Noom
· Noom Privacy Policy
Noom acknowledges that certain data disclosures may trigger state-law protections — including opt-out rights — that apply specifically to sales and sharing of personal information.
MyFitnessPal solely entrusts personal information to service providers of MyFitnessPal as defined under applicable Korean law.
In case of emergencies, such as disasters, infectious diseases, incidents or accidents that cause imminent risk to life or body...the Company may provide personal information to relevant agencies without the consent of data subjects...
Eufy
· Eufy Privacy Policy
even in cases where there are special provisions in the law, such as when an administrative agency or investigative agency requests...the customer's personal information will not be provided unconditionally...such as in cases where there is a warrant...
DeepL
· DeepL Privacy Policy
This overseas transfer is essential for the provision of our services. Therefore, if you refuse the overseas transfer, it may restrict your access to our services.
Eufy
· Eufy Privacy Policy
The company processes customers' personal information only within the scope specified in the personal information processing purpose and does not use or provide personal information to third parties without the customer's consent.
Personal information of residents of Korea is processed in the United States by MyFitnessPal. MyFitnessPal also entrusts the processing of personal information to the following entrustees for the purpose of facilitating MyFitnessPal's provision of Services.
It establishes that task completion through Gemini's agentic features requires sharing potentially sensitive personal data with external parties beyond Google's direct control.
Revolut
· Revolut Terms of Service (Superseded URL)
The user is required to grant a federal agency the authority to verify and share sensitive personal identifying information with named third parties as a condition of the process.
We may comply with governmental, court, and law enforcement requests relating to our Services or information collected under our Terms, including with respect to your Inputs and Outputs.
Plaid
· Plaid Terms of Use
If the Privacy Shield has been invalidated or if Plaid does not maintain an active certification under the Privacy Shield, then any such data transfer will be conducted pursuant to the Standard Contractual Clauses
Customers who rely on SCCs as their legal transfer mechanism should confirm both conditions are met; if either condition is absent, the SCCs do not apply and an alternative transfer mechanism may be required.
if and to the extent you do provide to LinkedIn any Personal Data in connection with the Ad Services, the sharing of which pursuant to the Agreement is regulated by the General Data Protection Regulation, you and LinkedIn will enter …
Standard Contractual Clauses are a specific legal mechanism required to lawfully transfer personal data from the EEA, UK, or Switzerland to countries without an adequacy decision, establishing the legal basis for such transfers.
When we share information of customers regulated by the data protection laws of the European Economic Area, the UK, or Switzerland, we make use of standard contractual data protection clauses approved by those jurisdictions (Standard Contractual Clauses) or other appropriate …
The use of Standard Contractual Clauses is the named legal mechanism Palantir relies on to legitimise international personal data transfers from the EEA and UK, providing a defined level of contractual protection.
We will use contractual clauses, such as the Standard Contractual Clauses approved by the European Commission and other Regulatory Bodies where applicable.
Stash
· Stash Terms of Use
Users' Subscription Data is shared with unspecified third parties, and users must permit this as a condition of use, with sharing limited to verification and account-charging purposes.
This establishes a categorical prohibition on the sale of customer information, which is a significant data protection commitment.
we may share the following categories of Personal Data with entities who are considered "third parties" as defined under State Privacy Laws...for purposes of "targeted advertising," which may constitute a "sale" of Personal Data...
Steam
· Steam Privacy Policy
The claim establishes that Steam User Account data is publicly accessible to anyone with a Steam ID query, not limited to authenticated partners or specific parties.
Billing data for paying and developer-tier users is shared with a third-party sub-processor in the United States, while free-tier and government users are not covered by this arrangement.
Canva
· Canva Privacy Policy
We will share student data with our third party service providers who have security, privacy, and data retention policies consistent with our policies and solely to the extent necessary for them to perform a business or technology support function for …
Enrollment constitutes affirmative consent to personal data sharing with individual Teachers, meaning a user's personal data leaves Skillshare's direct control upon each class enrollment.
Replit
· Replit Privacy Policy
Student profiles created by teachers using Teams for Education and students' code are never publicly viewable or searchable, and students may not post content on publicly viewable forums.
Pinecone
· Pinecone Data Processing Addendum
Pinecone shall enter into a written agreement with its Subprocessors which includes data protection and security measures no less protective than the measures set forth in this DPA.
Google will: (a) ensure via a written contract that the Subprocessor only accesses and uses Customer Personal Data to the extent required to perform the obligations subcontracted to it
Greenhouse contractually extends data protection obligations to every subprocessor it uses, creating a chain of data protection agreements covering personal data processed downstream.
ADP
· ADP Privacy Statement
The Subprocessor Contract shall impose similar data protection-related Processing terms on the Third Party Subprocessor that will be not less protective than those imposed on the ADP Contracting Entity by the Service Agreement...
Unity
· Unity Privacy Policy
Incorporation by reference means the list of sub-processors is contractually part of the DPA, making Unity's use of those third parties a binding element of the data processing agreement.