Provision Registry

1160 classified provisions across 277 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Professional free trial Track specific clauses across platforms with provision-level alerts.
Filtering: Data collection × Clear all
medium Data collection
Patreon · Patreon Privacy Policy
The breadth of data collected — including financial and behavioral data — means Patreon holds a detailed profile of both your identity and your activity, which can be used for purposes beyond simply running the platform.
CA-P-000968 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
medium Data collection
Microsoft · Microsoft Privacy Statement (Legacy)
The statement describes a broad range of collected data categories including identifiers, device and configuration data, browsing and search history, location data, voice and audio recordings, and content and communications, which affects users across all Microsoft products and services.
CA-P-010868 First tracked May 12, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Egnyte · Egnyte Privacy Policy
Understanding what data Egnyte collects helps you assess what personal information is being stored and potentially used for marketing, product analytics, or shared with third-party services.
CA-P-009681 First tracked May 10, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Apple App Store · Apple Privacy Policy
The breadth of data categories collected — spanning health metrics, precise location, financial data, and device usage patterns — means Apple builds a detailed profile of users across every aspect of daily life.
CA-P-003227 First tracked Apr 27, 2026 Last seen Apr 27, 2026 Compare across platforms →
medium Data collection
ClickUp · ClickUp Privacy Policy
Knowing exactly what categories of data are collected helps you assess the scope of your privacy exposure and whether the collection is proportionate to the service provided.
CA-P-008110 First tracked May 10, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Upwork · Upwork Privacy Policy
The breadth of data collected, including financial and payment data alongside identity and communications information, means Upwork holds sensitive personal information that could cause harm if improperly disclosed or breached.
CA-P-009822 First tracked May 10, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Microsoft · Microsoft Privacy Statement (Legacy)
The breadth of collection means that simply using Microsoft products, even passively, generates a data profile that combines what you tell Microsoft, what your device reports, and what third parties share about you.
CA-P-008960 First tracked May 10, 2026 Last seen May 11, 2026 Compare across platforms →
medium Data collection
Apple App Store · Apple Privacy Policy
Because Apple products are tightly integrated, data collected across your iPhone, Apple Watch, iCloud, App Store, and other services can be associated together, creating a detailed profile that spans your health, finances, location habits, and device usage.
CA-P-001956 First tracked Apr 4, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Ledger · Ledger Privacy Policy
For cryptocurrency hardware wallet users, the combination of identity data and purchase records effectively signals asset ownership, creating a risk profile that goes beyond typical retail data collection.
CA-P-008444 First tracked May 10, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Cohere · Cohere Privacy Policy
This provision defines the scope of personal data collection and establishes that content submitted through the service is collected alongside standard account identifiers, which is relevant to understanding what data Cohere holds about you.
CA-P-011022 First tracked May 12, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Fiverr · Fiverr Privacy Policy
The breadth of data collected, spanning identity, financial, behavioral, and device-level information, means Fiverr holds a detailed profile of each user that extends well beyond what is needed to process a transaction.
CA-P-000862 First tracked Apr 3, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Stripe · Stripe Privacy Policy
The breadth of data collected — combining financial identifiers, device fingerprints, and behavioral data — creates a detailed profile of individuals that extends well beyond what most consumers would expect from a payment processor.
CA-P-002340 First tracked Apr 9, 2026 Last seen Apr 10, 2026 Compare across platforms →
medium Data collection
Stability AI · Stability AI Privacy Policy
The breadth of data collected means Stability AI builds a detailed profile of users, including financial and behavioral data, which increases the importance of understanding how that data is protected and shared.
CA-P-001622 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
medium Data collection
Atlassian · Atlassian Privacy Policy
Understanding exactly what data is collected helps users assess their privacy exposure and make informed decisions about what information they share with Atlassian services.
CA-P-009239 First tracked May 10, 2026 Last seen May 11, 2026 Compare across platforms →
medium Data collection
Microsoft Azure · Microsoft Privacy
The breadth of collection sources means that even data you did not actively provide to Microsoft may be held and used, including data obtained from third parties, which many users may not anticipate.
CA-P-007941 First tracked May 10, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Duo Security · Duo Privacy
Authentication logs are sensitive because they reveal patterns of behavior, work hours, device usage, and application access, and this data is collected automatically every time you log in using Duo.
CA-P-007436 First tracked May 9, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Auth0 · Auth0 Privacy Policy
The breadth of data collected, spanning identifiers, behavioral signals, and inferred profiles, means Okta is building a fairly detailed picture of users who visit its websites or use its marketing properties, which is used for targeted advertising and product development.
CA-P-009757 First tracked May 10, 2026 Last seen May 12, 2026 Compare across platforms →
BeReal · BeReal Privacy Policy
Uploading your contacts shares the personal information of third parties — your friends and family — who have never consented to BeReal collecting their data.
CA-P-001309 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
Frequent telemetry reporting means TikTok collects near-real-time behavioral data from users, and the transparency of this collection depends entirely on whether it is adequately disclosed in TikTok's privacy policy.
CA-P-002024 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
Netflix · Netflix Privacy Statement
IP addresses and device identifiers can reveal your precise location and are routinely used for advertising profiling and content restriction, and camera access for QR functionality is a particularly sensitive permission that consumers may not realise they have granted.
CA-P-003917 First tracked Apr 28, 2026 Last seen Apr 28, 2026 Compare across platforms →
medium Data collection
DoorDash · DoorDash Privacy Policy
Precise location data reveals detailed patterns about where you live, work, and travel, and this data is shared with delivery partners and potentially advertising partners, creating ongoing privacy exposure beyond the immediate delivery transaction.
CA-P-008517 First tracked May 10, 2026 Last seen May 11, 2026 Compare across platforms →
medium Data collection
Disney+ · Disney Privacy Policy
Precise GPS-level location data is a sensitive data category under multiple privacy laws and can reveal sensitive information about where you live, work, or spend time; knowing when and how to grant or revoke location access matters.
CA-P-009490 First tracked May 10, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Target · Target Privacy Policy
Precise geolocation data is classified as sensitive personal information under several state privacy laws and can reveal sensitive details about your daily movements, routines, and personal activities beyond what is necessary for core retail functions.
CA-P-008955 First tracked May 10, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Cash App · Cash App Privacy Policy
Precise geolocation data is classified as sensitive personal information under the CCPA/CPRA and analogous state laws, and the policy states this data may be collected by default unless the user takes action to disable it at the device level.
CA-P-004581 First tracked May 7, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
PayPal · PayPal Privacy Statement
The statement asserts that precise geolocation data is collected while users are logged into their financial account, meaning location tracking occurs during active financial account sessions even if not explicitly initiated by the user for a specific transaction.
CA-P-010954 First tracked May 12, 2026 Last seen May 12, 2026 Compare across platforms →
DoorDash · DoorDash Privacy Policy
The policy authorizes collection of precise location data during background app activity, meaning location tracking may occur beyond the moments of active app use, and this data is stored and may be shared with delivery and mapping service providers.
CA-P-010983 First tracked May 12, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Hulu · Hulu Privacy Policy
Precise geolocation is considered sensitive personal information under California's CPRA and can reveal home address, daily movements, and other private behavioral patterns; limiting location sharing reduces the depth of the data profile Disney can build about you.
CA-P-008172 First tracked May 10, 2026 Last seen May 12, 2026 Compare across platforms →
medium Data collection
Samsung · Samsung Privacy Policy
Precise geolocation is classified as sensitive personal information under CPRA and multiple other state laws, and its use for advertising — in addition to core service functionality — may exceed consumer expectations and require opt-in consent in some states.
CA-P-005049 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
medium Data collection
Cash App · Cash App Privacy Policy
Precise geolocation data is classified as sensitive personal information under several state privacy laws, requires explicit consent or opt-in in some jurisdictions, and can reveal sensitive details about a person's movements, relationships, health visits, or religious practices.
CA-P-000614 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
medium Data collection
Grubhub · Grubhub Privacy Policy
Precise geolocation is classified as sensitive personal information under several state privacy laws, and its collection for purposes beyond core delivery, including analytics, may require affirmative opt-in consent or at minimum an opt-out mechanism in certain jurisdictions.
CA-P-008863 First tracked May 10, 2026 Last seen May 12, 2026 Compare across platforms →

Professional Governance Intelligence

Monitor specific governance provisions across platforms.

Professional includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Professional free trial