Provisions index

Guideline 5.1.1(ii) requires apps to obtain user consent before collecting any user or usage data, including data considered anonymous at collection, and prohibits conditioning paid functionality on consent to data collection. Apps must provide a mechanism for users to withdraw consent and must describe data use clearly in purpose strings....

Why it matters: This provision requires consent for data collection regardless of whether the data is classified as anonymous at the time of collection, which is a broader consent trigger than some regulatory frameworks apply. The prohibition on conditioning paid functionality on data access consent establishes a platform-level data minimization standard applicable to all App Store apps....

View provision → Watch Apple →

Guideline 4.8 requires that any app using a third-party social login for primary account authentication must also offer an alternative login option that limits data collection to name and email, permits email privacy, and does not collect app interaction data for advertising without consent. Sign In with Apple satisfies these requirements....

Why it matters: This provision effectively requires that Sign In with Apple or an equivalent privacy-preserving login option be offered alongside any third-party social login used for primary account authentication, limiting the extent to which social platforms can capture user authentication data through App Store apps. Developers using multiple social login options must verify that at least one compliant alternative is available....

View provision → Watch Apple →

The policy authorizes Google to associate activity collected across its own services and across third-party sites and apps that use Google products with a user's personal information, depending on account settings, for purposes including personalized advertising and service improvement....

Why it matters: This provision establishes the operational basis for Google's cross-service and cross-device advertising and personalization infrastructure, affecting how data collected across Search, YouTube, Gmail, and third-party integrated sites is linked to individual accounts....

View provision → Watch Google →

The policy states that Google uses publicly available information to train its AI models for products including Google Translate, Gemini Apps, and Cloud AI capabilities....

Why it matters: This provision discloses that publicly available information is used as training data for Google's AI systems, including Gemini Apps and Cloud AI, without specifying the categories of publicly available information collected or the consent mechanisms applicable to individuals whose publicly available data may be included....

View provision → Watch Google →

The policy discloses that third-party websites and apps using Google advertising or analytics services share user activity data with Google regardless of browser mode, including when users are browsing in Chrome Incognito mode....

Why it matters: This provision establishes that Incognito mode does not prevent third-party sites using Google services from sharing activity data with Google, which is operationally significant for users who rely on Incognito mode as a privacy measure when visiting third-party sites....

View provision → Watch Google →

The policy discloses that for users on organizational Google accounts, domain administrators and resellers have access to account data including email content, can change passwords, suspend account access, and can restrict the user's ability to delete or edit information or privacy settings....

Why it matters: This provision establishes that users operating under organizational Google accounts, including students using Google Workspace for Education and employees using Google Workspace, have reduced personal control over their account data and privacy settings relative to individual consumer accounts....

View provision → Watch Google →

The policy states that deleted data may persist in Google's active and backup systems for an unspecified period before complete removal, and that retained data may be kept in anonymized form rather than deleted entirely in some circumstances....

Why it matters: This provision establishes that user-initiated deletion requests do not result in immediate removal from all Google systems, and that some data may be retained in anonymized form, which has implications for compliance with data subject deletion rights under GDPR and U.S. state privacy laws....

View provision → Watch Google →

The policy authorizes collection of precise location data from GPS, IP address, Wi-Fi access points, cell towers, and Bluetooth-enabled devices, and states this data is used for service delivery and for advertising based on a user's location....

Why it matters: This provision establishes that Google collects multiple categories of location data, potentially including precise GPS coordinates as well as inferred location from network infrastructure, and authorizes use of that data for targeted advertising, subject to device and account settings....

View provision → Watch Google →

The policy asserts that Google does not sell personal information and does not share personal information as defined under CCPA, and states that anonymization policies and technical measures are in place to prevent re-identification of anonymized data....

Why it matters: This provision makes an explicit legal assertion under CCPA that Google does not sell or share personal information as defined by the statute, which affects the scope of opt-out rights available to California consumers and the regulatory obligations applicable to Google's advertising data practices under CCPA....

View provision → Watch Google →

The policy discloses that Google may collect biometric information including fingerprints when users choose to participate in Google product development studies....

Why it matters: Biometric data collection is subject to specific statutory requirements in multiple U.S. states, most notably Illinois BIPA, which imposes written consent, retention schedule, and destruction requirements independent of general privacy law frameworks....

View provision → Watch Google →

The policy states that user data may be processed on servers outside the user's country of residence, and asserts that Google applies consistent protections regardless of processing location and complies with applicable data transfer legal frameworks....

Why it matters: Cross-border data transfer compliance is a significant operational and legal requirement for organizations processing personal data of EU and EEA residents, requiring legally recognized transfer mechanisms such as Standard Contractual Clauses or adequacy decisions under GDPR....

View provision → Watch Google →

The policy authorizes disclosure of User Data and Usage Data to advertising partners for ad delivery and effectiveness measurement, and to marketing partners for promotions and advertising on third-party online services, with an exception prohibiting disclosure to advertising partners for users under age 18....

Why it matters: This provision establishes that personal data is disclosed to both advertising and marketing partner categories, and that marketing partners may combine disclosed data with other data they independently hold about the user, which has implications for the downstream use of that data beyond Spotify's control....

View provision → Watch Spotify →

The policy discloses that Spotify collects audio recordings of users' voices when voice features are available in the user's market and the user chooses to use those features, and this voice data is used for service provision, AI model development, and legal compliance purposes....

Why it matters: Voice data is classified as a sensitive or biometric data category under several state privacy laws, and its collection and use for AI model training purposes described elsewhere in the policy creates heightened compliance obligations in jurisdictions with biometric privacy statutes....

View provision → Watch Spotify →

Spotify may modify these Terms by providing notice through reasonable means, including posting to the service, with supplemental notice for material changes. Continued use of the Spotify Service after a change constitutes acceptance of the updated terms. Premium subscribers who do not accept updated terms must close their account before their renewal date or within thirty days of the effective date, whichever is earlier....

Why it matters: This provision establishes that continued use of the Spotify Service following any terms update constitutes acceptance of the revised terms, and sets a specific thirty-day or renewal-date window for premium subscribers to exit without being bound by updated terms. The mechanism for material changes includes email and in-service notification, but the standard for what constitutes a material change is not defined in the document....

View provision → Watch Spotify →

By using the Spotify Service, users grant Spotify the right to use their device's processor, bandwidth, and storage hardware for service operation, to deliver advertising and information to users, and to allow Spotify's business partners to deliver advertising and information to users through the same device access....

Why it matters: This provision establishes that Spotify and its business partners are authorized to use device resources (processor, bandwidth, storage) and to deliver advertising to users. The scope of 'business partners' and 'other information' is not defined in this provision, and the Privacy Policy incorporated by reference governs the associated data practices....

View provision → Watch Spotify →

Users agree to indemnify Spotify and hold it harmless from all damages, losses, and expenses, including attorneys' fees, arising from the user's breach of the Terms, any User Content posted, any activity conducted on the service, or any violation of law or third-party rights....

Why it matters: This provision establishes a broad user indemnification obligation covering any activity engaged in on or through the Spotify Service, not limited to clear terms violations. The scope of category (3) (any activity on the service) is potentially broad and may create indemnification exposure in contexts where the user's activity is not itself a breach of the Terms....

View provision → Watch Spotify →

The terms require users to be at least eighteen years old, or between thirteen and seventeen with parental or guardian consent. Users must also represent that they reside in the United States and that registration information is accurate. The document does not describe the mechanism by which Spotify verifies age or obtains and records parental consent....

Why it matters: This provision establishes that users aged thirteen to seventeen are permitted to use the service with parental consent, engaging COPPA compliance obligations for users under thirteen and creating age verification and parental consent documentation questions for the thirteen-to-seventeen cohort. The absence of a described consent verification mechanism in the Terms is operationally relevant for compliance assessments....

View provision → Watch Spotify →

The policy prohibits using OpenAI services to aggregate, monitor, profile, or distribute individuals' private or sensitive information without their authorization, in addition to the specific biometric and likeness prohibitions enumerated separately....

