Provision Registry

567 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
Filtering: Privacy rights × Low × Clear all
Oura · Oura Privacy Policy
This is a user-protective commitment that goes beyond what most privacy policies assert, though its practical enforceability depends on the jurisdiction and the nature of the legal order received.
CA-P-007773 First tracked May 9, 2026 Last seen May 20, 2026 Compare across platforms →
Max · Max Privacy Policy
Under GDPR and similar frameworks, companies must identify a specific legal basis for each type of data processing; the Legal Bases Charts are the primary disclosure mechanism WBD uses to fulfill this obligation and to inform users about the basis on which their data is processed.
CA-P-009721 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Snowflake · Snowflake Privacy Notice
Because the substantive legal terms are distributed across linked documents rather than consolidated here, users and compliance teams must access each linked document separately to understand the full scope of Snowflake's policies.
CA-P-011438 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
Visa · Visa Privacy Notice
Device identifiers combined with location data and transaction records can enable precise behavioral tracking and are increasingly subject to regulation in privacy-sensitive jurisdictions.
CA-P-008717 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Sourcegraph Cody · Sourcegraph Privacy Policy
This provision authorizes collection of repository names and data accessed as part of audit logging, meaning records of which code repositories you interact with may be retained and shared with customers in the event of a security incident.
CA-P-011846 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
McDonald's · McDonald's Privacy Policy
A detailed transaction history tied to your identity enables McDonald's and its partners to build a behavioral profile over time that can be used for targeted marketing and potentially shared with third parties.
CA-P-009438 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Revolut · Revolut Privacy Policy
Revolut uses your transaction and behavioural data to identify and send you product offers, which means your financial behaviour directly influences the commercial communications you receive.
CA-P-007676 First tracked May 9, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
AWS · AWS Privacy Notice
The opt-out mechanism is practically important because failure to use it means AWS may continue to send promotional communications to your contact details, and understanding how to unsubscribe prevents unwanted ongoing contact.
CA-P-008667 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
low Privacy rights
Miro · Miro Privacy Policy
If you provide Miro with your email address, you may receive marketing messages. The opt-out mechanism should be accessible and promptly honored, and Miro's ability to send marketing to business contacts may also engage B2B email marketing rules in certain jurisdictions.
CA-P-007873 First tracked May 9, 2026 Last seen May 20, 2026 Compare across platforms →
Acorns · Acorns Privacy Policy
This provision establishes the operational framework for Acorns' marketing communications practices and defines the scope of user control over promotional outreach. The distinction between promotional and non-promotional communications creates two separate channels, with only promotional messages subject to user opt-out.
CA-P-004622 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Twilio · Twilio Privacy Notice
The clause distinguishes between marketing communications, from which users may opt out, and transactional or account-related communications, which may continue regardless of opt-out status. This establishes separate pathways for different communication categories.
CA-P-010833 First tracked May 11, 2026 Last seen May 11, 2026 Compare across platforms →
Chase · Chase Privacy Notice
Chase's marketing communications may draw on the combined data profile described elsewhere in the policy, and the opt-out mechanism requires affirmative action by the consumer to stop receiving such communications.
CA-P-008780 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Public.com · Public.com Privacy Policy
The inclusion of partner company promotions means your contact information may be used to market products beyond Public's own services, and you need to actively opt out if you do not want to receive these communications.
CA-P-008305 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Ideogram · Ideogram Privacy Policy
The opt-out mechanism for marketing emails is standard, but users should be aware that opting out of marketing does not affect other data processing practices described in the policy.
CA-P-010013 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
Okta · Okta Privacy Policy
The clause establishes Okta's authorization to conduct direct marketing outreach while establishing an opt-out mechanism. It distinguishes between marketing and transactional communications, permitting the latter to continue regardless of opt-out status, which maintains operational continuity for account-related communications.
CA-P-005535 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Stripe · Stripe Privacy Policy
The clause establishes the operational framework for Stripe's direct marketing practices and specifies the procedures by which users can control receipt of marketing communications. This defines both the company's authorization to conduct marketing outreach and the user's method to manage communication preferences.
