Found in 277 of 343 platforms tracked (81% adoption) · 4686 provisions
Account deletion triggers automatic and permanent downstream consequences — removal from Research and sample discardment — that the user may not be able to reverse.
The right to opt out at any time means research participation is not a permanent or irrevocable commitment, giving users ongoing control over their involvement.
This clause establishes a set of individual privacy rights — access, correction, deletion, and objection — giving individuals a basis to engage ADP regarding their personal data.
Continued use of AWS Services in South Korea is conditioned on acceptance of overseas data transfers; the only way to opt out is to stop using the service and close the account.
The region-selection right gives customers control over the geographic location of their data, while the consent mechanism ties that control to acceptance of data transfer into the chosen regions.
This clause places the full compliance burden for privacy notices and consent on the customer, meaning AWS Bedrock bears no responsibility if a customer fails to meet applicable data protection requi…
This establishes an affirmative right consumers can exercise to stop a specific category of data use, namely sale and sharing for targeted advertising purposes.
The right is characterized as 'absolute,' meaning Adobe cannot condition, limit, or override it, and it applies to profiling carried out for direct marketing as well as to direct marketing itself.
These rights give users direct levers to control their personal data held by Adobe, including the ability to stop active processing and to extract data in a portable format under specific conditions.
The deletion obligation is qualified by 'commercially reasonable efforts' and 'compliance with applicable laws', meaning full erasure is not guaranteed.
This provision grants individuals a direct right to prevent commercial data transfers, but the 'if applicable' qualifier means the right may not be available in all jurisdictions or contexts.
The opt-out right carries a direct consequence: exercising it results in loss of eligibility for certain financial products, creating a practical trade-off between privacy and access to services.
This right, where it applies, gives individuals visibility into the scope of data Adyen holds about them, which is foundational to exercising other privacy rights.
The portability right, if it applies, allows individuals to obtain their data in a transferable form, though the qualifier 'where technically possible' limits the usability guarantee.
An opt-out mechanism exists for merchant marketing data sharing, meaning users who take affirmative action in their account settings can limit this disclosure.
The existence of user rights and choices determines what control, if any, users have over how their personal information is collected, used, or shared by Afterpay.
State-specific privacy rights can be materially stronger than the general policy, meaning some users have additional protections or entitlements not available to all users.
The right to access or delete personal information is conditioned on applicable law, meaning it is not universally guaranteed and varies by jurisdiction.
Customer End Users cannot exercise data rights directly against Amplitude; their only recourse for accessing, amending, or deleting their data is through the Customer, who retains discretion over whe…
This commitment ensures that exercising data privacy rights does not result in retaliation through denial of services or differential pricing.
The right to opt out is law-dependent and jurisdiction-specific; it does not apply universally to all Ancestry users.
The claim establishes that users have an opt-out right for model training, exercisable through account settings, which is the exclusive mechanism provided for limiting this use of their data.
The availability of an opt-out mechanism gives users a degree of control over whether their interaction data is used for model training, though that control must be exercised affirmatively through ac…
This requirement ensures that any app enabling account creation cannot omit a corresponding deletion mechanism, giving users an in-app path to remove their account entirely.
The clause establishes that Apple App Store acknowledges a set of user rights over personal data, covering the principal rights recognized under major privacy frameworks.
The clause establishes a legal-compliance exception to user deletion rights, meaning users cannot compel deletion of transaction data that Apple App Store is required by law to retain.
This technique ensures that even servers outside the PCC trust boundary cannot learn which records a user retrieved, preserving access-pattern privacy beyond the PCC perimeter.
A protocol designed for client anonymity indicates an architectural commitment to preventing identification of users at the application layer.
Asana's commitment to cooperate means customers can rely on Asana to assist in honoring data subject rights under applicable law, which is essential for customers' own regulatory compliance.
The right to limit this sharing is grounded in federal law, but it is expressly partial—some sharing cannot be limited regardless of consumer preference.
BeReal provides a defined mechanism for users to exercise opt-out rights over sale, sharing, and targeted advertising, offering two specific pathways.
Identity verification is a prerequisite to exercising data access and deletion rights; failure to meet it can result in Binance.US declining both types of requests without obligation.
This clause identifies a contact mechanism for parents or guardians concerned about unauthorized data uploads by a child, which is relevant to child privacy protections.
This clause grants users a formal right to challenge or curtail Bluesky's processing of their personal information on multiple grounds, including consent withdrawal and noncompliance.
The clause conditions the access and rectification rights on Boston Dynamics's role as a Controller, meaning these rights may not apply in all processing contexts.
The clause establishes an affirmative right for users to object to processing of their personal information, without additional conditions stated in the quoted excerpt.
Dating app profiles inherently reveal or allow inference of sensitive personal characteristics such as sexual orientation and relationship preferences, which are special categories under GDPR requiri…
The clause establishes that California-specific privacy rights and obligations are documented separately from the general privacy policy, requiring users to consult multiple documents to understand t…
Biometric data is among the most sensitive personal information category under both GDPR and multiple US state laws, and its collection by a consumer dating app creates significant legal exposure and…
Users bear the full legal burden of recording consent compliance; Calendly assumes no responsibility if a user fails to obtain legally required consent before recording or generating AI transcription…
Recognizing this right means users have a mechanism to prevent Calendly from selling or sharing their Personal Data, with the scope of 'sale' and 'sharing' determined by applicable legal definitions.
Articulating this right establishes that users can request a substantive accounting of how their Personal Data has been handled across collection, use, disclosure, sale, and sharing.
