-
Poe
· Poe Terms of Service
When you use AI models like Claude, ChatGPT, or others through Poe, your interactions may also be governed by those providers' own terms and privacy policies, and Poe is not responsible for how those models behave or handle your data....
Why it matters: The agreement states that using third-party AI models through Poe subjects you to those providers' own terms and privacy policies, meaning your data practices may be governed by multiple overlapping agreements depending on which AI model you interact with....
-
Vercel AI
· Vercel AI Acceptable Use Policy
If you build an app on Vercel and one of your users violates Vercel's rules, you are responsible for that violation and must cut off that user's access and report it to Vercel....
Why it matters: This provision places compliance obligations on account holders for conduct they did not directly perform, meaning that inadequate end-user controls can result in account suspension or termination even if the account holder personally did nothing wrong....
-
Vercel AI
· Vercel AI Acceptable Use Policy
You cannot use Vercel's AI tools to create false or misleading content, impersonate people, infringe copyrights, spread disinformation, or discriminate against protected groups....
Why it matters: This provision establishes specific behavioral obligations for users of Vercel's AI features, covering content generation, impersonation, disinformation, and discrimination, and creates compliance obligations that interact with both existing law and emerging AI-specific regulation....
-
Vercel AI
· Vercel AI Acceptable Use Policy
Vercel can suspend or terminate your account at any time if it decides, on its own judgment, that you have violated the AUP or Terms of Service....
Why it matters: This provision grants Vercel discretionary authority to suspend or terminate accounts based on its own determination of a violation, without specifying procedural requirements such as notice periods, appeal rights, or cure opportunities prior to termination....
-
Google AI Studio
· Gemini API Terms of Service
Unless you turn off the opt-out setting in your project, Google states it may use the prompts and responses you send through the API to train and improve its AI models....
Why it matters: This provision establishes a default data-use posture that applies to all API traffic until a developer affirmatively changes a project setting. Developers handling personal data from end users should assess whether this default is consistent with their data protection obligations before deploying....
-
Monitoring
These provisions have changed before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
-
Google AI Studio
· Gemini API Terms of Service
Developers are responsible for making sure their applications follow the rules and for getting any necessary permissions from the people who use their apps....
Why it matters: This provision places the full burden of end-user data compliance, including consent collection, on the developer rather than on Google. Developers who have not implemented appropriate consent mechanisms for their use of the API may face both contractual liability under this agreement and regulatory exposure under applicable privacy law....
-
Anthropic
· Anthropic Consumer Terms
US users are required to resolve disputes with Anthropic through individual binding arbitration rather than through court proceedings, and the terms waive the right to participate in class action lawsuits or class arbitrations....
Why it matters: This provision requires US users to pursue any legal claims against Anthropic individually through arbitration, which limits access to class-wide legal remedies and removes the option of litigation in court for most disputes....
-
OpenAI
· OpenAI API Data Usage Policies
OpenAI makes a Data Processing Addendum available to enterprise and API customers, which establishes the contractual terms under which OpenAI processes personal data on behalf of business customers....
Why it matters: A signed DPA is the primary contractual instrument establishing GDPR Article 28 compliance and CCPA service provider status; without it, enterprise customers may lack documented legal basis for processing personal data through OpenAI services....
-
Uber
· Uber Terms of Use
If you have a dispute with Uber, you generally cannot take them to court. Instead, the dispute must go through a private arbitration process, with limited exceptions for small claims and intellectual property matters....
Why it matters: This provision requires users to resolve most legal disputes through individual arbitration rather than through the court system, which changes the procedural options available to users and may affect the practical ability to pursue claims....
-
Uber
· Uber Terms of Use
You give up the right to participate in class action lawsuits against Uber, meaning any claim you have must be pursued individually, not as part of a group....
Why it matters: The class action waiver means users cannot pool resources with others who have similar claims against Uber, which may affect the practical viability of pursuing smaller individual claims....
-
Uber
· Uber Terms of Use
Uber limits its total financial liability to you for any and all claims to $500, and disclaims most warranties about the quality or reliability of its services....
Why it matters: This clause caps the maximum amount a user could recover from Uber in a successful claim at $500, regardless of the actual damages suffered, which may be significantly less than actual harm in many situations....
-
Uber
· Uber Terms of Use
Uber collects your precise location, trip origin and destination, device information, and communications, and uses this data to operate the service, personalize your experience, and for other purposes described in its Privacy Notice....
Why it matters: The collection of precise location data and trip details, combined with use for purposes described in a separate Privacy Notice incorporated by reference, means the full scope of data use is not entirely contained within these terms and requires review of an additional document....
-
Roblox
· Roblox Terms of Use
If you have a dispute with Roblox, you must resolve it through private arbitration rather than suing in court, and you cannot join a class action lawsuit with other users....
