Provision Registry

427 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
Filtering: Data sharing × High × Clear all
Equifax · Equifax Privacy Policy
The clause establishes the scope of third-party recipients who may receive personal information under the agreement. It defines the operational categories of entities with authorized access, including those engaged in analytics and advertising functions.
CA-P-006950 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Acorns · Acorns Privacy Policy
The clause establishes the operational mechanism by which Acorns transfers user transaction and account data to external commercial partners as part of its Earn program functionality. This data sharing is conditional on user activation of specific partner offers rather than automatic, defining the boundaries of third-party access to user information.
CA-P-004617 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Steam · Steam Privacy Policy
The provision establishes the operational basis for Steam's data collection practices and defines the scope of information the service captures during normal operation. This authorization extends to both user activity metrics and technical device data necessary for service delivery and platform functionality.
CA-P-006581 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Uber · Uber Privacy Notice
The provision establishes the operational framework under which Uber transfers driver and delivery personnel data to external parties in the insurance and fleet management ecosystem. This data sharing structure supports insurance underwriting and claims administration processes while enabling fleet operators to access information about drivers operating under their fleet arrangements.
CA-P-002470 First tracked Apr 9, 2026 Last seen Apr 10, 2026 Compare across platforms →
Uber · Uber Privacy Notice
This provision establishes the operational mechanism by which Uber transmits user data to advertising technology platforms that facilitate targeted advertising campaigns. The clause specifies both the categories of data shared and the recipients, creating defined data flows between Uber and third-party ad services.
CA-P-000762 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Mercury · Mercury Privacy Policy
The provision establishes the operational framework for data distribution necessary to Mercury's service delivery model, whereby core banking functions depend on controlled data sharing with specified categories of external service providers rather than retention within Mercury's systems alone.
CA-P-006599 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Ancestry · Ancestry Privacy Statement
Opting into research means your genetic information leaves Ancestry's systems and goes to third parties, even if under contract. Understanding what research purposes are covered and how partners are vetted is important for consumers sharing sensitive genetic data.
CA-P-009743 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
Khan Academy · Khan Academy Privacy Policy
The clause establishes the scope of data sharing permitted under the privacy framework, identifying categories of recipients and purposes for which user information may be disclosed to external entities without separate user consent.
CA-P-002874 First tracked Apr 18, 2026 Last seen Apr 18, 2026 Compare across platforms →
Walmart · Walmart Privacy Notice
The disclosure that advertising and analytics partners may use shared data for their own purposes, rather than solely on Walmart's behalf, is operationally significant because it means data shared under this provision may not be restricted to service provider limitations under state privacy laws, and may instead qualify as a sale or sharing of personal information triggering opt-out rights.
CA-P-011076 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
Spotify · Spotify Privacy Policy
This clause establishes the operational mechanism by which third-party data inputs inform Spotify's ad targeting system. It clarifies that advertising partners may provide external signals about user interests, which Spotify incorporates into its ad selection and delivery process.
CA-P-002611 First tracked Apr 9, 2026 Last seen Apr 10, 2026 Compare across platforms →
Fitbit · Fitbit Privacy Policy
Once your health data leaves Fitbit and enters a third-party app's systems, it is governed by that app's privacy policy, which may permit uses you did not anticipate, including sale of your health data to data brokers.
CA-P-009040 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Plaid · Plaid Terms of Use
The clause establishes the scope of data recipients beyond the user and Plaid, including both user-directed third parties and Plaid's service provider network. This allocation of data sharing authority is foundational to Plaid's operational model as a financial data aggregation and connectivity platform.
CA-P-003485 First tracked Apr 27, 2026 Last seen Apr 27, 2026 Compare across platforms →
high Data sharing
Netflix · Netflix Privacy Statement
The clause establishes the scope of permissible third-party disclosures under Netflix's data handling practices, defining the categories of recipients rather than restricting disclosure to a narrow set of entities. This establishes the operational framework for how personal information flows within Netflix's business ecosystem.
CA-P-002623 First tracked Apr 9, 2026 Last seen Apr 10, 2026 Compare across platforms →
Uber · Uber Privacy Notice
The clause establishes the operational framework for cross-platform data sharing and audience analytics. It permits Uber to delegate data processing functions to external vendors who aggregate user behavior across multiple data sources to facilitate advertising operations.
CA-P-002307 First tracked Apr 9, 2026 Last seen Apr 9, 2026 Compare across platforms →
Stash · Stash Privacy Policy
The provision establishes the operational scope of third-party data sharing by permitting disclosure to specific categories of partners (market research firms and marketing partners) for defined purposes (analysis, aggregation, ad optimization) while maintaining a contractual prohibition against selling Personal Information.
CA-P-000528 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Acorns · Acorns Privacy Policy
Sharing personal and financial data with marketing and advertising networks goes beyond what many consumers expect from a financial services app and may constitute a sale or sharing of personal information under the CPRA, triggering opt-out rights for California residents.
CA-P-007362 First tracked May 9, 2026 Last seen May 20, 2026 Compare across platforms →
Uber · Uber Privacy Notice
The clause establishes a data sharing framework that permits transfer of driver personal information to multiple external platforms for commercial purposes beyond Uber's direct service delivery. This operationalizes Uber's data monetization model through partnered advertising and analytics functions.
CA-P-003993 First tracked Apr 28, 2026 Last seen Apr 28, 2026 Compare across platforms →
Ledger · Ledger Privacy Policy
The clause establishes the operational scope of data recipients beyond Ledger's direct control, affecting how user information flows through the company's business ecosystem and defining which external entities have access to usage patterns and account information.
CA-P-001464 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
Webull · Webull Privacy Policy
This provision establishes the operational scope of data sharing practices and designates third-party recipients of user information. The availability of an opt-out mechanism creates a conditional authorization structure where data sharing occurs unless the user exercises the specified rights.
CA-P-003960 First tracked Apr 28, 2026 Last seen Apr 28, 2026 Compare across platforms →
Apple Intelligence · Apple Private Cloud Compute Security Guide
Requests forwarded to third-party AI providers such as ChatGPT are not subject to PCC's privacy architecture, meaning the stateless computation, no privileged access, and non-targetability guarantees described elsewhere in this guide do not apply to those interactions.
CA-P-011938 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
AWS Bedrock · AWS Service Terms
The clause creates a bifurcated governance structure in which data processing for third-party models falls outside AWS's direct control and contractual scope, requiring users to separately evaluate and comply with each model provider's distinct terms, privacy policies, and data handling practices.
CA-P-008311 First tracked May 10, 2026 Last seen May 11, 2026 Compare across platforms →
Pinterest · Pinterest Privacy Policy
This provision establishes the operational mechanism through which Pinterest receives user data from external sources beyond direct user interaction with the Pinterest platform. The clause specifies that third-party platforms are authorized to share user information with Pinterest as part of the account creation and login workflow.
CA-P-000693 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Grindr · Grindr Privacy Policy
The provision establishes the operational scope of data sharing across the Grindr service ecosystem. By authorizing both indirect sharing with service providers and direct collection by third-party partners, the clause structures how user data flows through multiple entities involved in platform delivery and monetization.
CA-P-001411 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Mistral AI · Mistral AI Additional Product Terms
The agreement authorizes Customer Data to be transmitted to third-party services upon customer configuration, while fully disclaiming Mistral AI's liability for any resulting data loss, which shifts significant operational and legal risk to the customer.
CA-P-010586 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
TikTok · TikTok Terms of Service
This provision establishes the operational framework for third-party data access necessary to deliver the platform's commercial and functional features. It defines the categories of service providers and business functions that trigger authorized data sharing relationships.
CA-P-002015 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
Checkout.com · Checkout.com Privacy
The provision establishes the operational scope of data sharing across multiple categories of recipients, including both commercial service providers and government/regulatory entities. It creates a framework where data transfers occur for fraud prevention, regulatory compliance, and business restructuring purposes, with explicit authorization for downstream decision-making by fraud prevention agencies.
CA-P-006971 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Groq · Groq Privacy Policy
The clause establishes the operational framework under which user data flows to external advertising and analytics entities, enabling targeted advertising campaigns across owned and third-party digital properties in accordance with stated legal requirements.
CA-P-004212 First tracked Apr 30, 2026 Last seen Apr 30, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
The provision operationalizes TikTok's technical infrastructure by specifying how consent mechanisms function relative to third-party data collection tools. This establishes the procedural basis for third-party vendor engagement in user data processing.
CA-P-000308 First tracked Apr 3, 2026 Last seen Apr 3, 2026 Compare across platforms →
high Data sharing
OpenAI · OpenAI Service Terms
This provision authorizes OpenAI to use the content of your interactions, including prompts and responses, as training data for AI model development, subject to an opt-out that users must actively exercise.
CA-P-010740 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
Mistral AI · Mistral AI Commercial Terms
The license granted for training purposes under the listed exceptions is perpetual and irrevocable, meaning that once data falls within one of these categories, Mistral AI's right to use it for training cannot be withdrawn even if the Customer later terminates the agreement.
CA-P-010619 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial