-
Robinhood
· Robinhood Customer Agreement
Robinhood centralizes its legal and regulatory disclosures on a single library page, meaning users must navigate to individual linked documents to find the binding terms governing their accounts....
Why it matters: The disclosure library structure means that no single document on this page contains the full binding terms; consumers and compliance professionals must individually review each linked document to assess the complete scope of their obligations and rights....
-
Robinhood
· Robinhood Customer Agreement
Robinhood's signup promotion offering a free stock is qualified by a disclaimer that limitations and fees may apply, meaning the conditions of the free stock offer are defined in terms not fully visible on this page....
Why it matters: Promotional offers in the financial services context are subject to regulatory scrutiny under FINRA and SEC communications rules, and the qualification 'Limitations and fees may apply' without further specificity may not satisfy disclosure prominence requirements for promotional claims....
-
Robinhood
· Robinhood Customer Agreement
The disclosure library is published in English for the US market, as indicated by the URL path /us/en/, suggesting the terms govern US-based users operating under US law....
Why it matters: The US-specific and English-language scope of this disclosure library establishes that US law and regulation governs the terms contained within it, which affects which consumer protection frameworks, dispute resolution options, and regulatory remedies are available to users....
-
WhatsApp
· WhatsApp Privacy Policy
Users in the EU, UK, and certain other jurisdictions have formal rights to see what data WhatsApp holds about them, correct errors, download their data, request deletion, and object to certain types of processing....
Why it matters: These rights are legally enforceable in the EU and UK, meaning WhatsApp is required by law to respond to properly submitted requests, though the practical scope of what data is accessible or deletable may be limited by exceptions described elsewhere in the policy....
-
Upwork
· Upwork Privacy Policy
Upwork's platform is for adults only and the company states it does not knowingly collect data from anyone under 18. If a child's data is found, Upwork says it will delete it....
Why it matters: This provision establishes that Upwork relies on user self-certification of age rather than active age verification, which may leave a compliance gap under COPPA for younger teenagers if minors access the platform....
-
Monitoring
These provisions have changed before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
-
HubSpot
· HubSpot Privacy Policy
HubSpot keeps your personal data for as long as it needs it for business purposes, legal compliance, or dispute resolution, but does not specify fixed retention periods for most data categories....
Why it matters: Without specific retention periods stated, it is difficult for individuals to know how long their data will be held or to anticipate when deletion might occur without a formal request....
-
SoFi
· SoFi Privacy Notice
If you have enabled the Global Privacy Control setting in your browser, SoFi's system is configured to automatically reject all non-essential cookies on your behalf, honoring your browser-level privacy preference without requiring you to manually interact with any banner....
Why it matters: GPC recognition is a legally significant feature under California's CPRA, which requires businesses to treat the GPC signal as a valid opt-out of sale and sharing of personal data; SoFi's implementation suggests it is attempting to comply with this requirement, which is a meaningful consumer protection....
-
SoFi
· SoFi Privacy Notice
SoFi uses OneTrust to manage eight distinct consent categories, and the system treats a user as opted out unless all categories show active consent; having only the strictly necessary cookie category (C0001) active is treated as an opted-out state rather than a partial consent....
Why it matters: The all-or-nothing consent evaluation means that if any of the eight consent categories is disabled, the system registers the user as opted out for analytics purposes, but this is a system-side evaluation rather than a granular user-facing control; it does not prevent individual tags from firing if the cookie categories are not correctly mapped....
-
SoFi
· SoFi Privacy Notice
When you click the 'Your Privacy Options' link in SoFi's footer, the system checks whether you are logged into your SoFi account; if you are not logged in, it opens the OneTrust cookie consent panel rather than taking you to your account's privacy preference settings....
Why it matters: Logged-out users who click 'Your Privacy Options' are directed to the cookie management tool rather than a comprehensive privacy preferences interface, which may mean they cannot access or manage the full range of privacy rights (such as data access or deletion requests) without first logging in or navigating separately....
-
OpenAI
· OpenAI Privacy Policy
OpenAI automatically collects technical data about your device and how you use its services, including your IP address, browser type, search queries, and feature usage patterns....
Why it matters: This automated data collection occurs regardless of what you actively submit, meaning a profile of your usage behavior is built even if you share minimal content in your conversations....
-
Auth0
· Auth0 Privacy Policy
California residents have the right to see, delete, correct, and opt out of sharing of their personal data, and can exercise these rights by contacting Okta at privacy@okta.com....
Why it matters: CPRA significantly expanded California privacy rights including the right to correct inaccurate data and limit use of sensitive personal information, and Okta's acknowledgment of these rights means California residents have concrete, enforceable options beyond what users in other US states may have....
-
Auth0
· Auth0 Privacy Policy
Okta keeps your personal data for as long as it considers necessary for its business purposes and legal obligations, without specifying fixed retention periods for most data types....
Why it matters: The absence of specific retention periods for most data categories means users cannot easily determine how long their information is kept or plan deletion requests around a known timeline....
-
Auth0
· Auth0 Privacy Policy
EU, UK, and Swiss residents have a comprehensive set of data rights under GDPR, including the right to access, correct, delete, and port their data, and can contact Okta's DPO at dpo@okta.com or complain to their national regulator....
Why it matters: Having a named DPO contact and a specific email address provides EU, UK, and Swiss residents with a clear channel to exercise meaningful data rights that are legally enforceable, including the right to object to processing and request erasure....
-
Auth0
· Auth0 Privacy Policy
If Okta is acquired or merges with another company, your personal data may be transferred to the acquiring company as a business asset, though Okta states it will notify users of such changes....
Why it matters: In a corporate transaction, your authentication data, device identifiers, and behavioral profiles could transfer to a new owner whose privacy practices may differ materially from Okta's current policy, and the commitment to notify is a notice right rather than a consent or opt-out right....
-
Auth0
· Auth0 Privacy Policy
Okta's services are not intended for anyone under 16, and Okta states it will delete personal data collected from under-16s if discovered, though it does not describe active age verification mechanisms....
Why it matters: The policy sets a minimum age of 16 rather than the COPPA threshold of 13 for US users, aligning more closely with GDPR Article 8 standards, but does not describe how under-16 users are actively identified or prevented from accessing services....
-
Notion
· Notion Terms of Service
Notion maintains a separate Cookie Policy describing the types of cookies and tracking technologies used on its platform and website, and how users can manage or opt out of non-essential cookies....
Why it matters: Notion's use of cookies and tracking technologies affects how your browsing behavior, usage data, and potentially advertising-related information is collected, and understanding this policy is important for users who want to limit tracking....
-
Ancestry
· Ancestry Privacy Statement
Ancestry's services are not intended for children under 13, and Ancestry states it does not knowingly collect data from children under 13 without parental consent....
Why it matters: Family history and DNA services may appeal to younger users or be used with family involvement. Understanding the age restriction and parental consent requirements is important for families using these services....
-
Ancestry
· Ancestry Privacy Statement
EU and UK users have legal rights to access, correct, delete, and port their data, and to object to certain processing. They can also complain to their local data protection authority....
Why it matters: GDPR provides the strongest set of consumer data rights of any applicable framework in this policy. EU and UK users have enforceable rights including the right to erasure and data portability, backed by regulatory authority....
-
Segment
· Segment Terms of Service
Twilio owns the platform and its technology; you own your data. You only get the rights to use the platform that are specifically stated in the agreement....
Why it matters: The terms establish that customer data ownership is retained by the customer, while Twilio retains all platform intellectual property, and that the license granted to customers is limited to what is explicitly stated in the agreement....
-
Strava
· Strava Terms of Service
Any ideas or suggestions you share with Strava, including bug reports or feature requests, can be used by Strava in any way and forever, without paying you or crediting you....
Why it matters: If you suggest a feature or product idea to Strava, you permanently give up any claim to that idea, including any potential intellectual property or compensation rights....
-
Netflix
· Netflix Terms of Use
Any feedback, ideas, or reviews you send to Netflix can be used by Netflix indefinitely, worldwide, and without any compensation to you....
Why it matters: If you submit ideas, suggestions, or creative input to Netflix through any channel, Netflix may use that content freely and permanently without any obligation to credit or compensate you, even if the idea is later incorporated into a commercial product or feature....
-
Luma AI
· Luma AI Privacy Policy
If you are in the EU or UK, you have the right to access, correct, delete, restrict, or export your personal data, and to complain to your national data protection authority....
Why it matters: EEA and UK users have legally backed rights to control their personal data held by Luma, including the right to request deletion and to lodge a regulatory complaint if those rights are not respected....
-
Luma AI
· Luma AI Privacy Policy
Luma keeps your personal data for as long as it is needed for its stated purposes, though specific retention periods are not defined in the policy....
Why it matters: The policy does not specify concrete retention periods for different categories of data, meaning users cannot easily determine how long their uploaded content, conversations, or account data will be held....
-
Asana
· Asana Terms of Service
You cannot use Asana for illegal activity, scrape the platform with automated tools, or resell access to the service to others....
Why it matters: Violations of these terms can result in immediate account termination, which is particularly significant for organizations that rely on Asana for core business operations....
-
Shein
· Shein Privacy Policy
The SHEIN page code references a Global Privacy Control setting with a link to the privacy policy, suggesting the platform may honor GPC opt-out signals from compatible browsers....
Why it matters: Under California's CPRA, businesses that sell or share personal information are required to honor GPC browser signals as a valid opt-out of data sale and sharing. If implemented correctly, this would automatically apply opt-out status for California users with GPC-enabled browsers....
-
Medium
· Medium Privacy Policy
When you pay for a Medium subscription or other purchase, Medium collects your card number and billing details and passes this through a third-party payment processor....
Why it matters: Your financial data is involved in this transaction, and understanding that it flows through a third-party processor helps you assess the security and privacy risks associated with paying on the platform....
-
Medium
· Medium Privacy Policy
If you sign into Medium using Google, Facebook, or another third-party account, Medium receives personal information from that service about you, such as your name and email address....
Why it matters: Linking a third-party account to Medium means that data flows from that platform to Medium, potentially expanding the scope of personal information Medium holds about you beyond what you provided directly....
-
YouTube
· YouTube Community Guidelines
YouTube states it may allow content that would otherwise violate its guidelines if that content has clear educational, documentary, scientific, or artistic value, or serves the public interest....
Why it matters: The EDSA exception is relevant to journalists, educators, researchers, and documentary creators who may need to include sensitive material in their content and want to understand the limits of what is permitted....
-
YouTube
· YouTube Community Guidelines
YouTube is a founding member of the Global Internet Forum to Counter Terrorism and works with other tech companies to prevent terrorist content from spreading online....
Why it matters: GIFCT membership involves sharing data or signals about harmful content across platforms, which has implications for how content and potentially account information may be shared with third-party technology companies outside of YouTube's direct data sharing policies....
-
Duolingo
· Duolingo Terms of Service
Duolingo makes no guarantees that the app will work properly, be available when you need it, or be fit for your particular purpose — you use it at your own risk....
Why it matters: If the service goes down, contains errors, or fails to meet your learning needs, you generally cannot hold Duolingo responsible for any resulting harm under this clause....
-
Duolingo
· Duolingo Terms of Service
All legal disputes with Duolingo are governed by Pennsylvania law and must be brought in Pennsylvania courts, regardless of where you live....
Why it matters: For non-Pennsylvania users, this means any court proceeding (outside of arbitration) would require litigating in Pennsylvania, which is a practical barrier for most users and is not enforceable against consumers in all jurisdictions....
-
Snowflake
· Snowflake Privacy Notice
This page is a navigation index that links to Snowflake's individual legal documents rather than containing substantive policy terms itself....
Why it matters: Because the substantive legal terms are distributed across linked documents rather than consolidated here, users and compliance teams must access each linked document separately to understand the full scope of Snowflake's policies....
-
Snowflake
· Snowflake Privacy Notice
The legal hub references ESG (Environmental, Social, and Governance) commitments as part of Snowflake's customer-facing legal resource library....
Why it matters: The inclusion of ESG materials in the legal hub suggests Snowflake treats certain ESG commitments as customer-relevant disclosures, which may be relevant to enterprise procurement processes with ESG supplier requirements....
-
TikTok Ads
· TikTok Privacy Policy
TikTok can access the content of your device's clipboard (copied text, images, or videos) when you use certain features, such as pasting or sharing content....
Why it matters: Clipboard content can include sensitive information such as passwords, bank account numbers, personal notes, or other data copied from other apps that is incidentally accessible during a TikTok action....
-
Waze
· Waze Terms of Use
Waze can change, suspend, or shut down the app or your account at any time, with or without telling you in advance....
Why it matters: Users who rely on Waze for navigation have no contractual guarantee of continued service access, and accounts can be terminated without advance notice for violations of the Terms....
-
Waze
· Waze Terms of Use
Everything in the Waze app, including the maps, software, graphics, and other users' contributions, is owned by Waze or its licensors, not by you....
Why it matters: This clause makes clear that users do not acquire any ownership rights in the Waze platform or its maps by using the service or contributing data....
-
Weights & Biases
· Weights & Biases Terms of Service
You keep ownership of the data you upload and any IP you had before using W&B, but W&B owns the platform itself and any improvements it makes, including improvements based on feedback you give them....
Why it matters: If your organization provides suggestions or feedback about how to improve the W&B platform, W&B may own those improvements without compensation; this is standard in SaaS but worth noting for organizations with proprietary methodology insights embedded in their feedback....
-
Threads
· Threads Terms of Use
Meta can update these terms at any time and will notify you before changes take effect; if you keep using Threads after the update, you automatically agree to the new terms....
Why it matters: Continued use of Threads after a terms update constitutes acceptance of the new terms, meaning changes to how your data is used or your rights can take effect without you actively consenting to each change....
-
Threads
· Threads Terms of Use
Any legal dispute with Meta over Threads will be governed by California law, regardless of where you live....
Why it matters: Designating California law as the governing law may affect what consumer rights and remedies are available to users in other states or countries, though this clause may not override mandatory local law protections in some jurisdictions....
-
Threads
· Threads Terms of Use
Meta provides Threads without any guarantees about reliability, safety, or performance, and you use the service at your own risk....
Why it matters: This clause limits Meta's legal exposure if Threads experiences outages, data breaches, or other failures, meaning your ability to seek compensation for resulting harm may be restricted....
-
Coursera
· Coursera Privacy Notice
Coursera may share your personal data with government agencies or courts if legally required to do so....
Why it matters: Users should be aware that their personal data, including learning activity and communications, may be disclosed to law enforcement or government authorities in response to legal process....