Provision Registry

7353 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
Filtering: Medium × Clear all
Stripe · Stripe Privacy Policy
This provision establishes the framework within which Stripe's data processing practices operate, defining the scope of individual rights available under the terms. The specification of objection rights creates procedural obligations for Stripe to honor such requests when validly submitted.
CA-P-001880 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
medium Privacy rights
Pika · Pika Privacy Policy
The provision creates an internal escalation mechanism for consumer rights disputes, establishing procedural timelines and review standards that structure how the entity processes appeals. The requirement for independent senior-level review and written explanations establishes operational accountability standards for the appeals process.
CA-P-004310 First tracked Apr 30, 2026 Last seen Apr 30, 2026 Compare across platforms →
TransUnion · TransUnion Privacy Policy
These rights give consumers in California and several other states meaningful tools to understand and control how their personal data is used, though the actual scope of each right varies by state and may be limited by FCRA carve-outs for credit data.
CA-P-009412 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Signal · Signal Privacy Policy
The clause establishes the operational mechanism and authorization for contact discovery functionality, clarifying that contact information undergoes cryptographic hashing before transmission and that this process is optional rather than mandatory. This defines the technical scope of what data processing Signal performs when users elect to use the contact discovery feature.
CA-P-003040 First tracked Apr 18, 2026 Last seen Apr 18, 2026 Compare across platforms →
PayPal · PayPal Privacy Statement
The provision establishes a certification mechanism by which users represent they hold the legal authority to share contact data with PayPal. This structure places responsibility for third-party consent on the user rather than requiring PayPal to independently verify contact permissions.
CA-P-002270 First tracked Apr 5, 2026 Last seen Apr 18, 2026 Compare across platforms →
DraftKings · DraftKings Privacy Policy
This provision shifts the legal burden of third-party consent to the user rather than retaining it with DraftKings as the data controller, which may be inconsistent with how data controller obligations are treated under GDPR, PIPEDA, and some U.S. state privacy frameworks.
CA-P-009843 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
PayPal · PayPal Privacy Statement
The clause creates an operational framework for contact data processing and establishes a contractual certification requirement. The user's certification of third-party permission authorization places responsibility on the user to ensure compliance with applicable data protection obligations before submitting contact information.
CA-P-002676 First tracked Apr 10, 2026 Last seen Apr 10, 2026 Compare across platforms →
medium Privacy rights
Snapchat · Snapchat Privacy Policy
Contact syncing collects personal data about third parties who have not agreed to Snapchat's terms, raising privacy concerns for non-users whose information is uploaded without their knowledge.
CA-P-009095 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Nextdoor · Nextdoor Privacy Policy
Contact list uploads can expose the personal information of people who have not consented to Nextdoor's data collection, raising significant third-party privacy implications.
CA-P-008891 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
Strava · Strava Privacy Policy
Ongoing access to your contact list means Strava collects and stores information about people who have never signed up for Strava and who have not consented to having their data processed by the service.
CA-P-007790 First tracked May 9, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
WhatsApp · WhatsApp Privacy Policy
This provision involves the processing of personal data belonging to third parties (your contacts) who have not agreed to WhatsApp's terms and may be unaware their phone number and name have been uploaded to WhatsApp's servers.
CA-P-011426 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
Substack · Substack Privacy Policy
This provision discloses data collection about non-Substack users through address book syncing, which may occur without the knowledge of the individuals whose contact information is collected. The policy limits collection to email addresses and phone numbers stored as hashes, and limits use to contact syncing purposes.
CA-P-006890 First tracked May 8, 2026 Last seen May 22, 2026 Compare across platforms →
Airtable · Airtable Privacy Policy
This provision means your content and data access can be restricted or permanently lost based on Airtable's unilateral determination, without requiring independent review or prior notice.
CA-P-008271 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
medium Liability limitation
Apple Pay · Apple Media Services Terms
Content you have purchased, such as movies, music, books, or apps, could become unavailable if Apple removes it from its servers or terminates its licensing arrangements, and the agreement expressly disclaims liability for this outcome.
CA-P-008289 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
medium Platform discretion
Audible · Audible Conditions of Use
This provision establishes that Audible does not guarantee continued availability of specific content within the service catalog, which may affect users who have purchased credits or subscriptions in anticipation of accessing specific titles that are later removed.
CA-P-012898 First tracked May 21, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Dropbox · Dropbox Privacy Policy
Many users assume their stored files are private and unexamined; this clause establishes that Dropbox reserves the right to process file content itself, which may have implications for confidential business documents, legal files, or sensitive personal materials.
CA-P-008460 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Adobe · Adobe Terms of Use
Adobe's analysis of your actual creative content, not just usage metadata, for marketing and product improvement purposes is a meaningful privacy consideration that many users may not expect and should actively manage through the opt-out mechanism.
CA-P-003536 First tracked Apr 27, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Adobe · Adobe Terms of Use
The opt-out right creates a procedural pathway for users to control whether their content and usage data are subject to Adobe's analytics operations. This affects the scope of data Adobe may process for analytics, insights, and service improvement purposes.
CA-P-001064 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
Snapchat · Snapchat Privacy Policy
This provision establishes the operational scope of Snapchat's data retention infrastructure by delineating which content classes are subject to deletion protocols versus retention requirements. The authorization to retain metadata separately from content creates a distinct data stream with potentially longer retention duration than the ephemeral messaging feature suggests.
CA-P-005939 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Google Ads · Google AdSense Terms of Service
This provision establishes Google's ongoing authority to assess publisher property eligibility and to withdraw monetization access for content or property characteristics that fall outside AdSense program policies. The eligibility criteria are defined and subject to change by Google, creating ongoing compliance monitoring obligations for publishers.
CA-P-012139 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
medium Developer api
Google Maps · Google Maps Platform Terms of Service
The clause establishes operational constraints on how customers may handle Content retrieved through the platform, distinguishing between prohibited storage practices and a narrowly-defined exception for temporary performance optimization. This specification directly controls the technical architecture customers may implement when integrating Maps services.
CA-P-001922 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
medium Privacy rights
OnlyFans · OnlyFans Privacy Policy
Content Collaborators, who may not be active platform users, are required to submit highly sensitive personal and identity data to OnlyFans, creating privacy obligations for individuals who may not have directly agreed to the platform's terms.
CA-P-009234 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Figma · Figma Privacy Policy
Professional users who store confidential client designs, proprietary assets, or sensitive business information in Figma should understand that this content is collected and retained by the platform.
CA-P-007934 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Character.AI · Character.ai Terms of Service
This clause establishes the operational framework under which the company may access and share user-generated content with law enforcement and other third parties. It creates four distinct categories of authorized disclosure: legal compliance, Terms enforcement, third-party rights protection, and safety/property protection, each with its own triggering conditions.
CA-P-000800 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Roblox · Roblox Privacy Policy
This provision discloses that user-generated content in public areas is subject to both human review and automated moderation, which involves Roblox processing the content of user communications. The acknowledgment that filtering is not 100% effective is a material disclosure relevant to user safety expectations, particularly for a platform with a large population of minor users.
CA-P-012807 First tracked May 21, 2026 Last seen May 22, 2026 Compare across platforms →
Spotify · Spotify Terms and Conditions
This provision clarifies Spotify's operational discretion in content presentation and establishes that commercial partnerships may affect the content catalog users encounter. It defines the scope of content personalization as potentially influenced by business arrangements rather than purely technical or editorial factors.
CA-P-002171 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
medium Platform discretion
Peacock · Peacock Terms of Use
If content you have been watching or plan to watch is removed, Peacock has no obligation under these terms to notify you, provide a substitute, or offer any credit or refund for the portion of your subscription affected.
CA-P-007507 First tracked May 9, 2026 Last seen May 22, 2026 Compare across platforms →
YouTube Ads · YouTube Terms of Service
The phrase commercially reasonable period is not defined in the agreement, meaning users cannot determine precisely when YouTube's rights over their deleted content expire, and server copies are retained without a clear deletion timeline.
CA-P-009170 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
medium Content moderation
OpenAI · OpenAI EU Terms of Use
The provision operationalizes OpenAI's ability to process and leverage user inputs across its service infrastructure. By establishing a broad license grant rather than requiring transaction-by-transaction consent, the terms enable continuous use of submitted content for model training, service optimization, and related operational purposes.
CA-P-010518 First tracked May 11, 2026 Last seen May 11, 2026 Compare across platforms →
medium Content moderation
Google Gemini · Google Generative AI Prohibited Use Policy
The clause operationalizes the allocation of IP ownership and usage rights, establishing that Google obtains a broad license to incorporate user-generated content into its service development and improvement processes while preserving user ownership of the underlying inputs.
CA-P-010093 First tracked May 11, 2026 Last seen May 11, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial