Replit
· Replit Privacy Policy
This provision operationalizes legal obligations under CCPA and GDPR by establishing the specific mechanisms through which users can exercise statutory data subject rights. The clause clarifies that Replit recognizes and will facilitate these rights for qualifying jurisdictions, affecting how the company processes and responds to user data requests.
This provision operationalizes Zendesk's compliance obligations under California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) by establishing the specific data subject rights that must be honored upon resident request, establishing the operational framework for data access, deletion, and opt-out mechanisms.
Ledger
· Ledger Privacy Policy
This provision operationalizes Ledger's legal obligations under California privacy law by specifying how the company must respond to resident requests and what categories of data control rights apply. The clause establishes procedural requirements for request submission, verification, and response timelines.
The CCPA opt-out right for data sharing is particularly significant because HubSpot shares data with advertising partners for cross-context behavioral advertising, which qualifies as regulated sharing under CPRA even without a monetary sale.
Writer
· Writer Privacy Policy
This provision operationalizes Writer's compliance obligations under CCPA by explicitly recognizing the enumerated consumer rights that California law grants. The clause establishes the framework under which California residents may request disclosure, deletion, correction, and opt-out actions regarding their personal information.
The clause conditions the availability of state privacy rights on whether federal financial privacy laws govern the personal information at issue. This creates a jurisdictional framework in which Robinhood's obligations are determined by whether applicable data is subject to GLBA or similar federal regimes rather than state consumer privacy statutes.
This provision operationalizes CCPA compliance obligations by specifying which statutory consumer rights ClickUp recognizes and the procedural mechanisms (privacy request form and website opt-out link) through which California residents may exercise those rights. The clause establishes that ClickUp acknowledges both affirmative rights (access, deletion, correction) and the ability to restrict data practices (opt-out of sale or sharing).
Square
· Square Privacy Notice
The provision operationalizes Square's legal obligations under California's consumer privacy statutes by explicitly acknowledging and describing the specific consumer rights that California residents may exercise regarding their personal information in Square's custody. This establishes the framework within which Square must process consumer requests and govern data handling practices.
This provision implements statutory requirements under the California Consumer Privacy Act and California Privacy Rights Act, establishing specific data subject rights that Verizon must honor upon valid consumer request. The clause creates operational obligations for the company to maintain processes and systems for data access, deletion, correction, and opt-out mechanisms.
This provision implements California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) statutory requirements, establishing the operational framework through which the entity must process consumer rights requests and maintain compliance with state privacy law mandates.
The provision operationalizes California statutory obligations by establishing the procedural framework through which Equifax receives and processes consumer rights requests. It designates specific submission mechanisms and identifies the categories of rights available to California residents under applicable state law.
This provision operationalizes McDonald's compliance obligations under the California Consumer Privacy Act and California Privacy Rights Act by establishing the procedural mechanism through which eligible residents can exercise statutory rights and by specifying that McDonald's will not discriminate in service, pricing, or quality based on rights exercise.
Yelp
· Yelp Privacy Policy
The provision establishes Yelp's baseline data sale practice and creates a procedural requirement to notify users and provide opt-out mechanisms if the company's data sale practices change. It also references supplementary state-specific privacy disclosures that define additional consumer rights and company obligations under applicable state law.
The opt-out of sale or sharing right is particularly significant because Vercel acknowledges sharing user data with advertising partners, and California residents can specifically prevent this by submitting a request.
Notion
· Notion Privacy Policy
This clause operationalizes California statutory rights under CCPA/CPRA by specifying the submission mechanism and contact points through which residents may direct the entity to cease sale or sharing practices. The provision establishes the procedural framework for exercising a legally mandated consumer control.
This provision operationalizes statutory California privacy obligations within MetaMask's contractual framework, establishing the procedural and substantive mechanisms through which California residents may exercise data access, disclosure, and opt-out rights, and ensuring non-discriminatory treatment in service access and pricing.
This provision discloses that advertising data sharing may meet the CCPA definition of sale and establishes an operative opt-out right for California residents, while simultaneously asserting that the company does not sell data in the traditional sense, a qualification that may affect the scope of the opt-out as understood by consumers.
The clause establishes the operational scope of data sharing practices and designates the mechanism through which users can modify those practices. It clarifies that sharing for advertising purposes is authorized under the terms unless the user exercises the opt-out function.
This provision describes the opt-out mechanism available to California residents under CCPA as amended by CPRA. The operational availability and functionality of the designated opt-out link is a compliance requirement subject to California AG and CPPA enforcement.
The policy distinguishes between selling and sharing personal data under CCPA, acknowledging that advertising cookie sharing may qualify as sharing under CPRA, and provides California residents with a specific opt-out right.
OpenAI
· OpenAI Data Processing Addendum
This provision establishes OpenAI as a service provider rather than a third party under CCPA/CPRA, which is a legally significant distinction that affects how the business customer can characterize its data sharing in its own privacy disclosures and whether it incurs CCPA liability for data flows to OpenAI.
The provision establishes Uniswap's operational position regarding CCPA compliance by declaring non-participation in personal information sales under the statute's definition. This clarification affects the applicability of CCPA data sale rights and opt-out mechanisms to users subject to California law.
This provision grants California residents a specific statutory right to stop their data from being shared for behavioral advertising, and Mixpanel acknowledges that its advertising-related data sharing may qualify as 'sharing' under CCPA/CPRA.
Zoom
· Zoom Privacy Statement
This provision operationalizes Zoom's compliance with California Consumer Privacy Act requirements by establishing a specific procedural pathway for California residents to exercise statutory opt-out rights regarding data sale and sharing practices.
Target
· Target Terms and Conditions
California's CCPA gives residents legally enforceable rights to access, delete, and opt out of the sale of their personal data; Target's platform infrastructure includes CCPA-specific API endpoints suggesting these rights are operationally implemented, but consumers must actively exercise them.
Target
· Target Terms and Conditions
The clause establishes that Target's terms incorporate CCPA compliance obligations and makes the Privacy Policy the operative document governing how California residents' data rights are defined and executed under applicable state law.
The policy states that California residents can exercise rights to know, delete, and opt out of sale; the one-month response commitment is explicitly stated and provides a concrete timeline for users who submit requests.
The clause creates a legal framework requiring the entity to implement processes and mechanisms to honor consumer requests for data access, deletion, correction, and opt-out elections. This establishes operational obligations to maintain systems for processing and responding to statutory privacy requests from California residents.
The provision operationalizes California Consumer Privacy Act (CCPA) statutory rights by designating a specific contact mechanism and processing timeline, and establishes an age-based protection standard for minors that exceeds the CCPA's 13-year threshold.
Chime
· Chime Privacy Policy
California residents have stronger privacy protections than most other US users, including the right to stop Chime from sharing your data with advertising partners, which is directly relevant given the breadth of advertising technology integrations the company uses.