Provisions Index

Strava shares your personal information with advertising and analytics partners, which may constitute a 'sale' or 'sharing' of data under California and other US state privacy laws....

Why it matters: Your activity patterns, demographics, and usage data may be shared with external advertising networks to deliver targeted ads, which could expose your personal information to entities outside Strava's control....

To use core Strava features like activity tracking, routes, and segments, you must grant Strava permission to access your device's precise GPS location at all times....

Why it matters: Granting always-on precise location access means Strava continuously tracks your physical movements, which is among the most sensitive categories of personal data and can reveal your home, workplace, and daily routines....

Strava's Flyby feature and Beacon feature can share your live or recent location data with other users, allowing them to see where you were during an activity or where you are in real time....

Why it matters: These features can expose your precise real-time or recent location to other Strava users, including your home start/end point, which poses significant personal safety risks especially for vulnerable users....

Uber continuously collects your precise GPS location data while you are active on the platform, including during trips and deliveries, and may also collect location data when the app is running in the background....

Why it matters: Continuous location surveillance creates a detailed record of your movements that is shared with riders, other users, and third parties, raising significant privacy concerns....

Uber uses facial recognition technology to verify your identity as a driver or delivery person, collecting and processing biometric data including photographs and facial geometry....

Why it matters: Biometric data is among the most sensitive personal information and, unlike passwords, cannot be changed if compromised. Uber's collection and processing of this data creates significant and lasting privacy risks....

Uber uses automated systems to make decisions about your account, including whether you can continue using the platform, based on your behavior, ratings, and other data....

Why it matters: Automated decisions can result in account suspension or deactivation without human review, directly affecting your ability to earn income through the platform....

Uber may share your personal data with law enforcement, government agencies, or courts in response to legal requests, and may do so without notifying you in advance....

Why it matters: Your location history, communications, financial details, and other personal data can be handed to government authorities without you knowing it has happened....

Uber shares your personal information with third-party background check providers to screen you before and during your time on the platform, and these providers receive sensitive personal data including criminal history....

Why it matters: Background check data is highly sensitive and its collection and sharing with third parties is governed by the Fair Credit Reporting Act (FCRA), which gives you specific rights including the right to dispute inaccurate information....

If you have a dispute with Bumble, you must resolve it through private arbitration rather than going to court, and you cannot join a class action lawsuit with other users. You have 30 days after agreeing to these Terms to opt out....

Why it matters: This provision significantly limits your legal rights — you give up the ability to sue Bumble in court or participate in a class action, which is often the only practical way to hold a large company accountable for small harms....

When you upload photos, text, or other content to Bumble, you give Bumble a permanent, worldwide, free license to use, copy, modify, distribute, and display that content in any way, including in advertising....

Why it matters: This means Bumble can use your photos and profile content indefinitely and for a wide range of commercial purposes, even after you delete your account, as content may persist in derivative works....

Bumble can suspend or terminate your account at any time, for any reason it deems fit, without giving you notice and without issuing a refund for any paid subscription time remaining....

Why it matters: Users can lose access to a paid service without compensation and without a clear or objective standard being applied, leaving them with limited recourse....

Even if you mark your content as private, Hugging Face reserves the right to access it with or without your consent for security purposes or to comply with legal obligations....

Why it matters: Content you believe is private may be accessed by Hugging Face employees or systems without notifying you, particularly for security investigations or regulatory compliance....

If you are a US or Canadian user, you must resolve almost all disputes with Taskrabbit through private arbitration rather than in a court of law. This also means you cannot join a class action lawsuit against Taskrabbit....

Why it matters: Arbitration removes your ability to sue in court and prevents you from joining together with other affected users in a class action, which is often the only practical way to hold large companies accountable for widespread harms....

Taskrabbit limits its financial responsibility to you to the lesser of the amount you paid for a specific task or $100. Taskrabbit is not responsible for indirect damages, personal injury, property damage, or most other losses arising from use of the platform....

Why it matters: If something goes wrong during a task — injury, property damage, or financial loss — this clause means Taskrabbit's maximum payout to you is capped at $100 or your task fee, leaving you to bear most of the financial consequences....

You agree to pay Taskrabbit's legal costs and damages if a third party sues Taskrabbit because of something you did or content you posted on the platform....

Why it matters: This clause shifts significant legal and financial risk onto ordinary users — if your actions on the platform result in a lawsuit against Taskrabbit, you could be personally responsible for Taskrabbit's legal fees and settlements....

Taskrabbit can suspend or permanently close your account at any time, for any reason, with or without notice, including if it believes you have violated the terms or pose a safety risk....

Why it matters: Taskrabbit has broad unilateral power to end your access to the platform without warning, which for Taskers could mean immediate loss of income with no appeal process clearly guaranteed....

Taskrabbit does not verify Tasker skills, licenses, or qualifications, and is not responsible for the quality, safety, or legality of any task performed. Background check badges do not guarantee a Tasker is safe or qualified....

Why it matters: Despite facilitating the connection between Clients and Taskers, Taskrabbit accepts no responsibility for what happens during a task — including property damage, injury, or fraud — leaving consumers to bear those risks independently....

Taskers are classified as independent contractors, not employees of Taskrabbit. This means Taskrabbit does not pay benefits, workers' compensation, or taxes on behalf of Taskers....

Why it matters: Taskers do not receive employment protections such as minimum wage guarantees, overtime pay, health benefits, or workers' compensation through Taskrabbit, which can leave them financially vulnerable if they are injured or lose work....

If you have a dispute with Target, you must resolve it through private arbitration rather than a public court trial. This applies to nearly all disputes arising from your use of Target's website, app, or services....

Why it matters: Arbitration is a private process that often favors businesses over consumers and limits your ability to appeal decisions. You lose your right to a jury trial and to have your case heard publicly....

You agree to give up your right to join a class action lawsuit against Target. All claims must be brought individually through arbitration, not as part of a group....

Why it matters: Class action lawsuits are often the only economically viable way for consumers to challenge widespread corporate wrongdoing when individual damages are small. Waiving this right significantly reduces corporate accountability....

Verizon requires customers to resolve most disputes through binding arbitration rather than in court, and customers waive their right to join class-action lawsuits against Verizon....

Why it matters: This clause significantly limits your ability to hold Verizon accountable through the court system, including preventing you from joining other customers in a collective lawsuit....

Verizon collects information about how you use your device and services, which may be shared with affiliates and third parties for advertising and other purposes....

Why it matters: Your browsing habits, location data, and usage patterns may be used for targeted advertising or shared with partners, which has direct privacy implications....

California residents have additional rights under the CCPA/CPRA, including the right to know what data Verizon collects, request deletion, and opt out of the sale or sharing of personal information....

Why it matters: California residents have stronger legal protections than most other US customers, including the right to delete their data and stop Verizon from selling or sharing it with third parties....

Disputes between Slack and its customers must be resolved through individual arbitration rather than in court, and customers give up their right to join class-action lawsuits against Slack....

Why it matters: This provision removes your organization's ability to sue Slack in court or participate in a class action, which can significantly limit legal remedies in the event of a serious dispute....

Slack's total financial liability to a customer for any claim is capped at the amount the customer paid Slack in the 12 months before the claim arose....

Why it matters: If Slack causes significant harm — such as a data breach affecting your organization — your ability to recover damages is strictly limited to what you paid Slack in the past year, regardless of actual losses....

For customers whose use of Slack involves processing personal data under GDPR or similar laws, Slack offers a Data Processing Addendum that must be separately executed to govern that data processing....

Why it matters: Organizations subject to GDPR or CCPA must ensure they have an executed DPA with Slack; without it, their use of Slack for personal data processing may not comply with applicable privacy law....

If you have a legal dispute with DocuSign, you must resolve it through binding arbitration rather than going to court, and you cannot join a class action lawsuit against the company....

Why it matters: This provision removes your right to sue DocuSign in court and prevents you from joining other users in a collective legal action, significantly limiting your legal recourse if something goes wrong....

DocuSign's total financial responsibility to you for any claims is capped at the amount you paid them in the 12 months before the claim arose — regardless of how serious the harm was....

Why it matters: Even if DocuSign causes significant harm — such as a data breach affecting your legally binding documents — your ability to recover financial compensation is severely restricted....

You agree to protect DocuSign from any legal claims or costs that arise from your use of the service, including claims brought by third parties....

Why it matters: This clause means you could be personally responsible for legal fees and damages that DocuSign faces because of how you use the platform, including mistakes or misuse of electronic signature workflows....

Redfin shares your personal information with advertising partners and on social media platforms to show you targeted ads, both on Redfin and on other websites and apps....

Why it matters: Your browsing behavior, property searches, and account data may be used to build an advertising profile and shared with third-party ad networks beyond Redfin's direct control....

If you use Redfin to buy or sell a home, Redfin collects detailed financial information including loan pre-approval documents, payment information, and property-related financial disclosures....

Why it matters: This is among the most sensitive personal and financial data a consumer can share, and its collection, storage, and potential sharing with partners warrants careful attention....

Privacy disputes are not governed solely by this policy — Redfin's Terms of Use, which include arbitration clauses and limits on damages, also apply to privacy-related disputes....

Why it matters: By using Redfin, you may be agreeing to resolve privacy disputes through arbitration rather than in court, and your ability to recover damages may be limited — even though these terms are not spelled out in the privacy policy itself....

Figma may use the data generated from your use of their services — including your design content and interactions — to train and improve their artificial intelligence and machine learning models....

Why it matters: This means your creative work and usage patterns could directly feed into commercial AI products, potentially without you being aware of the full scope of this use....

Figma shares your personal data with advertising partners so that you can be shown targeted advertisements based on your activity and profile....

Why it matters: Your usage data and personal information may be shared with external ad networks, meaning third parties beyond Figma gain access to your behavioral data....

Instead of going to court, you must resolve any legal dispute with Riot Games through binding individual arbitration, meaning a private arbitrator — not a judge or jury — decides the outcome....

Why it matters: This removes your right to sue Riot Games in court, including joining a class action lawsuit with other affected players, which can make it much harder to pursue small or individual claims....

You agree to resolve disputes with Riot Games only on an individual basis and give up the right to participate in any class action or group lawsuit....

Why it matters: Class actions allow many consumers to pool resources and take on large corporations together; waiving this right means each player must fight individually, which is often impractical for small financial disputes....

Any virtual currency or items you purchase in Riot Games (like Riot Points or in-game skins) are not owned by you — Riot grants you a limited license to use them, and they have no real-world monetary value....

Why it matters: This means Riot can remove, change, or eliminate your virtual items and currency without compensation, even if you paid real money for them....

Riot Games can suspend or permanently ban your account at any time and for any reason, including for violations of their rules, without prior warning or obligation to refund any purchases....

Why it matters: If your account is banned — even incorrectly — you lose access to all games, progress, and purchased content with no guaranteed right to a refund or appeal....

Riot Games limits its total financial liability to you to $100 or the amount you paid them in the six months before the dispute, whichever is greater....

Why it matters: No matter how much money you have spent on Riot Games products or how significant the harm, Riot's maximum legal exposure to you is capped at $100 or six months of payments....

The Terms of Service prohibit you from initiating a chargeback (reversing a credit card charge) for purchases made on Riot's platform, and doing so may result in account suspension....

Why it matters: Chargebacks are a key consumer protection tool for disputing unauthorized or fraudulent charges; prohibiting them removes a fundamental financial safeguard for players....

Square shares your personal and financial data with affiliates, service providers, and business partners for purposes including service delivery, marketing, and advertising....

Why it matters: Your financial and behavioral data can be shared broadly beyond Square itself, potentially with advertising networks and data brokers, affecting your privacy....

California residents have the right to opt out of Square selling or sharing their personal information with third parties for cross-context behavioral advertising....

Why it matters: This gives California users a legally enforceable right to stop their data from being used for targeted advertising, which can limit unwanted profiling....

Square uses your personal data, including transaction and behavioral data, to deliver targeted advertisements and to build profiles about your preferences and interests....

Why it matters: Square may use your spending habits and financial behavior to build advertising profiles and deliver targeted ads, which may feel intrusive and is not always transparent to users....

Square collects sensitive personal information such as financial account details, government IDs, and precise geolocation, and uses it for service delivery and compliance purposes....

Why it matters: Collection of sensitive data like government IDs and financial account numbers increases privacy risk, and under California law you have the right to limit how this data is used....

When you connect your bank account through an app powered by Plaid, you authorize Plaid to access your financial data — including account numbers, balances, and transaction history — and share it with the requesting application....

Why it matters: This authorization is the core of Plaid's entire business model and determines exactly what banking information third-party apps can see about you....

Plaid shares your financial data with the third-party app developers who use Plaid's API, and those developers are governed by their own separate terms of service with Plaid....

Why it matters: Your financial data doesn't stay with Plaid — it flows to the app you're connecting to, and Plaid's agreements with those developers (not your direct agreement) govern how they must handle it....

Plaid limits how much it can be held financially responsible if something goes wrong — such as a data breach or unauthorized access to your financial information — typically capping damages at a relatively low amount....

Why it matters: If Plaid's systems are compromised and your financial data is exposed, this clause may significantly restrict your ability to recover meaningful compensation....

Disputes between you and Plaid may be required to go through private arbitration rather than a court, and you may be giving up your right to join a class action lawsuit....

Why it matters: Mandatory arbitration clauses prevent consumers from suing Plaid in court and from joining together with other consumers in class action lawsuits, which are often the only practical way to pursue claims against large companies....

Headspace acts as a 'business associate' under HIPAA for its Care Providers (therapists, psychiatrists), meaning your health information from therapy or psychiatry sessions is subject to federal health privacy rules. Your Care Provider may give you a separate HIPAA Notice of Privacy Practices....

Why it matters: HIPAA provides important federal protections for your health data collected during clinical services, and knowing Headspace is covered means you have specific federal rights over that data....

For users in states with consumer health data laws (like Washington's My Health MY Data Act), Headspace has a separate Consumer Health Data Privacy Policy that provides additional protections for your health-related personal information beyond what standard privacy laws require....

Why it matters: State consumer health data laws give you stronger rights over sensitive health information collected outside traditional medical settings — including wellness apps — so this provision expands your protections significantly....