusto shares your personal information with third-party service providers, financial partners, and in some cases marketing affiliates to operate its services and for targeted advertising purposes....

Why it matters: Your personal and financial data may be shared with entities beyond Gusto, including for advertising purposes, which could expand exposure to data misuse....

California residents have rights under CCPA/CPRA to know, access, delete, correct, and opt out of the sale or sharing of their personal information. Residents of Virginia, Colorado, Connecticut, Texas, Montana, and other states have similar rights under their respective state privacy laws....

Why it matters: These rights give you meaningful control over your personal data held by Gusto, including the right to delete it or stop it being sold to third parties....

Gusto retains your personal data even after you close your account, for as long as necessary to meet legal, regulatory, and business purposes....

Why it matters: Closing your Gusto account does not immediately erase your data — Gusto may retain sensitive information such as your SSN, payroll records, and tax documents for extended periods....

Gusto collects and processes health and medical information, including insurance enrollment data and medical plan details, as part of its employee benefits administration services....

Why it matters: Health information is among the most sensitive data and its misuse can lead to discrimination, financial harm, or privacy violations. It may be subject to HIPAA protections depending on context....

Gusto uses cookies, web beacons, pixels, and other tracking technologies on its website and platform, including for analytics, advertising, and to track user behavior across sessions....

Why it matters: Tracking technologies can be used to build detailed profiles of your online behavior, which may be shared with advertising partners or used to target you with ads....

Gusto collects financial account information including bank account numbers and routing numbers in order to process payroll direct deposits and other financial transactions....

Why it matters: Your bank account details are among the most sensitive financial data — exposure could enable unauthorized withdrawals or identity theft....

When Gusto processes employee data on behalf of an employer-customer, the employer is the data controller and Gusto acts as a service provider or data processor, which limits employees' direct rights against Gusto....

Why it matters: As an employee, your primary relationship for data rights may be with your employer, not Gusto directly — this can limit your ability to compel Gusto to delete or correct your data....

Gusto's policy indicates it may collect biometric information, which could include fingerprints or facial recognition data, as part of its HR or time-tracking services....

Why it matters: Biometric data is uniquely sensitive because it cannot be changed if compromised — its collection and use is subject to strict laws in several states including Illinois, Texas, and Washington....

Gusto collects government-issued identifiers including Social Security numbers, tax IDs, and driver's license numbers as part of payroll and identity verification processes....

Why it matters: Government-issued IDs like Social Security numbers are the primary enabler of identity theft — their compromise can cause lasting financial and legal harm....

Paramount+ shares your personal information — including viewing habits, device data, and behavioral data — with advertising partners, which may legally qualify as a 'sale' or 'sharing' under California law....

Why it matters: This means your data is being used to build advertising profiles and target you with ads, potentially across multiple platforms and services beyond Paramount+....

Paramount+ collects detailed records of every video you watch and may share this information with third parties including advertisers and analytics providers....

Why it matters: The Video Privacy Protection Act (VPPA) restricts the disclosure of video viewing records, and broad sharing of this data with advertisers may expose Paramount+ to liability — and compromises your viewing privacy....

If you are a California resident, you have the right to know what personal data Paramount+ collects, request deletion, correct inaccurate data, and opt out of the sale or sharing of your personal information....

Why it matters: These rights give California residents meaningful control over their personal data, including the ability to stop Paramount+ from selling or sharing their information with advertisers....

Paramount+ states it does not knowingly collect personal information from children under 13 without verifiable parental consent, in compliance with COPPA....

Why it matters: Families and parents should know that if a child under 13 uses the service, Paramount+ has obligations to limit data collection, but enforcement depends on age verification mechanisms which may not be fully reliable....

Paramount+ uses cookies, pixels, and device identifiers to track your activity across multiple devices and platforms to serve you targeted advertisements....

Why it matters: This means your behavior on Paramount+ — and potentially elsewhere online — is monitored and used to build an advertising profile that follows you across your phone, computer, TV, and other devices....

Paramount+ retains your personal data for as long as necessary to provide its services and fulfill business or legal obligations, without specifying fixed retention periods....

Why it matters: The absence of specific retention timelines means your data — including viewing history and account information — could be held indefinitely, limiting your ability to understand and control how long your information is kept....

Paramount+ shares your personal information with third-party companies that help operate the service, including analytics providers, payment processors, and marketing partners....

Why it matters: Your data flows to multiple third parties beyond Paramount+ itself, each with their own privacy practices and data security standards, which increases the overall risk to your personal information....

Paramount+ collects your location information — including from your device's GPS, IP address, or zip code — to determine your local market and deliver location-relevant content and advertising....

Why it matters: Location data is sensitive personal information that can reveal where you live, work, and travel, and its use for advertising purposes goes beyond what many users would expect from a streaming service....

Strava promises it will not sell or use your health data (such as heart rate, HRV, or VO2max) for advertising, and will not share it with third parties without your consent....

Why it matters: Health and biometric data is among the most sensitive personal information you can share, and this provision limits how it can be monetized....