Domestika

Summary of Important Changes

1. No express AI-training authorization identified

• The diff does not add language expressly allowing Domestika, its service providers, or other third parties to use customer data, content, prompts, course activity, or uploaded materials to train artificial-intelligence or machine-learning models.
• The appearance of “Artificial Intelligence courses” and “ChatGPT courses” appears to be website navigation/footer content, not a data-use provision.
• The revised summary lists purposes such as profiling, personalisation, targeted advertising, fraud prevention, analytics, and legal compliance, but does not expressly mention AI training.
• Accordingly, the diff does not appear to create a new contractual right to train AI models. However, the broad references to analytics, profiling, personalisation, and third-party processors could potentially encompass AI-related processing if described elsewhere in the full policy or processor arrangements. This should be confirmed against the complete, clean policy.

2. Expanded U.S. state privacy-law coverage

• The previous language focused primarily on California and Nevada.
• The revision adds rights for residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia, including:
• Access and data portability;
• Deletion;
• Correction of inaccurate data;
• Opt-out of data sales and targeted advertising; and
• Appeal rights if a request is denied.
• Requests must generally be submitted from the email address associated with the user’s Domestika account.
• The revised language states that these rights are subject to exceptions, which may limit their practical scope.

3. Changed wording regarding sale of personal information

• The prior wording stated that Domestika “does not currently sell” personal information under Nevada law.
• The revised text removes that specific assurance and instead provides general opt-out rights concerning sales and targeted advertising.
• The policy still states that data may, in some circumstances, be “sold” under the CCPA’s broad definition. This creates greater uncertainty about whether certain disclosures or transfers may qualify as sales or targeted advertising.

4. New layered privacy notice

• A new “First Layer Information Notice (Summary)” has been added.
• It summarizes:
• Domestika as controller;
• Processing purposes;
• Legal bases;
• Categories of recipients and processors;
• International transfers;
• Retention periods; and
• User rights.
• The summary confirms processing through hosting, IT, analytics, CRM, mailing, and payment providers, including transfers to the United States and potentially other countries.

5. Other notable changes

• The text has been reformatted and corrected in numerous places, including punctuation and possessive wording.
• The revised summary expressly identifies profiling and personalisation as purposes and preserves automated-decision safeguards, including human intervention and the right to contest decisions.
• Much of the diff appears to include accidental website-navigation or page-scraping content. The final policy should be reviewed in a clean version before relying on its wording.

Summary

The provided diff does not include the actual amended contract language. It only states:

> “Added approximately 156 words to the document”

Without the added, deleted, or replacement text, it is not possible to reliably identify:

• Changes to the parties’ rights or obligations
• New liability, indemnity, confidentiality, or termination risks
• Changes to data ownership, licensing, retention, or security
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models
• Whether customer data may be shared with affiliates, vendors, or model providers
• Whether training use requires consent, is automatic, or can be opted out of
• Whether prompts, outputs, metadata, or derived data are included in the permitted use
• Whether customer data is anonymized, aggregated, or otherwise de-identified before use

AI-Training Review

No conclusion can be reached about AI-model training from the information provided. The added 156 words could materially expand the provider’s rights—for example, by permitting use of customer content to train or improve artificial intelligence systems—but the relevant language is not included.

Information Needed

Please provide the full redline or the exact text of the 156-word addition, including any deletions and replacement language. Once provided, the analysis can identify:

1. The precise contractual changes;

2. Any new or expanded rights to use customer data;

3. Whether AI training is permitted and for what purposes;

4. Applicable consent or opt-out mechanisms;

5. Data-sharing, confidentiality, security, and deletion implications; and

6. Recommended negotiation points or safeguards.

Summary

The diff states only that approximately 156 words were removed from the document. The actual deleted language is not provided.

Key Legal Impact

• Changes cannot be reliably analyzed: Without the text that was removed, it is impossible to determine which obligations, rights, limitations, or protections have changed.
• Potential risk from deletion: Removing contract language may:
• Eliminate customer protections or provider obligations.
• Broaden the provider’s rights by removing restrictions or conditions.
• Remove confidentiality, security, data-use, audit, or compliance commitments.
• Change liability allocation, warranties, indemnities, termination rights, or dispute provisions.
• Create ambiguity if related provisions remain elsewhere in the agreement.

AI Training and Customer Data

• No conclusion is possible regarding AI-model training. The supplied diff does not identify whether any language concerning:
• Training, fine-tuning, or improving AI models;
• Use of customer data, prompts, inputs, outputs, or feedback;
• De-identification or aggregation;
• Retention or human review; or
• Opt-out rights or restrictions on commercial use

was removed.

• If the deleted text contained restrictions on using customer data for AI training, its removal could materially expand the provider’s ability to use that data. Conversely, deletion of a permission to use data could narrow those rights. The direction of the change cannot be determined from the information provided.

Recommended Review

Obtain the actual redline or the 156 deleted words, including the surrounding provisions. Particular attention should be given to any deletion from sections titled:

• Data Use or Customer Data
• Artificial Intelligence or Machine Learning
• Confidentiality
• Privacy and Security
• Service Improvement
• Feedback
• Retention or Deletion
• Intellectual Property

Until the deleted language is available, no definitive assessment of the legal or AI-training implications can be made.

Privacy Policy Changes Summary

Overall assessment

The diff appears to update the Privacy Policy to a March 2026 version and correct formatting, punctuation, contact details, and webpage-navigation content. The most legally significant changes concern profiling, California “sale” disclosures, expanded U.S. state privacy rights, and clearer methods for exercising rights.

Key substantive changes

1. Profiling and automated decision-making

• Domestika may create user profiles based on Platform activity, including:
• Courses viewed or purchased
• Members followed
• Payment methods
• Other interactions with the Platform
• Profiling may affect which content is prioritised in the user’s experience.
• New or clearer safeguards state that users may:
• Contact the Data Protection Officer at dataprotection@domestika.org to request human intervention
• Express their views
• Contest an automated decision
• Object to profiling as described in the policy

Risk: Personalisation may influence the content shown to customers. Although the policy states that these decisions do not have similarly significant effects for GDPR purposes, the scope of profiling data is broad and may include payment-related information.

2. AI model training

• The diff contains no express provision authorising Domestika to use customer data, content, course activity, communications, or uploaded materials to train artificial-intelligence or machine-learning models.
• It also does not expressly prohibit such use.
• References to “Artificial Intelligence courses” appear to be website navigation or category content, not a data-processing purpose.

Risk/interpretation: This version does not provide a clear contractual basis for AI training. If Domestika intends to train models using customer data, that purpose should be expressly disclosed, including the data involved, legal basis, recipients, retention, opt-out rights, and whether data is shared with AI providers. Customers should not assume that AI training is either permitted or excluded solely from this diff.

3. California “sale” disclosure

• The policy now states that, in some circumstances, personal information could be “sold” under the CCPA’s broad definition, which can include certain sharing or transfers.
• It explains that some sharing with service providers is not treated as a sale.
• California rights language appears to include access, deletion, correction, opt-out of sales and targeted advertising, and data portability.

Risk: The disclosure is broad and may concern transfers that do not involve direct payment. The policy should identify the categories of information, recipients, and purposes involved.

4. Expanded state privacy rights

• Rights are added or clarified for residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia.
• Rights include access, deletion, correction, portability, and opting out of sales and targeted advertising.
• Nevada residents may opt out of certain sales; Domestika states it does not currently sell information as defined under Nevada law.

5. Contact and compliance updates

• The Data Protection Officer’s email, dataprotection@domestika.org, is added repeatedly for privacy requests, complaints, international-transfer information, processor details, and objections.
• The policy clarifies that renewed consent will be obtained where required when consent-based processing changes.

Drafting/technical issues

The diff includes substantial webpage-navigation text, compressed formatting, and apparently duplicated or corrupted state-law sections. The final published version should be reviewed to ensure headings, section numbering, and rights notices are coherent and legally complete.

Summary of Important Changes

1. No Express Change to AI-Model Training

• The diff does not add, remove, or modify an express provision authorizing Domestika to use customer data, course content, uploads, communications, or usage information to train artificial-intelligence or machine-learning models.
• The appearance of “Artificial Intelligence courses” and “ChatGPT courses” appears to be website navigation content, not a data-use authorization.
• The policy does describe profiling based on Platform activity, including courses viewed or purchased, followed members, and payment methods. This supports personalization and prioritization of content, but it is not expressly described as AI training.
• Customers should not assume that the absence of an AI-training clause means data is excluded from AI development; the policy permits broad processing and sharing with service providers, and the diff does not clearly address whether vendors may use data to improve their own models. This remains a material ambiguity.

2. Profiling and Automated Decisions

• The policy continues to permit profiling based on user activity and personalization of the Platform.
• A safeguard was removed: the prior text expressly allowed users to contact Domestika to obtain human intervention regarding an automated decision. The revised text retains the ability to express a viewpoint, contest a decision, and object, but no longer expressly mentions requesting human intervention.
• This may reduce the clarity of users’ rights under GDPR Article 22, particularly where automated processing has significant effects.

3. Expanded U.S. State Privacy Rights

• The prior Nevada-specific section was replaced with broader rights for residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, Virginia, and Nevada.
• The revised notice lists rights to:
• Access and obtain a copy of personal data;
• Delete personal data;
• Correct inaccurate data;
• Opt out of data sales and targeted advertising; and
• Obtain data portability.
• Requests must be sent from the email address associated with the Domestika account. Certain exceptions apply, and users may appeal denied requests.
• The policy now states that data may, in some circumstances, be “sold” under the CCPA’s broad definition, including sharing or transferring information for value. This is a potentially important disclosure, even though the policy describes certain service-provider sharing as excluded from “sales.”

4. New Layered Privacy Summary

• A new “First Layer Information Notice” summarizes the controller, purposes, legal bases, recipients, international transfers, retention periods, and user rights.
• The summary identifies analytics, CRM, mailing, payment, hosting, and IT providers as potential processors and confirms transfers to the United States and other countries.
• The summary is useful for transparency but does not expand or narrow the underlying processing terms.

5. Drafting and Notice Risks

• The “last updated” date was removed, making it harder to determine when the revised policy took effect.
• Much of the diff appears to contain formatting, punctuation, and website-navigation artifacts. The final published version should be checked carefully for numbering, completeness, and readability.

No

No

Summary

The provided diff does not include the actual amended contract language. It only states:

> “Added approximately 156 words to the document”

Because the added text is not shown, it is not possible to determine the legal effect of the changes or identify new risks.

AI Training and Customer Data

No conclusions can be drawn about whether the contract now permits or restricts:

• Using customer data to train, fine-tune, or improve AI models;
• Using customer prompts, inputs, outputs, files, or personal information for model development;
• Sharing customer data with affiliates, vendors, or AI service providers;
• Retaining data for training after termination;
• Using aggregated, de-identified, or anonymized data for AI purposes;
• Opt-out rights, consent requirements, or limits on human review; or
• Ownership and confidentiality of AI-generated outputs.

Recommended Next Step

Please provide the complete diff, including the text within the addition markers ({}), deletion markers ([]), and replacement markers ([]{}). The added 156 words are necessary to assess:

1. What changed;

2. Whether customer data may be used for AI training;

3. Whether the provider receives broader data-use rights;

4. Whether confidentiality, privacy, security, or retention obligations changed; and

5. Whether the customer has any approval, notice, or opt-out rights.

No

Summary

The diff indicates that approximately 152 words were removed from the document, but it does not identify which provisions were deleted.

Key Legal Impact

• Substantive review is not possible: Without the deleted text, it is impossible to determine whether the changes affect liability, confidentiality, intellectual property, data protection, termination, or other rights and obligations.
• Potential narrowing of customer protections: Deleted language could have limited the provider’s rights or imposed obligations concerning data security, confidentiality, use restrictions, or compliance.
• Potential expansion of provider rights: If the removed language contained restrictions or consent requirements, its deletion could give the provider broader contractual discretion.

AI Training and Customer Data

• No definitive conclusion can be drawn: The available diff does not show whether language concerning the use of customer data to train, fine-tune, evaluate, or improve AI models was added, removed, or changed.
• Important risk to check: If the deleted text prohibited such use, required opt-in consent, restricted use to de-identified data, or required deletion after termination, its removal could materially expand the provider’s ability to use customer data for AI-related purposes.
• Conversely: If the deleted language authorized AI training or permitted retention and reuse of customer data, its removal could narrow those rights.

Recommended Follow-Up

Obtain either:

1. The actual 152 deleted words; or

2. A redline showing the preceding and revised versions.

The deletion should be specifically reviewed for terms such as “train,” “fine-tune,” “improve,” “develop,” “machine learning,” “models,” “customer data,” “aggregated,” “de-identified,” “service data,” “retain,” and “consent.”

Summary of Important Changes

1. Document and contact information

• The Privacy Policy now states that it was last updated in March 2026.
• Definitions and legal references have been standardized, including “Platform,” “Services,” “Personal Data,” “Users,” “EEA,” “GDPR,” and “CCPA.”
• A Data Protection Officer contact email has been added or consistently identified as dataprotection@domestika.org. This email is now provided for:
• Privacy inquiries and complaints;
• Data-subject rights requests;
• Objections to direct marketing;
• Requests for information about processors and international transfers;
• Requests for human intervention regarding automated decisions.

2. Profiling and automated decision-making

• The policy continues to permit Domestika to create user profiles based on platform activity, including:
• Courses viewed or purchased;
• Members followed;
• Payment methods;
• Other interactions with the platform.
• Profiles may be used to prioritize or personalize content.
• A new safeguard expressly states that users may contact the DPO to obtain human intervention regarding automated decisions, in addition to expressing their views, contesting decisions, and exercising their right to object.

Risk: Users remain subject to behavioral profiling and personalization. The policy does not appear to prohibit broader analytics or future uses of profile data, and the scope of “automated decision-making” is not fully detailed.

