Database

4

web.bankofamerica.com

Bank of America

Elevated

Finance

The service may terminate a user’s participation in any or all services at any time and for any reason, and is not obliged to provide advance notice.

Partial analysis · 2 categories need stronger evidence

3

anthropic.com

Claude

Standard

AI & Dev

The service may use Materials, including for model training, unless the user opts out through account settings; even after opting out, it may use Materials for training when the user provides Feedback about Materials or when Materials are flagged for safety review. The service may suspend or terminate access without notice if it believes the user breached the Terms; if termination is due to a Terms violation, a subscriber is not entitled to a refund.

4

openai.com

ChatGPT / OpenAI Services

Elevated

AI & Dev

Depending on user choices, the service may share limited data with select marketing partners for targeted or cross-context behavioral advertising, with an opt-out available through specified privacy controls. Disputes must be brought individually; class, consolidated, and representative proceedings are prohibited, subject to the stated exceptions and settlement qualification.

3

mozilla.org

Firefox

Standard

Browsers & Privacy

Firefox may share limited, non-identifying information, including device type, IP-derived location information, and content-viewing categories, with advertising providers to help determine which ads to display; it says it does not share information that identifies users. By uploading content as part of the Services, users grant Mozilla a nonexclusive, royalty-free, worldwide license to use that content to provide the Services.

Partial analysis · 1 category needs stronger evidence

3

docs.github.com

GitHub

Standard

AI & Dev

GitHub may suspend or terminate access at any time, with or without cause or notice, effective immediately, and may refuse service to anyone for any reason.

5

bandcamp.com

Bandcamp

High

E-commerce

Users must commence service-related causes of action within one year after they arise or they are permanently barred.

3

turnitin.com

Turnitin

Standard

Productivity

Users grant the service a non-exclusive, perpetual, royalty-free, fully paid-up, worldwide license to use their Content to operate the business and furnish the Website.

4

strava.com

Strava

Elevated

Social Media

The service collects health data, such as heart rate when provided, and collects or infers precise device location for core features including GPS activity tracking, routes, and segments. The service may disclose information to marketing partners or third-party advertising networks, with consent where required, and provides an opt-out for sharing personal information for third-party targeted advertising.

4

hallow.com

Hallow

Elevated

Health & Wellness

Hallow's terms are largely standard for a subscription app, with encrypted sensitive journal data and an explicit no-sale/no-data-broker commitment. However, it shares Advertising Data and Cookie Data with Advertising Partners, takes a broad perpetual license over feedback (including AI training use), imposes mandatory arbitration with a class-action waiver (though with opt-out and small claims carveout), and generally offers no refunds on subscriptions.

4

benefits.novanthealth.org

Mercer Belong

Elevated

Other

This is a business-to-employee benefits portal governed by employer contracts with Mercer, so most rights (data access, deletion) run through the employer rather than the individual user. The terms include broad monitoring, a content/ownership license granting Mercer broad rights, and a $1,000 aggregate liability cap that is low, though the privacy notice includes some data-minimization and no-sale commitments.

4

vimeo.com

Vimeo

Elevated

Streaming

Vimeo's terms include broad but fairly standard content licensing, service-provider and advertising data sharing, and mandatory arbitration with a class-action waiver, jury waiver, and 30-day opt-out. Data collection includes analytics, session replay, cookies, and optional biometric age-verification (selfie), with advertising-related sharing disclosed. Billing and termination terms are largely standard with defined refund windows, though Vimeo retains broad discretion to terminate for breach without notice.

4

creditkarma.com

Credit Karma

Elevated

Finance

Credit Karma's terms include standard-to-broad provisions: a wide-ranging license over user-submitted community content and feedback, third-party data retrieval consents (consumer reports, motor vehicle records), and mandatory arbitration with a class-action waiver, though it includes a small claims carveout and fee reimbursement for smaller claims. Liability is capped at $100 in most cases, and the company can modify or discontinue services at its sole discretion.

3

slack.com

Slack

Standard

Communication

Slack's terms are largely standard for enterprise B2B software, with the Customer (employer) controlling most data rights rather than the individual user. Liability to individual users is capped at $100, and disputes go to court (not arbitration) in a jurisdiction tied to the Customer contract. Data collection is broad (device, location, usage, third-party integration data) but typical for a workplace tool.

4

duolingo.com

Duolingo

Elevated

Health & Wellness

Duolingo's terms include a broad, perpetual, irrevocable license to user-submitted content and an outright assignment of "Activity Materials" (educational output like translations) to Duolingo. The company can terminate accounts for any reason without notice, and subscriptions are non-refundable. Arbitration is mandatory with a class-action waiver, though it includes an opt-out, small claims carveout, and informal resolution step.

4

docs.midjourney.com

Midjourney

Elevated

AI & Dev

Midjourney's terms include a broad, perpetual, irrevocable license to user content and generated assets that survives account termination, mandatory arbitration with a class-action-implicating waiver of jury trial, and broad discretionary termination rights without refunds. A notable clause requires assignment of all rights in user-submitted Community Localization translations.

4

coinbase.com

Coinbase

Elevated

Finance

Coinbase's terms are largely standard for a regulated financial/crypto platform, with extensive risk disclosures and broad liability limitations typical of the industry. The agreement includes mandatory binding arbitration with a class-action and jury-trial waiver, though it provides a small claims carveout and an informal complaint process; collection of sensitive identity data (including biometrics) is required for KYC/AML compliance, which is a factor that increases the category score under the rubric.

3

perplexity.ai

Perplexity

Standard

AI & Dev

Perplexity's Terms are largely standard for AI-powered consumer services, with a broad but common content license, mandatory arbitration with an opt-out and small claims/injunctive relief carveouts, and standard subscription auto-renewal terms with no refunds. The Feedback assignment clause and broad discretionary account/content deletion rights are notable but consistent with common industry practice.

4

kraken.com

Kraken

Elevated

Finance

Kraken's terms grant the company broad discretionary authority: it can suspend or terminate accounts, reject transactions, and change fees or supported assets at any time without notice or liability. Users face mandatory JAMS arbitration with a class-action waiver and no opt-out, broad and perpetual licensing rights over submitted content and feedback, and extensive collection of sensitive verification data including biometric identifiers. Trades and deposits are generally final and non-refundable, and unpaid fees accrue interest and collection charges.