Routing rights requests to the customer rather than Calendly means Calendly is not the point of contact for exercising rights over customer-controlled data, potentially complicating access for indivi…
Users have an affirmative right to stop three distinct categories of data use—sales, targeted advertising, and sharing—each of which independently affects how their data is used commercially.
This establishes a deletion right, but its scope is limited to 'certain' information, meaning not all personal information may be subject to deletion.
This establishes a right for individuals to obtain visibility into certain personal information Cerebras retains, which is a foundational privacy right under laws such as the CCPA.
This establishes a right to correction of inaccurate personal information, a key consumer privacy protection under laws such as the CCPA.
The use of 'may have rights' rather than 'have rights' means Chase does not affirmatively guarantee CCPA rights apply; the scope of those rights is left unstated in this clause.
This right is available only to California residents and provides an opt-out mechanism that is not available to all customers under the general joint marketing sharing terms.
Unlike the general policy where sharing occurs unless a customer opts out, North Dakota residents receive opt-out protection automatically.
The scope of customers' opt-out rights is defined and capped by federal law, meaning sharing that falls outside these three categories cannot be restricted by the customer.
New customers have a limited window before sharing begins; the opt-out mechanism exists but does not necessarily prevent sharing during the initial 30-day period.
The clause conditions CCPA rights access on whether the CCPA actually applies to a given user's personal information, meaning not all users are guaranteed these rights.
The right to withdraw consent at any time gives users ongoing control over the legal basis on which ClickUp processes their data.
California residents can exercise their privacy rights without risk of retaliation through service denial or price increases, as Cloudflare is expressly prohibited from taking such actions.
Cloudflare acknowledges a comprehensive set of individual data rights, giving users formal mechanisms to control their personal information.
California residents have a specific opt-out right tied to the CCPA's statutory definitions of 'sell' and 'share', which have precise legal meanings that may differ from everyday usage.
The clause specifies the exact mechanism users must follow to exercise their deletion and data-copy rights, making those rights actionable.
This provision places contractual responsibility on users to ensure they do not input regulated data types such as medical records or financial account information into Cursor, which is significant f…
The right to opt out is stated as conditional ('may have'), meaning it is not guaranteed to all users and depends on factors not specified in this excerpt, such as applicable jurisdiction.
Users are guaranteed a chance to opt out before their personal information is used for purposes materially different from those already disclosed, limiting unannounced repurposing of data.
Recognition of a deletion right gives users a mechanism to request removal of their personal information from Datadog's systems.
Recognition of opt-out rights across behavioral advertising, profiling, and data sales gives users control over three distinct high-impact data uses.
This clause makes legal compliance with personal information laws a contractual obligation, meaning a breach of applicable privacy law also constitutes a breach of the License.
The right to withdraw consent is expressly preserved and is exercisable at any time, giving users an ongoing mechanism to revoke prior consent to specific data uses.
Account deletion produces two distinct outcomes depending on data type: permanent deletion for identifying information and anonymization for other data, with the scope of each governed by a separate …
The right to opt out is limited to US residents and scoped to definitions set by applicable laws and regulations, meaning the practical coverage of the right depends on how those laws define the rele…
The right is stated as conditional ('may have'), meaning it is not universally guaranteed and likely depends on applicable law or jurisdiction, which limits the certainty of the protection.
DoorDash explicitly acknowledges a user right to stop the sale or sharing of Personal Information for targeted advertising, and provides a specific mechanism on its website to exercise that right.
The right is framed as a request to opt out, and it is limited to certain non-required purposes — meaning some third-party disclosures cannot be opted out of.
This establishes that opt-out and objection rights are conditioned on applicable law, meaning the availability of these rights varies by jurisdiction and is not universally guaranteed.
This establishes both a deletion right and a material consequence of exercising it—permanent loss of access to associated games and services—which is directly relevant to the practical value of exerc…
The right is qualified by 'may have,' meaning Egnyte does not unconditionally commit that this opt-out right applies to every California resident in every circumstance.
The right is qualified by 'may have,' meaning Egnyte does not unconditionally guarantee this right applies to every California resident in every circumstance.
The deletion right is expressly limited by Egnyte's retained right to maintain personal information under CPRA exceptions, meaning a deletion request may not result in full erasure.
A defined six-month appeals window gives EU users a time-limited right to challenge enforcement actions taken by ElevenLabs against their content or account.
Characterizing the data sharing as a potential 'sale' invokes statutory opt-out rights under US privacy laws such as the CCPA, though the word 'may' preserves conditionality on both the sale characte…
This acknowledges legally enforceable rights EEA users hold with respect to Personal Data held by Eventbrite, establishing the scope of user control available under applicable law.
This right enables consumers to discover the existence and content of personal information Experian holds, which is foundational to exercising other privacy rights.
The right to deletion is qualified by unspecified exceptions, meaning Experian retains authority to decline deletion requests in some circumstances.
FanDuel presents this as a conditional right — using 'may' — meaning the right is not universally guaranteed to all users and may depend on applicable law or jurisdiction.
An opt-out right before materially different disclosure or use means users have a concrete mechanism to prevent certain data flows they did not originally consent to.
This commitment ensures users can exercise their legal privacy rights without fear of retaliation or adverse treatment by Figure AI.
Figure AI acknowledges an inherent limitation in the security of data transmission and storage, which applies to any personal data users transmit or that Figure AI stores.
Users have a self-service right to retrieve or remove their data at any time, which supports data portability and deletion without requiring external requests.
This clause affirms that users have a practical, self-service pathway to exercise access, correction, and deletion rights over their data held by Fly.io.
This right permits users to restrict two distinct forms of third-party data transfer: sale for consideration and sharing for cross-context behavioral advertising, both of which are common forms of co…
The example of posting personal information without consent is illustrative rather than exhaustive, meaning the prohibition on third-party privacy violations extends beyond that specific conduct.
The clause establishes a blanket prohibition on misuse of personal information, though the absence of a definition of 'misuse' in the quoted language leaves the scope of prohibited conduct undefined …
Users who rely on perceived anonymity when submitting content such as reviews may still be identifiable, with real-world consequences for employment or privacy.
Users who object to personalization have no targeted opt-out mechanism; the only recourse requires surrendering their entire account or profile data.
This right gives users a concrete mechanism to learn exactly what personal data Glean has collected, used, and shared about them within a defined time window.
This right allows users to prevent their Personal Information from being used to target them with behavioral advertising across different contexts or platforms.
The deletion right is qualified by exemptions, meaning Glean may retain data in circumstances that fall within those exemptions even after a deletion request.
This commitment ensures users can invoke their CCPA/CPRA rights without fear of retaliatory or adverse treatment by Glean.
This establishes that privacy and security are stated commitments within Google's AI principles, providing a normative baseline users can reference.
These rights give qualifying users meaningful control over their Service Data, including the ability to require deletion or restrict how Google Cloud processes it.
End User location data cannot be collected or cached without affirmative, advance, and revocable consent, placing a strict gatekeeping obligation on the Customer.
This establishes a self-service mechanism and an unrestricted time window for individuals to exercise core data rights.
The right is qualified by 'may have,' meaning it is not universally guaranteed; its availability depends on factors not stated in this excerpt, likely jurisdiction.
Users have a stated ability to request access to, transparency about, or deletion of their personal information held by Grubhub.
This right is conditional on applicable state law, meaning it is not universally available to all users, and its existence is qualified by the word 'may.'
This clause establishes a specific consumer right that restricts Gusto's ability to use or share sensitive personal information beyond what the user permits.
Exercising the right to withdraw consent carries a stated consequence: Harvey AI may be unable to continue providing Services, which creates a practical trade-off between privacy rights and continued…
This clause establishes that users are protected from retaliation or differential treatment when they invoke their CCPA privacy rights, reinforcing the practical usability of those rights.
This clause establishes an opt-out right that directly limits how Heap can monetize or distribute user data for advertising, as defined by California law.
This clause establishes a user-actionable right to seek erasure of personal data Heap holds, giving users a mechanism to limit Heap's retention of their information.
The clause identifies the single channel through which users may exercise their personal information rights, making that portal the necessary point of contact for any such requests.
The opt-out right is geographically limited to US residents and applies only to activities that 'may' fall under the relevant legal definitions, meaning the scope of what can be opted out of is quali…
This right gives consumers a mechanism to obtain a concrete accounting of what personal data Home Depot holds and how it is handled, enabling informed decisions about further engagement or opt-out re…
GPC recognition provides a browser-level opt-out mechanism, meaning consumers do not need to submit a manual request to exercise sale and sharing opt-out rights on homedepot.com.
This right directly limits Home Depot's ability to monetize personal data through sales or targeted advertising networks once a consumer exercises it.
Individuals whose data is in HubSpot's commercial dataset have an identified mechanism to request removal, which is consequential given that the dataset is built from multiple sources and shared with…
A defined submission mechanism exists for erasure requests, but the clause establishes only the right to request erasure, not an obligation on Hugging Face to fulfill every such request.
The entitlement to access is conditional on applicable data protection laws, meaning it is not an unconditional right granted by Hugging Face independently of those laws.
The clause defines sale broadly to include non-monetary transfers for valuable consideration, meaning the opt-out right applies beyond cash transactions.
Recognition of an opt-out right for sale, sharing, and targeted-advertising disclosure gives users a formal mechanism to limit commercial use of their personal data.
This provision gives California residents a specific, actionable mechanism to limit the sharing of their Personal Information, a right tied to California privacy law.
This commitment means users can exercise privacy rights without fear that doing so will result in losing or receiving degraded access to LangChain's services.
The clause establishes both a user right to object and an unconditional commitment by Ledger to cease processing, with no stated exceptions or conditions.
The clause establishes a right to erasure, giving users a mechanism to request removal of personal data Ledger holds about them.
This right gives eligible US state residents a mechanism to prevent their personal information from being used for cross-context behavioral advertising, a category of data use that spans multiple pla…
Paid subscribers who generate content privately receive an explicit commitment from Leonardo AI that their content will not feed AI model training and will remain inaccessible to other users.
Incorporating the California Privacy Notice by reference makes its terms legally part of the Privacy Policy, meaning California residents' rights are formally governed by that separate document.
This clause acknowledges a right of erasure that allows EU data subjects to seek deletion of their Personal Data, which can limit Linear's ability to retain data indefinitely.
The existence of an opt-out mechanism means users have a right to limit the sharing of their personal data for targeted advertising purposes.
This right gives California residents a mechanism to prevent their personal information from being sold or shared, which directly limits one of the broader uses Marqeta may otherwise make of that dat…
Users can exercise data sale and sharing opt-out rights automatically through browser-level signals without taking manual steps on McDonald's platform.
This right allows users to prevent two distinct forms of commercial use of their personal information: sale-equivalent disclosure and behavioral advertising data sharing.
The clause identifies a conditional opt-out right — qualified by 'may have' and 'as defined under applicable law' — and specifies the mechanisms available to exercise it.
The clause establishes that a user-controlled mechanism for managing privacy preferences exists and is persistently available within Copilot.
This clause establishes a legally grounded opt-out right tied to CCPA definitions of 'sale' and 'sharing', which are broader than everyday usage and may encompass data flows to advertising partners.
This clause establishes a deletion right for California users but preserves Midjourney's ability to decline requests that fall within defined exceptions, limiting the right's absolute scope.
This clause establishes a CCPA-grounded access and disclosure right, giving California users a formal mechanism to scrutinize Midjourney's data practices over a defined historical window.
This right limits Mixpanel's ability to monetize or use a user's Personal Information for targeted advertising once the user opts out.
Without this protection, exercising privacy rights could carry a practical cost; this commitment ensures those rights can be exercised without financial or service-access consequences.
This acknowledgment signals that users' statutory opt-out rights under laws like the CCPA may be triggered by MyFitnessPal's cookie practices, even absent a traditional sale.
This clause establishes a user-invocable right specifically targeting categories of information that carry heightened privacy risk, limiting MyFitnessPal's use upon request.
This clause establishes a legally recognized opt-out right that limits MyFitnessPal's ability to share personal information for cross-contextual behavioral advertising once invoked.
This clause identifies the specific mechanisms through which users can exercise control over personalized advertising, making the opt-out pathway actionable.
The clause establishes that exercising data privacy rights—including withholding consent to data processing—carries no penalty in how NVIDIA NIM treats you.
The clause establishes that NVIDIA NIM websites automatically honor a recognized browser-level privacy signal, removing the need for users to manually opt out of specific cookie categories.
The clause establishes a broad set of individual data rights exercisable at any time, covering the full lifecycle of personal data held by NVIDIA NIM.
The clause establishes that opting out of interest-based advertising data processing is available but requires affirmative user action through one of two specified channels.
The clause explicitly recognizes a user right to personal information access and copy, establishing a concrete entitlement users can invoke against Netflix.
The clause discloses that Netflix sells or shares personal information and identifies the mechanism through which users can exercise a choice to limit that activity.
Users who post content to public sections of Notion's features lose the privacy protections that would otherwise apply under the Privacy Policy, meaning that content has no confidentiality guarantee.
This opt-out mechanism addresses data flows through advertising technologies that may qualify as a 'sale' under applicable privacy laws, and Notion has provided a specific link to exercise that right.
This right protects individuals from retaliation or differential treatment when they exercise CCPA rights such as deletion or opt-out requests.
This right gives individuals direct control over whether their Personal Data is sold by Okta for commercial purposes.
This commitment conditions any expanded use of Sensitive Personal Data on a Privacy Policy update, providing a disclosure mechanism but not necessarily advance notice.
This right gives individuals a formal mechanism to learn the full scope of Okta's data practices regarding their Personal Data.
This establishes that the right to deletion is not absolute and may be limited by specific legal reasons, including a named example tied to Terms of Service enforcement.
Users have a stated opt-out right over the use of their Content for model training, giving them some control over how their data contributes to OpenAI's AI development.
A stated commitment to maintaining private information protections identifies privacy as a protected interest within OpenAI's standards, establishing that private information receives a designated ca…
Users in jurisdictions without legally mandated privacy rights have no enforceable claim to a specific response from OpenSea; it retains full discretion over whether and how to fulfill such requests.
Users have an affirmative right to obtain detailed insight into what personal information Oscar Health holds, where it came from, and how it has been used or transferred.
Users retain an ongoing right to stop the commercial transfer of their personal information, though the scope of that right is limited by service provider relationships and other legal exceptions.
This opt-out right, where applicable, gives consumers a mechanism to limit Palantir's ability to sell or share their Personal Information for commercial targeting or data sale purposes.
This establishes a consent gate for sensitive data processing for residents of the listed states, meaning Palantir is prohibited from proceeding without affirmative consumer consent.
Opting out of this data sharing requires affirmative user action through a specific in-account setting, meaning sharing continues unless the user takes that step.
Users are assured that exercising privacy rights will not result in financial or service-level penalties from PayPal.
Users have an explicit opt-out right that limits Peacock's ability to sell, share, or process their data for targeted advertising purposes.
The right to revoke consent is a meaningful privacy control, but it is limited to processing activities where consent—rather than another legal basis—is the ground for processing.
The opt-out right is conditioned on targeted advertising occurring on Perplexity AI's services, and the mechanism identified is a cookie consent pop-up, meaning users must actively use that mechanism…
The requirement of express consent before uploading any likeness of a real person creates a clear affirmative obligation on the user prior to submission.
Pinterest's commitment to respect opt-out signals is conditioned on both the user's state of residence and the user having actively enabled the signal, limiting the scope of this protection.
An available opt-out mechanism means users have a means to limit Pinterest's use and disclosure of their data for these purposes, but the opt-out requires affirmative user action.
The Client bears both a warranty obligation and an operational obligation to secure proper consent, meaning failure exposes the Client to both contractual breach and potential legal liability.
The claim establishes that users have a concrete mechanism to limit the sharing of their personal information, with two specific named options provided.
The characterization of this right as 'absolute' means Public.com cannot override or condition the objection, giving users unqualified control over marketing use of their data.
The deletion right is subject to a legal or regulatory compliance exception, meaning Replicate may retain personal information even if you request deletion.
Users have an affirmative right to obtain their personal information and understand how it is being used, enabling informed decisions about continued use.
Automated credit and fraud decisions can directly affect your access to financial products, and you have the legal right to request that a human reviews any decision that significantly affects you.
This right enables qualifying users to request removal of their personal information from Ro's records, which is consequential given the sensitive health data Ro collects.
This right is consequential because it gives users a legal mechanism to restrict how their sensitive personal information is processed, but only when that information is being used for the specific p…
This right constrains Ro's and its partners' ability to use sensitive data—which may include health information—for advertising, giving users a mechanism to restrict that use.
This clause provides a specific opt-out mechanism for users in qualifying states to restrict the sale and targeted advertising use of their personal information.
This right gives qualifying users visibility into what personal information Ro holds about them and enables them to obtain a portable copy of at least some of that data.
If user information is exempt from the CCPA and similar state laws, users may lack the privacy rights—such as access, deletion, or opt-out—those laws would otherwise provide.
This provision means users may be unable to exercise data access, deletion, or other rights under state privacy laws for a potentially significant portion of their information held by Robinhood.
This provision gives parents a formal right to request control over how their child's Personal Information is collected and used, including the ability to halt further data collection.
This right gives EEA users a mechanism to verify what Personal Information Roblox holds about them and to obtain copies, which is foundational to exercising other data rights.
The clause confirms that Personal Information may be commercially transferred to third parties for advertising purposes, while also establishing a user right to stop that transfer.
This provision establishes a non-discrimination entitlement tied specifically to the exercise of privacy rights, as defined and bounded by State Privacy Laws.
The right to opt out of sale and targeted advertising processing is a material data privacy protection, though it is limited to residents of certain unspecified states.
Individuals have a recognized right to seek removal of their Personal Data held by Salesforce.
The right to receive data in a machine-readable format supports data portability, enabling users to move or use their information with other services.
The use of "may have" indicates these rights are not guaranteed universally but depend on applicable law or other conditions not specified in this excerpt.
This prevents Shopify from penalising users financially or through service degradation for exercising their privacy rights.
Users have an actionable mechanism to stop their Personal Information from being sold or shared, which directly limits a significant category of data use.
A specific opt-out mechanism exists, meaning California users have an actionable path to limit this use of their personal information.
This establishes that statutory data access rights exist for a broad international set of users, though subject to legal exemptions.
This establishes a legally grounded right for California consumers to obtain disclosure of their personal information from Slack.
This clause establishes that exercising privacy rights carries no material penalty in access, cost, or quality of service, which reinforces the practical meaningfulness of those rights.
The right to delete in-app information is explicitly limited to 'some information,' meaning not all user data within the Services is user-deletable through these mechanisms.
An opt-out mechanism exists, but it requires the user to affirmatively take steps — visiting a link and completing a form — to exercise this right.
Even if a user exercises deletion rights, certain data is retained indefinitely while the organization remains an active customer, limiting the practical scope of individual deletion requests.
This commitment ensures that users can exercise privacy rights without fear that doing so will result in reduced service quality, higher prices, or other adverse treatment.
Spotify provides two concrete mechanisms for users to exercise their data access right, making the right practically actionable rather than merely declaratory.
The right to deletion is qualified—'certain' personal data and named exceptions mean not all personal data is subject to deletion on request, limiting the practical scope of this right.
Square provides specific, named mechanisms for exercising the opt-out right, making the right actionable through both a site-based link and a browser-level signal.
It conditions the existence of key data subject rights on applicable law and legal exceptions, meaning the rights are not universally guaranteed by this clause alone.
This right, where it applies, gives you a mechanism to stop Starbucks from monetising your personal information through targeted advertising channels.
These rights, if they apply to you, give you visibility into what data Starbucks holds, which is foundational to exercising other privacy rights such as correction or deletion.
If the CPRA does not apply to most data Stash collects, customers cannot rely on CPRA rights — such as the right to know, delete, or opt out of sale — for the majority of their personal information h…
Customers have an available mechanism to restrict sharing of specific sensitive categories of their information, but must affirmatively contact State Farm to exercise it.
The claim establishes a conditional right to erasure, meaning users can invoke deletion only when specific legal conditions are met, not unconditionally.
This establishes a statutory withdrawal right for EU and UK buyers that is separate from StockX's standard return policy, providing a time-limited unconditional exit from a completed purchase.
This right gives users affirmative control over a specially designated category of personal data, beyond general personal information.
This right ensures users can exercise their privacy rights without fear that StockX will penalize them for doing so.
This opt-out right gives users direct control over one of the most commercially significant uses of personal data — behavioral and targeted advertising.
The default setting makes personal activity data publicly visible and search-engine-indexable without any affirmative action by the user, placing the burden on users to change settings if they want m…
Users who are 18 or older begin sharing Content publicly from the moment of sign-up without any affirmative action on their part to make it public.
Users have an explicit, accessible mechanism to stop their personal information from being shared for targeted advertising purposes.
This clause establishes a time-limited, form-specific right for Business Users to challenge the addition of new sub-processors who will process their personal data.
Biometric data use is subject to a separate, revocable consent, meaning it is not bundled into general policy acceptance and can be withdrawn independently.
An opt-out right for targeted advertising and associated data sales or sharing gives users a mechanism to limit a category of data use identified elsewhere in the policy.
The use of 'may be entitled' conditions these rights on unstated eligibility criteria, meaning they are not guaranteed to every user in every circumstance.
This right is limited to a specific class of users — registered California minors — and applies only to Content that is visible to other users, establishing both eligibility conditions and a scope li…
The clause makes consent a prerequisite for all Biometric Data extraction, processing, and identity verification, giving users a meaningful opt-out.
Users have a designated mechanism to stop T-Mobile from selling or sharing their data for commercial purposes including targeted advertising and direct marketing.
Users can obtain their personal data in a format that enables portability and further use, supporting data rights under applicable privacy law.
The clause provides a non-discrimination protection for users exercising California privacy rights, but the carve-out for differences related to provision of Personal Information limits the scope of …
The opt-out right is explicitly conditioned on a legal interpretation of 'sale' under the CCPA, meaning TaskRabbit does not unconditionally acknowledge that its advertising activities constitute a sa…
This clause acknowledges enforceable privacy rights over personal and sensitive information, giving readers a mechanism to restrict Thomson Reuters' data practices.
Acknowledging this right establishes that users can formally request Ticketmaster cease holding or processing their personal data, which constrains Ticketmaster's data use.
Exercising the opt-out right over data sale simultaneously removes the user from targeted advertising and profiling, giving a single election broad practical effect.
The clause establishes that users have a mechanism to exercise data rights over information TikTok holds, providing a pathway to transparency and correction or deletion of personal data.
The permission obligation is conditioned on legal requirement, meaning TikTok does not commit to seeking consent in jurisdictions where no law mandates it.
Users retain ongoing control over their data by being able to withdraw consent and seek deletion at any point after providing consent.
This grants users a time-bounded right to obtain transparency into Together AI's data collection and use practices concerning their Personal Data.
Users hold multiple data rights over their Personal Data, including the ability to review and modify or remove it entirely.
Users have a direct control option that activates a Zero Data Retention mode, affecting how their data is handled during their use of the Services.
The clause affirms a CCPA-based opt-out right while simultaneously rendering it currently moot by disclosing that Together AI does not sell Personal Data.
This right gives California users a direct mechanism to limit how their personal information is distributed to third parties by Udemy.
Users have a stated right to request deletion of their personal information held by Uniswap, giving them a degree of control over their data.
Users cannot be penalized or treated differently by Uniswap for exercising their stated privacy rights.
The deletion right is subject to multiple exceptions grounded in operational and legal necessity, which may limit how broadly the right can be exercised in practice.
This establishes that California residents have statutory rights to transparency, access, deletion, and opt-out with respect to their personal information held by Venmo.
The claim establishes a formal opt-out right specific to the sale of personal information, giving US users a mechanism to prevent that sale.
The claim establishes that an opt-out right for Model Training exists and is exercised through a specific setting—Team Preferences—with governing terms in Section 3 of the Terms of Service.
This clause enumerates legally enforceable privacy rights California residents hold against Verizon, establishing the scope of individual control over personal data Verizon collects.
The clause establishes both the existence of an opt-out right and a broad legal definition of 'sale or sharing' that covers non-cash exchanges, which determines when the right applies.
This establishes an actionable right for California residents to limit how their personal information is disclosed and used by third parties.
Walmart recognizes a browser-level technical signal as a valid opt-out mechanism, allowing users to exercise privacy rights without navigating manual opt-out processes.
These rights are conditioned on the applicability of the relevant data protection law, meaning not all users automatically receive them; only those within the stated jurisdictions where that law appl…
Account closure is established as the only mechanism for opting out of ongoing Personal Information collection, meaning there is no lighter-touch opt-out available while maintaining an account.
The clause conditions GPC signal recognition on legal requirements, meaning the opt-out is only operative in jurisdictions where applicable law mandates it.
This clause establishes that the default model training data use is reversible for paid plan users, and that opting out triggers both a training exclusion and a Zero Data Retention arrangement with m…
Users have an affirmative right to opt out of targeted advertising use of their personal information, limiting how Wix and its partners can leverage that data.
Wix simultaneously grants an opt-out right while qualifying that it does not engage in a traditional sale, creating ambiguity about what activity the opt-out actually prevents.
Users have a right to deletion, but that right is not absolute—legally permissible exceptions mean some personal information may be retained despite a deletion request.
This right gives users visibility into whether and what personal information Wix holds about them, which is foundational to exercising other privacy rights.
Because Workday acts as a processor in employer-deployed contexts, it does not serve as the point of contact for individual rights requests, placing the practical burden on the individual to approach…
This establishes an absolute non-discrimination commitment, ensuring users can exercise privacy rights without fear of adverse treatment by Writer.
Wyze acknowledges four distinct potential privacy rights, each representing a separate avenue through which users may exercise control over their personal information held by Wyze.
Users who rely on browser-level Do Not Track preferences to limit tracking will find those preferences ineffective against Zendesk's tracking practices.
Zendesk formally acknowledges a deletion right, giving individuals a mechanism to seek removal of their collected personal data.
Zendesk acknowledges that it sells or shares personal data and that individuals hold a right to stop that activity.
The opt-out right is not exercisable through a single action; failure to complete both steps means the opt-out is not fully effective, potentially leaving some data sale or sharing in place.
Opting out of the Resume Database does not undo prior data access, meaning the user's ability to reclaim their information is limited once a third party has already saved it.
The right is conditional on consent being the applicable legal basis; withdrawal does not affect processing that rests on other legal grounds.
The right explicitly extends to profiling activities linked to direct marketing, not solely to the direct marketing messages themselves.
The clause establishes that participation in data-sharing features is not automatic or mandatory — it is subject to the user's own decision, which determines whether their data is shared through thos…
The clause establishes that sample retention is user-controlled and that declining storage results in secure destruction after lab completion, directly affecting what happens to a user's physical bio…
The existence of a Cookie Preferences control indicates users have some mechanism to manage cookie settings through Airtable.