CA-P-001882 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
AWS · AWS Privacy Notice
The provision establishes the operational framework for AWS marketing outreach and specifies the procedural method users must follow to cease receipt of such communications. The availability of an opt-out mechanism defines the scope of user control over marketing contact.
CA-P-005592 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Auth0 · Auth0 Privacy Policy
This provision establishes the operational scope of marketing communications the entity may conduct and specifies the procedural mechanism by which users can control receipt of such communications. The inclusion of an opt-out mechanism creates a consent-withdrawal pathway within the privacy framework.
CA-P-006481 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
RunPod · RunPod Privacy Policy
This provision authorizes marketing communications that may include partner offerings, extending the use of personal data beyond RunPod's own services, and provides a stated opt-out mechanism that users can exercise at any time.
CA-P-013132 First tracked May 21, 2026 Last seen May 22, 2026 Compare across platforms →
Brex · Brex Privacy Policy
The clause establishes the operational parameters for Brex's promotional outreach practices and specifies the mechanism by which users can control receipt of marketing communications while preserving Brex's ability to send transactional and relationship-based messages.
CA-P-006063 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
HubSpot · HubSpot Privacy Policy
This provision authorizes use of personal information for third-party promotional communications, which engages CAN-SPAM Act requirements in the US and GDPR consent or legitimate interests analysis for EU users, as well as CASL for Canadian users.
CA-P-012545 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
Steam · Steam Privacy Policy
Marketing emails are sent on a legitimate interest or consent basis depending on jurisdiction, and opting out is an available but non-automatic protection that requires affirmative action from the user.
CA-P-009906 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Shopify · Shopify Privacy Policy
This provision defines the scope of Shopify's authority to use personal information for marketing purposes and establishes the procedural mechanism through which users may exercise control over receipt of such communications. The opt-out structure places the burden of action on the recipient to discontinue communications rather than requiring affirmative consent before initial marketing use.
CA-P-000812 First tracked Apr 3, 2026 Last seen Apr 28, 2026 Compare across platforms →
Airtable · Airtable Privacy Policy
The opt-out mechanism is accessible and clearly described, but the policy does not specify how quickly opt-outs will be processed or whether all marketing channels are covered.
CA-P-008276 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Neon · Neon Privacy Policy
The provision establishes a bifurcated communication framework in which marketing communications are subject to user opt-out, while transactional and service-related messages continue independently of opt-out elections. This distinction creates separate consent streams for different communication categories.
CA-P-004799 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
DocuSign · DocuSign Privacy Statement
Marketing communications from DocuSign's partners extend the reach of your contact data beyond DocuSign itself, and understanding the opt-out mechanism helps you control how your information is used for commercial outreach.
CA-P-001057 First tracked Apr 3, 2026 Last seen May 22, 2026 Compare across platforms →
Palantir · Palantir Privacy Statement
The use of 'legitimate interests' rather than consent as the sole basis for marketing emails is an area of active regulatory debate in the EU, where some supervisory authorities consider direct marketing by email to require prior consent under the ePrivacy Directive regardless of GDPR lawful basis claims.
CA-P-009647 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Cerebras · Cerebras Privacy Policy
Your contact and usage data collected by Cerebras may be used to target you with promotional communications and to profile your behavior for product development, and you have a right to opt out of direct marketing in most jurisdictions.
CA-P-009370 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Twilio · Twilio Privacy Notice
The clause establishes a consent-based framework for marketing communications, with opt-out mechanisms that allow users to control receipt of promotional messages. The provision distinguishes between jurisdictions with opt-in requirements and those without, conditioning marketing communications on applicable legal standards.
CA-P-005600 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Wealthfront · Wealthfront Privacy Policy
This provision delineates the company's authority to conduct marketing outreach and specifies the procedural boundaries of user control over that outreach. The carve-out for administrative communications ensures uninterrupted delivery of transactional and compliance-related notices regardless of marketing preferences.
CA-P-001758 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial