-
UnitedHealthcare
· UnitedHealthcare Privacy Policy
The Policy states that UnitedHealthcare may modify its terms at any time by posting updates to the Policy page, and that continued use of the Online Services constitutes consent to those changes without any requirement for individual notice or affirmative opt-in....
Why it matters: This provision establishes a unilateral change mechanism under which the data practices governing health, financial, and behavioral information may be altered without advance individual notification, with consent implied through continued service use. The absence of a notice requirement or affirmative consent mechanism may require evaluation under FTC guidance on material changes to privacy policies and applicable state consumer protection statutes....
-
UnitedHealthcare
· UnitedHealthcare Privacy Policy
The Policy discloses that electronic communications sent to users may contain Protected Health Information and may be transmitted without encryption, and states that users acknowledge and accept the associated risk of disclosure or interception....
Why it matters: This provision requires evaluation under the HIPAA Security Rule and Breach Notification Rule, which establish standards for the protection of electronic Protected Health Information in transmission. The assertion that user acknowledgment and acceptance of interception risk limits the company's obligations in this context is not established by the document and may conflict with HIPAA's minimum necessary and safeguard requirements....
-
UnitedHealthcare
· UnitedHealthcare Privacy Policy
The Policy authorizes third parties to use cookies and tracking technologies on UnitedHealthcare's Online Services to collect browsing activity and track users across third-party websites for the purpose of delivering targeted advertisements, with the company stating it does not control these third-party technologies....
Why it matters: This provision authorizes cross-site behavioral tracking and targeted advertising on digital properties through which users may also access health plan information, benefit details, and medical records. The intersection of behavioral advertising data collection with a health insurance platform context may require evaluation under HIPAA, FTC guidance on health data, and state consumer privacy laws depending on the categories of data accessible to or inferred by third-party trackers....
-
Experian
· Experian Privacy Policy
The notice discloses that Experian has sold or disclosed sensitive personal information categories, including Social Security numbers, driver's license numbers, financial account credentials combined with access codes, precise geolocation, and racial or ethnic origin data, to third parties across more than twenty industry categories for commercial purposes including marketing, analytics, and decisioning. These third-party categories include political organizations, marketing and research companies, insurance companies, and financial services companies....
Why it matters: This provision establishes that Experian's data broker subsidiaries have sold or disclosed sensitive personal information categories, some of which are subject to heightened protections or opt-in consent requirements under multiple state privacy laws, to a broad range of commercial third parties. Compliance teams should evaluate whether the opt-out mechanism described in the notice satisfies applicable requirements for each sensitive data category in each covered jurisdiction, particularly where state law may require affirmative opt-in consent for the sale or processing of categories such as racial or ethnic origin, precise geolocation, or financial account credentials....
-
ActiveCampaign
· ActiveCampaign Acceptable Use Policy
The policy states that ActiveCampaign may immediately suspend or terminate a customer's account upon receiving spam or unsolicited message complaints from recipients, and that no refund of any kind will be provided in such circumstances....
Why it matters: This clause establishes that account termination can occur immediately upon complaint, without a documented cure period or internal dispute process, and that prepaid service fees are forfeited under these conditions. The operational dependency risk is significant for businesses relying on ActiveCampaign as a primary marketing channel....
-
Monitoring
These provisions have changed before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
-
ActiveCampaign
· ActiveCampaign Acceptable Use Policy
The policy warns customers that non-compliant SMS and text messaging may result in fines of up to $10,000 per violation assessed by mobile carriers, citing increased regulation of SMS messaging....
Why it matters: This provision discloses a specific per-violation financial penalty figure associated with SMS non-compliance, placing customers on notice of the financial exposure associated with CTIA guideline violations and directing them to comply with referenced CTIA standards as a condition of platform use....
-
ConvertKit
· ConvertKit Acceptable Use Policy
The policy states that accounts found in violation of prohibited content or conduct terms may be closed immediately without advance notice, with no refund issued and data export subject to Kit's sole discretion....
Why it matters: This provision establishes that Kit may terminate account access and withhold both payment refunds and subscriber data export without prior notification, creating material operational exposure for businesses that rely on the platform for active campaigns and subscriber list management....
-
ConvertKit
· ConvertKit Acceptable Use Policy
The policy states that account holders whose accounts are terminated for any policy compliance reason are permanently barred from opening a new Kit account....
Why it matters: This provision establishes a permanent platform ban as a consequence of policy-based termination, with no stated appeal or reinstatement process, creating an irreversible operational consequence for businesses whose accounts are closed....
-
Google
· Google Tag Manager Terms of Service
The agreement prohibits users from uploading to GTM any data that personally identifies an individual, including names, email addresses, and billing information, as well as data that Google can reasonably link to such identifying information....
Why it matters: This provision establishes a direct contractual obligation on GTM users to configure tags and data layer implementations so that no personally identifiable or reasonably linkable data is transmitted through the GTM platform. Breach of this restriction constitutes a terms violation and may also implicate applicable data protection law depending on jurisdiction....
-
Google
· Google Tag Manager Terms of Service
The agreement states that Google bears no responsibility for third-party tags deployed through GTM, that Google reserves the right (but not the obligation) to screen third-party tags for policy compliance, and that the user guarantees they hold the rights to upload any third-party tags they use....
Why it matters: This provision places full contractual responsibility for third-party tag compliance on the user and establishes a user-side guarantee of rights to uploaded tags. Google's right to screen tags is permissive rather than mandatory, meaning the absence of screening does not transfer liability back to Google....
-
Google
· Google Tag Manager Terms of Service
The agreement requires users who deploy any tags through GTM, whether third-party or Google-provided, to maintain an appropriate privacy policy and to comply with the EU user consent policy and all applicable regulations relating to data collection....
Why it matters: This provision contractually obligates GTM users to comply with the EU user consent policy, which operationalizes consent requirements under the ePrivacy Directive and GDPR for EU/EEA user data. The obligation applies to users deploying any tags, not only those targeting EU users....
-
Eufy
· Eufy Terms of Service
The agreement requires that unresolved disputes be submitted to binding arbitration administered by the Singapore International Arbitration Centre, seated in Singapore, conducted in Chinese or English at the arbitrator's selection. A 30-day consultation period is required before arbitration may be initiated....
Why it matters: This provision routes all contractual disputes to SIAC arbitration seated in Singapore, a forum that may be practically inaccessible or legally unenforceable for consumer claimants in the EU, UK, Australia, and certain US states, where consumer protection laws may require local jurisdiction or prohibit mandatory arbitration in standard form consumer contracts....
-
Eufy
· Eufy Terms of Service
Users must defend, indemnify, and hold harmless Anker and all affiliated Anker Companies from any claims arising from the user's relationship with Anker, use of services or products, or provision of data, including legal costs and fees. Anker retains sole and exclusive control of any defense, including selection of legal counsel and settlement negotiations....
Why it matters: This provision requires users to bear defense costs and indemnify Anker across a broad set of triggering circumstances, including the user's general relationship with Anker and provision of data, while assigning Anker sole control over defense strategy and settlement, without requiring user consent to settlement terms that could directly affect the user's financial exposure....
-
Eufy
· Eufy Terms of Service
Users assume all risk of using Anker's services and release Anker and all affiliated entities from any claims for bodily injury, property damage, wrongful death, emotional distress, loss of privacy, or other harms arising from use of Anker's services, including claims on behalf of heirs and personal representatives....
Why it matters: This provision extends the release and assumption of risk to bodily injury, wrongful death, and loss of privacy claims, and purports to bind not only the user but also their heirs and personal representatives. The enforceability of such broad releases in consumer contracts for product liability or personal injury claims varies significantly by jurisdiction....
-
Oscar Health
· Oscar Health Privacy Policy
The policy states that Oscar may sell or share identifiers, commercial information, online activity, non-precise geolocation data, and inferences with marketing partners, advertising services, analytics providers, social networks, and consumer data resellers for online advertising and content personalization purposes. Residents of California and approximately eighteen other named states have the right to opt out of this activity....
Why it matters: This provision creates opt-out obligations under CCPA, the California Privacy Rights Act, and analogous statutes in the approximately eighteen additional states named in the policy, and the explicit inclusion of consumer data resellers as recipients is a materially specific disclosure that compliance teams should map against data processing agreements and vendor classifications....
-
Oscar Health
· Oscar Health Terms of Use
All disputes with Oscar arising from these Terms must be resolved through individual binding arbitration in New York under JAMS Streamlined Rules, and users waive the right to participate in class actions or class arbitration. Oscar retains the right to seek injunctive or equitable relief in court....
Why it matters: This provision requires disputes to proceed through individual arbitration administered by JAMS in New York, New York, and includes an explicit waiver of jury trial and class action participation. The clause also includes a detailed bellwether process for coordinated proceedings involving 25 or more similar claims, which can delay individual claim resolution and may result in remaining claimants being redirected to New York courts rather than arbitration....
-
Oscar Health
· Oscar Health Terms of Use
The terms authorize Oscar to use de-identified and anonymized User Submissions to train, optimize, and enhance its AI systems. Oscar asserts ownership of any vectorized data or model relationship information derived from User Submissions and used in AI training....
Why it matters: This provision asserts that Oscar owns derivative AI assets, specifically vectorized data and model relationship information, developed from User Submissions. This assertion of ownership over AI-derived data may intersect with user data rights under applicable privacy law and warrants legal assessment of whether the de-identification standard applied satisfies applicable requirements....
-
Oscar Health
· Oscar Health Terms of Use
The terms disclose that AI-generated outputs may be inaccurate, incomplete, or contain hallucinations, and may not be reviewed by a human before delivery to users. Users are required to independently verify all AI outputs and are prohibited from relying on them without confirmation from a reputable source....
Why it matters: This provision places responsibility for verifying AI-generated outputs on users and discloses the risk of hallucinations and inaccuracies in AI content. In a health insurance context where AI features may generate health-related information, this disclaimer is operationally significant and interacts with the broader medical information disclaimer in the document....
-
Replicate
· Replicate Acceptable Use Policy
This clause requires that substantially all disputes between users and Replicate be resolved through binding individual arbitration administered under AAA Rules, governed by the Federal Arbitration Act, rather than through court proceedings. The clause prohibits class actions, class arbitrations, and consolidation of claims with other users....
Why it matters: This provision requires disputes to proceed through individual arbitration before a sole arbitrator whose decision is final subject to limited FAA review, and prohibits users from participating in class or representative proceedings. The clause also grants the arbitrator exclusive authority to determine the enforceability of the arbitration agreement itself....
-
Replicate
· Replicate Acceptable Use Policy
This clause caps Replicate's total monetary liability to any customer at the lower of fees paid to Replicate in the six months preceding the claim or US$100, regardless of the legal theory or nature of the loss. This cap applies even if other agreed remedies fail....
Why it matters: This provision sets an exceptionally low monetary ceiling on recoverable damages from Replicate, including for claims involving data loss, security breach, service interruption, and breach of contract. The cap applies across all legal theories and explicitly survives failure of essential purpose of any remedy....
-
Replicate
· Replicate Acceptable Use Policy
This clause asserts that continuing to use the service after experiencing an issue constitutes waiver of billing dispute rights related to that issue, requires customers to exhaust Replicate's internal process before initiating chargebacks, limits chargebacks to unauthorized transactions only, and deems non-response to support requests within three days as acceptance of charges....
Why it matters: This provision asserts contractual limitations on customers' ability to dispute charges through external mechanisms including card network chargebacks, and places the burden of proof on the customer to demonstrate non-delivery or defective service, with Replicate's logged transactions presumed to represent valid service delivery. The enforceability of these provisions may be constrained by card network rules, applicable consumer protection law, and jurisdiction-specific billing dispute regulations....
-
Replicate
· Replicate Acceptable Use Policy
When a user makes a model publicly available as a community model on the Replicate platform, they grant every current and future platform user a perpetual, irrevocable, worldwide, royalty-free, non-exclusive license to access and use that model through the service. This license survives account termination, and the terms note that Replicate may retain and continue to host community models after account deletion....
Why it matters: This provision establishes that the act of publishing a community model on the platform creates a permanent, non-revocable license running to all platform users, which the publisher cannot subsequently withdraw even after account termination or deletion. Organizations publishing models on the platform should evaluate this license grant against their intellectual property and licensing strategy prior to publication....
-
Replicate
· Replicate Acceptable Use Policy
Customers are required to indemnify, defend, and hold harmless Replicate, its affiliates, and their personnel against all losses arising from the customer's use of the services, customer data (including inputs and outputs), violations of third-party terms by authorized users, and any negligence or misconduct by the customer or its representatives. This obligation covers allegations, not only established facts....
Why it matters: This provision requires customers to assume defense costs and liability for a broad range of claims arising from their use of the platform, including claims arising from AI-generated outputs and third-party model license violations by authorized users. The indemnification trigger covers allegations of breach, not only proven breaches, creating potential exposure before any liability determination....
-
Replicate
· Replicate Acceptable Use Policy
Use of specific third-party models on Replicate (Flux, Ideogram, Stability AI) is subject to additional restrictions flowing down from the model providers, including prohibitions on use for surveillance, biometric processing, military purposes, and development of competing products. Redistribution or fine-tuning of Stability AI models requires a direct license from Stability AI. These restrictions apply to customers and must be flowed down to their own users where applicable....
Why it matters: These provisions impose use-case specific restrictions that go beyond Replicate's own acceptable use policy, including prohibitions on competitive product development using model outputs, surveillance applications, and biometric processing. Non-compliance by authorized users constitutes a breach by the customer under the agreement and triggers indemnification obligations....
-
Groq
· Groq Acceptable Use Policy
The policy prohibits Customers from using Groq's services to make automated decisions that materially and detrimentally affect individual rights in high-risk domains including employment, healthcare, finance, legal matters, housing, insurance, and social welfare, unless human supervision is in place....
Why it matters: This provision requires enterprise customers deploying Groq AI in any of the named high-risk domains to establish and maintain human oversight mechanisms as a contractual condition of service use, and directly engages the EU AI Act's requirements for high-risk AI system oversight....
-
Groq
· Groq Acceptable Use Policy
The agreement assigns full responsibility for all decisions, advice, actions, and inactions based on AI-generated outputs to Customers and their Authorized Users, and requires Customers to evaluate outputs for accuracy and implement human oversight and safeguards for consequential decisions....
Why it matters: This provision establishes a contractual liability allocation under which Groq bears no responsibility for harms arising from Customer reliance on AI-generated outputs, including inaccurate outputs, and requires Customers to independently assess and mitigate risks for any consequential use case....
-
Groq
· Groq Acceptable Use Policy
The agreement requires Customers to independently comply with all applicable laws and regulations governing their use of Groq services, including AI-specific legislation such as the EU AI Act....
Why it matters: This provision places the full burden of regulatory compliance on Customers, including compliance with the EU AI Act, which imposes obligations that vary by AI system risk classification and operational context; Groq makes no representation about whether its services are configured to meet regulatory requirements applicable to the Customer's specific use case....
-
Oura
· Oura Terms of Service
This provision requires all disputes with Oura to be resolved through individual binding arbitration before a single arbitrator, and prohibits users from joining class or representative actions against Oura, with limited exceptions for injunctive relief and jurisdictions where such waivers are unenforceable....
Why it matters: This provision requires that disputes proceed through individual arbitration rather than court litigation, and prohibits class or representative actions. The provision includes a self-referential clause making the arbitrator (not a court) the default decision-maker on questions of the clause's own enforceability, which courts in certain jurisdictions have treated as a material factor in enforceability analysis....
-
Oura
· Oura Terms of Service
The agreement excludes all liability for direct, indirect, consequential, incidental, special, and punitive damages arising from use of the services, and where liability cannot be fully excluded, caps Oura's total financial exposure at $100 per claim....
Why it matters: This provision establishes a $100 ceiling on all financial claims against Oura that survive the broader damages exclusion, covering a health-monitoring wearable that collects physiological and biometric data. The provision acknowledges that some jurisdictions do not permit full exclusion of implied warranties or statutory rights, and includes a residual $100 cap for such situations....
-
Synthesia
· Synthesia Data Processing Agreement
The addendum requires execution by an authorized individual at the customer organization via a provided link, establishing that the DPA's obligations take effect only upon formal execution....
Why it matters: This provision conditions the applicability of the DPA's processor obligations and protections on formal execution, meaning organizations that have not completed this step may not have a compliant Article 28 processor contract in place with Synthesia....
-
Synthesia
· Synthesia Acceptable Use Policy
The AUP prohibits use of Stock Avatars in television programs, news broadcasts, fundraising activities, political campaigns, or commentary on polarizing topics without written consent from Synthesia; Custom Avatar use in these contexts requires both an eligible service plan and individual consent....
Why it matters: This provision restricts a category of high-risk synthetic media deployment involving political, journalistic, and public interest content, and establishes a consent-gated framework that differentiates between Stock and Custom Avatar use cases across service tiers....
-
Synthesia
· Synthesia Acceptable Use Policy
The AUP prohibits using Stock Avatars to imply that the depicted real-life actor personally holds specific opinions, conditions, or characteristics, with an exception for enterprise service plan users for Stock Avatars and for Custom Avatar users with appropriate individual consent....
Why it matters: This provision restricts a specific category of potentially harmful synthetic media use involving the attribution of sensitive personal characteristics including medical conditions, disabilities, and political views to real individuals depicted by avatars, with tiered permissions based on service plan and consent....
-
LexisNexis
· LexisNexis Terms
By submitting any content to LexisNexis Interactive Areas, users grant Provider a permanent, worldwide, royalty-free license to use, reproduce, modify, distribute, sublicense, and create derivative works from that content in any medium, without further payment or notice to the user....
Why it matters: This provision requires users to grant broad intellectual property rights in submitted content as a condition of participation in Interactive Areas. The license is irrevocable and perpetual, meaning it continues regardless of whether the user later deletes content or ceases using the site....
-
LexisNexis
· LexisNexis Terms
Provider holds an exclusive one-year option to purchase full ownership of any patentable content submitted to the site for a fixed sum of $1,000 USD or equivalent value in kind, at Provider's sole discretion....
Why it matters: This provision establishes a unilateral option mechanism by which Provider may acquire full intellectual property ownership of patentable user submissions at a predetermined, fixed consideration. The adequacy of $1,000 USD as consideration for a patent or patentable invention may be subject to challenge under applicable contract and IP law, depending on jurisdiction and the commercial value of the submission....
-
LexisNexis
· LexisNexis Terms
Provider disclaims all liability for any damages arising from use of the website, content, or interactive areas, and caps any residual monetary liability at $100 USD....
Why it matters: This provision establishes a $100 USD aggregate damages cap as Provider's maximum financial exposure to any individual user. The clause excludes direct, indirect, incidental, punitive, and consequential damages, including attorneys fees, across all categories of claims arising from site use....
-
LexisNexis
· LexisNexis Terms
The terms prohibit users from using any site content to assess a consumer's eligibility for credit, insurance for personal use, employment, or government licenses or benefits....
Why it matters: This provision restricts use cases that would trigger obligations under the Fair Credit Reporting Act, which governs the use of consumer reports for eligibility determinations. The prohibition places responsibility for FCRA compliance on users by contractually barring these use cases rather than establishing LexisNexis as a consumer reporting agency for this purpose....
-
Visa
· Visa Terms of Use
The agreement states that any material a user submits to Visa.com results in an irrevocable transfer of all copyrights and moral rights to Visa, with no compensation obligation, and Visa may use submitted ideas or know-how for any purpose including product development and marketing....
Why it matters: This provision establishes a permanent, royalty-free IP assignment covering any content, ideas, or know-how submitted through the site, with no carve-out for proprietary or commercially sensitive submissions. The clause also requires users to waive moral rights, which may be unenforceable in jurisdictions where moral rights are inalienable....
-
Runway
· Runway Content Policy
The policy states that Runway will report any CSAM it becomes aware of to NCMEC and will indefinitely suspend all accounts associated with such content....
Why it matters: This provision establishes a mandatory reporting and indefinite suspension mechanism that engages U.S. federal CSAM reporting obligations applicable to electronic service providers; it also operates as a permanent enforcement consequence with no stated reinstatement procedure for accounts associated with CSAM....