Provision registry

Every clause, classified and comparable

22778 classified provisions across 312 platforms, each clause typed by severity and platform. Browse, filter, and compare. Updated as policies change.

Stay ahead of the changes

Track specific clauses across platforms

Get provision-level alerts and cross-platform comparisons the moment a clause changes.

Filtering: High × Clear all
OpenAI · OpenAI Enterprise Privacy
The clause establishes that model training from business data is not an automatic practice, meaning customers must take affirmative action for such use to occur.
CA-P-062711 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Activision · Activision Privacy Policy
Default opt-in means users are subject to targeted advertising unless they take affirmative action to opt out, shifting the burden of choice onto the user.
CA-P-040560 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
high Enforcement actions
Shopify · Shopify Acceptable Use Policy
This establishes a hierarchy of enforcement responses, meaning account-level action such as suspension is constrained to a last resort when appropriate rather than being a default response.
CA-P-025553 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Windsurf · Windsurf Security & Data Handling
This clause establishes that model training on customer data is an active default practice, meaning customers who do not take affirmative steps to opt out are subject to this use of their data.
CA-P-061031 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
HubSpot · HubSpot Sub-Processors
The distinction determines which sub-processors have access to Customer Data without any affirmative customer action, and which require the customer to deliberately enable them.
CA-P-067009 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Strava · Strava Privacy Policy
The default setting makes personal activity data publicly visible and search-engine-indexable without any affirmative action by the user, placing the burden on users to change settings if they want more privacy.
CA-P-037234 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Meta · Meta Frontier AI Framework
The metric Meta uses to set risk thresholds is the degree to which its models facilitate threat scenarios, meaning model behavior directly determines where risk limits are set.
CA-P-066383 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Riot Games · Riot Games Terms of Service
Participating in any action which we reasonably believe does or may defraud any other player, including by scamming or social engineering
CA-P-038559 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Coursera · Coursera Terms of Use
For Degree, MasterTrack, and University Certificate Programs, consequences are at the sole discretion of the content provider.
CA-P-029534 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Cerebras · Cerebras Privacy Policy
Once data is deidentified or aggregated, Cerebras places no restrictions on its use or disclosure, including commercial sharing with advertisers.
CA-P-045739 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
23andMe · 23andMe Privacy Statement
The clause establishes that research participation results in the user's deidentified data being combined into a collective dataset, which has implications for how individual data contributes to broader research outputs.
CA-P-026186 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Waze · Waze Privacy Policy
Although data is described as de-identified, users' behavioral and location-derived metadata flows automatically to other Google products, broadening the use of data beyond Waze itself.
CA-P-039913 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Replit · Replit Privacy Policy
De-identified data falls entirely outside the Privacy Policy's protections, and Replit's use and sharing of it is unrestricted in its discretion, removing any policy-based recourse for users.
CA-P-045340 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
General Motors · GM Privacy Statement
Data that General Motors has de-identified falls entirely outside the Privacy Statement's use restrictions, allowing General Motors broad latitude to use and share it.
CA-P-052433 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Squarespace · Squarespace Privacy Policy
It removes all Privacy Policy-based protections from de-identified data, meaning Squarespace retains broad freedom to monetize or distribute such data.
CA-P-052943 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Ancestry · Ancestry Privacy Statement
If you have agreed to our Informed Consent to Research, we will not be able to remove your de-identified Genetic Information from active or completed research projects, but we will not use it for any new research projects.
CA-P-034401 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Ancestry · Ancestry Privacy Statement
We share de-identified Genetic Information with research partners only when you provide us with your express consent to do so through our Informed Consent to Research.
CA-P-034373 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
high Legal jurisdiction
NVIDIA NIM · NVIDIA NIM Terms of Use
The Agreement will be governed in all respects by the laws of the United States and the laws of the State of Delaware, without regard to conflict of laws principles or the United Nations Convention on Contracts for the International …
CA-P-062187 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
high Legal jurisdiction
RunPod · RunPod Terms of Service
Users in other states must litigate in New Jersey under Delaware law, which may create practical and financial barriers to pursuing claims against RunPod.
CA-P-052110 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
high Legal jurisdiction
Zelle · Zelle Terms of Service
Designating Delaware law as governing law determines which state's statutes and case law apply to any dispute arising under the Terms.
CA-P-071328 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Uber · Uber Terms of Use
Only an arbitrator, and not any federal, state, or local court or agency, shall have exclusive authority to resolve any dispute arising out of or relating to the interpretation, applicability, enforceability, or formation of this Arbitration Agreement...
CA-P-041389 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Binance.US · Binance.US Terms of Use
By delegating interpretation of the arbitration provision to an arbitrator, Binance.US removes courts from the threshold question of whether and how arbitration applies, reinforcing the scope of the arbitration requirement.
CA-P-021087 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Plaid · Plaid Terms of Use
At the Disclosing Party's request upon expiration or termination of these Terms or otherwise, the Receiving Party will delete all of the Disclosing Party's Confidential Information in its possession
CA-P-051460 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
OpenAI · OpenAI Enterprise Privacy
Any deleted conversations are removed from our systems within 30 days, unless we are legally required to retain them.
CA-P-062722 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Robinhood · Robinhood Privacy Policy
If we become aware that a child under 13 has provided us with personal information for any reason other than being added as an authorized user...we will take reasonable steps to delete that information.
CA-P-020100 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Ford · Ford Privacy Policy
Deleting the Ford/Lincoln app from your device without also performing a MASTER/FACTORY RESET will not disable data sharing from the vehicle.
CA-P-077220 First tracked Jul 19, 2026 Last seen Jul 19, 2026 Compare across platforms →
Google Gemini · Gemini Apps Privacy Notice
Deleting data in Gemini Apps Activity doesn't delete data that other apps have received from Gemini.
CA-P-038267 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Google Gemini · Gemini Apps Privacy Notice
Turning off Keep Activity or deleting Gemini Apps activity doesn't delete data in other Google services.
CA-P-038268 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Ticketmaster · Ticketmaster Privacy Policy
The right to delete or erase your account cannot be made where you have a ticket or transaction for a future event even if you have printed or received these tickets
CA-P-038241 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Indeed · Indeed Privacy Policy (Superseded Capture)
Deletion of your Personal Data does not affect messages we process on behalf of others in connection with their use of our site, and they may continue to have access to all messages sent to or received from you.
CA-P-070925 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Stay ahead of the changes

Governance intelligence across platforms

Monitor specific governance provisions with regulatory mapping and audit-ready analysis.