Provision registry

Every clause, classified and comparable

3334 classified provisions across 309 platforms, each clause typed by severity and platform. Browse, filter, and compare. Updated as policies change.

Stay ahead of the changes

Track specific clauses across platforms

Get provision-level alerts and cross-platform comparisons the moment a clause changes.

Filtering: Data usage × Clear all
Google Gemini · Gemini Apps Privacy Notice
It establishes that user data is not confined to operational service delivery but also feeds into the training and development of the underlying AI and machine-learning models.
CA-P-038169 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
TikTok Ads · TikTok Privacy Policy
User data is not used solely for delivering a service to the user but also to develop and refine TikTok Ads' proprietary AI systems.
CA-P-055516 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Microsoft Azure · Microsoft Privacy
Advertise and market to you, which includes sending promotional communications, personalized advertising, and presenting relevant offers.
CA-P-017632 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Microsoft Azure · Microsoft Privacy
As part of our efforts to improve and develop our products, we may use your data to develop and train our AI models.
CA-P-017629 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
SoFi · SoFi Privacy Notice (Retired URL)
Consent is established by default through inaction, meaning the reader need not affirmatively agree for SoFi to rely on the user's deemed agreement to use the technologies.
CA-P-023600 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
OpenAI · OpenAI Enterprise Privacy
The clause establishes that model training from business data is not an automatic practice, meaning customers must take affirmative action for such use to occur.
CA-P-062711 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Windsurf · Windsurf Security & Data Handling
This clause establishes that model training on customer data is an active default practice, meaning customers who do not take affirmative steps to opt out are subject to this use of their data.
CA-P-061031 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Cerebras · Cerebras Privacy Policy
Once data is deidentified or aggregated, Cerebras places no restrictions on its use or disclosure, including commercial sharing with advertisers.
CA-P-045739 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
23andMe · 23andMe Privacy Statement
The clause establishes that research participation results in the user's deidentified data being combined into a collective dataset, which has implications for how individual data contributes to broader research outputs.
CA-P-026186 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Replit · Replit Privacy Policy
De-identified data falls entirely outside the Privacy Policy's protections, and Replit's use and sharing of it is unrestricted in its discretion, removing any policy-based recourse for users.
CA-P-045340 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
General Motors · GM Privacy Statement
Data that General Motors has de-identified falls entirely outside the Privacy Statement's use restrictions, allowing General Motors broad latitude to use and share it.
CA-P-052433 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Squarespace · Squarespace Privacy Policy
It removes all Privacy Policy-based protections from de-identified data, meaning Squarespace retains broad freedom to monetize or distribute such data.
CA-P-052943 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Delta Airlines · Delta Terms of Use
Users who share ideas or creative content with Delta Airlines retain no control over how that content is used, including for commercial development.
CA-P-055111 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Indeed · Indeed Privacy Policy (Superseded Capture)
The provision of this information is entirely voluntary and will not be used in any determination of your job application.
CA-P-070889 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Indeed · Indeed Privacy Policy
The provision of this information is entirely voluntary and will not be used in any determination of your job application.
CA-P-071134 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Descript · Descript Terms of Service
User content is used for AI model training by default; the opt-out places the burden on the user to affirmatively act to prevent this use.
CA-P-046300 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Palantir · Palantir Privacy Statement
We may access, preserve, process, or disclose your information, where required, to comply with a court order or legal requirement, including to respond to governmental or regulatory requests, verify your identity...enforce our policies and contracts...
CA-P-069634 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
DraftKings · DraftKings Privacy Policy
we may use your name, likeness, voice, opinions, and biographical information for publicity, advertising, trade, or promotional purposes without further payment, consideration, notice, or approval.
CA-P-041301 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Ancestry · Ancestry Privacy Statement
We also process your DNA Data to provide you information about your degree of relatedness to other users in our DNA database and some genetic markers associated with certain biological, physiological, behavioral traits...
CA-P-034330 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Cloudflare · Cloudflare Privacy Policy
We will not combine any information collected from DNS queries to our 1.1.1.1 resolver with any other Cloudflare or third party data in any way that can be used to identify individual end users.
CA-P-036937 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
DocuSign · DocuSign Terms and Conditions
DocuSign's ownership of Usage Data and its right to use it for benchmarking and industry analysis means this data may inform commercial activities beyond direct service delivery.
CA-P-031665 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Asana · Asana Privacy Statement
The DPA is the governing document for Asana's legal data processing obligations, meaning its scope and terms directly determine customers' data protection rights and Asana's binding commitments.
CA-P-049123 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Indeed · Indeed Terms of Service
You shall only provide processing instructions that are lawful and You shall have sole responsibility for the accuracy, quality, and legality of Client Personal Data and the means by which it was acquired.
CA-P-028638 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Greenhouse · Greenhouse Terms of Service
The DPA is identified as the governing instrument for data processing obligations, meaning parties must look to it—not the MSA or other documents—for those specific responsibilities.
CA-P-066843 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Baseten · Baseten Terms of Service
To the extent that Baseten "Processes" "Customer Personal Data" as part of the Services, the Parties shall comply with their respective obligations under the DPA...
CA-P-073760 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Smartsheet · Smartsheet Terms of Service
The version of the Data Processing Addendum at term start is locked in as the governing document for personal data processing, which determines the customer's data protection rights and Smartsheet's obligations for the entire term.
CA-P-076178 First tracked Jul 12, 2026 Last seen Jul 12, 2026 Compare across platforms →
LinkedIn · LinkedIn Ads Agreement
If either party processes Personal Data...pursuant to this Ads Agreement, then we will each comply with the terms of the DPA, and, in addition, the LinkedIn Independent Controller Addendum, if applicable, to the Ad Services you use.
CA-P-063345 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Atlassian · Atlassian Cloud Terms
The DPA applies to Customer's use of Products and related Support and Advisory Services and forms part of this Agreement.
CA-P-056096 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Modal · Modal Terms of Service
Modal will not Process Customer Personal Data for any purpose other than for the specific purposes set forth in this DPA, unless obligated to do otherwise by Applicable Privacy Law.
CA-P-072520 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Synthesia · Synthesia Data Processing Agreement
By framing the DPA as reflecting processor obligations, the clause positions Synthesia in the processor role with respect to Customer Data, which carries specific legal responsibilities under data protection frameworks.
CA-P-074076 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Stay ahead of the changes

Governance intelligence across platforms

Monitor specific governance provisions with regulatory mapping and audit-ready analysis.