Recent policy changes

Why it matters: The updated notice establishes that Google now uses data from Connected Apps and imported data from other AI platforms for personalization and AI model training. This clarifies the scope of data use for users who enable these features, and confirms that deletion controls remain available.

Why it matters: The updated policy establishes explicit disclosure of biometric data collection during identity verification and expanded tracking for interest-based advertising, which may trigger compliance obligations under state biometric privacy laws and GDPR for affected jurisdictions. The policy also clarifies data sharing practices with third parties like Uber, which affects how user information flows through the Poshmark ecosystem.

Why it matters: The updated Privacy Policy establishes explicit, detailed disclosures of data collection and use practices that were previously undisclosed or minimally described. The introduction of biometric data collection (face geometry for identity verification) represents a new category of personal data collection that users should be aware of, and the detailed disclosure of cookies and targeted advertising practices provides transparency into how user behavior is tracked and monetized. For users in regulated jurisdictions like California and the EU, these disclosures are material to understanding their data rights and choices.

Why it matters: The updated policy expands the categories of personal data Robinhood collects (AI chatbot conversations, precise geolocation) and extends privacy coverage to a new non-financial product (Robinhood Social). This affects what data Robinhood can process and under which regulatory framework (state privacy laws for Social vs. GLBA for financial services), which may impact how customers' data is used, retained, and disclosed. Organizations that use Robinhood services or direct customers to Robinhood Social should assess whether these changes require updates to their own privacy notices or vendor agreements.

Why it matters: The updated policy explicitly discloses data-sharing practices with law enforcement and financial institutions for fraud prevention, which is a material operational change affecting how customer data may be used. The clarification on targeted advertising use of email addresses and the addition of a webform-based privacy rights request mechanism provide users with more explicit notice of data practices and additional channels for exercising privacy rights.

Why it matters: The updated terms establish a new financial product that integrates payroll processing with digital asset acquisition, positioning Coinbase as a payroll destination and introducing recurring automatic cryptocurrency purchases. This change affects how users receive income and may trigger regulatory scrutiny around consumer financial protection, money transmission, and disclosure of digital asset volatility and FDIC insurance status.