Why it matters: This provision requires disputes to proceed through individual arbitration under AAA rules, which eliminates access to class action litigation and jury trials; the 30-day opt-out window is the only mechanism to preserve those rights after account creation....
-
Roblox
· Roblox Terms of Use
Any content you create and upload to Roblox gives the company a permanent, free license to use, modify, share, and build on your content in any way related to running the platform....
Why it matters: The agreement grants Roblox a perpetual, irrevocable, royalty-free, sublicensable license to user content, which means creators do not receive compensation when Roblox uses or sublicenses their uploaded content and cannot revoke this license after submission....
-
Roblox
· Roblox Terms of Use
Once you buy Robux or any in-game items with real money, that purchase is final and you cannot get a refund, and Roblox can change or remove virtual items at any time....
Why it matters: The agreement states that all Robux purchases are non-refundable and that Roblox may modify or eliminate virtual items without compensation or notice, meaning users can lose the value of purchased virtual goods if Roblox changes or discontinues them....
-
Roblox
· Roblox Terms of Use
Roblox can suspend or delete your account at any time for any reason, and if they do, you lose access to any Robux or virtual items you had in that account....
Why it matters: The agreement authorizes Roblox to terminate accounts without cause or advance notice and states that Robux and virtual items may be forfeited upon termination, creating financial risk for users who have purchased significant virtual goods....
-
Roblox
· Roblox Terms of Use
Children under 13 can only use Roblox with a parent's consent, and Roblox states it limits the features and data it collects for younger users to comply with US child privacy law....
Why it matters: The agreement states that under-13 users receive a restricted account experience with limited data collection, which is relevant to the large portion of Roblox's user base that falls in this age group; the effectiveness of these restrictions depends on the robustness of the age verification and parental consent mechanisms Roblox implements....
-
Roblox
· Roblox Terms of Use
Roblox limits how much it has to pay you if something goes wrong to a maximum of $100 or what you paid them in the last year, whichever is greater, and it cannot be held responsible for many types of losses....
Why it matters: The agreement caps Roblox's total financial liability to users at $100 or 12 months of payments, and excludes consequential and indirect damages, which means users have limited contractual recourse for significant losses related to platform use....
-
23andMe
· 23andMe Privacy Statement
If 23andMe is sold, merges with another company, or goes through bankruptcy, your genetic and personal data may be transferred to the new owner as part of that transaction....
Why it matters: This provision is particularly significant given that 23andMe has publicly reported financial difficulties; it means your most sensitive personal data, your DNA, could be acquired and controlled by an entity you did not originally consent to share it with....
-
23andMe
· 23andMe Privacy Statement
If you previously opted into Research, genetic and health data you contributed may already have been shared with third-party research partners and cannot be recalled, even if you later withdraw consent or delete your account....
Why it matters: The policy discloses that Research consent, once acted upon and data shared, creates an irreversible commitment; withdrawal from Research stops future sharing but does not remove already-contributed data from third-party researchers who received it....
-
23andMe
· 23andMe Privacy Statement
With Research consent, 23andMe may share your genetic and self-reported health data with third-party academic or commercial research partners in de-identified or aggregated form....
Why it matters: The policy authorizes sharing of genetic data with external research partners, and the practical protection depends entirely on the robustness of the de-identification method used, which the summary document does not detail....
-
Notion
· Notion Terms of Service
Notion offers a Business Associate Agreement for customers who may need to store or process protected health information in Notion workspaces under HIPAA requirements....
Why it matters: The availability of a Business Associate Agreement is operationally significant for healthcare organizations and covered entities that need contractual assurances under HIPAA before using Notion to process protected health information....
-
Uber
· Uber Privacy Notice
Uber tracks your exact GPS location continuously from when you open the app, throughout every trip, and whenever the app is running in the background on your phone....
Why it matters: Continuous precise location collection creates a detailed record of a driver's movements over time, which is shared with riders and may be shared with insurers and government authorities, and is subject to heightened data protection obligations in several jurisdictions....
-
Uber
· Uber Privacy Notice
Uber collects copies of your government-issued ID and in some regions uses facial recognition or photo matching technology to confirm your identity before or during platform use....
Why it matters: Facial image data and government ID copies constitute sensitive personal data in multiple jurisdictions, and facial recognition or matching may qualify as biometric data under laws such as Illinois BIPA, triggering consent requirements and restrictions on retention and sharing....
-
Uber
· Uber Privacy Notice
Uber uses automated systems to evaluate your behavior and can deactivate your driver account automatically if its systems determine you have violated platform rules, including rules about safety or fraud....
Why it matters: Automated deactivation decisions directly affect a driver's ability to earn income through the platform, and under GDPR Article 22 drivers in the EU may have the right to request human review of solely automated decisions that significantly affect them....
-
Uber
· Uber Privacy Notice
Uber collects criminal history records, driving records, and other background check information from third-party screening companies to assess your eligibility to drive on the platform....
Why it matters: Background check data is sensitive personal data and its collection through third parties triggers obligations under the Fair Credit Reporting Act in the US, as well as equivalent frameworks in other jurisdictions, including rights to dispute inaccurate information....
-
SoFi
· SoFi Terms of Service
If you have a dispute with SoFi, this provision requires you to resolve it through individual binding arbitration rather than by suing in court, and you cannot join or lead a class action lawsuit against SoFi....
Why it matters: This provision removes the right to pursue disputes in court and eliminates the ability to participate in class action litigation, which is often the only practical mechanism for consumers to pursue small-value claims collectively....
-
Minecraft
· Minecraft Privacy Statement
Children under 13 can only use Minecraft with a parent or guardian's permission, managed through Microsoft's Family Safety tools....
Why it matters: This provision governs how data from minor users is collected and used, and whether parental consent mechanisms meet regulatory standards under COPPA and equivalent frameworks....
-
Best Buy
· Best Buy Privacy Policy
Best Buy shares your personal data with advertising and analytics companies to serve you targeted ads, and acknowledges this sharing may qualify as selling your personal information under California law....
Why it matters: The policy discloses that data sharing with advertising partners may constitute a sale or sharing under CCPA/CPRA, which triggers opt-out rights for California residents and creates compliance obligations for Best Buy regarding the clarity and accessibility of the opt-out mechanism....
-
Best Buy
· Best Buy Privacy Policy
Best Buy states it may collect your precise location through its mobile app and draws inferences from your data to build a profile of your preferences and behavior, which qualifies as sensitive personal information under California law....
Why it matters: The policy discloses collection of precise geolocation and financial account details, both of which are classified as sensitive personal information under CPRA and trigger additional rights including the right to limit use, which must be operationally distinct from general opt-out mechanisms....
-
OpenAI
· OpenAI Privacy Policy
OpenAI states that content you submit through consumer products like ChatGPT may be used to train its AI models by default, but you can turn this off in your account's Data Controls settings....
Why it matters: This provision is operationally significant because it means that conversational inputs, which may include personal, professional, or sensitive information, may be incorporated into AI model training unless the user actively disables the setting....
-
WhatsApp
· WhatsApp Privacy Policy
WhatsApp shares your data (including your phone number, device info, and usage data) with Facebook, Instagram, and other Meta-owned services, and those companies can use that information to improve their own products and to personalize ads you see on their platforms....
Why it matters: The policy authorizes broad data sharing across the entire Meta family, meaning information you generate on WhatsApp may inform advertising and content personalization on Facebook and Instagram even though WhatsApp itself does not show ads....
-
Meta
· Meta Terms of Service
Meta can suspend or permanently remove your account and content if it determines you have violated its terms, policies, or applicable law, and in some circumstances may do so without advance notice....
Why it matters: The terms authorize Meta to act without prior notice in circumstances it determines involve fraud, legal risk, harm, or policy violations, which means account access can be lost without warning, including for businesses or individuals who rely on the platform for commercial activity....
-
Meta
· Meta Terms of Service
Meta limits its total financial liability to users to the greater of $100 or the amount the user paid Meta in the past 12 months, and excludes liability for lost profits, lost data, and most indirect or consequential damages....
Why it matters: For users of free Meta services who have paid nothing, the liability cap is effectively $100, regardless of the type or magnitude of harm experienced, though the 'to the extent permitted by law' qualifier means this cap may not apply in all jurisdictions....
-
Meta
· Meta Terms of Service
Meta's services are provided without a monetary fee, and in exchange Meta uses your personal data, including information about your activity and interests, to show you targeted advertisements from paying businesses....
Why it matters: The terms explicitly state that personalized advertising based on activity and interest data is the commercial basis for free access to Meta's services, and that users consent to this use by agreeing to the terms....
-
AWS Bedrock
· AWS Service Terms
AWS places the responsibility for following laws, including AI regulations and data protection rules, on you as the customer rather than on AWS itself....
Why it matters: This provision places the full burden of regulatory compliance for AI-generated content, data protection, and sector-specific rules on the customer, meaning organizations deploying Bedrock in regulated industries must independently ensure compliance rather than relying on AWS's own compliance certifications....
-
AWS Bedrock
· AWS Service Terms
The terms prohibit using Bedrock to generate illegal content, content that could facilitate weapons development, or content that sexualizes minors, among other harmful categories....
Why it matters: These restrictions define the outer boundary of permitted Bedrock use cases and carry account termination risk for violations; organizations providing Bedrock-based services to end users must ensure their downstream use cases comply with these restrictions....
-
AWS Bedrock
· AWS Service Terms
AWS does not guarantee that Bedrock AI model outputs will be accurate or fit for your specific use, and its financial liability for any resulting damages is capped by the broader AWS customer agreement....
Why it matters: The disclaimer of output accuracy warranties and the cap on liability means that organizations relying on Bedrock outputs for business-critical or regulated decisions bear the risk of inaccurate or inappropriate model outputs, with limited contractual recourse against AWS....
-
Roblox
· Roblox Privacy and Cookie Policy
Roblox states it requires parental consent before collecting personal information from children under 13, and does not serve behavioral advertising to this age group. Parents can contact Roblox to request deletion of their child's data....
Why it matters: This provision governs how Roblox handles data for its youngest users and establishes the parental consent and deletion rights that apply under US federal law for children under 13....
-
Roblox
· Roblox Privacy and Cookie Policy
Roblox uses your behavioral data and works with advertising partners who use cookies, pixels, and SDKs to serve you targeted ads based on your activity on Roblox and other websites. Users above the applicable age threshold are subject to this cross-context behavioral advertising....
Why it matters: This provision authorizes third-party advertising partners to collect your behavioral and activity data across platforms using tracking technologies, which under California law constitutes 'sharing' personal information and triggers opt-out rights....
-
Roblox
· Roblox Privacy and Cookie Policy
Roblox states that in some locations and for certain features it may collect biometric data such as facial geometry, and says it will seek consent where required by law before doing so....
Why it matters: Biometric data is subject to strict state-level laws in the US (notably Illinois BIPA) that require informed written consent, impose retention and destruction obligations, and provide a private right of action; the policy does not specify which features or jurisdictions are involved....
-
Meta
· Meta Platform Policy
Meta can cut off a developer's access to its APIs and platform at any time, for any reason, without necessarily providing advance notice....
Why it matters: This provision means that any product or service built on Meta's platform has no contractual guarantee of continued access, creating significant operational dependency risk for developers and the users of their applications....
-
Meta
· Meta Platform Policy
Developers must cover Meta's legal costs and damages if Meta faces any claims related to the developer's use of the platform, app content, or violations of law....
Why it matters: This provision places the full financial burden of third-party legal claims on developers, including Meta's legal fees, which could be substantial for any developer whose app generates user complaints or regulatory scrutiny....
-
Meta
· Meta Platform Policy
Developers cannot use data obtained from Meta's APIs to train competing products, sell the data to data brokers, or transfer it to advertising networks without Meta's written permission....
Why it matters: These restrictions govern how developers may use user data obtained through Meta's platform, prohibiting uses that could benefit competing products or that could result in user data being sold or transferred to third-party advertising or data broker ecosystems....
-
Meta
· Meta Platform Policy
Developers must get proper user consent before collecting or using any data accessed through Meta's platform, and must clearly tell users how their data will be used....
Why it matters: This provision places the obligation for obtaining legally valid user consent squarely on developers, meaning that if a developer's consent mechanisms are inadequate under applicable law, the developer bears the legal and contractual risk, not Meta....
-
Meta
· Meta Platform Policy
Developers cannot merge or supplement data they receive from Meta's APIs with data from other sources unless they have Meta's written permission to do so....
Why it matters: This restriction limits developers' ability to enrich or cross-reference Meta platform data with other datasets, which affects common analytics, personalization, and identity resolution practices used across the industry....
-
Meta
· Meta Platform Policy
Developers are prohibited from using Meta's platform to build apps for children under 13 or collect their data, unless Meta has specifically approved the application and the developer complies with child privacy laws....
Why it matters: This provision establishes a baseline protection for minors by restricting developer access to Meta's platform for child-directed applications unless specific approval and legal compliance obligations are met, particularly under COPPA....
-
Meta
· Meta Platform Policy
Developers cannot use Meta's platform in ways that break the law, violate others' rights, deceive users in data collection, or collect sensitive data like health or location information without proper user consent....
Why it matters: This provision establishes a floor of prohibited developer behaviors, particularly around sensitive data categories including health, financial, and precise location data, which receive additional protections requiring adequate consent and disclosure beyond what may be required for less sensitive data....
-
Waze
· Waze Terms of Use
Waze collects your GPS location and information about how you use the app, and may use this data to operate the service, improve it, and for advertising and marketing purposes....
Why it matters: The terms authorize collection and use of real-time GPS location data for advertising purposes in addition to navigation functionality; the detailed scope of data collection is deferred to a separate Privacy Policy incorporated by reference....
-
Shopify
· Shopify Terms of Service
If you have a legal dispute with Shopify, this clause requires you to resolve it through private arbitration rather than going to court, and you cannot join a class action lawsuit with other users against Shopify....
Why it matters: This provision requires users to pursue claims against Shopify individually through arbitration, which may limit practical access to remedies for smaller claims and forecloses participation in class actions that might otherwise aggregate similarly situated users....