The scope of automatic collection, including IP addresses and behavioral data, means AWS gathers information about you even without you actively filling out a form, which has implications for profiling and targeted advertising.
Workday
· Workday Privacy Statement
Understanding what categories of personal information Workday collects directly from website visitors and prospective customers is important for individuals who have provided contact details, attended webinars, or downloaded Workday content.
This provision establishes the foundational scope of CoreWeave's data processing activities; without the full text, the specific data types, collection mechanisms, and stated purposes that users and enterprise customers consent to cannot be evaluated.
This provision establishes the scope of personal data collection applicable to all AWS website visitors and registered users, including both actively provided information and passively collected technical and behavioral data. The combination of directly provided identifiers with automatically collected browsing and device data creates a data profile that may be used for advertising and analytics purposes as described elsewhere in the notice.
Understanding what categories of personal data CoreWeave collects is the foundation for assessing your privacy exposure as a user or enterprise customer.
These rights are meaningful for EU, UK, and California users who have statutory entitlements to data access, portability, correction, and deletion, though the policy notes that some requests may be limited where fulfilling them would impair PlanetScale's legal obligations or service delivery.
Roblox
· Roblox Privacy Policy
This provision establishes a hard age threshold of 18 for personalized advertising participation, which the April 2026 update added clarifying language to address. This clause directly governs which user populations are eligible for behavioral or interest-based advertising on the platform and is relevant to both COPPA compliance for under-13 users and broader youth advertising regulatory frameworks.
This provision means TikTok collects personal data about people who are not TikTok users and have not consented to any TikTok data collection, raising third-party privacy concerns.
Roblox
· Roblox Privacy and Cookie Policy
The clause establishes a contact-matching mechanism that links phone numbers to friend recommendations, requiring explicit user consent to activate but permitting continued use of the feature unless affirmatively disabled. This creates a data processing pathway where phone number data interfaces with third-party device contacts.
Signal
· Signal Privacy Policy
Phone number registration ties your Signal identity to a real-world identifier, and contact discovery involves uploading hashed versions of your contacts' phone numbers to Signal's servers, which affects not just your privacy but also the privacy of people in your address book who may not be Signal users.
Upwork
· Upwork Privacy Policy
Users who send messages through Upwork's messaging system should be aware that those communications are not private and may be reviewed by Upwork for a broad range of purposes beyond just safety and fraud prevention, including product development and analytics.
Enterprise customers cannot rely on this public privacy notice to understand how their platform data is protected. The actual obligations and rights depend on separately negotiated contract terms.
TikTok
· TikTok Terms of Service
The agreement states that TikTok customizes ads users see on and off the platform based on activity, interests, device settings, and engagement data, and that some controls are available through platform settings, though the scope of off-platform ad customization depends on settings the user may not be aware of.
This provision establishes that continued use of LinkedIn constitutes acceptance of updated data practices, which means changes to how your data is collected or used take effect automatically unless you close your account. Under GDPR, however, deemed consent via continued use may not constitute valid consent for new processing activities that require explicit consent.
Material changes to how your data is collected or used could take effect without you receiving direct notification, placing the burden on you to monitor the policy periodically.
If Fireworks AI makes significant changes to how your data is used, you may only receive an email or a website notice, and continuing to use the service will be treated as agreement to the new policy, so monitoring for updates is important.
This provision establishes that non-material policy modifications take effect upon posting without individual notification, and that continued use of the Site or Service constitutes acceptance of revised terms, including changes applicable to previously collected personal data.
Webull
· Webull Privacy Policy
Material changes to how your data is collected or shared may take effect without proactive individual notice, placing the responsibility on users to monitor the policy for updates.
Roblox
· Roblox Privacy and Cookie Policy
This provision establishes that continued use of the platform after a policy update constitutes acceptance, which means users who do not actively review updates may be bound by new terms they have not explicitly reviewed.
Privacy practices could change materially after you sign up, and because updated terms are effective upon posting rather than upon explicit re-consent, users may be bound by new data practices without taking any action.
Target
· Target Privacy Policy
Precise geolocation is classified as sensitive personal information under CPRA and analogous state statutes, requiring that consumers be provided with the right to limit its use and disclosure; this classification creates heightened consent and data minimization obligations relative to general location data.
PayPal
· PayPal Privacy Statement
The statement asserts that precise geolocation data is collected while users are logged into their financial account, meaning location tracking occurs during active financial account sessions even if not explicitly initiated by the user for a specific transaction.
Precise geolocation data is classified as sensitive personal information under the CCPA/CPRA and analogous state laws, and the policy states this data may be collected by default unless the user takes action to disable it at the device level.
Precise GPS-level location data is a sensitive data category under multiple privacy laws and can reveal sensitive information about where you live, work, or spend time; knowing when and how to grant or revoke location access matters.
The policy authorizes collection of precise location data during background app activity, meaning location tracking may occur beyond the moments of active app use, and this data is stored and may be shared with delivery and mapping service providers.
Precise geolocation data is classified as sensitive personal information under California law and several other state statutes, meaning its collection and use carry heightened legal obligations and greater privacy implications than general location data.
Precise geolocation is classified as sensitive personal information under CCPA/CPRA and several other state privacy laws, triggering opt-in consent requirements in some jurisdictions and opt-out rights in others. The collection through multiple hardware technologies across Samsung's device ecosystem creates broad locational data coverage.
Hulu
· Hulu Privacy Policy
Precise geolocation is considered sensitive personal information under California's CPRA and can reveal home address, daily movements, and other private behavioral patterns; limiting location sharing reduces the depth of the data profile Disney can build about you.
Precise geolocation data can reveal sensitive details about your daily movements, routines, and personal life, and is classified as sensitive personal information under CPRA and several other state privacy laws.
Yelp
· Yelp Privacy Policy
Precise geolocation is a sensitive data category under several US state privacy laws and GDPR, and its use for advertising purposes beyond core service functionality is a meaningful data practice that users may not anticipate.