Found in 290 of 352 platforms tracked (82% adoption) · 5149 provisions
The right to opt out at any time means research participation is not a permanent or irrevocable commitment, giving users ongoing control over their involvement.
Account deletion triggers automatic and permanent downstream consequences — removal from Research and sample discardment — that the user may not be able to reverse.
This clause establishes a set of individual privacy rights — access, correction, deletion, and objection — giving individuals a basis to engage ADP regarding their personal data.
This right extends the deletion obligation beyond AI21 Labs itself to its service providers, broadening the practical scope of data removal.
This right protects users from retaliation or differential treatment specifically triggered by their exercise of CCPA-granted privacy rights.
Continued use of AWS Services in South Korea is conditioned on acceptance of overseas data transfers; the only way to opt out is to stop using the service and close the account.
The region-selection right gives customers control over the geographic location of their data, while the consent mechanism ties that control to acceptance of data transfer into the chosen regions.
This clause places the full compliance burden for privacy notices and consent on the customer, meaning AWS Bedrock bears no responsibility if a customer fails to meet applicable data protection requi…
This establishes an affirmative right consumers can exercise to stop a specific category of data use, namely sale and sharing for targeted advertising purposes.
These rights give users direct levers to control their personal data held by Adobe, including the ability to stop active processing and to extract data in a portable format under specific conditions.
The right is characterized as 'absolute,' meaning Adobe cannot condition, limit, or override it, and it applies to profiling carried out for direct marketing as well as to direct marketing itself.
This right, where it applies, gives individuals visibility into the scope of data Adyen holds about them, which is foundational to exercising other privacy rights.
The portability right, if it applies, allows individuals to obtain their data in a transferable form, though the qualifier 'where technically possible' limits the usability guarantee.
The deletion obligation is qualified by 'commercially reasonable efforts' and 'compliance with applicable laws', meaning full erasure is not guaranteed.
The opt-out right carries a direct consequence: exercising it results in loss of eligibility for certain financial products, creating a practical trade-off between privacy and access to services.
This provision grants individuals a direct right to prevent commercial data transfers, but the 'if applicable' qualifier means the right may not be available in all jurisdictions or contexts.
An opt-out mechanism exists for merchant marketing data sharing, meaning users who take affirmative action in their account settings can limit this disclosure.
The existence of user rights and choices determines what control, if any, users have over how their personal information is collected, used, or shared by Afterpay.
State-specific privacy rights can be materially stronger than the general policy, meaning some users have additional protections or entitlements not available to all users.
The presence of a Do Not Sell/Share My Info option indicates Airtable acknowledges a user right to opt out of the sale or sharing of personal information, consistent with privacy frameworks such as t…
The right to access or delete personal information is conditioned on applicable law, meaning it is not universally guaranteed and varies by jurisdiction.
Customer End Users cannot exercise data rights directly against Amplitude; their only recourse for accessing, amending, or deleting their data is through the Customer, who retains discretion over whe…
This commitment ensures that exercising data privacy rights does not result in retaliation through denial of services or differential pricing.
The right to opt out is law-dependent and jurisdiction-specific; it does not apply universally to all Ancestry users.
The claim establishes that users have an opt-out right for model training, exercisable through account settings, which is the exclusive mechanism provided for limiting this use of their data.
The availability of an opt-out mechanism gives users a degree of control over whether their interaction data is used for model training, though that control must be exercised affirmatively through ac…
The existence of this right indicates that Anyscale may otherwise sell or share personal information, and that users have a mechanism to restrict this.
The right to change or withdraw consent for certain cookies at any time gives users an ongoing mechanism to adjust their cookie preferences after initial consent.
The use of 'may have' means these rights are not guaranteed by Anyscale unconditionally; their availability depends on factors not stated in the canonical claim.
This requirement ensures that any app enabling account creation cannot omit a corresponding deletion mechanism, giving users an in-app path to remove their account entirely.
Because all submitted apps are reviewed for user privacy compliance, Apple App Store acts as a gatekeeper for privacy standards across apps available on its platform.
The clause establishes a legal-compliance exception to user deletion rights, meaning users cannot compel deletion of transaction data that Apple App Store is required by law to retain.
The clause establishes that Apple App Store acknowledges a set of user rights over personal data, covering the principal rights recognized under major privacy frameworks.
A protocol designed for client anonymity indicates an architectural commitment to preventing identification of users at the application layer.
This technique ensures that even servers outside the PCC trust boundary cannot learn which records a user retrieved, preserving access-pattern privacy beyond the PCC perimeter.
Asana's commitment to cooperate means customers can rely on Asana to assist in honoring data subject rights under applicable law, which is essential for customers' own regulatory compliance.
The right to limit this sharing is grounded in federal law, but it is expressly partial—some sharing cannot be limited regardless of consumer preference.
This clause establishes a specific statutory right that obligates Baseten to produce a disclosure covering multiple categories of data practices upon request.
This clause establishes an actionable opt-out right that, when exercised, requires Baseten to stop selling the individual's personal information.
BeReal provides a defined mechanism for users to exercise opt-out rights over sale, sharing, and targeted advertising, offering two specific pathways.
Identity verification is a prerequisite to exercising data access and deletion rights; failure to meet it can result in Binance.US declining both types of requests without obligation.
This clause grants users a formal right to challenge or curtail Bluesky's processing of their personal information on multiple grounds, including consent withdrawal and noncompliance.
This clause identifies a contact mechanism for parents or guardians concerned about unauthorized data uploads by a child, which is relevant to child privacy protections.
The clause conditions the access and rectification rights on Boston Dynamics's role as a Controller, meaning these rights may not apply in all processing contexts.
The clause establishes an affirmative right for users to object to processing of their personal information, without additional conditions stated in the quoted excerpt.
Dating app profiles inherently reveal or allow inference of sensitive personal characteristics such as sexual orientation and relationship preferences, which are special categories under GDPR requiri…
The clause establishes that California-specific privacy rights and obligations are documented separately from the general privacy policy, requiring users to consult multiple documents to understand t…
Biometric data is among the most sensitive personal information category under both GDPR and multiple US state laws, and its collection by a consumer dating app creates significant legal exposure and…
Recognizing this right means users have a mechanism to prevent Calendly from selling or sharing their Personal Data, with the scope of 'sale' and 'sharing' determined by applicable legal definitions.
Users bear the full legal burden of recording consent compliance; Calendly assumes no responsibility if a user fails to obtain legally required consent before recording or generating AI transcription…
Routing rights requests to the customer rather than Calendly means Calendly is not the point of contact for exercising rights over customer-controlled data, potentially complicating access for indivi…
Articulating this right establishes that users can request a substantive accounting of how their Personal Data has been handled across collection, use, disclosure, sale, and sharing.
Users have an affirmative right to stop three distinct categories of data use—sales, targeted advertising, and sharing—each of which independently affects how their data is used commercially.
This establishes a right to correction of inaccurate personal information, a key consumer privacy protection under laws such as the CCPA.
This establishes a deletion right, but its scope is limited to 'certain' information, meaning not all personal information may be subject to deletion.
This establishes a right for individuals to obtain visibility into certain personal information Cerebras retains, which is a foundational privacy right under laws such as the CCPA.
The use of 'may have rights' rather than 'have rights' means Chase does not affirmatively guarantee CCPA rights apply; the scope of those rights is left unstated in this clause.
Chegg's acknowledgment of this right means California residents have a mechanism to stop the sale of both their Personal Information and their Sensitive Personal Information.
This right constrains Chegg's ability to use Sensitive Personal Information for secondary purposes if a California resident exercises it, limiting use to a narrower statutory set.
New customers have a limited window before sharing begins; the opt-out mechanism exists but does not necessarily prevent sharing during the initial 30-day period.
The scope of customers' opt-out rights is defined and capped by federal law, meaning sharing that falls outside these three categories cannot be restricted by the customer.
Unlike the general policy where sharing occurs unless a customer opts out, North Dakota residents receive opt-out protection automatically.
This right is available only to California residents and provides an opt-out mechanism that is not available to all customers under the general joint marketing sharing terms.
The clause conditions CCPA rights access on whether the CCPA actually applies to a given user's personal information, meaning not all users are guaranteed these rights.
The right to withdraw consent at any time gives users ongoing control over the legal basis on which ClickUp processes their data.
Cloudflare acknowledges a comprehensive set of individual data rights, giving users formal mechanisms to control their personal information.
California residents have a specific opt-out right tied to the CCPA's statutory definitions of 'sell' and 'share', which have precise legal meanings that may differ from everyday usage.
California residents can exercise their privacy rights without risk of retaliation through service denial or price increases, as Cloudflare is expressly prohibited from taking such actions.
The clause specifies the exact mechanism users must follow to exercise their deletion and data-copy rights, making those rights actionable.
This provision places contractual responsibility on users to ensure they do not input regulated data types such as medical records or financial account information into Cursor, which is significant f…
The right to opt out is stated as conditional ('may have'), meaning it is not guaranteed to all users and depends on factors not specified in this excerpt, such as applicable jurisdiction.
Recognition of opt-out rights across behavioral advertising, profiling, and data sales gives users control over three distinct high-impact data uses.
Users are guaranteed a chance to opt out before their personal information is used for purposes materially different from those already disclosed, limiting unannounced repurposing of data.
Recognition of a deletion right gives users a mechanism to request removal of their personal information from Datadog's systems.
This clause makes legal compliance with personal information laws a contractual obligation, meaning a breach of applicable privacy law also constitutes a breach of the License.
The right to withdraw consent is expressly preserved and is exercisable at any time, giving users an ongoing mechanism to revoke prior consent to specific data uses.
Account deletion produces two distinct outcomes depending on data type: permanent deletion for identifying information and anonymization for other data, with the scope of each governed by a separate …
The right to opt out is limited to US residents and scoped to definitions set by applicable laws and regulations, meaning the practical coverage of the right depends on how those laws define the rele…
The right is stated as conditional ('may have'), meaning it is not universally guaranteed and likely depends on applicable law or jurisdiction, which limits the certainty of the protection.
DoorDash explicitly acknowledges a user right to stop the sale or sharing of Personal Information for targeted advertising, and provides a specific mechanism on its website to exercise that right.
The right is framed as a request to opt out, and it is limited to certain non-required purposes — meaning some third-party disclosures cannot be opted out of.
The clause recognizes an individual's right to escalate concerns to a government supervisory authority, independent of Dun & Bradstreet's own processes.
The clause establishes both a commitment by Dun & Bradstreet and an affirmative permission for individuals to exercise their data and digital rights, creating a practical avenue for rights requests.
The commitment extends to individuals acting in professional as well as personal capacities, broadening the scope of rights coverage beyond typical consumer-only protections.
This establishes both a deletion right and a material consequence of exercising it—permanent loss of access to associated games and services—which is directly relevant to the practical value of exerc…
This establishes that opt-out and objection rights are conditioned on applicable law, meaning the availability of these rights varies by jurisdiction and is not universally guaranteed.
The right is qualified by 'may have,' meaning Egnyte does not unconditionally guarantee this right applies to every California resident in every circumstance.
The right is qualified by 'may have,' meaning Egnyte does not unconditionally commit that this opt-out right applies to every California resident in every circumstance.
The deletion right is expressly limited by Egnyte's retained right to maintain personal information under CPRA exceptions, meaning a deletion request may not result in full erasure.
A defined six-month appeals window gives EU users a time-limited right to challenge enforcement actions taken by ElevenLabs against their content or account.
Users have a specific, accessible mechanism to prevent their Personal Data from being used for AI training, and this right can be exercised at any time.
Users have a mechanism to stop their Personal Data from being used for training, and that option is available at any time rather than being a one-time or time-limited choice.
This clause frames Equifax's stated obligations as commitments rather than enforceable procedural requirements, and the standard of 'greater control' is relative and undefined.
Equifax has established a dedicated online channel for California Consumer Privacy Act rights, indicating a mechanism exists beyond simply stating the rights.
Characterizing the data sharing as a potential 'sale' invokes statutory opt-out rights under US privacy laws such as the CCPA, though the word 'may' preserves conditionality on both the sale characte…
This acknowledges legally enforceable rights EEA users hold with respect to Personal Data held by Eventbrite, establishing the scope of user control available under applicable law.
The right to deletion is qualified by unspecified exceptions, meaning Experian retains authority to decline deletion requests in some circumstances.
This right enables consumers to discover the existence and content of personal information Experian holds, which is foundational to exercising other privacy rights.
FanDuel presents this as a conditional right — using 'may' — meaning the right is not universally guaranteed to all users and may depend on applicable law or jurisdiction.
An opt-out right before materially different disclosure or use means users have a concrete mechanism to prevent certain data flows they did not originally consent to.
California residents hold a legally recognized right to prevent Figma from selling or sharing their personal information for targeted advertising purposes.
This commitment ensures users can exercise their legal privacy rights without fear of retaliation or adverse treatment by Figure AI.
Figure AI acknowledges an inherent limitation in the security of data transmission and storage, which applies to any personal data users transmit or that Figure AI stores.
Users have a self-service right to retrieve or remove their data at any time, which supports data portability and deletion without requiring external requests.
This clause affirms that users have a practical, self-service pathway to exercise access, correction, and deletion rights over their data held by Fly.io.
This right permits users to restrict two distinct forms of third-party data transfer: sale for consideration and sharing for cross-context behavioral advertising, both of which are common forms of co…
The clause establishes a blanket prohibition on misuse of personal information, though the absence of a definition of 'misuse' in the quoted language leaves the scope of prohibited conduct undefined …
The example of posting personal information without consent is illustrative rather than exhaustive, meaning the prohibition on third-party privacy violations extends beyond that specific conduct.
Users who object to personalization have no targeted opt-out mechanism; the only recourse requires surrendering their entire account or profile data.
Users have a concrete, actionable right to stop their personal data from being used for targeted advertising, with two specific mechanisms provided to exercise that right.
Users who rely on perceived anonymity when submitting content such as reviews may still be identifiable, with real-world consequences for employment or privacy.
This right allows users to prevent their Personal Information from being used to target them with behavioral advertising across different contexts or platforms.
The deletion right is qualified by exemptions, meaning Glean may retain data in circumstances that fall within those exemptions even after a deletion request.
This right gives users a concrete mechanism to learn exactly what personal data Glean has collected, used, and shared about them within a defined time window.
This commitment ensures users can invoke their CCPA/CPRA rights without fear of retaliatory or adverse treatment by Glean.
This establishes that privacy and security are stated commitments within Google's AI principles, providing a normative baseline users can reference.
These rights give qualifying users meaningful control over their Service Data, including the ability to require deletion or restrict how Google Cloud processes it.
End User location data cannot be collected or cached without affirmative, advance, and revocable consent, placing a strict gatekeeping obligation on the Customer.
This establishes a self-service mechanism and an unrestricted time window for individuals to exercise core data rights.
The right is qualified by 'may have,' meaning it is not universally guaranteed; its availability depends on factors not stated in this excerpt, likely jurisdiction.
Users have a stated ability to request access to, transparency about, or deletion of their personal information held by Grubhub.
This right is conditional on applicable state law, meaning it is not universally available to all users, and its existence is qualified by the word 'may.'
This clause establishes a specific consumer right that restricts Gusto's ability to use or share sensitive personal information beyond what the user permits.
Exercising the right to withdraw consent carries a stated consequence: Harvey AI may be unable to continue providing Services, which creates a practical trade-off between privacy rights and continued…
This clause establishes an opt-out right that directly limits how Heap can monetize or distribute user data for advertising, as defined by California law.
This clause establishes that users are protected from retaliation or differential treatment when they invoke their CCPA privacy rights, reinforcing the practical usability of those rights.
This clause establishes a user-actionable right to seek erasure of personal data Heap holds, giving users a mechanism to limit Heap's retention of their information.
The clause identifies the single channel through which users may exercise their personal information rights, making that portal the necessary point of contact for any such requests.
The opt-out right is geographically limited to US residents and applies only to activities that 'may' fall under the relevant legal definitions, meaning the scope of what can be opted out of is quali…
GPC recognition provides a browser-level opt-out mechanism, meaning consumers do not need to submit a manual request to exercise sale and sharing opt-out rights on homedepot.com.
This right directly limits Home Depot's ability to monetize personal data through sales or targeted advertising networks once a consumer exercises it.
This right gives consumers a mechanism to obtain a concrete accounting of what personal data Home Depot holds and how it is handled, enabling informed decisions about further engagement or opt-out re…
Individuals whose data is in HubSpot's commercial dataset have an identified mechanism to request removal, which is consequential given that the dataset is built from multiple sources and shared with…
The entitlement to access is conditional on applicable data protection laws, meaning it is not an unconditional right granted by Hugging Face independently of those laws.
A defined submission mechanism exists for erasure requests, but the clause establishes only the right to request erasure, not an obligation on Hugging Face to fulfill every such request.
The existence of a supplemental policy means the full scope of a user's data rights and obligations is not contained in one document and requires consulting an additional instrument.
The clause defines sale broadly to include non-monetary transfers for valuable consideration, meaning the opt-out right applies beyond cash transactions.
These opt-out rights give users direct control over two significant commercial uses of their personal data — sale and targeted advertising — which are among the most impactful forms of data monetizat…
Recognition of an opt-out right for sale, sharing, and targeted-advertising disclosure gives users a formal mechanism to limit commercial use of their personal data.
This provision gives California residents a specific, actionable mechanism to limit the sharing of their Personal Information, a right tied to California privacy law.
Recognizing a user's right to request deletion is a foundational privacy right, though the clause also establishes significant consequences that follow from exercising it.
Users have a statutory opt-out right under GLBA that limits a specific category of data sharing, but only with unaffiliated third parties and only for certain types of sharing.
This commitment means users can exercise privacy rights without fear that doing so will result in losing or receiving degraded access to LangChain's services.
The clause establishes both a user right to object and an unconditional commitment by Ledger to cease processing, with no stated exceptions or conditions.
The clause establishes a right to erasure, giving users a mechanism to request removal of personal data Ledger holds about them.
This right gives eligible US state residents a mechanism to prevent their personal information from being used for cross-context behavioral advertising, a category of data use that spans multiple pla…
Paid subscribers who generate content privately receive an explicit commitment from Leonardo AI that their content will not feed AI model training and will remain inaccessible to other users.
Incorporating the California Privacy Notice by reference makes its terms legally part of the Privacy Policy, meaning California residents' rights are formally governed by that separate document.
This clause acknowledges a right of erasure that allows EU data subjects to seek deletion of their Personal Data, which can limit Linear's ability to retain data indefinitely.
The existence of an opt-out mechanism means users have a right to limit the sharing of their personal data for targeted advertising purposes.
This right gives California residents a mechanism to prevent their personal information from being sold or shared, which directly limits one of the broader uses Marqeta may otherwise make of that dat…
Users can exercise data sale and sharing opt-out rights automatically through browser-level signals without taking manual steps on McDonald's platform.
This right allows users to prevent two distinct forms of commercial use of their personal information: sale-equivalent disclosure and behavioral advertising data sharing.
The clause identifies a conditional opt-out right — qualified by 'may have' and 'as defined under applicable law' — and specifies the mechanisms available to exercise it.
The clause establishes that a user-controlled mechanism for managing privacy preferences exists and is persistently available within Copilot.
Users of Preview services may receive reduced or altered privacy protections compared to generally available services, as explicitly permitted by this clause.
This establishes multiple distinct data rights for EEA users under a single provision, enabling users to actively manage the accuracy and existence of their personal data held by Midjourney.
This establishes a user-exercisable right of access to personal data practices, bounded to a twelve-month lookback period, which limits the temporal scope of any disclosure Midjourney must provide.
This clause establishes a deletion right for California users but preserves Midjourney's ability to decline requests that fall within defined exceptions, limiting the right's absolute scope.
This clause establishes a legally grounded opt-out right tied to CCPA definitions of 'sale' and 'sharing', which are broader than everyday usage and may encompass data flows to advertising partners.
This clause establishes a CCPA-grounded access and disclosure right, giving California users a formal mechanism to scrutinize Midjourney's data practices over a defined historical window.
The right is expressly tied to CCPA definitions of 'sale' and 'sharing,' meaning its scope is determined by California law rather than a lay understanding of those words.
This establishes a user right to demand deletion of personal data, covering both data actively collected and data passively retained, which creates a potentially broad scope for deletion requests.
This right limits Mixpanel's ability to monetize or use a user's Personal Information for targeted advertising once the user opts out.
Without this protection, exercising privacy rights could carry a practical cost; this commitment ensures those rights can be exercised without financial or service-access consequences.
This clause identifies the specific mechanisms through which users can exercise control over personalized advertising, making the opt-out pathway actionable.
This clause establishes a legally recognized opt-out right that limits MyFitnessPal's ability to share personal information for cross-contextual behavioral advertising once invoked.
This clause establishes a user-invocable right specifically targeting categories of information that carry heightened privacy risk, limiting MyFitnessPal's use upon request.
This acknowledgment signals that users' statutory opt-out rights under laws like the CCPA may be triggered by MyFitnessPal's cookie practices, even absent a traditional sale.
The clause establishes that opting out of interest-based advertising data processing is available but requires affirmative user action through one of two specified channels.
The clause establishes a broad set of individual data rights exercisable at any time, covering the full lifecycle of personal data held by NVIDIA NIM.
The clause establishes that exercising data privacy rights—including withholding consent to data processing—carries no penalty in how NVIDIA NIM treats you.
The clause establishes that NVIDIA NIM websites automatically honor a recognized browser-level privacy signal, removing the need for users to manually opt out of specific cookie categories.
Neon frames this right as conditional ('may have'), meaning its availability is not guaranteed to all users and likely depends on applicable law or jurisdiction.
