Provision Registry

414 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
Filtering: Data collection × High × Clear all
Google Maps · Google Maps Platform Terms of Service
This provision establishes the data collection and usage framework that enables the Google Maps Platform service delivery model. By defining the scope of permissible data collection and retention, the clause clarifies the operational basis for service provision and product improvement activities across Google's product ecosystem.
CA-P-001604 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
high Data collection
Duo Security · Duo Terms of Service
The clause establishes the scope of data collection activities and clarifies Duo's role in the data processing relationship. This designation as data processor rather than controller determines the legal framework and responsibility allocation for how collected data is handled and protected.
CA-P-004876 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Square · Square Terms of Service
This provision operationalizes Square's data governance framework by incorporating the Privacy Notice as the governing document for all personal data handling. The clause establishes acknowledgment of data practices as a condition of service use, creating the contractual basis for Square's data collection and processing activities.
CA-P-001730 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
high Data collection
RunPod · RunPod Privacy Policy
The clause defines the scope of direct data collection practices for the service, specifying that workload-related technical data and usage metrics constitute collectible information within the terms of service operation.
CA-P-005941 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
high Data collection
Messenger Kids · Messenger Kids Terms of Service
This provision is operationally significant because it establishes the legal and procedural basis for data handling in a service designed for users under 13, where parental authorization is required. The provision structures compliance with children's privacy regulations, including requirements around parental notification, data minimization, and restricted use of collected information.
CA-P-000581 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
high Data collection
Pinterest · Pinterest Privacy Policy
This provision establishes Pinterest's data collection scope beyond registered users, enabling the platform to build profiles and behavioral records on non-account holders for purposes including analytics, advertising targeting, and service optimization across its network.
CA-P-000689 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
Whatnot · Whatnot Privacy Policy
The clause establishes the scope of data collection activities across both user-initiated submissions and automatic collection mechanisms. This operational scope determines what categories of personal, financial, and behavioral data the service captures throughout the user engagement lifecycle, from account setup through service use and customer interactions.
CA-P-007063 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
high Data collection
Google Gemini · Gemini Apps Privacy Notice
This provision defines the scope of data collection that Google performs during service operation, establishing which categories of information the company gathers as a standard part of providing and maintaining Gemini Apps. The scope encompasses both content-level data and technical metadata necessary for service delivery and analytics.
CA-P-003716 First tracked Apr 28, 2026 Last seen Apr 28, 2026 Compare across platforms →
high Data collection
AT&T · AT&T Terms of Service
This clause establishes the scope of data collection practices tied to account creation and identifies the Privacy Policy as the governing document for how collected information is processed and disclosed. The provision creates a contractual basis for data practices that would otherwise require separate authorization.
CA-P-003079 First tracked Apr 18, 2026 Last seen Apr 18, 2026 Compare across platforms →
Meta · Llama API Terms of Service
This provision allocates primary legal and regulatory compliance responsibility to developers rather than to Meta, requiring developers to independently satisfy all applicable notice, consent, and data protection obligations under local law without reliance on Meta's own compliance infrastructure.
CA-P-012625 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
TikTok Ads · TikTok Privacy Policy
The collection of keystroke pattern data alongside device identifiers and cross-device tracking enables behavioral profiling and device linkage at a technical level. This data collection mechanism supports the operational infrastructure for targeted advertising and user activity attribution across the TikTok platform.
CA-P-006243 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
high Data collection
Spotify · Spotify Privacy Policy
The collection of application installation data and device identifiers enables Spotify's technical infrastructure to identify compatible devices and applications, support cross-platform functionality, and maintain an updated inventory of the user's connected ecosystem.
CA-P-002174 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
EA · EA Privacy and Cookie Policy
Device fingerprinting and anti-cheat monitoring establish technical surveillance infrastructure that collects persistent identifiers and behavioral data beyond typical usage analytics, enabling EA to maintain service integrity and enforce compliance with acceptable use policies across its gaming platforms.
CA-P-001543 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
The provision establishes technical mechanisms for accessing device movement and spatial orientation data, which enables motion-based features, gesture recognition, or device state analysis. The sampling rates specified determine the frequency and granularity of sensor data collection during user sessions.
CA-P-002320 First tracked Apr 9, 2026 Last seen Apr 9, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
These API permissions enable the collection of motion, positioning, input, and device status data that can be used for content personalization, analytics, and feature functionality. The operational scope of data collection depends on the specific technical implementations enabled by these permissions.
CA-P-002017 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
Sensor and clipboard access enables the platform to gather technical device state information and detect copied content, which supports content recommendation, user behavior analysis, and platform functionality. This authorization establishes the operational scope of data TikTok may collect beyond traditional usage metrics.
CA-P-001851 First tracked Apr 3, 2026 Last seen Apr 3, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
The clause establishes technical mechanisms for accessing sensor and system data that are typically restricted by browser permissions. The authorization covers both motion-tracking sensors and clipboard monitoring, which enables collection of physical device state and user interaction data during service use.
CA-P-002460 First tracked Apr 9, 2026 Last seen Apr 10, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
The operational significance lies in the systematic collection of geolocation signals at full sample rate across navigator geolocation interfaces. This data stream feeds into the service's location-based features, content ranking, and analytics infrastructure.
CA-P-002317 First tracked Apr 9, 2026 Last seen Apr 9, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
Device sensor and telemetry collection enables TikTok to obtain technical operational data about device performance, connectivity, and user interaction patterns. This data collection supports service functionality, performance optimization, and analytics operations.
CA-P-000307 First tracked Apr 3, 2026 Last seen Apr 3, 2026 Compare across platforms →
Anthropic · Claude.ai Terms of Service
This provision creates a dual governance structure for business-domain accounts where organizational administrators obtain administrative control and visibility into account activity. The clause establishes notice procedures but permits reduced notice where the organization has already informed the user of monitoring capabilities.
CA-P-002557 First tracked Apr 9, 2026 Last seen Apr 9, 2026 Compare across platforms →
Stripe · Stripe Privacy Policy
This provision clarifies the scope of Stripe's data processing authority and the categories of personal data it handles on behalf of merchants. It establishes the operational framework for how customer information flows through Stripe's systems during transaction processing and service provision.
CA-P-000740 First tracked Apr 3, 2026 Last seen Apr 3, 2026 Compare across platforms →
Stash · Stash Privacy Policy
The collection of these data categories establishes the informational scope necessary for Stash to operate financial services and identity verification functions. The breadth of financial account credentials and government-issued identification data represents the core informational inputs required for account establishment and ongoing account management.
CA-P-000527 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Coinbase · Coinbase Privacy Policy
The collection framework establishes the informational foundation for regulatory compliance, account verification, and anti-money laundering obligations. The provision ties data collection to both user-initiated feature selection and applicable legal requirements, creating conditional collection triggers based on jurisdictional obligations and service tier access.
CA-P-002041 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
Threads · Threads Privacy Policy
The provision establishes a broad data collection framework that captures real-time device state information and precise location data across multiple signal types, enabling the service to maintain detailed records of user device configurations and geographic positioning during service use.
CA-P-005515 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Coinbase · Coinbase Privacy Policy
The collection scope establishes the data foundation necessary for Coinbase to fulfill regulatory compliance obligations under financial services laws. The breadth of data categories—including government-issued identification, financial account numbers, and tax identification—enables the verification procedures required by law for cryptocurrency exchange operations.
CA-P-000414 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Webull · Webull Privacy Policy
The clause establishes the data collection requirements that Webull implements to satisfy regulatory compliance obligations under anti-money laundering laws. This defines the scope of personal information Webull is authorized to request and retain during the account application process.
CA-P-000491 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
high Data collection
Arlo · Arlo Terms of Service
The Facebook Pixel integration establishes data collection and signal transmission to Facebook's advertising infrastructure. This operational setup enables Arlo to track user interactions, generate conversion data, and build audience segments for advertising purposes through Facebook's platform.
CA-P-005272 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Arlo · Arlo Privacy Policy
The hashed email transmission enables Facebook to match Arlo website visitors with their Facebook accounts for targeted advertising campaigns and conversion measurement, allowing cross-platform user identification without transmitting plaintext email addresses.
CA-P-006674 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Meta Ads · Meta Privacy Policy
The provision establishes the operational scope of face recognition processing within Meta's service ecosystem. It conditions the deployment of this biometric processing mechanism on explicit user permission and specifies three distinct functional applications within the platform.
CA-P-002394 First tracked Apr 9, 2026 Last seen Apr 10, 2026 Compare across platforms →
high Data collection
OnlyFans · OnlyFans Privacy Policy
The clause establishes the operational scope and consent framework for biometric data collection during OnlyFans' identity verification procedures. It clarifies that Face Recognition Data is distinct from the visual artifacts (animated .gif images) used to generate it, establishing separate data categories for processing purposes.
CA-P-006082 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial