Recent contract changes

Summary of Important Changes and Risks

1. Use of Customer Data to Train AI Models

• No express provision authorizes or prohibits using customer data to train, fine-tune, evaluate, or improve artificial intelligence or machine-learning models.
• The prior language referred generally to sharing anonymous aggregate information and sharing data with vendors to “support and improve the Services.” Those concepts appear to be removed or substantially narrowed.
• The revised language does not clearly state whether customer content, personal information, uploaded documents, usage data, or anonymized data may be used for AI development.
• Risk: The policy remains ambiguous. A customer could argue that AI training is not adequately disclosed, while the provider could potentially rely on broad “use” or “improve the Services” language elsewhere in the agreement. A separate, explicit AI

Key Changes and Risks

1. Policy date and contact information

• The policy is now labeled “Privacy Policy — Last updated: May 2026.”
• The contact section is expanded to invite questions about:
• The privacy policy;
• Collection and use of personal information; and
• Exercising rights under the policy and applicable law.
• The support email address remains support@appcues.com.

Risk/impact: The updated date may trigger contractual or notice requirements under applicable privacy laws or customer agreements. The revised contact language could be helpful for rights requests but does not itself create specific response obligations or procedures.

2. Security and privacy framework substantially reframed

The previous introductory language described four general categories of information and stated that Appcues generally handled data consistently regardless of type,

Summary of Changes

Scope of the Diff

• The diff states that approximately 1,458 words were removed.
• No replacement language, additions, or specific deleted provisions are provided.
• Because the actual deleted text is unavailable, the legal and commercial impact cannot be determined reliably.

AI Training and Customer Data

• The provided diff does not identify whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
• It is therefore not possible to determine whether the revised document:
• Expands or restricts the provider’s rights to use customer data;
• Permits use of customer data for generalized model training;
• Limits training to de-identified, aggregated, or anonymized data;
• Provides an opt-out or requires customer consent;
• Addresses retention or deletion of data used in training;
• Establishes ownership of inputs

Summary of Important Changes

1. New Privacy Policy and Expanded Scope

The diff adds a substantially rewritten Privacy Policy for YNOT PARTNERS, INC., described as a wholly owned subsidiary of YNOT Partners Yazılım Pazarlama Danışmanlık Anonim Şirketi in Türkiye.

The policy distinguishes between:

• Website visitors and subscribers: UserGuiding acts as a data controller.
• End users of subscriber websites: UserGuiding acts as a data processor, while the subscriber remains the controller.

This distinction is important because end-user processing is stated to be governed by the subscriber’s privacy policy and the parties’ Data Processing Agreement (DPA), rather than this Privacy Policy.

2. Broader Categories of Data Collected

The policy expressly identifies collection of:

• Browser, operating system, referring URL, clickstream, and website-use data.
• Account

Key Changes and Risks

1. Broader data access and collection

The revised terms substantially expand the information Lusha may access through connected accounts:

• Email accounts: contacts and phone numbers appearing in email headers and signatures.
• Calendars: meeting titles, attendee lists, and attendee email addresses.
• CRM systems: all contacts, including names, email addresses, job titles, company names, and phone numbers.
• Access appears to apply to all contacts in the connected email database, with no ability to exclude individual contacts.
• Lusha may conduct a validity check on the connected email account and other integrations each month.

Although the terms state that Lusha will not read email correspondence, the scope of metadata and contact information is extensive and may include third-party personal data.

2. Extensive rights to use and disclose

Summary

The provided diff does not include the actual amended contractual language. It only states:

> “Added approximately 135 words to the document”

Accordingly, it is not possible to determine:

• What provisions were added or changed;
• Whether customer data may be used to train, fine-tune, validate, or improve AI models;
• Whether data may be shared with affiliates, vendors, or AI providers;
• Whether customer data is anonymized, aggregated, or retained;
• Whether the customer can opt out of AI training or revoke consent;
• Whether the provider obtains rights to use customer content beyond providing the services;
• Whether confidentiality, security, deletion, or ownership obligations have changed; or
• Whether the customer bears additional regulatory, intellectual-property, or privacy risks.

AI-Training Risk Assessment

No conclusion can be reached regarding AI-model traini

Summary of Important Changes

1. Privacy and compliance resources expanded

The footer and legal-information links now expressly include:

• US Resident Privacy Notice
• Cookie Policy
• Candidate Privacy Notice
• Candidate Privacy Notice for California Residents
• Data Subject Request information
• Data Processing Agreement
• Transfer Impact Assessment
• HIPAA Compliance FAQs
• Impressum
• Documentation and copyright resources

Additional contact addresses appear to have been added or clarified, including:

• privacy@progress.com
• copyrights@progress.com
• trademarks@progress.com
• legal@progress.com
• bod@progress.com
• security@progress.com

Risk/impact: These links may provide supplemental contractual or privacy terms. Because the Terms incorporate or direct users to policies that may be updated separately, customers should review the linked documents—especially

Contract Diff Analysis

Summary

The supplied diff does not include the text of the new provisions. It only states:

> “Added approximately 4172 words to the document”

Because the actual additions, deletions, and replacements are not provided, it is not possible to reliably identify:

• New legal obligations or rights
• Changes to liability, indemnity, confidentiality, or termination provisions
• Changes to data ownership or usage rights
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
• Any opt-out, consent, retention, anonymization, or security requirements
• Whether the provider may share customer data with affiliates, subprocessors, or third parties

AI Training and Customer Data

No conclusion can be drawn about AI-model training from the information provided. The statement that approximately 4,172 words were added does not reveal whet

Summary

The diff only states that approximately 184 words were removed. The actual deleted language is not provided.

Key Legal Implications

• Scope of review is limited: It is not possible to determine which obligations, rights, limitations, or protections were removed.
• Potentially material deletions: The removed text could have affected important provisions such as:
• Customer data ownership and permitted uses
• Confidentiality and security obligations
• Use of customer data to train, fine-tune, or improve AI models
• Restrictions on sharing data with service providers or third parties
• Data retention and deletion
• Intellectual-property rights and ownership of outputs
• Warranties, indemnities, liability limitations, or termination rights
• Compliance with privacy and data-protection laws

AI Training and Data Use

No conclusion can be reached

Summary

The provided diff does not include the actual amended legal language. It only states: “Added approximately 99 words to the document.”

Analysis

Because the text of the additions, deletions, or replacements is missing, it is not possible to determine:

• What contractual rights or obligations changed;
• Whether liability, indemnity, confidentiality, security, or termination provisions were affected;
• Whether the customer’s data may now be used for analytics, product improvement, or artificial intelligence (AI) model training;
• Whether the provider may retain, de-identify, aggregate, or share customer data;
• Whether customer consent is required before data is used to train AI models;
• Whether the customer can opt out of AI training or request deletion of training data; or
• Whether the provider receives broader rights to use content, inputs, outputs, usage data, or

Summary

The provided diff does not include the actual amended contract language. It only states:

> “Added approximately 2807 words to the document”

Accordingly, it is not possible to determine:

• What contractual provisions were added or changed.
• Whether the changes expand the provider’s rights to use customer data.
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
• Whether data may be shared with affiliates, vendors, or third-party model providers.
• Whether the customer can opt out of AI training or revoke consent.
• What confidentiality, security, retention, deletion, or anonymization protections apply.
• Whether the provider obtains rights to use prompts, outputs, usage data, or uploaded content.
• Whether new indemnities, liability exclusions, audit rights, or regulatory obligations were added.

Information Needed

Please provide

Summary of Important Changes

1. Document structure and incorporation into the contract

• The document title and introductory text have been substantially reformatted.
• The Privacy Policy is now expressly stated to be incorporated into and subject to the Dixa Terms of Service, rather than merely referring generally to “Dixa Terms.”
• The definition of the “Agreement” is clarified as the Dixa Terms of Service and associated procedures.
• Additional website navigation links and policy titles have been inserted, including the Legal Hub, GDPR information, Data Processing Agreement, Data Security, Early Access Terms, and Referral Program. These additions appear primarily editorial, but they could create uncertainty if those linked documents are intended to form part of the contractual framework.

Risk: Customers should verify which linked policies and procedures are legally

Summary

The diff only states that approximately 76 words were removed from the document. The actual deleted language is not provided.

AI Training and Data Use

• It is not possible to determine whether the changes affect:
• The customer's permission for the provider to use customer data to train, fine-tune, or improve AI models;
• Whether customer data may be used for general-purpose or third-party models;
• Whether prompts, outputs, usage data, personal information, or confidential information are included;
• Any opt-out, consent, or limitation on AI training;
• Data retention, anonymization, aggregation, or deletion requirements; or
• Restrictions on using customer data to create derivative datasets or model improvements.

Potential Legal Significance

Removing language can either narrow or expand the customer's protections, depending on what was deleted. For exa

Summary of Changes

1. New cookie notice and consent language

The update adds a website banner stating that Mashvisor:

• Uses cookies for “necessary site functionality” and to “improve your experience.”
• Treats continued browsing as consent to cookie use.
• Refers users to a separate cookie policy.
• Provides “Accept” and “Reject” options.

2. Legal and privacy implications

• Broader implied consent: The wording says that browsing constitutes consent, which may create a risk that consent is treated as implied rather than obtained through an affirmative action. Whether this is sufficient depends on applicable privacy and cookie laws, particularly for non-essential analytics, advertising, or tracking cookies.
• Unclear cookie categories: The notice does not distinguish between strictly necessary cookies and optional analytics, personalization, or advertising cookies.

Diff Analysis

Key Limitation

The supplied diff only states:

> “Added approximately 2445 words to the document”

It does not include the actual added, deleted, or replaced contract language. As a result, it is not possible to identify:

• New legal obligations or rights
• Changes to liability, indemnity, confidentiality, or termination provisions
• Changes affecting ownership or licensing of customer data
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
• Any opt-in, opt-out, consent, or deletion rights
• Whether data may be shared with affiliates, vendors, or third-party AI providers
• Changes to security, retention, or cross-border transfer terms

AI Training and Data-Use Review

No conclusions can be drawn regarding AI-model training from the information provided. The added language should specifically be reviewed for terms such as:

-

Summary

The provided diff states only: “Added approximately 47 words to the document.” It does not include the actual added, deleted, or replaced contractual language.

Key Legal Changes

• No substantive changes can be identified from the information provided.
• The nature, scope, and legal effect of the additional 47 words are unknown.
• No changes can be assessed regarding:
• Customer data ownership or licensing
• Data retention or deletion
• Confidentiality
• Security obligations
• Disclosure to third parties
• Liability or indemnification
• Audit rights
• Use of data for artificial intelligence or machine-learning purposes

AI Training and Model Use

• No AI-related language is visible in the supplied diff.
• It is therefore not possible to determine whether the new language:
• Permits the provider to use customer data to train, fine-tune, o

Summary

The supplied diff contains only the statement:

> “Added approximately 37 words to the document”

It does not include the actual added, deleted, or replaced legal language.

Legal and Commercial Impact

• No substantive contractual change can be identified from the information provided.
• It is not possible to determine whether the amendment affects:
• Customer data rights or ownership
• Data collection, storage, sharing, or disclosure
• Confidentiality or privacy obligations
• Use of customer data to train, fine-tune, evaluate, or improve AI models
• Customer consent or opt-out rights
• Data retention or deletion
• Security, indemnification, liability, or regulatory compliance

AI Training-Data Review

The diff provides no language addressing whether customer data may be:

• Used to train general-purpose or provider-specific AI models
• Used for model

Key Changes and Risks

1. Major restructuring of the Privacy Policy

The existing introductory language has been substantially replaced with a broader legal-resource/navigation structure. The revised material:

• Replaces references to “Contentstack Inc. and its subsidiary Lytics” operating particular websites and providing services to businesses with links to multiple agreements, policies, and regional documents.
• Expands the apparent scope to include employees, contractors, candidates, marketplace users, developers, community users, partners, and other categories.
• Adds or references documents including:
• Master Agreements and Partner Agreements
• Data Processing Agreements for the US/Canada and EMEA/UK
• Security Addendum
• Data Transfer Risk Assessment
• Artificial Intelligence Addendum
• Terms of Service and external-facing services policies

Risk: It is uncl

Summary

The provided diff does not include the actual amended legal language. It only states:

> “Added approximately 253 words to the document”

Accordingly, I cannot reliably identify:

• Changes to customer data rights or permitted uses
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
• New data-sharing or disclosure rights
• Changes to confidentiality, security, retention, or deletion obligations
• New customer consent requirements or opt-out rights
• Allocation of intellectual-property rights in inputs, outputs, or trained models
• Liability, indemnity, or regulatory risks arising from the additions

AI Training Analysis

No specific language regarding AI-model training or related data use is included in the supplied diff. It is therefore not possible to determine whether the amendments:

• Permit use of customer data to train general-pu

Summary

Scope of the Diff

• The diff states that approximately 803 words were added.
• However, the actual added language is not included in the material provided.
• Because there are no specific clauses to review, the legal effect of the changes cannot be reliably determined.

AI Training and Customer Data

• No information is provided showing whether customer data may be:
• Used to train, fine-tune, or improve artificial intelligence or machine-learning models;
• Combined with other customers’ data for model development;
• Anonymized, de-identified, or retained for training purposes;
• Shared with third-party AI providers;
• Used to generate or evaluate prompts, outputs, embeddings, or other model-related materials; or
• Excluded from training by default or only excluded if the customer opts out.
• Accordingly, no conclusion can be reached about whether the c

Structured Summary of Important Changes

1. No Express Authorization to Train AI Models

• The revised policy does not expressly authorize Celtra, its affiliates, or service providers to use Candidate Information, resumes, application materials, or other personal data to train, fine-tune, validate, or improve AI models.
• It also does not state that candidate data will be excluded from AI training.
• The revised language permits use of anonymous, non-PII data for business planning, hiring-trend analysis, internal reporting, and other legitimate business interests. This could potentially include AI-related analytics if the data is genuinely anonymized, but it is not a clear AI-training authorization.
• Service providers may process information only to provide services on Celtra’s behalf. This appears to restrict independent use of candidate data, although the policy does

Analysis

The provided material does not include the actual contract language. It only states:

> “Added approximately 138 words to the document”

Without the added, deleted, or replacement text, it is not possible to determine:

• What legal obligations or rights changed;
• Whether liability, confidentiality, intellectual property, security, termination, or payment terms were modified;
• Whether customer data may be used for artificial intelligence (AI) training;
• Whether such use is optional, mandatory, or subject to consent;
• Whether data may be shared with affiliates, vendors, or third-party AI providers;
• Whether customer data may be retained after termination; or
• Whether the customer receives any opt-out, deletion, or audit rights.

AI Training Review

No conclusion can be drawn regarding AI-model training because the relevant wording is not included. The key provisions