Provision Registry

567 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
Filtering: Privacy rights × Low × Clear all
Anthropic · Anthropic Privacy Policy
A change in corporate ownership could result in your personal data, including your Claude conversation history, being controlled by a new entity with potentially different privacy practices.
CA-P-007413 First tracked May 9, 2026 Last seen May 22, 2026 Compare across platforms →
Ford · Ford Privacy Policy
When you click links to dealer websites, financing partners, or connected app integrations from Ford's platforms, your data practices are governed by those third parties' policies rather than Ford's.
CA-P-008648 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
Duolingo · Duolingo Privacy Policy
The policy states that third-party login integrations provide Duolingo with access to data held by platforms such as Google, Facebook, and Apple, which may include data beyond what a user would provide directly during registration.
CA-P-011285 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
Amplitude · Amplitude Privacy Notice
This provision establishes Amplitude's sub-processor and vendor data sharing framework and the contractual limitation imposed on third-party service providers. The inclusion of data enrichment services as a permitted category may create downstream data use considerations relevant to GDPR's purpose limitation principle and CCPA's service provider requirements.
CA-P-012277 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
Tinder · Tinder Privacy Policy
Linking third-party accounts creates a data flow from those platforms to Tinder that users may not fully anticipate, potentially importing more information than users intend to share with a dating app.
CA-P-010160 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Instacart · Instacart Privacy Policy
When Instacart links to retailer websites, partner sites, or other external platforms, the privacy practices of those sites are governed by their own policies rather than by Instacart's, meaning data collected at those destinations is outside the scope of this policy.
CA-P-011278 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
Zelle · Zelle Privacy Policy
Clicking links from the Zelle website to third-party sites means you leave the protection of this privacy notice, and those sites may have different, potentially less protective data practices.
CA-P-008789 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Anyscale · Anyscale Privacy Policy
This disclaimer means Anyscale takes no responsibility for data practices on linked third-party sites, so users should review those sites' privacy policies separately before sharing any personal information.
CA-P-010124 First tracked May 11, 2026 Last seen May 20, 2026 Compare across platforms →
Microsoft · Responsible AI Report 2025
Transparency and explainability commitments describe what information Microsoft states it will provide about AI system behavior, which is relevant to consumers and enterprises seeking to understand or challenge AI-generated outputs.
CA-P-011672 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
Uber · Uber Privacy Notice
This provision identifies the operational data-sharing structure under which personal data including home or work addresses, order preferences, and identity information passes from Uber to independent contractor drivers and third-party merchant partners who operate outside Uber's direct employment or data governance structure.
CA-P-012310 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
23andMe · 23andMe Privacy Statement
Given the sensitivity of genetic and health data held in 23andMe accounts, the policy states that two-factor authentication is applied as a baseline security control, which reduces the risk of unauthorized account access.
CA-P-011720 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
Anyscale · Anyscale Privacy Policy
This provision establishes that material changes to Anyscale's data processing disclosures may take effect upon posting without a guaranteed direct notification mechanism. Under GDPR, material changes to processing activities may require re-notification to data subjects and, where consent is the legal basis, renewed consent.
CA-P-012968 First tracked May 21, 2026 Last seen May 22, 2026 Compare across platforms →
OpenAI · Privacy Policy (ROW)
The policy authorizes unrestricted use and sharing of aggregated or de-identified data; the practical privacy implications depend on the robustness of the de-identification process, which the policy does not detail.
CA-P-011114 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
Brex · Brex Privacy Policy
Using financial behavior and usage data for marketing and analytics purposes means your transaction patterns and platform activity may influence commercial communications you receive from Brex and potentially its partners.
CA-P-009179 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
Zendesk · Zendesk Privacy Policy
This provision establishes the marketing communication opt-out mechanism and clarifies that transactional communications continue after opt-out, which is relevant for CAN-SPAM compliance in the US and ePrivacy Directive requirements in the EU for email marketing.
CA-P-012595 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
Acorns · Acorns Privacy Policy
The authorization to use personal information for promotional communications and personalization, in the context of a financial services platform, engages both GLBA's marketing restrictions and CCPA's provisions on using data for targeted advertising, and may interact with CAN-SPAM and TCPA requirements depending on the communication channel used.
CA-P-012426 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
DeepL · DeepL Privacy Policy
When your data is shared with subprocessors, the security and privacy practices of those third parties become relevant to how well your data is protected, even if they are contractually bound.
CA-P-007207 First tracked May 9, 2026 Last seen May 20, 2026 Compare across platforms →
DeepL · DeepL Terms and Conditions
This provision directly addresses AI training data practices for paid subscribers, establishing that submitted content is excluded from model training use. This distinction is operationally significant for organizations submitting confidential, proprietary, or personally identifiable content through the service.
CA-P-012618 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
Ring · Ring Privacy Notice
This provision establishes that Ring offers user-facing controls over video and data access, which is relevant to both privacy protection and the exercise of data subject rights under laws like GDPR and CCPA.
CA-P-009812 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
YouTube Ads · Google Privacy Policy
This provision establishes the operational mechanisms for data portability and erasure rights, which are required under GDPR and CCPA/CPRA; the availability of Google Takeout for data export and account deletion through Google Account settings are the primary operational tools disclosed.
CA-P-012315 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
Uber · Uber Privacy Notice
This provision establishes the operational mechanism through which users in GDPR, CCPA, CPRA, and other privacy law jurisdictions can exercise statutory data subject rights, with the scope of rights honored dependent on the user's jurisdiction and applicable legal framework.
CA-P-012311 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
YouTube Ads · Google Privacy Policy
Having the ability to delete or limit data collection is an important consumer right; understanding that these controls exist and how to use them is practically significant for managing your advertising profile.
CA-P-002688 First tracked Apr 18, 2026 Last seen May 20, 2026 Compare across platforms →
GitHub · GitHub Privacy Statement
These provisions establish operational procedures for GitHub to respond to user requests regarding personal data management and portability. The clause creates enforceable mechanisms for data access, correction, deletion, and transfer that define GitHub's data handling obligations and establish user-initiated data governance workflows.
CA-P-001347 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Stability AI · Stability AI Privacy Policy
The clause conditions the availability of these data subject rights on the user's jurisdiction, meaning the scope of exercisable rights depends on whether the user is located in or covered by the designated regulatory frameworks rather than being uniformly available to all users.
CA-P-001625 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
DocuSign · DocuSign Privacy Statement
The clause operationalizes data subject rights required under privacy regulation, establishing the mechanism through which users exercise control over personal information accuracy and portability. It creates a procedural framework for users to initiate requests and for the company to respond to correction, deletion, and export requests.
CA-P-001055 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
low Privacy rights
Ticketmaster · Ticketmaster Privacy Policy
Understanding what data rights you have and how to exercise them is essential for managing your privacy, and Ticketmaster commits to providing access mechanisms, though the specific scope of rights varies depending on your country of residence.
CA-P-009655 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Telegram · Telegram Privacy Policy
These rights are legally enforceable under GDPR for EEA users and equivalent frameworks elsewhere, giving users meaningful control over their data held by Telegram.
CA-P-002916 First tracked Apr 18, 2026 Last seen May 20, 2026 Compare across platforms →
Oura · Oura Privacy Policy
This provision establishes the operational mechanism through which users may exercise GDPR, UK GDPR, and CCPA/CPRA data subject rights, centralizing all requests through a single email address. Compliance teams should verify that response timelines meet applicable statutory deadlines (30 days under GDPR, 45 days under CCPA) and that identity verification procedures do not create unreasonable barriers to access.
CA-P-012697 First tracked May 21, 2026 Last seen May 22, 2026 Compare across platforms →
Waze · Waze Privacy Policy
This provision establishes that user-contributed map data and incident reports are treated as community data that may be publicly visible and commercially used, meaning contributions are not private communications but shared content subject to broad use rights.
CA-P-010886 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
MetaMask · MetaMask Privacy Policy
This is the primary practical privacy control available to MetaMask users; exercising it can materially reduce the amount of identity-linked financial data collected by Consensys, but it requires technical knowledge to implement correctly.
CA-P-007288 First tracked May 9, 2026 Last seen May 22, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial