Microsoft
· Microsoft Privacy Statement (Legacy)
This distinction allocates data governance responsibility between Microsoft and its customers. In enterprise contexts, customers retain primary control over data policies and compliance obligations, while in consumer contexts, Microsoft's stated privacy practices establish the governing framework for personal data handling.
The clause establishes the scope of data collection practices integral to service operation and product analytics. The granular categories enumerated—from user interaction patterns to device specifications—define the technical and behavioral data streams the service captures during normal use.
Runway
· Runway Privacy Policy
The provision establishes the institutional framework for Runway's data processing authority under EEA and UK law by declaring controller status and transparency obligations. It identifies the specific legal grounds Runway asserts justify its collection, use, and disclosure of personal data without separate user consent requirements.
Adobe
· Adobe Terms of Use
The clause establishes a boundary on permissible AI training applications while creating a distinct authorization pathway for Adobe's own AI development activities using licensed Stock content. This delineates operational restrictions on user-submitted materials versus Adobe's internal AI capabilities.
The clause establishes a data collection and sharing framework with third-party suppliers for purposes of service personalization. It clarifies that geodemographic profiling occurs through partner relationships rather than direct collection alone, and that user choice mechanisms apply to this practice.
The clause establishes the operational mechanism through which Pinterest generates behavioral inferences at scale, enabling the service to construct granular audience segments for content ranking and advertising targeting without requiring explicit user categorization.
The clause establishes the operational basis for Snapchat's inference and profiling capabilities, permitting the derivation of predictive user attributes from both first-party behavioral data and third-party information sources to inform advertising targeting and content personalization.
This clause establishes the operational basis for LinkedIn to process user data through machine learning systems and algorithmic inference. It defines the scope of permitted data uses beyond the primary service delivery, encompassing AI model development and personalization infrastructure.
Calm
· Calm Privacy Policy
The provision establishes that Calm engages in data inference practices beyond directly provided information, enabling the company to supplement its user profile data with derived demographic attributes for operational and analytics purposes.
In-store data collection through cameras and other technologies may capture biometric or behavioral data beyond what customers expect from a typical retail transaction, and the use of such data for marketing purposes creates disclosure and consent obligations under state privacy laws including Illinois BIPA and California's CPRA.
The intellectual property license structure determines the scope of 23andMe's authorization to process, store, and derive insights from genetic data submitted through the service. This framing establishes the operational basis for data utilization across the company's service and research functions.
This broad intellectual property license enables Shopify to operationalize user-generated content across its platform infrastructure, including reproduction and derivative work creation, without separate compensation or per-use authorization. The transferability and sub-licensability provisions permit Shopify to extend these rights to third parties and successors in interest.
Square
· Square Terms of Service
The provision establishes Square's operational rights to process and utilize user content across service functions and corporate activities without additional licensing negotiations or royalty obligations. This broad authorization supports Square's ability to maintain, improve, and operate the services as described in the agreement.
The clause establishes Public.com's authorization to use user content across multiple formats and channels without compensation, including for advertising and marketing activities. This operational scope extends to content sharing among platform users and creation of derivative works from submitted materials.
This clause establishes the operational foundation for Dropbox's service delivery by granting the technical permissions required to perform hosting, data processing, and feature generation. Without this license, Dropbox could not execute the primary functions users rely on, including backup operations and content sharing.
Microsoft
· Microsoft Privacy Statement (Legacy)
The clause establishes the operational basis for Microsoft's interest-based advertising system, specifying the data categories used for ad targeting and the mechanism through which users can modify their advertising preferences. This defines the scope of data practices related to advertising delivery within the Microsoft service ecosystem.
Third-party tracking technologies operated by analytics and advertising partners collect behavioral data independently and may combine it with information they hold about you from other sources, extending the data profile beyond what Grubhub alone controls.
The joint controller arrangement allocates data protection responsibilities between Peacock and Facebook Ireland under GDPR Article 26, requiring both entities to document their respective compliance obligations. This structure means users must reference Facebook Ireland's separate privacy documentation to understand how that entity processes data and how to exercise rights such as access, correction, or deletion.
Ledger
· Ledger Privacy Policy
Legitimate interest as a legal basis permits data processing without requiring explicit user consent, provided the organization's interests do not override privacy protections. This basis enables Ledger to conduct certain processing activities—such as fraud prevention, service improvement, or analytics—through a balancing test rather than through affirmative opt-in mechanisms.
Adobe
· Adobe Privacy Policy
This clause establishes the legal framework under which Adobe processes content data without explicit user consent, relying instead on a balancing test between Adobe's business interests and user privacy expectations. The provision operationalizes a mechanism for users to challenge specific processing activities while preserving Adobe's ability to continue processing where business or legal necessity applies.
The legitimate interests basis expands the permissible scope of data processing beyond consent-dependent activities, enabling the entity to conduct processing necessary for service operation, fraud prevention, security, analytics, and business development without obtaining affirmative consent. This provision establishes the procedural framework through which the entity assesses and implements data uses that fall outside explicit consent requirements.
This provision establishes the operational scope of automated content management on the platform. It specifies that algorithmic systems operate on user-derived training data, which means user information flows into machine learning infrastructure as part of core platform functionality.
Cookie deployment enables Activision to implement personalized content delivery and marketing optimization at scale. This mechanism supports the operational infrastructure for targeted advertising and experience customization across the platform.
Square
· Square Privacy Notice
The clause establishes the operational basis for Square's use of transactional and behavioral data for marketing purposes, while specifying that users retain the ability to restrict this use through an opt-out process.
Oura
· Oura Privacy Policy
This provision establishes the operational framework for Oura's advertising infrastructure, defining how personal data flows to support audience segmentation and marketing delivery across the company and partner networks.
The provision establishes the operational basis for Coinbase's direct marketing practices and cross-platform advertising activities, structured within stated regulatory compliance obligations. This defines the scope of permissible marketing data use under the agreement.
This clause establishes the operational scope of FanDuel's marketing communication practices and identifies the channels and content categories the company is authorized to deploy. It specifies that marketing authority extends to both first-party and third-party offerings, which defines the breadth of promotional activities permitted under the privacy framework.
This clause establishes the operational scope and channels through which the entity may conduct marketing communications. The provision includes a mechanism for users to adjust their communication preferences, which defines the administrative process for managing the frequency and channels of such outreach.
The provision establishes the operational framework for account access and platform integration, defining how advertisers authenticate and obtain authorization to use TikTok's advertising infrastructure. This mechanism determines the scope of administrative capabilities available to account holders across the integrated toolset.
The clause operationalizes the definition of 'ad-free' service by carving out specific exceptions where advertisements and promotional content may appear despite the no-ads tier designation. This establishes the scope of what 'ad-free' actually encompasses under the service agreement and reserves Hulu's ability to modify these exceptions over time.