Why it matters: This provision establishes a general prohibition on privacy-compromising use cases that applies across all information types, supplementing the specific biometric and categorical prohibitions with a broad restriction on unauthorized aggregation, monitoring, and distribution of personal information....

View provision → Watch OpenAI →

The policy prohibits using OpenAI services for deceit, fraud, scams, spam, impersonation, academic dishonesty, and political campaigning, lobbying, or any form of foreign or domestic election interference or demobilization activities....

Why it matters: This provision explicitly prohibits election interference and demobilization activities, including domestic political campaign automation, which has direct operational relevance for political advertising platforms, campaign technology vendors, and media organizations deploying OpenAI services....

View provision → Watch OpenAI →

The policy discloses that PayPal generates inferred data including gender, income estimates, creditworthiness assessments, fraud risk scores, and behavioral preferences derived from transactions, service interactions, and interactions with Partners and Merchants....

Why it matters: This provision establishes that PayPal creates derived data profiles, including income and creditworthiness inferences, from user transaction and behavioral data; these inferred profiles may then be used in Automated Decision Making or shared with Partners and Merchants as part of the personalized shopping framework, creating a data derivation and downstream sharing chain with potential regulatory implications....

View provision → Watch PayPal →

The policy states that Personal Information is retained for the duration of the user relationship plus 10 years after the relationship ends, with extensions permitted for legal obligations, AML compliance, litigation, investigations, and audit purposes....

Why it matters: A standard 10-year post-relationship retention period is stated for all Personal Information categories, with open-ended extensions for legal and compliance purposes. This retention framework may require evaluation against GDPR's data minimization and storage limitation principles for EEA users, and against state privacy law deletion rights for US users who submit deletion requests after closing their accounts....

View provision → Watch PayPal →

The policy states that PayPal collects Personal Information from individuals who do not have a PayPal account when they use Pay without a PayPal Account, Braintree, Fastlane, or receive payments via Visa+, Hyperwallet, or third-party networks, and may associate that pre-account transaction data with a PayPal account if one is later created....

Why it matters: This provision establishes that PayPal's data collection scope extends to individuals who have not established a PayPal account and have not agreed to PayPal's terms of service, with subsequent association of pre-account transaction data to accounts created later. This retroactive data association may have implications for the adequacy of notice and consent at the time of original data collection....

View provision → Watch PayPal →

The policy states that PayPal transfers Personal Information internationally and that by using the services, users in jurisdictions where such consent is permitted agree to cross-border data transfers including to countries with different data protection standards. For EU users, intra-company Binding Corporate Rules and Standard Contractual Clauses are cited as transfer mechanisms....

Why it matters: The policy's use of 'by using our Sites and Services, where permitted under applicable privacy laws, you agree to your Personal Information being transferred' as a transfer consent mechanism may require evaluation under GDPR, which does not recognize general terms-of-service consent as a valid transfer mechanism for Article 46 purposes; instead, specific transfer mechanisms such as adequacy decisions, SCCs, or BCRs are required....

View provision → Watch PayPal →

X reserves the right to suspend or terminate accounts if it reasonably believes any of five specified conditions apply, including 'risk or possible legal exposure' and commercial inviability, and may also terminate for any other reason or no reason at its convenience to the extent permitted by law....

Why it matters: This provision authorizes termination not only for Terms violations but also for circumstances such as risk of legal exposure to X or commercial inviability, and includes a general convenience termination right. The EU/EFTA/UK version does not include the explicit 'any other reason or no reason at our convenience' clause and instead lists enumerated reasons for termination....

View provision → Watch X →

For non-EU/EFTA/UK users, Texas law governs all disputes and users must bring all claims exclusively in federal or state courts in Wichita County or Tarrant County, Texas, waiving any objection to those venues as inconvenient....

Why it matters: This provision requires all non-EU/EFTA/UK users to litigate disputes in Wichita County or Tarrant County, Texas, regardless of the user's location, and waives inconvenient forum objections. The provision explicitly extends to patent disputes and applies to disputes involving US corporate affiliates including SpaceXAI, Cursor, and SpaceX entities....

View provision → Watch X →

Users grant X a worldwide, royalty-free, sublicensable license to use, reproduce, adapt, modify, distribute, and display their content across all current and future media formats for any purpose, including sublicensing to third parties....

Why it matters: The license is granted for 'any purpose' across 'any and all media or distribution methods now known or later developed,' including the right to sublicense. The EU version includes a limiting clause stating that if users have chosen to restrict content distribution to a restricted community, X will respect that choice, which the non-EU version does not include in equivalent terms....

View provision → Watch X →

X's total liability for any claim is capped at the greater of $100 USD or the amount the user paid X in the prior six months for the relevant Services. Indirect, incidental, special, consequential, and punitive damages are excluded to the maximum extent permitted by law....

Why it matters: The aggregate liability cap of $100 USD or six months of paid fees applies across all theories of liability including warranty, contract, statute, and tort, and excludes loss of data, goodwill, revenues, and profits. The EU version states only that liability is 'limited to the maximum extent permissible in your country of residence' without specifying a dollar amount....

View provision → Watch X →

The policy states that Binance.US does not sell personal information to advertising providers for monetary consideration, but acknowledges that data disclosures to advertising service providers may qualify as a 'sale' or 'share' under applicable state privacy laws. Users in applicable states can opt out through the Online Tracking Opt-Out Guide....

Why it matters: This provision establishes that advertising-related data transfers are occurring and that the company acknowledges they may trigger opt-out rights under state privacy statutes including CCPA, even while asserting no monetary sale occurs. Compliance teams should confirm that opt-out mechanisms are fully functional and that advertising partners are contractually restricted from independent use of the data....

View provision → Watch Binance.US →

The policy states that if a user does not provide personal information required by applicable law, including for AML and KYC compliance, BAM will close the user's account....

Why it matters: This provision establishes a direct operational consequence for non-compliance with information requests tied to legal obligations. For users holding cryptocurrency assets on the platform, account closure triggered by this provision would require resolution of any outstanding balances or positions....

View provision → Watch Binance.US →

The policy authorizes BAM to create de-identified or anonymized datasets from user personal information and to disclose those datasets to third parties for the third parties' own independent purposes....

Why it matters: This provision permits disclosure of derived data to third parties without restriction on those third parties' use, provided the data meets BAM's de-identification standard. Compliance teams should evaluate whether the de-identification methodology meets applicable regulatory standards, including CCPA's de-identification requirements, given that re-identification of cryptocurrency transaction data may be technically feasible....

View provision → Watch Binance.US →

Public.com reserves the right to terminate or suspend any user account at any time, for any reason or no reason, with or without notice, at its sole discretion. Violations of the Terms result in automatic termination of access....

Why it matters: This provision authorizes Public.com to terminate account access without advance notice or stated justification. For users with active brokerage accounts or open investment positions, abrupt platform access termination may affect their ability to manage those positions, though brokerage-specific terms are governed separately by the Public Brokerage Agreement....

View provision → Watch Public.com →

Public.com reserves the right to change the Terms of Service at any time with 7 days' advance notice. Immaterial modifications take effect upon publication, while material modifications require user acceptance before taking effect....

Why it matters: This provision establishes a 7-day notice period for changes to the Terms, which is shorter than the 30-day period more commonly observed in consumer financial services agreements. Immaterial changes become effective upon publication without any user action or acceptance....

View provision → Watch Public.com →

The policy requires that any individual who receives advice or is subject to a decision produced using a High-risk AI Recommendation must be informed that AI was involved in generating it, though the specific AI system or provider does not need to be named....

Why it matters: This provision establishes a mandatory disclosure obligation that operators must implement at the point of delivery for any High-risk AI Recommendation, affecting consumer-facing product design and workflow documentation across twelve defined high-stakes domains....

View provision → Watch Anthropic →

The policy requires that any product using Claude to communicate directly with external users as a chatbot or AI agent must disclose the AI nature of the interaction at the start of each chat session or within the product interface....

Why it matters: This provision creates a mandatory per-session or persistent interface disclosure obligation for all operators deploying consumer-facing Claude-based chatbots or agents, requiring product design changes for any deployment that does not currently surface this disclosure....

View provision → Watch Anthropic →

The policy places full compliance responsibility on operators who build or deploy AI agents, covering all actions those agents take through connected tools, browsers, or systems, not just the instructions given to the agent....

Why it matters: This provision establishes that operator compliance obligations under the policy extend to the downstream actions of AI agents, including autonomous tool use and browser interactions, rather than being limited to direct model inputs or outputs....

View provision → Watch Anthropic →

The policy reserves Anthropic's right to negotiate modified use restrictions with governmental customers, applying a discretionary standard based on Anthropic's own judgment of whether contractual safeguards adequately mitigate the harms the standard policy addresses....

Why it matters: This provision creates a variable policy baseline for governmental customers, meaning that prohibitions stated in the Universal Usage Standards or other policy sections may not apply uniformly to government deployments where Anthropic has entered into a separate contract....

View provision → Watch Anthropic →

The policy establishes that Anthropic monitors for Usage Policy violations and may warn, throttle, limit, suspend, or terminate account access upon suspected violations, while also noting that real-time output blocks do not constitute a violation determination....

Why it matters: This provision establishes Anthropic's enforcement authority and the range of account restrictions available upon suspected violations, including termination, and distinguishes between automated output blocks and formal violation determinations....

View provision → Watch Anthropic →

The policy states that Meta's systems automatically process stored user data to identify Meta Product users and serve personalized ads through the Meta Audience Network when those users visit third-party apps, using data including device identifiers, behavioral data, and network information....

Why it matters: This provision establishes that Meta's ad personalization infrastructure extends beyond Meta-owned platforms to third-party apps participating in Meta Audience Network, using data associated with users' Meta accounts to target ads in those external environments. The mechanism relies on cross-app identification using device identifiers, cookies, and behavioral data....

View provision → Watch Meta →

The policy states that Meta transfers, stores, and processes user information globally including to and from the United States, sharing data internally across offices and data centers and externally with partners, third parties, and service providers, identifying global operations and service provision as the basis for these transfers....

Why it matters: This provision establishes that user data from all jurisdictions, including EU and UK users, is transferred to and processed in the United States and other countries. The legal mechanisms supporting these transfers, such as Standard Contractual Clauses or the EU-US Data Privacy Framework, are referenced in the full policy but not detailed in the extracted text, and compliance with applicable transfer requirements is a material consideration....

View provision → Watch Meta →

The policy states that when users connect to third-party integrated partners through Meta Products, those partners receive information about the user and their activity, and that integrated partners may always access publicly available information on Meta Products regardless of whether a user has explicitly connected with them....

Why it matters: This provision establishes that integrated partners have ongoing access to public profile and content data, and that users who connect to integrated partners share additional activity and profile information with those partners. The scope of information shared with integrated partners and how those partners handle it is governed by their own terms and policies rather than Meta's policy alone....

View provision → Watch Meta →

Bank of America reserves the right to change, add, delete, or amend any account terms, fees, services, or conditions in this schedule at any time, and may also convert or discontinue existing accounts or services....

Why it matters: This provision establishes a broad contractual reservation of authority to modify fee structures, account terms, and available services without specifying a notice period or consumer consent requirement, though applicable law, including Regulation DD and state-specific deposit account statutes, may independently require advance notice for certain types of changes....

View provision → Watch Bank of America →

The Advantage SafeBalance Banking for Family Banking account prohibits incoming transfers from non-Bank of America accounts, including ACH deposits, Zelle transfers, and employer direct deposits; the account agreement states that the account owner affirmatively authorizes Bank of America to treat such transfers as unauthorized and to reject them at the bank's discretion....

Why it matters: This provision establishes a structural restriction on incoming fund flows to the Family Banking account that is operationally distinct from standard personal checking accounts; the explicit characterization of external transfers as 'unauthorized' by the account owner's agreement may have implications under Regulation E, which governs consumer rights for unauthorized electronic fund transfers....

View provision → Watch Bank of America →

BofA Rewards enrollment and tier benefits may be terminated or downgraded without further notice if, following an Annual Review, the account holder fails to meet qualifying checking account or minimum average balance requirements within a grace period of not less than three months....

Why it matters: This provision establishes that fee waivers, ATM fee refunds, overdraft fee waivers, and other BofA Rewards benefits linked to tier status may be discontinued or reduced immediately without additional notice at the conclusion of the grace period, affecting the ongoing operational cost structure for enrolled customers who rely on tier-based fee waivers....

View provision → Watch Bank of America →

The agreement assigns OpenAI's rights in generated Output to the user, while noting that Output may not be unique and similar Output may be generated for other users. The assignment does not extend to other users' output or Third Party Output....

Why it matters: This provision establishes a contractual assignment of Output ownership from OpenAI to users, qualified by the phrase 'to the extent permitted by applicable law' and by the acknowledgment that Output may not be unique. The practical scope of intellectual property rights in AI-generated content remains an evolving area of law in multiple jurisdictions....

View provision → Watch OpenAI →

Accounts created using organizational email addresses may be transferred to the organization's business account, after which the organization's administrator gains control over the account including access to Content and the ability to restrict or remove user access. OpenAI states it will provide notice to the user prior to transfer unless the organization has already done so....

Why it matters: This provision establishes that organizational email-based accounts are subject to potential employer or organizational administrator control, including access to user-generated Content. The notice obligation is qualified by the carve-out for situations where the organization has already notified the user....

View provision → Watch OpenAI →

The agreement reserves OpenAI's right to suspend, terminate, or delete accounts for Terms or Usage Policy violations, legal compliance reasons, risk or harm determinations, or inactivity exceeding one year for unpaid accounts. An appeal mechanism is available through the Support team....

Why it matters: This provision establishes the grounds and process for account termination, including a broad risk or harm standard that is not further defined. The inactivity termination provision applies specifically to free accounts inactive for more than one year, with advance notice stated as a condition....

View provision → Watch OpenAI →

The document authorizes Robinhood to use user data including AI chatbot conversation inputs to train, test, and improve its AI functionalities, and states that notice and consent will be obtained where required by applicable law....

Why it matters: This provision authorizes secondary use of user conversation data for AI model development, which may engage state AI transparency laws and FTC guidance on AI data practices. The phrase 'where required under applicable law' conditions consent obligations on regulatory requirements, meaning the scope of user consent is jurisdiction-dependent....

View provision → Watch Robinhood →

The document authorizes Robinhood to share user personal information including name, address, telephone number, and social security number with affiliated Robinhood entities for purposes including service delivery and cross-product applications, and states that users may limit this sharing in some cases through GLBA opt-out mechanisms....

Why it matters: This provision establishes that social security numbers and other identity data may be shared across Robinhood's affiliated entities as part of standard operations. The document provides a limited opt-out mechanism through the GLBA financial privacy notices, though the scope of what can be limited is constrained by GLBA's permitted sharing categories....

View provision → Watch Robinhood →

The document authorizes Robinhood and third-party advertising and analytics partners to collect device identifiers, IP addresses, browsing activity, and conversion information through cookies, pixels, and SDKs, and to use this data for cross-platform targeted advertising, with opt-out controls available through account settings and industry opt-out tools....

Why it matters: This provision establishes that behavioral advertising data sharing with third-party partners applies by default, and that data collected through these technologies may be combined across devices and websites over time. Users must affirmatively opt out through account settings or external tools such as the Digital Advertising Alliance opt-out at www.aboutads.info/choices....

View provision → Watch Robinhood →

The document states that Social profile information including username, profile statistics (which may include profit and loss metrics), posts, and follower data is visible to other Robinhood users by default, and that content may be shared outside the Social product to external social media platforms....

Why it matters: This provision establishes that financial performance metrics such as profit and loss ratios may be displayed on user Social profiles and shared with other users, including potentially outside the Robinhood platform. Deactivation hides the profile from other users but does not delete data; full deletion requires a separate action....

View provision → Watch Robinhood →