-
Stripe
· Stripe Restricted Businesses List
The policy prohibits or restricts the sale of certain firearms, firearms parts, ghost guns, silencers, and related items through Stripe's payment processing, with licensed firearms dealers potentially eligible for restricted status requiring prior written approval....
Why it matters: This provision affects firearms retailers and related merchants by conditioning their access to Stripe's payment processing on the specific products sold and applicable licensing; the inclusion of ghost guns and certain parts components creates a compliance obligation that requires product-level assessment, not just business-type assessment....
-
Stripe
· Stripe Restricted Businesses List
The policy restricts or prohibits pharmacies, prescription drug sales, drug paraphernalia, and products that mimic illegal drug effects from accessing Stripe's payment processing, with licensed pharmacies potentially eligible for restricted status subject to prior written approval....
Why it matters: This provision requires pharmaceutical merchants and supplement sellers to evaluate whether their products fall within the restricted or prohibited category before onboarding, particularly given the broad framing of substances that mimic illegal drug effects, which may affect certain nutraceutical and hemp-derived product sellers....
-
Stripe
· Stripe Restricted Businesses List
The policy states that the specific categories of prohibited and restricted businesses may differ across the countries in which Stripe operates, and users are directed to consult country-specific versions of the policy for jurisdiction-applicable restrictions....
Why it matters: This provision establishes that the prohibited and restricted category determinations are not globally uniform, requiring businesses operating across multiple Stripe markets to conduct jurisdiction-by-jurisdiction policy review to determine their eligibility in each market....
-
Writer
· Writer Terms of Service
This provision requires users to indemnify and defend Writer, its officers, directors, employees, and agents against any third-party claims, damages, and costs arising from the user's access to or use of the services, their submitted content, or their violation of the terms....
Why it matters: This indemnification clause places financial and legal defense obligations on users in the event that their content or platform use gives rise to third-party claims against Writer, including costs of legal proceedings and accounting fees. Enterprise customers should assess whether this obligation is consistent with their own risk and liability frameworks....
-
Writer
· Writer Terms of Service
This provision lists prohibited activities including automated scraping, excessive automated access, spam transmission, interference with system security, and any action that Writer determines, at its sole discretion, imposes an unreasonable load on its infrastructure....
Why it matters: The provision grants Writer sole discretion to determine what constitutes an unreasonable or disproportionate load on its infrastructure, which creates an operationally uncertain standard for API and automated platform users. Violation of these terms can result in account suspension or termination as specified elsewhere in the agreement....
-
Monitoring
These provisions have changed before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
-
Writer
· Writer Terms of Service
This provision authorizes Writer to terminate or suspend user access to the platform at any time, with or without cause and without prior notice, effective immediately....
Why it matters: The terms authorize immediate termination or suspension without cause or notice, which creates operational continuity risk for enterprise customers whose business processes depend on platform availability. The absence of a required notice period or cause standard is operationally significant for users with active workflows or stored data on the platform....
-
Writer
· Writer Terms of Service
This provision asserts that the Writer platform, its contents, features, and functionality are owned by Writer or its licensors and are protected by US and international intellectual property laws....
Why it matters: This clause establishes Writer's IP ownership over the platform and its outputs, which is relevant to enterprise customers who need to assess ownership of AI-generated content produced through the service. The interaction between this provision and the user content license and AI output provisions should be evaluated by legal teams....
-
Amazon
· Amazon Conditions of Use
This provision states that Amazon may revise the Conditions of Use at any time, and that continued use of Amazon services after changes are posted constitutes acceptance of the revised terms....
Why it matters: This clause establishes a unilateral modification mechanism under which updated terms take effect upon posting, with no affirmative acceptance required from users beyond continued use. Compliance teams should assess whether this mechanism satisfies affirmative consent requirements under applicable consumer protection and data protection frameworks....
-
Amazon
· Amazon Conditions of Use
This provision asserts Amazon's ownership over all content and compiled materials on its services and grants users a limited, personal, non-commercial license to access that content. Commercial use or unauthorized reproduction is not permitted under this license....
Why it matters: This clause establishes the scope of the user license as personal and non-commercial, and asserts Amazon's ownership over content compilations and platform materials. Users or businesses that seek to scrape, reproduce, or commercially exploit Amazon content operate outside the scope of this license....
-
Amazon
· Amazon Conditions of Use
This provision prohibits use of Amazon services by children under 13, requires parental involvement for users under 18, and states that Amazon does not knowingly collect personal information from children under 13 without parental consent....
Why it matters: This clause engages COPPA compliance obligations by asserting that Amazon does not knowingly collect data from children under 13 without consent, and establishes an age restriction requiring parental involvement for minors under 18....
-
Amazon
· Amazon Conditions of Use
This provision specifies that Washington State and applicable federal law govern the Conditions of Use and all disputes between users and Amazon, without regard to conflict of laws principles....
Why it matters: This clause selects Washington State as the governing jurisdiction for all disputes and contract interpretation, which may limit users in other states from invoking home-state consumer protection statutes in contract disputes with Amazon....
-
Amazon
· Amazon Conditions of Use
This provision incorporates Amazon's Privacy Notice by reference as a governing document applicable to all users, directing users to review that document to understand Amazon's data collection and use practices....
Why it matters: By incorporating the Privacy Notice by reference, the Conditions of Use make data collection and processing terms part of the binding agreement, and changes to the Privacy Notice may affect user rights and data handling obligations without separate notification under the Conditions of Use modification clause....
-
Amazon
· Amazon Conditions of Use
This provision lists categories of prohibited user conduct on Amazon's platforms, including unlawful activity, IP infringement, harmful content transmission, and unauthorized system access....
Why it matters: This clause establishes the operational boundaries for permissible use of Amazon services and provides contractual grounds for account suspension or termination in the event of prohibited conduct....
-
Threads
· Threads Privacy Policy
The policy authorizes Meta to share user data collected on Threads with advertisers, analytics and measurement companies, and service providers, for purposes including advertising delivery, measurement, and product improvement....
Why it matters: This provision establishes that personal data collected on Threads, including behavioral and interaction data, is shared with categories of third parties beyond Meta's own products, including external advertisers and measurement vendors. The breadth of the partner categories listed means user data may flow to entities outside Meta's direct operational control....
-
Threads
· Threads Privacy Policy
The policy states that Threads collects location-related data including GPS-derived location and IP address-derived location signals from user devices....
Why it matters: This provision establishes that location data, including precise GPS location where device permissions allow, is collected and available for use in advertising targeting, personalization, and other purposes described in the policy. Location data combined with behavioral and identity data can enable granular profiling....
-
Threads
· Threads Privacy Policy
The policy states that Meta retains user data for as long as necessary to provide services, meet legal obligations, or fulfill stated legitimate purposes including safety and security, without specifying fixed retention periods for most data categories....
Why it matters: This provision establishes that data retention timelines are determined by Meta based on operational and legal necessity criteria rather than fixed periods disclosed to users, which has implications for the operability of deletion requests and data minimization compliance under GDPR and CCPA/CPRA....
-
Threads
· Threads Privacy Policy
The policy states that users may have rights to access, correct, and delete their personal information, subject to applicable law and jurisdictional conditions, and directs users to Meta's Privacy Center and account settings to exercise these rights....
Why it matters: This provision establishes that the availability of data subject rights is conditional on applicable law and user location, which means the scope of exercisable rights varies by jurisdiction. The conditional framing means US users in states without comprehensive privacy laws may have more limited rights than EU/EEA or California users....
-
Threads
· Threads Privacy Policy
The policy states that Threads is not designed for users under 13 years of age and that Meta does not knowingly collect personal information from children under 13....
Why it matters: This provision establishes the minimum age threshold for Threads consistent with COPPA requirements in the US, and creates an obligation on Meta not to knowingly collect data from users below this age. The operational effectiveness of this restriction depends on the age verification mechanisms Meta employs at account creation....
-
Threads
· Threads Privacy Policy
The policy states that Threads collects device identifiers, operating system information, device attributes, device signals, network and connection data, cookie data, and behavioral signals from all connected devices used to access the platform, and that this information is combined across devices....
Why it matters: This provision establishes that Meta collects a broad set of device-level and network-level identifiers and signals from Threads users across all devices, and combines this data across devices. Cross-device identity linking enables persistent tracking of user behavior across sessions, devices, and contexts beyond the Threads application itself....
-
Medium
· Medium Privacy Policy
The policy states that Medium collects account registration data including name, email address, password, and payment method information directly from users, and separately collects device identifiers, IP addresses, browser type, operating system, referral URLs, and behavioral data such as reading history and search queries through automated means....
Why it matters: This provision establishes the categories of personal data Medium collects across both direct user input and automated technical collection, which determines the scope of data subject rights requests under GDPR and CCPA and informs the data mapping obligations of any organization assessing Medium as a data processor or service....
-
Medium
· Medium Privacy Policy
The policy authorizes sharing of personal information with third-party vendors and service providers for purposes including payment processing, data analysis, email delivery, hosting, customer service, and marketing, without specifying a complete list of named providers or requiring user notification prior to each sharing event....
Why it matters: This provision establishes the contractual basis under which Medium transfers personal data to external parties for operational purposes, which implicates GDPR Article 28 data processor agreement requirements and CCPA business-purpose sharing disclosure obligations....
-
Medium
· Medium Privacy Policy
The policy states that personal information may be shared or transferred in connection with a merger, asset sale, financing, or acquisition of Medium, including during the negotiation phase of such transactions, with user notification described as prominent notice or direct communication....
Why it matters: This provision establishes that personal data may be disclosed to prospective acquirers or transaction counterparties prior to deal completion, which creates data exposure outside Medium's direct operational relationships and may engage GDPR requirements for lawful transfer basis during pre-transaction due diligence....
-
Medium
· Medium Privacy Policy
The policy states that for EEA users, Medium processes personal data on the legal bases of consent, contract performance, legitimate interests, or legal obligation under GDPR, without specifying in the policy text which legal basis applies to each individual processing activity....
Why it matters: This provision establishes the claimed legal bases for EEA data processing, but the absence of a processing activity-level mapping to specific legal bases may present a compliance gap relative to GDPR accountability and transparency requirements enforced by EU supervisory authorities....
-
Medium
· Medium Privacy Policy
The policy states that California residents hold rights under CCPA to know about, delete, and opt out of the sale of their personal information, and have a right to non-discrimination for exercising these rights, with opt-out available via a designated link....
Why it matters: This provision establishes the operational mechanisms through which California residents can exercise CCPA and CPRA rights, including the opt-out of data sale or sharing, which is a concrete and time-sensitive entitlement available to a defined user population....
-
Medium
· Medium Privacy Policy
The policy authorizes Medium and third-party partners to use cookies, web beacons, and similar technologies to collect usage information and deliver targeted advertising, and permits third parties to independently collect information about user online activities through these technologies on Medium's platform....
Why it matters: This provision establishes that third-party tracking for targeted advertising is permitted on Medium's platform, which engages GDPR consent requirements under the ePrivacy Directive and CCPA opt-out obligations for cross-context behavioral advertising under CPRA....
-
Medium
· Medium Privacy Policy
The policy states that personal information may be transferred to and stored on computers outside a user's home jurisdiction, including to jurisdictions with less protective privacy laws, without specifying the transfer mechanisms used to safeguard EEA personal data....
Why it matters: The policy's disclosure of cross-border data transfers without specifying the legal mechanism used for EEA transfers, such as Standard Contractual Clauses or an adequacy decision, creates a compliance documentation gap relevant to GDPR Chapter V requirements enforced by EU supervisory authorities....
-
Wise
· Wise Terms of Use
The agreement authorizes Wise to suspend or terminate user accounts at any time, including without prior notice, for a range of specified reasons including regulatory requirements, fraud risk, identity verification failures, and law enforcement requests....
Why it matters: This provision grants Wise broad discretion to restrict or terminate account access without advance notice, which may interrupt users' ability to access funds held in multi-currency balances or complete pending transfers....
-
Wise
· Wise Terms of Use
The agreement authorizes Wise to hold funds in a user's account or reverse transactions where Wise determines there is an elevated risk of fraud or financial crime, or where required by law or regulation....
Why it matters: This provision authorizes Wise to restrict access to account funds held in multi-currency balances without specifying the maximum duration of a hold or the procedural steps required before funds are released, which creates operational uncertainty for users depending on those funds....
-
Wise
· Wise Terms of Use
The agreement states that the exchange rate applied to transfers is determined at the time of execution, that fees and rates are disclosed before confirmation, and that Wise reserves the right to change fees and rates at any time....
Why it matters: This provision establishes that exchange rates are locked at execution rather than at initiation, and that Wise may change its fee schedule at any time, which affects users' ability to predict the cost of transactions initiated in the future....
-
Wise
· Wise Terms of Use
The agreement prohibits use of Wise services for illegal activities, transactions involving sanctioned parties, and categories of restricted activities listed in the Acceptable Use Policy, with violations potentially resulting in immediate account suspension....
Why it matters: This provision establishes the acceptable use framework that governs account eligibility and may trigger immediate suspension or termination if Wise determines a user has violated the stated restrictions....
-
Wise
· Wise Terms of Use
The agreement designates Delaware law as governing and Delaware courts as the exclusive forum for any disputes that are not subject to the arbitration clause....
Why it matters: This provision establishes that Delaware law governs the agreement and that any non-arbitrated disputes must be litigated in Delaware courts, which may create practical barriers for users located in other states....
-
Wise
· Wise Terms of Use
The agreement states that Wise may amend its terms at any time by posting updated terms on its website, with notice of material changes provided by email or website posting, and continued service use constituting acceptance of amended terms....
Why it matters: This provision establishes that continued use of the service after an amendment's effective date constitutes acceptance of updated terms, which means users who do not review amendment notices and discontinue use may be bound by materially changed terms....
-
Kindle
· Kindle Store Terms of Use
The agreement states that purchasing Kindle Content grants only a limited, personal, non-transferable license to access the content, and that the user does not acquire ownership. The license is restricted to authorized Kindle devices and personal non-commercial use....
Why it matters: This provision establishes that consumers who pay for Kindle Content hold a revocable license rather than a transferable ownership interest, meaning rights associated with ownership such as resale, transfer, or permanent retention are not granted under these terms. The enforceability of the license-not-sale characterization for digital goods is subject to evolving legislative and regulatory scrutiny in multiple U.S. states and the EU....
-
Kindle
· Kindle Store Terms of Use
The agreement reserves Amazon's right to modify, suspend, or discontinue the Kindle Service or any Kindle Content delivered to a user's device at any time without prior notice. Amazon states it will not be liable to users for such changes....
Why it matters: This provision authorizes Amazon to alter or remove content from user devices after purchase without advance notice and without incurring liability under the terms, which operationally affects the reliability of access to paid digital content. The scope of this reservation interacts with consumer protection frameworks that may limit disclaimer of liability for failure to deliver paid-for services....
-
Kindle
· Kindle Store Terms of Use
The agreement states that any content users submit in connection with Kindle services, including reviews, lists, and discussion posts, is subject to a perpetual, irrevocable, royalty-free, and sublicensable license granted to Amazon for global use across any media. Users receive no compensation for this license....
Why it matters: This provision grants Amazon a perpetual and irrevocable right to use, modify, and sublicense user-submitted content including customer reviews and annotations without compensation or defined scope limitation. The breadth and irrevocability of this license may warrant review by users who submit substantial original content through Kindle services....
-
Kindle
· Kindle Store Terms of Use
The agreement states that violation of any term results in immediate termination of service access without notice, and that account closure or termination may result in permanent loss of licenses to all Kindle Content previously accessed or purchased. Amazon retains discretion to determine what constitutes a violation....
Why it matters: This provision establishes that termination of an account, whether initiated by Amazon or the user, may result in loss of access to all Kindle Content licenses, including content for which payment was made. The scope of triggering conditions and the absence of a mandatory notice period before access revocation are operationally significant for users with large Kindle libraries....
-
Kindle
· Kindle Store Terms of Use
The agreement requires that disputes related to the Kindle service or Kindle Content be resolved through binding individual arbitration rather than court proceedings, with a limited exception for qualifying small claims court actions. The Federal Arbitration Act governs the arbitration clause....
Why it matters: This provision requires users to resolve disputes with Amazon through individual binding arbitration rather than litigation, which precludes class action proceedings except as otherwise stated. The application of the Federal Arbitration Act is asserted as the governing framework for the arbitration clause....
-
Luma AI
· Luma AI Terms of Service
Paid-tier users grant Luma a worldwide, irrevocable, royalty-free license with sublicensing rights to use and store their uploaded content for AI model training, product development, and aggregated data compilation during an active subscription. The license is perpetual and irrevocable with respect to Input already incorporated into outputs, usage data, or aggregated data....
Why it matters: This provision establishes that even paid subscribers' Input is licensed for AI model training purposes on a perpetual and irrevocable basis once incorporated into Luma's systems. The sublicensing right through multiple tiers means third parties may receive derivative rights to this Input....
-
Luma AI
· Luma AI Terms of Service
The agreement prohibits using the Services or generated Output for commercial purposes unless the user holds a subscription that specifically permits commercial use as described in Section 4.9. Competing with Luma using the Output is also prohibited....
Why it matters: This provision establishes that commercial use of Output is gated behind a specific subscription tier. Users on free-tier plans who use Output commercially without an appropriate subscription may be in breach of the agreement, which could trigger suspension or termination of access....
-
Luma AI
· Luma AI Terms of Service
The agreement asserts that Luma owns all rights to aggregated and usage data derived from users' interactions with the Services, including all analytical results, know-how, and any new products or improvements developed from that data....
Why it matters: This provision establishes Luma's ownership over aggregated and usage data, including all products and services developed from that data. The scope includes improvements to Services made using aggregated or usage data derived from customer activity....
-
Luma AI
· Luma AI Terms of Service
The agreement prohibits users under 13 from accessing the Services and requires users between 13 and 18 to have parental or guardian consent. Luma states it does not knowingly collect personal information from children under 13 and will delete such information if discovered....
Why it matters: This provision establishes age-based access controls and a COPPA compliance commitment. The mechanism for enforcement relies on user self-representation at account creation rather than independent age verification, which is typical but creates a gap between stated policy and practical enforcement....
-
Luma AI
· Luma AI Terms of Service
The agreement authorizes Luma to immediately suspend account access if a user breaches acceptable use or content restrictions, has an account 30 days overdue, if legal changes require suspension, or if user actions risk harm to other customers or the Services. Prior notice will be provided where practicable....
Why it matters: This provision establishes that suspension may occur immediately and without prior notice in the enumerated circumstances, including for reasons related to changes in law or potential liability to Luma. The 'risk harm' standard in subsection (d) introduces a subjective threshold for suspension....
-
Oura
· Oura Privacy Policy
The policy states that health data, including physiological measurements and health-related notes and tags, is classified as special-category personal data and is processed only on the basis of user consent; consent may be provided through in-app actions such as adding health tags or notes rather than solely through an explicit consent dialogue....
Why it matters: This provision establishes that behavioral in-app actions (adding notes or health tags) may constitute consent for processing special-category health data. Compliance teams should evaluate whether this mechanism satisfies GDPR Article 9's requirement for explicit consent and whether users are adequately informed that these actions constitute a consent signal....
-
Oura
· Oura Privacy Policy
The policy states that Oura processes personal data for online advertising on behalf of Oura and its partners, using cookies and similar technologies to create advertising audiences, and authorizes direct marketing communications with an opt-out option....
Why it matters: This provision authorizes advertising-related data processing on behalf of third-party partners in addition to Oura itself, with the details of those partner relationships and data flows deferred to a separate Cookie Policy. The scope of partner advertising data sharing may require evaluation under CPRA's opt-out-of-sharing requirements and GDPR's legitimate interest or consent requirements for behavioral advertising....
-
Oura
· Oura Privacy Policy
The policy states that Oura may collect approximate or precise device location via GPS, Wi-Fi, or network ID for location-based features, only with user consent, and that users may withdraw consent at any time through device settings, with the consequence that certain features may no longer be accessible....
Why it matters: This provision establishes that precise location data may be collected via GPS and Wi-Fi triangulation for activity tracking purposes, conditioned on device-level consent. The policy notes that disabling location access may reduce service functionality, which compliance teams should evaluate in the context of whether this creates an effective barrier to consent withdrawal....
-
Oura
· Oura Privacy Policy
The policy states that Oura relies on legitimate interest as the lawful basis for processing personal data for marketing, customer service, and service improvement purposes, asserting that a balancing test has been conducted against user privacy rights....
Why it matters: This provision applies the legitimate interest basis to processing that includes health-adjacent data (service improvement involving sleep and readiness data), which EU supervisory authorities may scrutinize given the sensitivity of the underlying data and the availability of consent as an alternative basis. The policy does not provide a publicly disclosed legitimate interest assessment....
-
Oura
· Oura Privacy Policy
The policy states that Oura enables integrations with third-party services including Google Health Connect and Apple HealthKit on a consent basis, and processes data received from these integrations according to the third parties' applicable terms, including the Google Health Connect Permissions policy and Google Limited Use requirements....
Why it matters: This provision establishes that data exchanged through third-party integrations is governed in part by the third parties' own terms and policies, and that Oura's compliance with those terms is conditioned on awareness of policy updates. The qualification 'as we become aware of those policies and agreements' introduces a temporal condition on Oura's adherence to third-party data governance requirements....
-
Oura
· Oura Privacy Policy
The policy states that users may request account closure and personal data deletion, and that Oura will delete or anonymize data unless a legal basis for retention exists, including legal obligations or protection of Oura's legal interests....
Why it matters: This provision establishes that data deletion upon account closure is subject to carve-outs for legal obligation and protection of Oura's legal interests, the latter of which is a broad retention basis that is not further defined in the policy. Compliance teams should assess whether this carve-out is appropriately scoped and disclosed under applicable law....
-
Oura
· Oura Privacy Policy
The policy states that Oura does not sell personal data, which under CCPA/CPRA includes the exchange of personal information for monetary or other valuable consideration....
Why it matters: This provision asserts that Oura does not sell personal data; however, the policy separately discloses advertising-related data processing on behalf of partners using cookies and similar technologies, which may constitute 'sharing' of personal information for cross-context behavioral advertising under CPRA even if it does not meet the definition of 'sale.' Compliance teams should assess whether the advertising practices described elsewhere in the policy require a CPRA 'opt out of sharing' mechanism in addition to the no-sale representation....
-
Nextdoor
· Nextdoor Privacy Policy
The policy states that Nextdoor requires users to verify their residential address in order to participate in their neighborhood community, linking the user's platform identity to a specific physical location....
Why it matters: This provision establishes a mandatory association between a user's verified home address and their platform account, which represents a persistent high-sensitivity data linkage that compliance teams should assess against data minimization principles under GDPR and equivalent frameworks....