Amplitude's acknowledgment of these rights confirms that users can take active steps to control their Personal Data held by Amplitude.
The claim establishes both a user-exercisable opt-out right for targeted advertising and a separate obligation on Anthropic to honor global privacy controls, giving users two distinct mechanisms to l…
The claim's scope is bounded by the legal definition of 'sell' under applicable laws and regulations, meaning activities that fall outside that legal definition are not addressed by this commitment.
The clause establishes that the user has an unrestricted right to turn off Device Analytics sharing at any time, giving ongoing control over that data sharing.
The opt-out right is framed as meeting at least state-law minimums, meaning the scope of what consumers can opt out of is defined by the applicable legal floor.
The deletion right is limited to 'certain' personal information and is subject to unspecified exceptions, meaning it does not guarantee removal of all data Best Buy holds.
Consumers have an actionable mechanism to learn what personal information Best Buy maintains about them.
The clause establishes an unconditional, at-any-time right to opt out of promotional communications, with two specific mechanisms provided.
These rights give you meaningful control over your personal data on the platform, including the ability to request deletion of your entire profile and data history, which is particularly important gi…
Message content is among the most private information users share on a dating platform, and its collection, storage, and potential disclosure in legal proceedings or safety investigations is a signif…
International data transfers mean your personal information may be processed under legal frameworks that provide different or potentially lower levels of protection than your home country's laws.
Precise geolocation data is one of the most sensitive personal data categories because it can reveal where you live, work, worship, and socialize, creating real-world safety and privacy risks for dat…
Automated profiling in a dating app context can significantly affect who you are able to connect with, and under GDPR users have specific rights related to automated decision-making that produces sig…
Users have a mechanism to exercise some control over AI training use of their data, rather than having no opt-out or management option.
This clause is consequential because it establishes that users have an affirmative right to stop Cash App from using or sharing their personal information for cross-context behavioral advertising.
This establishes a technical mechanism through which users can exercise opt-out rights without submitting a manual request, but only on qualifying browsers with GPC activated.
The deletion right is qualified by applicable law, meaning Coinbase's obligation to honor such requests is not absolute and may vary by jurisdiction.
Users outside the US, particularly in the EU and UK, have stronger data protection rights under local law, and transferring data to the US without a specific legal mechanism may not satisfy those leg…
This provision operationalizes statutory obligations under the CCPA by specifying the data subject rights available to California consumers and establishing the procedural mechanism for submitting re…
The absence of a defined retention period means your personal data, including contact details, location history, and device identifiers, could be held indefinitely as long as Craigslist determines a …
This language limits Craigslist's liability in the event of a data breach, and means users cannot rely on a contractual security commitment when entrusting the platform with personal and financial in…
Availability across all tiers means enhanced privacy protections are not gated behind a paid subscription.
This provision distinguishes Usage Data from Content (code inputs and suggestions), authorizing Anysphere to collect and process interaction and log data for business purposes and to share it with th…
This provision establishes that the default position is no use of user content for AI training, which is a contractually explicit opt-in framework rather than a passive opt-out arrangement.
An unconditional, self-service deletion right means users are not required to contact support or wait for Cursor to act.
The scope of available privacy rights is defined and limited by the options presented on Delta Airlines' form, meaning rights not listed on the form cannot currently be exercised.
Discord provides a defined mechanism and timeframe for users to access personal data the platform holds about them.
The clause identifies a specific, self-service mechanism through which users can exercise four distinct data rights, making those rights practically actionable.
The right to delete is not absolute—Faire conditions fulfillment of deletion requests on a legal mandate rather than treating the request itself as sufficient.
This provision attempts to restrict minors from using the platform independently, which is relevant for COPPA compliance and parental liability, but places the verification and supervision obligation…
Garmin designates a specific mechanism through which users may act on their data rights, which determines where users must go to exercise those rights.
Consumers have an actionable right to stop General Motors from selling their personal information.
Users have an affirmative right to stop their data from being used or shared specifically for targeted advertising, limiting a named commercial use.
Users are assured that invoking privacy rights carries no retaliatory consequences in terms of access, pricing, or quality.
Recognition of a deletion right gives users a formal mechanism to remove their personal data from Instacart's possession.
Users have an explicit right to initiate removal or anonymization of their personal information held by Khan Academy.
The clause establishes a user right to data access, enabling individuals to review what personal information Ledger holds about them.
The clause affirms an external escalation path independent of Ledger, meaning users are not limited to Ledger's own resolution process.
The clause establishes a right to rectification, ensuring users can challenge and request correction of data Ledger holds incorrectly about them.
The clause defines the specific mechanism Ledger provides for opting out of marketing emails, meaning users must locate the footer link to exercise this right.
The clause defines the specific and exclusive mechanism Ledger provides for cookie consent withdrawal, meaning users who do not locate this button may not be able to exercise this right.
This clause establishes a specific legal right for California residents to restrict a category of third-party data sharing that would otherwise be permitted.
This clause establishes that consent-based data processing can be stopped by the user without cost or time restriction, limiting Luma AI's ability to rely on consent as an ongoing legal basis.
This clause grants users four distinct self-service rights over their account information with no stated time restriction, giving users direct control.
This provision establishes Microsoft's framework for COPPA compliance and analogous international children's privacy requirements, including the EU's age-appropriate design obligations and the UK Age…
This limits the practical enforceability of privacy rights requests by allowing Mixpanel to impose costs or deny fulfillment under defined conditions.