These enumerated rights give users direct control mechanisms over their personal data held by Neon, including the ability to remove it or move it elsewhere.
The clause explicitly recognizes a user right to personal information access and copy, establishing a concrete entitlement users can invoke against Netflix.
The clause discloses that Netflix sells or shares personal information and identifies the mechanism through which users can exercise a choice to limit that activity.
Users who post content to public sections of Notion's features lose the privacy protections that would otherwise apply under the Privacy Policy, meaning that content has no confidentiality guarantee.
This opt-out mechanism addresses data flows through advertising technologies that may qualify as a 'sale' under applicable privacy laws, and Notion has provided a specific link to exercise that right.
This right gives individuals direct control over whether their Personal Data is sold by Okta for commercial purposes.
This right protects individuals from retaliation or differential treatment when they exercise CCPA rights such as deletion or opt-out requests.
This commitment conditions any expanded use of Sensitive Personal Data on a Privacy Policy update, providing a disclosure mechanism but not necessarily advance notice.
This right gives individuals a formal mechanism to learn the full scope of Okta's data practices regarding their Personal Data.
This establishes that the right to deletion is not absolute and may be limited by specific legal reasons, including a named example tied to Terms of Service enforcement.
This provision establishes OpenAI's default authorization to use submitted Content for service improvement and product development, while creating carve-outs for enterprise and API customers. The opt…
Users have a stated opt-out right over the use of their Content for model training, giving them some control over how their data contributes to OpenAI's AI development.
A stated commitment to maintaining private information protections identifies privacy as a protected interest within OpenAI's standards, establishing that private information receives a designated ca…
Users in jurisdictions without legally mandated privacy rights have no enforceable claim to a specific response from OpenSea; it retains full discretion over whether and how to fulfill such requests.
Users retain an ongoing right to stop the commercial transfer of their personal information, though the scope of that right is limited by service provider relationships and other legal exceptions.
Users have an affirmative right to obtain detailed insight into what personal information Oscar Health holds, where it came from, and how it has been used or transferred.
This opt-out right, where applicable, gives consumers a mechanism to limit Palantir's ability to sell or share their Personal Information for commercial targeting or data sale purposes.
This establishes a consent gate for sensitive data processing for residents of the listed states, meaning Palantir is prohibited from proceeding without affirmative consumer consent.
Users are assured that exercising privacy rights will not result in financial or service-level penalties from PayPal.
Opting out of this data sharing requires affirmative user action through a specific in-account setting, meaning sharing continues unless the user takes that step.
Users have an explicit opt-out right that limits Peacock's ability to sell, share, or process their data for targeted advertising purposes.
The opt-out right is conditioned on targeted advertising occurring on Perplexity AI's services, and the mechanism identified is a cookie consent pop-up, meaning users must actively use that mechanism…
The right to revoke consent is a meaningful privacy control, but it is limited to processing activities where consent—rather than another legal basis—is the ground for processing.
The requirement of express consent before uploading any likeness of a real person creates a clear affirmative obligation on the user prior to submission.
An available opt-out mechanism means users have a means to limit Pinterest's use and disclosure of their data for these purposes, but the opt-out requires affirmative user action.
Pinterest's commitment to respect opt-out signals is conditioned on both the user's state of residence and the user having actively enabled the signal, limiting the scope of this protection.
The Client bears both a warranty obligation and an operational obligation to secure proper consent, meaning failure exposes the Client to both contractual breach and potential legal liability.
The claim establishes that users have a concrete mechanism to limit the sharing of their personal information, with two specific named options provided.
The characterization of this right as 'absolute' means Public.com cannot override or condition the objection, giving users unqualified control over marketing use of their data.
This right gives users a mechanism to challenge the accuracy of their data or seek its removal, subject to exceptions Ramp has not enumerated in this excerpt.
Ramp provides a specific, named mechanism for users to exercise opt-out rights regarding targeted advertising and potential data sales or sharing, which is particularly relevant under state privacy l…
The deletion right is subject to a legal or regulatory compliance exception, meaning Replicate may retain personal information even if you request deletion.
Users have an affirmative right to obtain their personal information and understand how it is being used, enabling informed decisions about continued use.
Automated credit and fraud decisions can directly affect your access to financial products, and you have the legal right to request that a human reviews any decision that significantly affects you.
Biometric data such as facial scans or fingerprints is highly sensitive because, unlike passwords or account numbers, it cannot be changed if compromised, making its collection and protection particu…
Automated decisions in financial services can affect whether you are approved for credit, flagged for fraud, or restricted from certain products, and consumers should understand they may have rights …
This right enables qualifying users to request removal of their personal information from Ro's records, which is consequential given the sensitive health data Ro collects.
This right gives qualifying users visibility into what personal information Ro holds about them and enables them to obtain a portable copy of at least some of that data.
This right is consequential because it gives users a legal mechanism to restrict how their sensitive personal information is processed, but only when that information is being used for the specific p…
This right constrains Ro's and its partners' ability to use sensitive data—which may include health information—for advertising, giving users a mechanism to restrict that use.
This clause provides a specific opt-out mechanism for users in qualifying states to restrict the sale and targeted advertising use of their personal information.
If user information is exempt from the CCPA and similar state laws, users may lack the privacy rights—such as access, deletion, or opt-out—those laws would otherwise provide.
This provision means users may be unable to exercise data access, deletion, or other rights under state privacy laws for a potentially significant portion of their information held by Robinhood.
Users who rely on Do Not Track signals as a privacy control will receive no effect from that mechanism when using Roblox's Services.
This right gives EEA users a mechanism to verify what Personal Information Roblox holds about them and to obtain copies, which is foundational to exercising other data rights.
This provision gives parents a formal right to request control over how their child's Personal Information is collected and used, including the ability to halt further data collection.
The clause confirms that Personal Information may be commercially transferred to third parties for advertising purposes, while also establishing a user right to stop that transfer.
This provision establishes a non-discrimination entitlement tied specifically to the exercise of privacy rights, as defined and bounded by State Privacy Laws.
The right to opt out of sale and targeted advertising processing is a material data privacy protection, though it is limited to residents of certain unspecified states.
Individuals have a recognized right to seek removal of their Personal Data held by Salesforce.
The opt-out right is conditioned on applicable law, meaning it is not universally available to all U.S. users and depends on the privacy laws of the user's jurisdiction.
The right to receive data in a machine-readable format supports data portability, enabling users to move or use their information with other services.
Exercising the right to data deletion permanently eliminates accumulated account benefits with monetary or status value, creating a concrete financial disincentive to exercising that right.
The use of "may have" indicates these rights are not guaranteed universally but depend on applicable law or other conditions not specified in this excerpt.
This prevents Shopify from penalising users financially or through service degradation for exercising their privacy rights.
Users have an actionable mechanism to stop their Personal Information from being sold or shared, which directly limits a significant category of data use.
A specific opt-out mechanism exists, meaning California users have an actionable path to limit this use of their personal information.
This establishes that statutory data access rights exist for a broad international set of users, though subject to legal exemptions.
This establishes a legally grounded right for California consumers to obtain disclosure of their personal information from Slack.
This clause establishes that exercising privacy rights carries no material penalty in access, cost, or quality of service, which reinforces the practical meaningfulness of those rights.
The right to delete in-app information is explicitly limited to 'some information,' meaning not all user data within the Services is user-deletable through these mechanisms.
Opting out triggers a binding commitment from SoFi to stop selling or sharing personal information for cross-platform targeted advertising purposes.
The existence of enumerated opt-out categories means the reader's ability to limit sharing is defined and bounded by the categories SoFi identifies in the notice.
Users have a meaningful choice that affects the scope of data Sony PlayStation collects, ranging from the minimum necessary to operate the Services to a broader set enabling additional features.
An opt-out mechanism exists, but it requires the user to affirmatively take steps — visiting a link and completing a form — to exercise this right.
Even if a user exercises deletion rights, certain data is retained indefinitely while the organization remains an active customer, limiting the practical scope of individual deletion requests.
The Privacy Policy's scope is defined by Sourcegraph's role as a Data Controller, meaning it applies specifically to data Sourcegraph controls rather than data processed on a customer's behalf.
The right to deletion is qualified—'certain' personal data and named exceptions mean not all personal data is subject to deletion on request, limiting the practical scope of this right.
Spotify provides two concrete mechanisms for users to exercise their data access right, making the right practically actionable rather than merely declaratory.
This commitment ensures that users can exercise privacy rights without fear that doing so will result in reduced service quality, higher prices, or other adverse treatment.
Square provides specific, named mechanisms for exercising the opt-out right, making the right actionable through both a site-based link and a browser-level signal.
It conditions the existence of key data subject rights on applicable law and legal exceptions, meaning the rights are not universally guaranteed by this clause alone.
This right, where it applies, gives you a mechanism to stop Starbucks from monetising your personal information through targeted advertising channels.
These rights, if they apply to you, give you visibility into what data Starbucks holds, which is foundational to exercising other privacy rights such as correction or deletion.
If the CPRA does not apply to most data Stash collects, customers cannot rely on CPRA rights — such as the right to know, delete, or opt out of sale — for the majority of their personal information h…
Customers have an available mechanism to restrict sharing of specific sensitive categories of their information, but must affirmatively contact State Farm to exercise it.
The claim establishes a conditional right to erasure, meaning users can invoke deletion only when specific legal conditions are met, not unconditionally.
This opt-out right gives users direct control over one of the most commercially significant uses of personal data — behavioral and targeted advertising.
This right gives users affirmative control over a specially designated category of personal data, beyond general personal information.
This establishes a statutory withdrawal right for EU and UK buyers that is separate from StockX's standard return policy, providing a time-limited unconditional exit from a completed purchase.
This right ensures users can exercise their privacy rights without fear that StockX will penalize them for doing so.
Users who are 18 or older begin sharing Content publicly from the moment of sign-up without any affirmative action on their part to make it public.
Users have an explicit, accessible mechanism to stop their personal information from being shared for targeted advertising purposes.
The default setting makes personal activity data publicly visible and search-engine-indexable without any affirmative action by the user, placing the burden on users to change settings if they want m…
An opt-out right for targeted advertising and associated data sales or sharing gives users a mechanism to limit a category of data use identified elsewhere in the policy.
This clause establishes a time-limited, form-specific right for Business Users to challenge the addition of new sub-processors who will process their personal data.
Biometric data use is subject to a separate, revocable consent, meaning it is not bundled into general policy acceptance and can be withdrawn independently.
The use of 'may be entitled' conditions these rights on unstated eligibility criteria, meaning they are not guaranteed to every user in every circumstance.
This right is limited to a specific class of users — registered California minors — and applies only to Content that is visible to other users, establishing both eligibility conditions and a scope li…
The clause makes consent a prerequisite for all Biometric Data extraction, processing, and identity verification, giving users a meaningful opt-out.
Users have a designated mechanism to stop T-Mobile from selling or sharing their data for commercial purposes including targeted advertising and direct marketing.
Users can obtain their personal data in a format that enables portability and further use, supporting data rights under applicable privacy law.
The clause provides a non-discrimination protection for users exercising California privacy rights, but the carve-out for differences related to provision of Personal Information limits the scope of …
The opt-out right is explicitly conditioned on a legal interpretation of 'sale' under the CCPA, meaning TaskRabbit does not unconditionally acknowledge that its advertising activities constitute a sa…
This clause acknowledges enforceable privacy rights over personal and sensitive information, giving readers a mechanism to restrict Thomson Reuters' data practices.
Exercising the opt-out right over data sale simultaneously removes the user from targeted advertising and profiling, giving a single election broad practical effect.
Acknowledging this right establishes that users can formally request Ticketmaster cease holding or processing their personal data, which constrains Ticketmaster's data use.
The clause establishes that users have a mechanism to exercise data rights over information TikTok holds, providing a pathway to transparency and correction or deletion of personal data.
The permission obligation is conditioned on legal requirement, meaning TikTok does not commit to seeking consent in jurisdictions where no law mandates it.
The clause affirms a CCPA-based opt-out right while simultaneously rendering it currently moot by disclosing that Together AI does not sell Personal Data.
Users retain ongoing control over their data by being able to withdraw consent and seek deletion at any point after providing consent.
Users have a direct control option that activates a Zero Data Retention mode, affecting how their data is handled during their use of the Services.
Users hold multiple data rights over their Personal Data, including the ability to review and modify or remove it entirely.
This grants users a time-bounded right to obtain transparency into Together AI's data collection and use practices concerning their Personal Data.
Users have direct self-service control over their data within the Intuit Account, reducing dependency on TurboTax support to exercise data rights.
Users cannot be penalized or treated differently by Uniswap for exercising their stated privacy rights.
Users have a stated right to request deletion of their personal information held by Uniswap, giving them a degree of control over their data.
The deletion right is subject to multiple exceptions grounded in operational and legal necessity, which may limit how broadly the right can be exercised in practice.
This establishes that California residents have statutory rights to transparency, access, deletion, and opt-out with respect to their personal information held by Venmo.
The claim establishes a formal opt-out right specific to the sale of personal information, giving US users a mechanism to prevent that sale.
The claim establishes that an opt-out right for Model Training exists and is exercised through a specific setting—Team Preferences—with governing terms in Section 3 of the Terms of Service.
This clause enumerates legally enforceable privacy rights California residents hold against Verizon, establishing the scope of individual control over personal data Verizon collects.
The clause establishes both the existence of an opt-out right and a broad legal definition of 'sale or sharing' that covers non-cash exchanges, which determines when the right applies.
The clause establishes that Verizon acknowledges the possible existence of additional legal rights beyond those described elsewhere in the policy, which may expand users' enforceable options dependin…
It establishes the specific mechanism Visa has designated for users to exercise their legal privacy rights, making that channel the identified point of access.
This establishes an actionable right for California residents to limit how their personal information is disclosed and used by third parties.
This clause establishes that consumers can use a browser-level technical signal to exercise a sale and sharing opt-out without submitting a separate request, though the opt-out is scoped to the speci…
Walmart recognizes a browser-level technical signal as a valid opt-out mechanism, allowing users to exercise privacy rights without navigating manual opt-out processes.
This clause establishes that exercising privacy rights carries no penalty in the consumer's relationship with Walmart, protecting consumers from commercial consequences for asserting those rights.
These rights are conditioned on the applicability of the relevant data protection law, meaning not all users automatically receive them; only those within the stated jurisdictions where that law appl…
Account closure is established as the only mechanism for opting out of ongoing Personal Information collection, meaning there is no lighter-touch opt-out available while maintaining an account.
The clause conditions GPC signal recognition on legal requirements, meaning the opt-out is only operative in jurisdictions where applicable law mandates it.
This clause establishes that the default model training data use is reversible for paid plan users, and that opting out triggers both a training exclusion and a Zero Data Retention arrangement with m…
Users have a right to deletion, but that right is not absolute—legally permissible exceptions mean some personal information may be retained despite a deletion request.
Users have an affirmative right to opt out of targeted advertising use of their personal information, limiting how Wix and its partners can leverage that data.
This right gives users visibility into whether and what personal information Wix holds about them, which is foundational to exercising other privacy rights.
Wix simultaneously grants an opt-out right while qualifying that it does not engage in a traditional sale, creating ambiguity about what activity the opt-out actually prevents.
Because Workday acts as a processor in employer-deployed contexts, it does not serve as the point of contact for individual rights requests, placing the practical burden on the individual to approach…
This establishes an absolute non-discrimination commitment, ensuring users can exercise privacy rights without fear of adverse treatment by Writer.
Wyze acknowledges four distinct potential privacy rights, each representing a separate avenue through which users may exercise control over their personal information held by Wyze.
The claim establishes that creators have a right to challenge removal decisions, providing a recourse mechanism against enforcement actions.
Users who rely on browser-level Do Not Track preferences to limit tracking will find those preferences ineffective against Zendesk's tracking practices.
Zendesk formally acknowledges a deletion right, giving individuals a mechanism to seek removal of their collected personal data.
Zendesk acknowledges that it sells or shares personal data and that individuals hold a right to stop that activity.
The opt-out right is not exercisable through a single action; failure to complete both steps means the opt-out is not fully effective, potentially leaving some data sale or sharing in place.
Opting out of the Resume Database does not undo prior data access, meaning the user's ability to reclaim their information is limited once a third party has already saved it.
The right explicitly extends to profiling activities linked to direct marketing, not solely to the direct marketing messages themselves.
The right is conditional on consent being the applicable legal basis; withdrawal does not affect processing that rests on other legal grounds.
The clause establishes that participation in data-sharing features is not automatic or mandatory — it is subject to the user's own decision, which determines whether their data is shared through thos…
The clause establishes that sample retention is user-controlled and that declining storage results in secure destruction after lab completion, directly affecting what happens to a user's physical bio…
The existence of a Cookie Preferences control indicates users have some mechanism to manage cookie settings through Airtable.
Amplitude's acknowledgment of these rights confirms that users can take active steps to control their Personal Data held by Amplitude.
The claim establishes both a user-exercisable opt-out right for targeted advertising and a separate obligation on Anthropic to honor global privacy controls, giving users two distinct mechanisms to l…
The claim's scope is bounded by the legal definition of 'sell' under applicable laws and regulations, meaning activities that fall outside that legal definition are not addressed by this commitment.
The DPA governs how personal data submitted through the API is processed; because it is incorporated by reference rather than reproduced in the main terms, customers must review it separately to unde…
The clause establishes that the user has an unrestricted right to turn off Device Analytics sharing at any time, giving ongoing control over that data sharing.
Many users encounter Okta or Auth0 without realizing it, as it powers login for thousands of enterprise apps. Those users cannot rely on this policy for their data rights; they must look to their emp…
The breadth of data collected, spanning identifiers, behavioral signals, and inferred profiles, means Okta is building a fairly detailed picture of users who visit its websites or use its marketing p…
Cross-border data transfers from the EU and UK to the US remain a significant regulatory concern following the Schrems II ruling, and the adequacy and current status of Okta's SCCs and any supplement…
Third-party tracking technologies set by advertising partners can follow users across websites beyond Okta's own properties, and users should actively manage cookie preferences to limit this tracking…
The clause operationalizes Auth0's compliance obligations under privacy regulations (GDPR, CCPA) by establishing a formal mechanism for data subject requests. The provision conditions the availabilit…
The deletion right is limited to 'certain' personal information and is subject to unspecified exceptions, meaning it does not guarantee removal of all data Best Buy holds.
Consumers have an actionable mechanism to learn what personal information Best Buy maintains about them.
The opt-out right is framed as meeting at least state-law minimums, meaning the scope of what consumers can opt out of is defined by the applicable legal floor.
The clause establishes an unconditional, at-any-time right to opt out of promotional communications, with two specific mechanisms provided.
Automated profiling in a dating app context can significantly affect who you are able to connect with, and under GDPR users have specific rights related to automated decision-making that produces sig…
The provision operationalizes statutory privacy obligations applicable to California residents by explicitly enumerating the access, deletion, correction, and opt-out mechanisms that Bumble must prov…
International data transfers mean your personal information may be processed under legal frameworks that provide different or potentially lower levels of protection than your home country's laws.
Precise geolocation data is one of the most sensitive personal data categories because it can reveal where you live, work, worship, and socialize, creating real-world safety and privacy risks for dat…
Message content is among the most private information users share on a dating platform, and its collection, storage, and potential disclosure in legal proceedings or safety investigations is a signif…
This provision operationalizes Bumble's obligation to provide users procedural mechanisms for exercising statutory data protection rights. The enumeration of these eight specific rights establishes t…
These rights give you meaningful control over your personal data on the platform, including the ability to request deletion of your entire profile and data history, which is particularly important gi…
Users have a mechanism to exercise some control over AI training use of their data, rather than having no opt-out or management option.
This clause is consequential because it establishes that users have an affirmative right to stop Cash App from using or sharing their personal information for cross-context behavioral advertising.
Users who configure GPC in their browser can exercise opt-out rights without submitting a separate manual request to Chegg.
This establishes a technical mechanism through which users can exercise opt-out rights without submitting a manual request, but only on qualifying browsers with GPC activated.
The deletion right is qualified by applicable law, meaning Coinbase's obligation to honor such requests is not absolute and may vary by jurisdiction.
The absence of a defined retention period means your personal data, including contact details, location history, and device identifiers, could be held indefinitely as long as Craigslist determines a …
This language limits Craigslist's liability in the event of a data breach, and means users cannot rely on a contractual security commitment when entrusting the platform with personal and financial in…
Users outside the US, particularly in the EU and UK, have stronger data protection rights under local law, and transferring data to the US without a specific legal mechanism may not satisfy those leg…
This provision operationalizes statutory obligations under the CCPA by specifying the data subject rights available to California consumers and establishing the procedural mechanism for submitting re…
Availability across all tiers means enhanced privacy protections are not gated behind a paid subscription.
This provision establishes that the default position is no use of user content for AI training, which is a contractually explicit opt-in framework rather than a passive opt-out arrangement.
An unconditional, self-service deletion right means users are not required to contact support or wait for Cursor to act.
This provision distinguishes Usage Data from Content (code inputs and suggestions), authorizing Anysphere to collect and process interaction and log data for business purposes and to share it with th…
The scope of available privacy rights is defined and limited by the options presented on Delta Airlines' form, meaning rights not listed on the form cannot currently be exercised.
Discord provides a defined mechanism and timeframe for users to access personal data the platform holds about them.
This provision describes COPPA-compliant practices for children under 13 in the United States, including the four procedural requirements of parental notice, verifiable parental consent, data minimiz…
The clause identifies a specific, self-service mechanism through which users can exercise four distinct data rights, making those rights practically actionable.
By accepting the terms, users are treated as having read the Cisco Privacy Statement, which may affect their ability to later dispute knowledge of its contents.
The clause establishes a stated commitment to privacy protection and positive user experience, framing Duo Security's baseline obligations toward users during direct interactions.
The privacy protection is conditional on good-faith conduct, meaning users who do not act in good faith are not covered by this design commitment.
Equifax has established a dedicated online channel for Delaware Personal Data Privacy Act rights, indicating a mechanism exists beyond simply stating the rights.
Equifax has established a dedicated online channel for Colorado Privacy Act rights, indicating a mechanism exists beyond simply stating the rights.
Equifax directs individuals to a separate document for the mechanism of exercising statutory rights, meaning the primary policy does not itself contain that procedural detail.
Equifax has established a dedicated online channel for Connecticut Data Privacy Act rights, indicating a mechanism exists beyond simply stating the rights.
The right to delete is not absolute—Faire conditions fulfillment of deletion requests on a legal mandate rather than treating the request itself as sufficient.
This provision attempts to restrict minors from using the platform independently, which is relevant for COPPA compliance and parental liability, but places the verification and supervision obligation…
Garmin designates a specific mechanism through which users may act on their data rights, which determines where users must go to exercise those rights.
Consumers have an actionable right to stop General Motors from selling their personal information.
This provision discloses collection of device-level data including the full list of installed applications and network connection information, not limited to apps installed through Google Play, for s…
This provision establishes a parental consent requirement for minor users but relies on self-reporting and parental authorization without describing a verification mechanism. Under this clause, the a…
Your personal data is shared with third-party content providers whose privacy practices may differ from Google's, and by accepting these terms you agree to that data sharing without necessarily revie…
This provision establishes two distinct personal data sharing flows: transaction-related sharing of name and email with Content Providers governed by each Provider's independent privacy policy, and t…
Google collects a broad set of device-level data including all installed applications, not just those from Google Play, for security analysis purposes, and some data collection continues even after a…
Users seeking to understand or limit Greenhouse's use of cookies are directed to a separate Cookie Notice document that governs those rights.
Users are assured that invoking privacy rights carries no retaliatory consequences in terms of access, pricing, or quality.
Users have an affirmative right to stop their data from being used or shared specifically for targeted advertising, limiting a named commercial use.
Recognition of a deletion right gives users a formal mechanism to remove their personal data from Instacart's possession.
Users have an explicit right to initiate removal or anonymization of their personal information held by Khan Academy.
The right to access all stored personal data at any time is a meaningful privacy protection, enabling users to audit what Klarna holds about them.
An assertion of user ownership and control over shared data is a significant privacy representation, though the clause does not specify what legal mechanisms enforce this ownership.
The clause establishes a user right to data access, enabling individuals to review what personal information Ledger holds about them.
The clause defines the specific and exclusive mechanism Ledger provides for cookie consent withdrawal, meaning users who do not locate this button may not be able to exercise this right.
The clause defines the specific mechanism Ledger provides for opting out of marketing emails, meaning users must locate the footer link to exercise this right.
The clause establishes a right to rectification, ensuring users can challenge and request correction of data Ledger holds incorrectly about them.
The clause affirms an external escalation path independent of Ledger, meaning users are not limited to Ledger's own resolution process.
This clause establishes a specific legal right for California residents to restrict a category of third-party data sharing that would otherwise be permitted.
The right to opt out of targeted advertising is conditioned on local law applicability, meaning it is not universally available to all users.
This clause establishes that consent-based data processing can be stopped by the user without cost or time restriction, limiting Luma AI's ability to rely on consent as an ongoing legal basis.
The inclusion of rights details and contact information in the Privacy Policy means users have a single documented source for understanding what rights they hold and how to exercise them.
This clause grants users four distinct self-service rights over their account information with no stated time restriction, giving users direct control.
This commitment describes how Microsoft states it addresses algorithmic bias in AI systems, which is relevant to consumers and regulated entities concerned about discriminatory AI outputs in areas su…
This provision establishes the internal ruleset Microsoft states governs AI product development, which is relevant to understanding what review processes exist before AI systems that affect consumers…
This provision operationalizes privacy governance by requiring systematic integration of data protection measures into product development cycles, establishing privacy as a foundational design requir…
The 'always' qualifier establishes that this is an ongoing, unconditional right of access to privacy controls, not a one-time or conditional option.
This provision describes Microsoft's stated approach to personal data handling within AI systems, which affects how personal data provided to or processed by Microsoft AI products such as Copilot is …
This provision establishes Microsoft's framework for COPPA compliance and analogous international children's privacy requirements, including the EU's age-appropriate design obligations and the UK Age…
It identifies the specific mechanism through which Microsoft account holders can exercise data access and control rights.
It establishes a specific access and erasure mechanism for a defined subset of Minecraft players.
It identifies the specific channel and urgency with which players must act to reach support.
Le Chat conversations do not automatically expire, meaning every prompt and response you have ever sent is retained by Mistral AI until you take action to delete it, which creates a significant accum…
Your personal data may be included in Mistral AI's AI training even if you have never used any Mistral AI product, because the company sources training data from public internet content and third-par…
The reference to a named privacy policy signals that all users are subject to privacy terms, though those terms are not stated here.
Sensitive personal data such as health information that you casually mention in a chat prompt could be automatically stored and retained by the Memory feature, creating a personal profile that persis…
Free-tier users' conversations are treated as training data by default, meaning your personal questions, instructions, and AI responses could influence how Mistral AI's models behave for all users un…
This limits the practical enforceability of privacy rights requests by allowing Mixpanel to impose costs or deny fulfillment under defined conditions.
This clause establishes that the Customer has a mechanism to control whether telemetry data is collected, giving the Customer an opt-out option.
This establishes that users hold actionable rights over their personal information held by Nintendo, covering both self-submitted and collected data.
This confirms that users can exercise state-law opt-out rights through browser-level signals without taking separate manual steps on Notion's platform.
This establishes a user-actionable mechanism to withdraw consent specifically tied to biometric data retention, which affects ongoing authentication capability.
The terms prohibit use by children under 13, engaging COPPA compliance obligations, and require parental consent for users aged 13 to 17, but the document does not specify a verified consent mechanis…
Users are not locked into receiving communications and retain the right to opt out at any time, which is relevant to the marketing consent granted in the same context.
The clause caps the frequency of compliance audits and imposes procedural prerequisites, meaning a Customer cannot conduct an unannounced or open-ended audit at will.
Users have a mechanism to stop marketing communications, but the opt-out is limited to the channels and method specified and does not extend to all communications.
This right gives users visibility into what personal data Replicate holds, which is foundational to exercising other privacy rights.
The clause establishes an operational framework for preference management, enabling users to control the scope of marketing communications directed to them without requiring service termination or ac…
Identity document data and biometric verification data are treated as special categories under UK GDPR, meaning stricter rules apply to how they are collected, stored, and used, and Revolut must have…
Understanding which legal entity controls your data matters because different entities are subject to different regulators and regulatory obligations, and your rights may vary depending on which Revo…
Your personal data may be processed in countries outside the UK with different levels of data protection, and the adequacy of the safeguards in place determines how well your data is protected intern…
Open Banking access gives Revolut visibility into your full financial picture across multiple institutions, which is more extensive than data collected solely from your Revolut account activity.
Location and device data can reveal sensitive information about your daily habits, movements, and financial activity patterns, and this data is used in profiling and fraud detection processes.
If you are a California resident, you have legally enforceable rights over your personal data held by Revolut, including the ability to request deletion and to opt out of sharing for advertising purp…
Data about children is among the most sensitive and most strictly regulated categories of personal data, and parents should understand what information is collected about their children and how it is…
Visitors do not need to manually adjust consent settings if their browser already broadcasts a recognized privacy signal; the effect is automatic.
The provision creates a procedural mechanism for Robinhood to satisfy California statutory privacy disclosure obligations by centralizing privacy-related documents in a designated disclosure library …
The clause identifies a specific legal instrument and effective date that confers enumerated data rights on customers, establishing a concrete regulatory baseline.
Users have an actionable mechanism—a specific contact address—to exercise rights over their personal information.
Shein makes the opt-out right contingent on the user taking affirmative action through a specific control; users who do not act remain opted in.
The right to receive data in a machine-readable format supports portability, allowing users to transfer or use their data elsewhere.
The existence of a single opt-out mechanism covering all advertising and marketing data sharing gives users a defined pathway to restrict that category of data use.
This right is conditional on three specific criteria—age, state of residence, and registered account status—meaning it does not apply universally to all users.
Without a proof requirement, someone could submit privacy rights requests on your behalf without your knowledge; this clause conditions Stability AI's obligation to honor such requests on documented …
The fifteen-day deadline creates an enforceable outer time limit on Stability AI's compliance with opt-out requests, giving users a defined window within which action must occur.
The one-month deadline gives users a defined window within which Substack must act on privacy rights requests, creating an enforceable time-bound obligation.
The deletion right is qualified: TaskRabbit may retain data despite a deletion request where legal obligations or legal permissions apply, limiting the practical scope of the right.
The opt-out right is conditional — it applies only if Tinder actually uses the user's data for those purposes — meaning it is not an unconditional right.
Users have an active mechanism to prevent Together AI from retaining any of their interaction data, including prompts and model responses.
Users have an affirmative opt-out mechanism to limit sharing of limited personal information with third-party advertising partners via cookies and trackers.
Users are not wholly without agency over their data; TurboTax explicitly acknowledges providing choice mechanisms over collection and sharing.
This establishes a binding commitment by Twitch to cease processing upon withdrawal of consent, giving users an actionable mechanism to limit data use.
Verizon's commitment to honor GPC signals gives users a browser-level mechanism to limit third-party tracking without navigating separate opt-out processes.
The clause establishes that users have control rights over both inbound marketing contact methods and internal data sharing for marketing, limiting Verizon's marketing use of personal information to …
The clause establishes that users can opt out of having their personal information used for advertising, insights, and verification programs, giving users meaningful control over those data uses.
Wix's ability to require additional verification means a user's privacy rights request may be delayed or conditioned on providing further personal information.
It establishes a user right — conditioned on applicable U.S. laws — to opt out of a specific category of cookies.
It confirms that Writer recognizes and acts on the Global Privacy Control signal, giving users a functional browser-level privacy opt-out mechanism.
The clause establishes that individuals have a channel to exercise data rights over certain personal information held by Xfinity.
Parents have a direct mechanism to limit or erase data collection tied to their child's viewing and search activity, which constrains how that history can be used.
Acceptance of GPC signals means users can exercise opt-out preferences through a browser-level mechanism without taking additional manual steps on the Website.
The presence of these navigational references indicates that Airtable's policy documentation addresses multiple distinct subject areas, including data rights and security.
The policy sets a minimum age of 16 rather than the COPPA threshold of 13 for US users, aligning more closely with GDPR Article 8 standards, but does not describe how under-16 users are actively iden…
CPRA significantly expanded California privacy rights including the right to correct inaccurate data and limit use of sensitive personal information, and Okta's acknowledgment of these rights means C…
Having a named DPO contact and a specific email address provides EU, UK, and Swiss residents with a clear channel to exercise meaningful data rights that are legally enforceable, including the right …
This provision establishes the operational scope of marketing communications the entity may conduct and specifies the procedural mechanism by which users can control receipt of such communications. T…
The absence of specific retention periods for most data categories means users cannot easily determine how long their information is kept or plan deletion requests around a known timeline.
Privacy policy updates can expand data collection or sharing practices, and while Bumble commits to notifying users of material changes, the definition of what constitutes a material change is not sp…
These provisions operationalize data subject access rights, establishing procedural mechanisms through which users can exercise control over personal information retention and format. The specificati…
This provides California residents with specific, actionable rights over their personal data, backed by California law, with a direct submission mechanism provided in the policy.
This commitment directly limits one of the most common ways consumer data is monetized; users can rely on the stated promise, though enforcement depends on Craigslist's internal practices and applica…
Users who rely on their browser's Do Not Track setting as a privacy control should be aware that Craigslist explicitly disregards this signal, though Craigslist separately states it does not use trac…
This provision gives minors a mechanism to retract publicly posted content, which is required under California law, but the caveat that removal is not comprehensive means third-party copies or cached…
Transparency and explainability commitments describe what information Microsoft states it will provide about AI system behavior, which is relevant to consumers and enterprises seeking to understand o…
You have formal rights over your personal data held by Mistral AI, and the company has designated a DPO as a named point of contact, which is a meaningful accountability mechanism under GDPR.
Developers and researchers who download Mistral AI models from Hugging Face should be aware that doing so triggers personal data collection by Mistral AI, even if they have not created a direct Mistr…
The clause operationalizes location-based service personalization as a standard practice while creating a procedural pathway for users to decline this specific data processing activity without servic…
This provision operationalizes Mistral AI's GDPR compliance framework by explicitly defining the types of personal data subject to rights requests and establishing a procedural mechanism for users to…
Your IP address, which can reveal your approximate geographic location, is used to modify the content of AI responses you receive, creating a form of location-based profiling that you may not expect …
Users retain the ability to withdraw from communications without a stated restriction on timing or process.
The clause establishes that the right to unsubscribe is not subject to any waiting period, penalty, or condition stated in this excerpt.
A commitment not to sell personal data is meaningful for consumers concerned about their financial and identity data being monetized by third-party data brokers, though the policy separately permits …
Knowing your rights and the practical steps to exercise them means you can actively control what Revolut knows about you and how it uses that information.
Revolut uses your transaction and behavioural data to identify and send you product offers, which means your financial behaviour directly influences the commercial communications you receive.
As a regulated financial services company, Revolut is subject to legal obligations including anti-money laundering, sanctions screening, and regulatory reporting requirements that may require disclos…
The clause operationalizes Revolut's obligations under data protection regulations by establishing procedural mechanisms through which users can assert control over personal data processing. The prov…
This is a meaningful consumer protection commitment that goes beyond a legal minimum, particularly relevant for users aware of data broker practices in the financial technology industry.
Monitor emails you the same day a platform you choose changes these clauses.
A privacy rights clause is a provision in a platform's terms of service or privacy policy governing privacy rights-related rights, obligations, or restrictions.
ConductAtlas tracks 290 platforms with privacy rights clauses - roughly 82% of platforms in the archive. 846 are classified as high severity.
Severity reflects the magnitude of rights waived, availability of opt-out, breadth of users affected, financial or legal exposure created, and the degree of discretion retained by the platform.