Provision registry

Every clause, classified and comparable

881 classified provisions across 309 platforms, each clause typed by severity and platform. Browse, filter, and compare. Updated as policies change.

Stay ahead of the changes

Track specific clauses across platforms

Get provision-level alerts and cross-platform comparisons the moment a clause changes.

Filtering: Data usage × High × Clear all
Mailchimp · Mailchimp Standard Terms of Use
you and Mailchimp shall be subject to and comply with the Mailchimp Data Processing Addendum ("DPA"), which is incorporated into and forms an integral part of these Terms.
CA-P-065199 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Figma · Figma Terms of Service (Superseded URL)
The data processing addendum available at www.figma.com/dpa is incorporated into these Terms.
CA-P-048096 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Heap · Heap Terms of Service
the Parties agree that the provisions of Contentsquare's Data Processing Agreement...shall apply except where the Parties have agreed and executed a bespoke data processing agreement...Each Party agrees to comply with the terms of the DPA, which shall be incorporated into …
CA-P-073036 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Afterpay · Afterpay Privacy Policy
The disclosure of how user information is used is consequential because it defines the boundaries of Afterpay's permissible data use.
CA-P-052741 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Notion · Notion Privacy Policy
Even if you opt out, we may still collect and use your information for other purposes that were not based on your consent.
CA-P-031127 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Fitbit · Fitbit Privacy Policy
User data may be used to train or develop generative AI models, a use that extends beyond conventional service improvement and carries distinct implications for how personal data is incorporated into AI systems.
CA-P-037529 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Ideogram · Ideogram Privacy Policy
User data contributes directly to the development and capability of Ideogram's AI models, meaning user interactions have a lasting effect beyond their immediate context.
CA-P-044663 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Google Gemini · Gemini Apps Privacy Notice
It establishes that user data is not confined to operational service delivery but also feeds into the training and development of the underlying AI and machine-learning models.
CA-P-038169 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
TikTok Ads · TikTok Privacy Policy
User data is not used solely for delivering a service to the user but also to develop and refine TikTok Ads' proprietary AI systems.
CA-P-055516 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Microsoft Azure · Microsoft Privacy
Advertise and market to you, which includes sending promotional communications, personalized advertising, and presenting relevant offers.
CA-P-017632 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Microsoft Azure · Microsoft Privacy
As part of our efforts to improve and develop our products, we may use your data to develop and train our AI models.
CA-P-017629 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
SoFi · SoFi Privacy Notice (Retired URL)
Consent is established by default through inaction, meaning the reader need not affirmatively agree for SoFi to rely on the user's deemed agreement to use the technologies.
CA-P-023600 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
OpenAI · OpenAI Enterprise Privacy
The clause establishes that model training from business data is not an automatic practice, meaning customers must take affirmative action for such use to occur.
CA-P-062711 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Windsurf · Windsurf Security & Data Handling
This clause establishes that model training on customer data is an active default practice, meaning customers who do not take affirmative steps to opt out are subject to this use of their data.
CA-P-061031 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Cerebras · Cerebras Privacy Policy
Once data is deidentified or aggregated, Cerebras places no restrictions on its use or disclosure, including commercial sharing with advertisers.
CA-P-045739 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
23andMe · 23andMe Privacy Statement
The clause establishes that research participation results in the user's deidentified data being combined into a collective dataset, which has implications for how individual data contributes to broader research outputs.
CA-P-026186 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Replit · Replit Privacy Policy
De-identified data falls entirely outside the Privacy Policy's protections, and Replit's use and sharing of it is unrestricted in its discretion, removing any policy-based recourse for users.
CA-P-045340 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
General Motors · GM Privacy Statement
Data that General Motors has de-identified falls entirely outside the Privacy Statement's use restrictions, allowing General Motors broad latitude to use and share it.
CA-P-052433 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Squarespace · Squarespace Privacy Policy
It removes all Privacy Policy-based protections from de-identified data, meaning Squarespace retains broad freedom to monetize or distribute such data.
CA-P-052943 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Delta Airlines · Delta Terms of Use
Users who share ideas or creative content with Delta Airlines retain no control over how that content is used, including for commercial development.
CA-P-055111 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Indeed · Indeed Privacy Policy (Superseded Capture)
The provision of this information is entirely voluntary and will not be used in any determination of your job application.
CA-P-070889 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Indeed · Indeed Privacy Policy
The provision of this information is entirely voluntary and will not be used in any determination of your job application.
CA-P-071134 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Descript · Descript Terms of Service
User content is used for AI model training by default; the opt-out places the burden on the user to affirmatively act to prevent this use.
CA-P-046300 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Palantir · Palantir Privacy Statement
We may access, preserve, process, or disclose your information, where required, to comply with a court order or legal requirement, including to respond to governmental or regulatory requests, verify your identity...enforce our policies and contracts...
CA-P-069634 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
DraftKings · DraftKings Privacy Policy
we may use your name, likeness, voice, opinions, and biographical information for publicity, advertising, trade, or promotional purposes without further payment, consideration, notice, or approval.
CA-P-041301 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Ancestry · Ancestry Privacy Statement
We also process your DNA Data to provide you information about your degree of relatedness to other users in our DNA database and some genetic markers associated with certain biological, physiological, behavioral traits...
CA-P-034330 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Cloudflare · Cloudflare Privacy Policy
We will not combine any information collected from DNS queries to our 1.1.1.1 resolver with any other Cloudflare or third party data in any way that can be used to identify individual end users.
CA-P-036937 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
DocuSign · DocuSign Terms and Conditions
DocuSign's ownership of Usage Data and its right to use it for benchmarking and industry analysis means this data may inform commercial activities beyond direct service delivery.
CA-P-031665 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Asana · Asana Privacy Statement
The DPA is the governing document for Asana's legal data processing obligations, meaning its scope and terms directly determine customers' data protection rights and Asana's binding commitments.
CA-P-049123 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Indeed · Indeed Terms of Service
You shall only provide processing instructions that are lawful and You shall have sole responsibility for the accuracy, quality, and legality of Client Personal Data and the means by which it was acquired.
CA-P-028638 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Stay ahead of the changes

Governance intelligence across platforms

Monitor specific governance provisions with regulatory mapping and audit-ready analysis.