This clause establishes that the Customer has a mechanism to control whether telemetry data is collected, giving the Customer an opt-out option.
This establishes that users hold actionable rights over their personal information held by Nintendo, covering both self-submitted and collected data.
This confirms that users can exercise state-law opt-out rights through browser-level signals without taking separate manual steps on Notion's platform.
This establishes a user-actionable mechanism to withdraw consent specifically tied to biometric data retention, which affects ongoing authentication capability.
Users have a mechanism to stop marketing communications, but the opt-out is limited to the channels and method specified and does not extend to all communications.
This right gives users visibility into what personal data Replicate holds, which is foundational to exercising other privacy rights.
If you are a California resident, you have legally enforceable rights over your personal data held by Revolut, including the ability to request deletion and to opt out of sharing for advertising purp…
Open Banking access gives Revolut visibility into your full financial picture across multiple institutions, which is more extensive than data collected solely from your Revolut account activity.
Location and device data can reveal sensitive information about your daily habits, movements, and financial activity patterns, and this data is used in profiling and fraud detection processes.
The clause establishes an operational framework for preference management, enabling users to control the scope of marketing communications directed to them without requiring service termination or ac…
Understanding which legal entity controls your data matters because different entities are subject to different regulators and regulatory obligations, and your rights may vary depending on which Revo…
Your personal data may be processed in countries outside the UK with different levels of data protection, and the adequacy of the safeguards in place determines how well your data is protected intern…
Data about children is among the most sensitive and most strictly regulated categories of personal data, and parents should understand what information is collected about their children and how it is…
Identity document data and biometric verification data are treated as special categories under UK GDPR, meaning stricter rules apply to how they are collected, stored, and used, and Revolut must have…
Visitors do not need to manually adjust consent settings if their browser already broadcasts a recognized privacy signal; the effect is automatic.
Users have an actionable mechanism—a specific contact address—to exercise rights over their personal information.
The existence of a single opt-out mechanism covering all advertising and marketing data sharing gives users a defined pathway to restrict that category of data use.
The one-month deadline gives users a defined window within which Substack must act on privacy rights requests, creating an enforceable time-bound obligation.
The deletion right is qualified: TaskRabbit may retain data despite a deletion request where legal obligations or legal permissions apply, limiting the practical scope of the right.
The opt-out right is conditional — it applies only if Tinder actually uses the user's data for those purposes — meaning it is not an unconditional right.
Users have an active mechanism to prevent Together AI from retaining any of their interaction data, including prompts and model responses.
This establishes a binding commitment by Twitch to cease processing upon withdrawal of consent, giving users an actionable mechanism to limit data use.
Verizon's commitment to honor GPC signals gives users a browser-level mechanism to limit third-party tracking without navigating separate opt-out processes.
Wix's ability to require additional verification means a user's privacy rights request may be delayed or conditioned on providing further personal information.
It confirms that Writer recognizes and acts on the Global Privacy Control signal, giving users a functional browser-level privacy opt-out mechanism.
It establishes a user right — conditioned on applicable U.S. laws — to opt out of a specific category of cookies.
The clause establishes that individuals have a channel to exercise data rights over certain personal information held by Xfinity.
Parents have a direct mechanism to limit or erase data collection tied to their child's viewing and search activity, which constrains how that history can be used.
Acceptance of GPC signals means users can exercise opt-out preferences through a browser-level mechanism without taking additional manual steps on the Website.
Privacy policy updates can expand data collection or sharing practices, and while Bumble commits to notifying users of material changes, the definition of what constitutes a material change is not sp…
This provision gives minors a mechanism to retract publicly posted content, which is required under California law, but the caveat that removal is not comprehensive means third-party copies or cached…
This provides California residents with specific, actionable rights over their personal data, backed by California law, with a direct submission mechanism provided in the policy.
Users who rely on their browser's Do Not Track setting as a privacy control should be aware that Craigslist explicitly disregards this signal, though Craigslist separately states it does not use trac…
This commitment directly limits one of the most common ways consumer data is monetized; users can rely on the stated promise, though enforcement depends on Craigslist's internal practices and applica…
Your IP address, which can reveal your approximate geographic location, is used to modify the content of AI responses you receive, creating a form of location-based profiling that you may not expect …
Developers and researchers who download Mistral AI models from Hugging Face should be aware that doing so triggers personal data collection by Mistral AI, even if they have not created a direct Mistr…
The clause operationalizes location-based service personalization as a standard practice while creating a procedural pathway for users to decline this specific data processing activity without servic…
Knowing your rights and the practical steps to exercise them means you can actively control what Revolut knows about you and how it uses that information.
Revolut uses your transaction and behavioural data to identify and send you product offers, which means your financial behaviour directly influences the commercial communications you receive.
As a regulated financial services company, Revolut is subject to legal obligations including anti-money laundering, sanctions screening, and regulatory reporting requirements that may require disclos…
A commitment not to sell personal data is meaningful for consumers concerned about their financial and identity data being monetized by third-party data brokers, though the policy separately permits …
This is a meaningful consumer protection commitment that goes beyond a legal minimum, particularly relevant for users aware of data broker practices in the financial technology industry.
Monitor emails you after the daily check that finds a change to these clauses on a platform you choose.
A privacy rights clause is a provision in a platform's terms of service or privacy policy governing privacy rights-related rights, obligations, or restrictions.
ConductAtlas tracks 277 platforms with privacy rights clauses - roughly 81% of platforms in the archive.