Provisions index

The statement discloses that PayPal uses automated technology to profile users for credit risk, fraud, and money laundering indicators using personal data, and that such automated assessments may result in refusal of new services, termination of existing services, or imposition of account limits without specifying a requirement for prior notice. Users may request human review of automated decisions in jurisdictions where this right exists....

Why it matters: This provision establishes that automated profiling assessments directly govern access to PayPal's core payment and financial services, including the ability to send and receive money, and that account limitations or terminations may follow from automated risk determinations. The statement notes that in the United States these practices are characterized as either exempt or not triggering an opt-out right under applicable US privacy laws, while in other jurisdictions users may exercise rights to review or object to automated decisions....

View provision → Watch PayPal →

The statement discloses that PayPal may offer Agentic AI tools, provided directly or through partners, that operate autonomously to perform tasks and initiate actions on users' behalf while accessing personal data including queries, preferences, purchase history, and payment information. The statement instructs users not to rely on these tools for legal, medical, financial, or employment decisions....

Why it matters: This provision establishes that autonomous AI tools with access to payment information and purchase history may initiate actions on users' behalf, creating material considerations regarding user consent, data minimization, and accountability for AI-initiated transactions. The statement's disclosure that these tools are provided directly or through trusted partners introduces questions about data flows to third-party AI providers operating Agentic AI functionality....

View provision → Watch PayPal →

The statement discloses that PayPal may collect voice identification, photo identification, and face scans with user consent for authentication purposes across a range of account functions, and states that biometric data will be retained for up to 3 years after account closure unless applicable law requires otherwise....

Why it matters: This provision establishes a biometric data collection and retention framework that creates specific compliance obligations under state biometric privacy laws, particularly the Illinois Biometric Information Privacy Act, which imposes written consent, retention schedule, and destruction requirements for biometric identifiers. The 3-year post-closure retention period stated in the document may require evaluation against state-specific biometric data destruction timelines....

View provision → Watch PayPal →

The policy authorizes Meta to use publicly posted content, including posts, comments, and audio, as well as interactions with Meta AI features and third-party partner data, to develop and improve AI systems at Meta for use in both Meta Products and for third parties....

Why it matters: This provision establishes that user-generated public content serves as training data for AI model development, including for third-party applications, and applies to all users who post public content on any Meta Product. Compliance teams should evaluate whether this use is adequately disclosed and whether applicable law in relevant jurisdictions requires a distinct consent mechanism or opt-out for AI training uses....

View provision → Watch Meta →

The policy authorizes Meta to share collected user information including activity, device data, content, and location-related data across Meta Companies including Facebook, Instagram, Messenger, and WhatsApp, and to receive and process information about users from those same companies....

Why it matters: This provision establishes a bilateral information-sharing arrangement across all Meta Company Products, meaning data collected on one platform may inform personalization, safety, and analytics functions on another. The legal basis and scope of this cross-company data sharing has been subject to regulatory inquiry under GDPR, and compliance teams should evaluate whether current transfer mechanisms and consent records are sufficient....

View provision → Watch Meta →

The policy states that special-category data including religious views, sexual orientation, political views, health information, racial or ethnic origin, philosophical beliefs, and trade union membership may be collected, stored, published, and processed through automated and manual means for product provision, personalization, and analytics, where users have provided such information....

Why it matters: This provision establishes that Meta processes special-category data within the meaning of GDPR and equivalent frameworks, relying on user-provided information and stated explicit consent. The policy notes this data is not used for ad targeting, but the breadth of other stated purposes including personalization, product improvement, and analytics warrants evaluation of the adequacy of consent mechanisms and data minimization practices....

View provision → Watch Meta →

The policy states that Meta receives behavioral and activity data about users from advertisers, businesses, and other partners regarding activity occurring outside Meta Products, and uses this off-platform data to personalize ads shown on Meta Products and affiliated advertising services, including for users who are not logged in or do not have a Meta account....

Why it matters: This provision establishes that Meta's ad personalization system incorporates data from external parties about users' off-platform activity, and that this data collection and association occurs regardless of whether the individual has a Meta account or is logged in. The mechanism for associating off-platform activity with non-account holders warrants evaluation under applicable privacy frameworks....

View provision → Watch Meta →

The notice states that identity verification materials including passport scans, driver's licences, and selfie photos or videos may be processed using technologies that extract biometric data from those materials....

Why it matters: This provision establishes that biometric data derived from identity documents is processed as part of standard account onboarding, engaging special-category data protections under GDPR Article 9, UK GDPR, and equivalent frameworks in Australia, Brazil, and Canada, which require a documented legal basis and heightened safeguards beyond those applicable to ordinary personal data....

View provision → Watch Kraken →

The notice states that attestations published to a public blockchain via Kraken Verify are permanent and cannot be erased, modified, or deleted by Kraken, and that third parties may access this data via blockchain explorers and APIs without restriction by Kraken....

Why it matters: This provision establishes a structural limitation on Kraken's ability to fulfil data erasure requests under GDPR Article 17, UK GDPR, and equivalent frameworks for data published on-chain, requiring documented exception handling and clear pre-submission disclosure to users about the permanent nature of on-chain attestations....

View provision → Watch Kraken →

The agreement requires users and OpenAI to resolve all disputes through final and binding arbitration administered by NAM, covering claims regardless of when they arose. Users may opt out of arbitration by submitting a designated form within 30 days of account creation or within 30 days of any arbitration term update taking effect....

Why it matters: This provision establishes that disputes proceed through individual arbitration under NAM rules rather than through court litigation, with the Federal Arbitration Act governing enforcement. The 30-day opt-out window from account creation or from any arbitration update is the operative mechanism for users who wish to preserve court-based dispute resolution....

View provision → Watch OpenAI →

The agreement prohibits class actions, class arbitrations, consolidated proceedings, and representative actions, limiting users to individual claims only. It also includes a mutual waiver of jury trial rights in any action, proceeding, or counterclaim....

Why it matters: This provision establishes that users may not join or lead class or representative proceedings against OpenAI, and that jury trials are mutually waived. Public injunctive relief requests are carved out and must be litigated in court after arbitration of the underlying claim....

View provision → Watch OpenAI →

The agreement authorizes OpenAI to use user-provided Input and generated Output (collectively Content) to provide, maintain, develop, and improve its Services, including model training. Users may opt out of model training use by following instructions in a designated help center article....

Why it matters: This provision establishes the default authorization for model training use of Content, with an opt-out mechanism rather than opt-in consent. The opt-out is not time-limited on its face, but the operational scope of what uses persist after opt-out (service provision, legal compliance, safety) versus what is restricted (model training) is defined by the document....

View provision → Watch OpenAI →

The agreement limits OpenAI's aggregate liability to the greater of amounts paid by the user for the relevant service in the 12 months preceding the claim or $100. Indirect, incidental, special, consequential, and exemplary damages are excluded entirely....

Why it matters: This provision establishes a $100 floor on aggregate liability for free-tier users and a 12-month payment lookback cap for paid subscribers. The exclusion of consequential and data loss damages is operationally significant for users who may experience losses arising from reliance on AI-generated Output....

View provision → Watch OpenAI →

The agreement requires users to evaluate Output for accuracy before use, prohibits reliance on Output as a sole factual source or substitute for professional advice, and expressly prohibits use of Output about a person for decisions with legal or material impact including credit, employment, housing, insurance, legal, and medical decisions....

Why it matters: This provision establishes affirmative user obligations regarding Output evaluation and creates an express prohibition on high-stakes decisional use of Output concerning individuals. These obligations are operationally significant for any enterprise or professional deploying AI-generated content in decision-making workflows....

View provision → Watch OpenAI →

The document states that Robinhood extracts facial geometry data from user selfies, photographs, and videos for identity verification and fraud detection, and that vendors involved in this process may also collect biometric data including from voice....

Why it matters: This provision discloses biometric data processing, which engages state biometric privacy laws including the Illinois Biometric Information Privacy Act (BIPA) and similar statutes in other states that impose specific notice, written consent, and data retention requirements. The provision also extends biometric collection to third-party vendors such as Persona, requiring vendor-level compliance evaluation....

View provision → Watch Robinhood →

The document states that personal information collected in connection with financial services (such as a brokerage account) is generally governed by GLBA rather than state privacy laws such as the CCPA, and that Robinhood may have no obligation to accept or honor Data Subject Requests depending on which affiliate and product the user's data relates to....

Why it matters: This provision describes the scope of GLBA preemption as Robinhood applies it across its product lines, establishing that the availability of state-law privacy rights including access, deletion, and correction requests depends on which Robinhood entity and product a user interacts with. The practical scope of GLBA preemption is a fact-specific and legally contested question, and compliance teams should not assume the document's characterization reflects the full extent of applicable legal obligations....

View provision → Watch Robinhood →

The agreement contains a predispute arbitration clause in Section 39 that customers acknowledge upon account opening by clicking the application submission button. The full arbitration terms govern how disputes between customers and Robinhood are resolved....

Why it matters: This provision requires disputes to proceed through individual arbitration rather than court litigation, and customers are put on notice of this clause at the point of account opening. The enforceability and scope of arbitration clauses in brokerage agreements are subject to FINRA rules and applicable federal and state law, which may limit the terms that can be imposed on retail customers....

View provision → Watch Robinhood →

The agreement states that instructions submitted to Robinhood from an authenticated AI agent session are final and binding upon receipt, regardless of whether the instruction resulted from agent error, hallucination, latency, malfunction, or unintended behavior. Robinhood bears no liability for losses arising from such AI agent conduct....

Why it matters: This provision establishes that customers bear full financial responsibility for all orders placed by AI agents, including orders resulting from agent errors or unintended outputs, without recourse against Robinhood. This allocation of risk is operationally significant for customers using AI-assisted trading tools and may warrant evaluation under FINRA supervisory rules and applicable broker-dealer conduct standards....

View provision → Watch Robinhood →

The agreement authorizes Robinhood to recover amounts owed by debiting the customer's brokerage account, external bank accounts, any affiliated Robinhood accounts, and any account in which the customer holds a beneficial interest, without prior notice. This authorization survives account termination....

Why it matters: This provision establishes a cross-entity, post-termination right of offset that extends beyond the brokerage account to external bank accounts and accounts in which the customer holds only a beneficial interest. The scope of this offset authorization may require evaluation under applicable state offset, garnishment, and exemption statutes, as well as Regulation E protections for consumer deposit accounts....

View provision → Watch Robinhood →

The agreement states that Robinhood may sell securities, close transactions, and liquidate account positions without prior notice or demand, including whenever the equity level in the account falls below required minimums, ACH transfers are reversed, or the account is closed. Robinhood selects which securities to liquidate and determines the timing and method of sale....

Why it matters: This provision authorizes Robinhood to liquidate customer securities positions without advance notice in a range of circumstances including margin deficiency, ACH reversal, bankruptcy petition, account closure, or customer death. Robinhood also retains discretion over which securities are sold and the timing and method of liquidation, and the agreement states customers may not hold Robinhood liable for liquidation choices....

View provision → Watch Robinhood →

The agreement states that using API products may provide third-party API licensees with access to the customer's account and personal information, including username, password, financial information, and trade data. The agreement acknowledges that API licensee security standards may be less stringent than Robinhood's own standards....

Why it matters: This provision discloses that API product use may transfer sensitive financial and identity information to third-party licensees whose security practices may be less rigorous than Robinhood's, and that customers consent to this risk by using the API products. The agreement states that Robinhood is not responsible for losses resulting from personal information sharing with API licensees....

View provision → Watch Robinhood →

Coinbase charges no upfront staking fee but retains a commission of 25.25% to 35% of all staking rewards received from the network, depending on the asset and the user's Coinbase One membership tier....

Why it matters: This provision establishes the rate at which Coinbase extracts commission from user staking rewards across eight named cryptocurrency assets. The commission is applied to gross network rewards before the user receives their share, meaning the APY and rewards displayed in the account reflect post-commission earnings....

View provision → Watch Coinbase →

PayPal authorizes disclosure of personal information, including inferred product preferences, sizes, styles, and behavioral data, to Partners and Merchants for personalized shopping experiences in the United States for data collected after November 27, 2024, on an opt-out basis. Users must affirmatively opt out via the Data and Privacy account setting to stop this sharing; opting out does not affect disclosures necessary to complete initiated transactions....

Why it matters: This provision establishes an opt-out sharing framework for US users under which inferred behavioral and preference data flows to third-party commercial Partners and Merchants by default. Compliance teams should evaluate this structure against CCPA and CPRA opt-out requirements for sharing personal information with third parties, as well as Gramm-Leach-Bliley Act provisions governing nonaffiliate data sharing....

View provision → Watch PayPal →

PayPal's Automated Decision Making systems use profiling techniques to assess users for credit risk, fraud, money laundering indicators, and identity inconsistencies, and may refuse new services, terminate existing services, or impose account restrictions based on those automated assessments. Users in certain jurisdictions may request human review of automated decisions that produce legal or similarly significant effects....

Why it matters: This provision establishes the operational mechanism by which PayPal may restrict or suspend account access and service availability based on automated profiling outputs without prior human review, subject to applicable law. For EEA and UK users, GDPR Article 22 establishes specific rights regarding automated decisions with legal or similarly significant effects, including the right to request human review; the policy acknowledges this right for non-US jurisdictions....

View provision → Watch PayPal →

PayPal collects biometric data including voice identification, photo identification, and face scans with user consent for authentication purposes, and retains this data for up to three years after account closure unless applicable law requires otherwise....

Why it matters: The three-year post-closure retention period for biometric data creates exposure under state biometric privacy statutes, particularly the Illinois Biometric Information Privacy Act, which imposes specific retention schedules and destruction requirements that may differ from the policy's stated retention period. Compliance teams should assess whether PayPal's retention practice satisfies applicable state-specific biometric privacy requirements....

View provision → Watch PayPal →

For EEA users, PayPal updates its third-party disclosure list quarterly, and failure to object within 30 days of publication is deemed acceptance of new disclosures. The sole stated remedy for non-acceptance is account closure....

Why it matters: This provision establishes a deemed-consent mechanism for EEA users under which silence for 30 days constitutes acceptance of expanded third-party data disclosures. This mechanism may require evaluation under GDPR Articles 6 and 7, which require that consent be freely given, specific, informed, and expressed through an unambiguous affirmative act; EDPB guidance has consistently indicated that consent by inaction does not satisfy GDPR consent standards....

View provision → Watch PayPal →

PayPal collects and uses inferred data derived from transaction history, service interactions, and Partner and Merchant interactions to generate attributes including gender, income estimates, creditworthiness assessments, fraud and risk scores, and shopping behavior profiles....

Why it matters: The inferred data category, which includes income and creditworthiness inferences, is disclosed as a basis for profiling used in Automated Decision Making, personalized shopping sharing with Partners and Merchants, and targeted advertising. Compliance teams should note that inferred characteristics of protected classifications such as gender derived from behavioral data may engage additional regulatory frameworks....

View provision → Watch PayPal →

Coinbase charges a commission of 35% of staking rewards for standard accounts across ADA, ATOM, AVAX, DOT, ETH, MATIC, SOL, and XTZ, with tiered reductions for Coinbase One members ranging from 25.25% to 31.75%. An additional fee applies for instant unstaking, disclosed at the time of the unstaking request....

Why it matters: This provision establishes that Coinbase retains 35% of staking rewards from standard account holders before rewards are credited, which represents a material cost of participation in Coinbase's staking service. The tiered commission structure linked to a paid Coinbase One subscription creates a direct financial incentive for subscription enrollment tied to staking economics....

View provision → Watch Coinbase →

The policy discloses that Google collects health information including medical history, vital signs, and health metrics, as well as biometric information such as fingerprints, through services including Fitbit, Pixel devices, and Google Health Studies, when users choose to provide such information....

Why it matters: This provision establishes that health and biometric data, categories treated as sensitive under CCPA and subject to heightened protections under the Washington My Health My Data Act and Nevada SB 370, are collected through Google's consumer device and app ecosystem. The policy states this data is processed with user consent or as otherwise permitted by applicable law....

View provision → Watch Google →

The agreement requires that all disputes between users and Coinbase be resolved through binding individual arbitration, with class action participation and jury trial rights waived to the maximum extent permitted by applicable law. Users must complete a formal complaint process, which may take up to 45 business days, before filing any arbitration or small claims action....

Why it matters: This provision establishes that individual binding arbitration is the required dispute resolution mechanism for all individual US users, which directs claims away from court proceedings and class litigation. The pre-filing formal complaint requirement of up to 45 business days creates an additional procedural step before any arbitration claim may be initiated....

View provision → Watch Coinbase →

The agreement authorizes Coinbase to suspend, restrict, or terminate any account immediately and for any reason at its sole discretion, without disclosing the reason or the criteria used in making that decision. Following deactivation, users have 90 days to transfer digital assets or funds unless prohibited by law, sanctions, or court order....

Why it matters: This provision establishes broad unilateral account enforcement authority with no stated disclosure obligation to the user, which may affect access to digital asset holdings during any suspension or termination period. The 90-day post-deactivation asset transfer window is a material operational parameter for users assessing access risk....

View provision → Watch Coinbase →

The agreement caps Coinbase's financial liability to users at the value of supported digital assets in the relevant wallet at the time of the claim, and excludes lost profits, consequential, indirect, and punitive damages except where a court determines the loss resulted from Coinbase's gross negligence, fraud, willful misconduct, or intentional violation of law. The agreement also explicitly states that Coinbase does not guarantee order execution, system availability, or data accuracy....

Why it matters: This provision establishes a damage cap tied to the value of assets in the affected wallet at the time of the triggering event, which may result in recovery being limited to a fraction of total economic harm where market value declines during any dispute resolution period. The carve-out for gross negligence, fraud, and willful misconduct is noted, and New Jersey residents are specifically addressed with a state law conformity clause....

View provision → Watch Coinbase →

PayPal uses automated systems employing profiling techniques to assess users' credit risk, fraud indicators, and money-laundering risk without requiring full human review; these assessments can result in refusal of new services, termination of existing services, or account restrictions. Users in the UK and EEA retain the right to seek human review of consequential automated decisions; US users are noted to have limited or no opt-out right under current US privacy laws....

Why it matters: This provision establishes that account access and service availability may be determined by automated systems with limited human involvement, and that PayPal reserves the authority to refuse, restrict, or terminate services based on automated risk assessments. For EEA and UK users, this provision implicates GDPR Article 22, which governs automated decision-making with significant effects and requires human review mechanisms upon request....

View provision → Watch PayPal →

PayPal collects biometric data including voice identification, photo identification, and face scans upon user consent for authentication purposes, and retains this data for up to 3 years after account closure unless applicable law requires otherwise....

Why it matters: This provision establishes a biometric data collection and retention framework that engages state biometric privacy laws, including the Illinois Biometric Information Privacy Act (BIPA), which imposes specific written consent, retention schedule, and destruction requirements. The stated 3-year post-closure retention period may require evaluation under state laws that mandate destruction of biometric data within a shorter timeframe or upon the fulfillment of the collection purpose....

View provision → Watch PayPal →

PayPal reserves the right to update its list of third-party data recipients quarterly for EEA users; if users do not object within 30 days of each quarterly update, they are deemed to have consented to the updated disclosures. The only stated alternative to deemed acceptance is account closure....

Why it matters: This provision establishes an inaction-based deemed-consent mechanism for updates to third-party data disclosure for EEA users, which may require evaluation under GDPR consent standards. GDPR generally requires that consent be freely given, specific, informed, and unambiguous; deemed consent derived from failure to object within a 30-day window may not satisfy these requirements, depending on regulatory interpretation....

View provision → Watch PayPal →

By posting any content on X, users grant X a worldwide, royalty-free, sublicensable license to use, adapt, and distribute that content across any media for any purpose, explicitly including training machine learning and generative AI models, with continued platform access constituting the sole compensation for this license. The license also authorizes X to make user content available to third-party companies, organizations, and individuals for syndication, broadcast, and publication....

Why it matters: This provision establishes the legal basis under which X may use user-generated text, images, audio, and video content for AI and machine learning model training without additional compensation. The sublicensing right permits X to extend these uses to third parties, and the license applies to all content types including inputs, prompts, and outputs created through platform features....

View provision → Watch X →

For users outside the EU, EFTA States, and UK, if the primary Texas court forum selection clause is found unenforceable for any reason, disputes automatically proceed to binding individual arbitration administered by the American Arbitration Association in Tarrant County, Texas, before a retired federal judge. The arbitration is confidential, the arbitrator cannot grant injunctive relief, the award is final with no appeal rights (to the maximum extent permitted by law), and each party bears its own costs unless claims are found frivolous....

Why it matters: This provision establishes a two-tiered dispute resolution structure for non-EU/UK users: Texas courts as the primary forum, with binding individual arbitration as an automatic fallback. The arbitration clause explicitly prohibits class or representative proceedings, requires confidentiality, bars injunctive relief from the arbitrator, and makes the award final and non-appealable to the maximum extent permitted by law....

View provision → Watch X →

By agreeing to these terms, users waive the right to participate in class actions, collective actions, private attorney general actions, or jury trials against X and its named corporate affiliates including SpaceXAI, Cursor, and SpaceX entities, where permitted by applicable law. This waiver applies to all users regardless of whether service use is personal, commercial, or otherwise....

Why it matters: This provision extends the class action and jury trial waiver explicitly to named corporate affiliates (SpaceXAI, Cursor, SpaceX) as a new element compared to prior terms, designating those entities as intended third-party beneficiaries of the waiver. The waiver applies across all theories of liability and user categories....

View provision → Watch X →

Users who violate the Terms and access more than 1,000,000 posts (of any type) within any 24-hour period are liable to X for liquidated damages of $15,000 USD (or EUR 15,000 for EU/UK users) per 1,000,000 posts accessed, in addition to all other legal remedies X may pursue. The clause also asserts that repeated violations entitle X to injunctive relief....

Why it matters: This provision establishes a specific financial exposure of $15,000 USD per 1,000,000 posts accessed in excess of the stated threshold within a 24-hour period, applicable jointly and severally when a user induces or facilitates others' violations. The clause explicitly states it does not cap X's total recovery and preserves all other legal and equitable remedies....

View provision → Watch X →

For non-EU/UK users, the updated terms require federal claims to be initiated within one year and state law claims within two years and one day of the event giving rise to the dispute. The prior terms required state claims within two years (not two years and one day). Claims not initiated within these periods are permanently barred to the extent permitted by applicable law....

Why it matters: This provision contractually shortens the limitations period for federal claims to one year and sets state law claims at two years and one day. The one-year period for federal claims is shorter than many statutory limitations periods, and the enforceability of contractually shortened limitations periods varies by jurisdiction and claim type....

View provision → Watch X →

U.S. residents must attempt informal resolution for 60 days before initiating binding individual arbitration through JAMS under the Federal Arbitration Act; class actions, representative proceedings, and public injunction requests are prohibited. The arbitrator's decision is final except for limited FAA review, and courts retain authority only over arbitrability questions and enforcement of the class action prohibition....

Why it matters: This provision requires U.S. users to resolve disputes through individual JAMS arbitration rather than through court proceedings, and prohibits participation in class action lawsuits or representative actions. The terms establish a pre-arbitration notice requirement, a 60-day informal resolution period, and specific JAMS procedural rules that govern the arbitration process including a staged batch process for related cases involving 25 or more similarly situated claimants represented by coordinating counsel....

View provision → Watch Microsoft Copilot →

Users are prohibited from using Microsoft AI services outputs, or any data derived from those services, to create, train, or improve any AI technology, whether directly or indirectly....

Why it matters: This provision restricts downstream use of AI service outputs across all Microsoft consumer AI services, including Copilot. The prohibition covers both direct and indirect use for AI training or improvement purposes, which may affect users who integrate Microsoft AI outputs into workflows that include machine learning pipelines, dataset construction, or AI model fine-tuning....

View provision → Watch Microsoft Copilot →

The agreement caps recoverable damages at one month of service fees for paid services, or ten dollars for free services, and prohibits recovery of consequential, lost profits, special, indirect, incidental, or punitive damages. This cap applies to all claims related to the terms, services, or associated software....

Why it matters: This provision establishes the maximum financial exposure Microsoft and its affiliates, resellers, distributors, and vendors accept under these terms. The damage cap applies to all covered claims regardless of the nature of the loss, including data loss, service unavailability, or breach of the agreement....

View provision → Watch Microsoft Copilot →

The agreement prohibits nine specific categories of AI service use, including consequential automated decision-making without human oversight, deception and subliminal manipulation, social scoring, biometric categorization for protected attributes, facial recognition database creation through untargeted scraping, real-time facial recognition by law enforcement, and emotional state inference from physical or behavioral characteristics....

Why it matters: This provision establishes specific prohibited use cases for all Microsoft AI services, including Copilot, that reflect requirements aligned with high-risk AI use categories identified in the EU AI Act. The nine enumerated prohibitions create defined compliance obligations for all users of covered AI services and may interact with enterprise AI governance frameworks....

View provision → Watch Microsoft Copilot →

Coinbase charges a commission of 35% of staking rewards for standard accounts across eight named assets, with reduced commission rates of 25.25% to 31.75% available to Coinbase One subscribers depending on their membership tier....

Why it matters: This provision establishes that Coinbase retains up to 35% of all staking rewards generated by users' staked assets, representing a material ongoing charge on staking returns that reduces the effective yield users receive. The commission applies automatically as rewards are generated without requiring a separate user action....

View provision → Watch Coinbase →

The agreement states that Webull retains proprietary ownership of all user accounts and may suspend or permanently reclaim any account at any time without stated cause or process....

Why it matters: This provision establishes that users do not hold proprietary rights to their Webull accounts and that Webull may exercise suspension or termination without procedural constraint, explanation, or advance notice, which is operationally significant for users who rely on the platform for market data access....

View provision → Watch Webull →

The agreement authorizes Webull to modify the Terms at any time without prior notice, publishing changes to the app or website, with continued platform use constituting user acceptance of the modified Terms....

Why it matters: This provision establishes a unilateral modification mechanism under which material changes to user rights, data practices, or liability terms take effect without affirmative user consent or advance notification, creating ongoing monitoring obligations for users and compliance teams....

View provision → Watch Webull →

The confidentiality commitment in the agreement includes a catch-all exception permitting Webull to disclose user information in any situation Webull itself determines disclosure is necessary, without a defined standard or scope for that determination....

Why it matters: This provision reserves a broadly worded unilateral discretion to disclose user information beyond the enumerated exceptions, the operational boundaries of which are not defined in the document, creating potential tension with statutory data protection requirements in multiple jurisdictions....

View provision → Watch Webull →

The agreement requires that disputes on personal accounts be resolved through individual arbitration rather than court proceedings and includes a waiver of the right to participate in class action litigation. A 30-day opt-out window is referenced in the Resolving Claims section....

Why it matters: This provision requires personal account disputes to proceed through individual arbitration rather than litigation or class proceedings. The Resolving Claims section governs the specific procedures, timelines, and opt-out mechanism applicable to this clause....

View provision → Watch Bank of America →

The agreement states that Bank of America determines and may change the order in which transactions are processed and posted to accounts at its discretion and without notice, and acknowledges that certain processing orders can result in more insufficient funds items and therefore more overdraft fees than other orders....

Why it matters: This provision reserves the bank's right to alter transaction processing and posting sequences without notice, and the agreement itself acknowledges that these sequencing decisions can affect the number of overdraft fee-generating events on a given account....

View provision → Watch Bank of America →