3. U.S. state privacy rights

The California and other U.S. state privacy sections have been substantially reorganized and expanded.

New or clarified rights for residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia include:

• Access to and a copy of personal data;
• Deletion;
• Correction of inaccurate data;
• Opting out of data sales and targeted advertising;
• Data portability in a portable and readily usable format.

Requests must generally be sent to dataprotection@domestika.org from the email address associated with the account, and identity verification may be required.

For Nevada residents, the policy states that Domestika does not currently sell personal information as defined under Nevada law, while still providing an opt-out process.

Risk: The policy states that personal information could, in some scenarios, be “sold” under the broad CCPA definition, which may include certain transfers or sharing. This creates potential exposure for users’ data to advertising or other third-party uses.

4. AI-model training

• No express change or provision concerning the use of customer data to train, fine-tune, evaluate, or improve AI models is visible in the supplied diff.
• The added website content references “Artificial Intelligence courses” and “ChatGPT courses,” but this appears to be navigation or marketing content—not authorization to use customer data for AI training.
• The policy does not expressly grant or remove a right to opt out of AI training.

Key risk: Because there is no specific AI-training language, the policy remains ambiguous about whether platform activity, user submissions, course content, communications, or other personal data may be used for AI development under broader purposes such as personalization, analytics, quality improvement, fraud prevention, or service provision.

Summary of Important Changes

1. AI training and use of customer data

• No express provision authorizing the use of customer data to train, fine-tune, or improve AI models was added or removed.
• The diff does not state whether user content, course activity, prompts, uploads, communications, or other personal data may be used for AI training.
• The policy continues to describe profiling and automated decision-making based on Platform activity, including courses viewed or purchased, followed members, and payment methods. This may affect the content prioritized in a user’s experience.
• A new summary table refers to “profiling and personalisation” as a processing purpose, but it does not expand this into AI-model training.
• The appearance of “Artificial Intelligence courses” and “ChatGPT courses” appears to be website navigation/footer content, not a data-use authorization.

Risk: If Domestika or its service providers use customer data for AI training, the policy remains unclear and may not provide sufficiently specific notice or legal basis, particularly under GDPR and emerging U.S. AI/privacy requirements.

2. Expanded U.S. state privacy rights

The revised policy adds or consolidates rights for residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia, including:

• Access and a copy of personal data
• Deletion
• Correction of inaccurate data
• Opt-out of data sales and targeted advertising
• Data portability
• Appeals where a request is denied

It also retains rights for Nevada residents and refers to a broader “Privacy Notice for Residents” process. Requests must generally be submitted from the email address associated with the Domestika account, which may create an administrative barrier for some users.

3. Data sales and targeted advertising

• The policy continues to state that, in some circumstances, data could be “sold” under the CCPA’s broad definition.
• The revised language no longer clearly repeats the prior statement that Domestika “does not currently sell” personal information under Nevada law.
• The new rights expressly include opting out of data sales and targeted advertising, suggesting greater recognition of these activities or of related statutory obligations.

Risk: The revised wording may create uncertainty about whether Domestika currently sells or shares personal data for targeted advertising.

4. New layered privacy summary

A new Section 13 provides a high-level table summarizing:

• Controller and DPO contact
• Processing purposes and legal bases
• Recipients and processors
• International transfers
• Retention periods
• User rights

This improves accessibility but is expressly only a summary; the detailed provisions in the main policy control.

5. Other notable changes

• The policy identifies additional processor categories, including hosting, IT, analytics, CRM, mailing, and payment services.
• The summary confirms international transfers, including to the United States and potentially other countries.
• Much of the diff consists of punctuation, formatting, website-navigation text, and apparent redaction or extraction errors rather than substantive legal changes.

Summary of Important Changes

1. AI-model training and use of customer data

• No express change was identified concerning training AI models.
• The diff does not add or remove language stating that customer data, course activity, uploaded content, communications, or other Personal Data may be used to train, fine-tune, evaluate, or improve artificial-intelligence models.
• The policy still describes broader data uses that could be relevant to AI or automated systems, including:
• Profiling and personalisation based on activity such as courses viewed or purchased, followed members, and payment methods.
• Automated prioritisation of content in the Platform experience.
• Fraud prevention and behavioural analysis.
• Quality, satisfaction, and service-improvement activities.
• These provisions do not, by themselves, authorize AI-model training. However, their broad wording may permit analytics or automated processing that could later support AI-based recommendation or fraud systems. The policy does not clarify whether data used for these purposes is anonymised, aggregated, retained in model weights, or shared with AI vendors.

2. Automated decision-making safeguards expanded

• Users may now contact the Data Protection Officer to obtain human intervention regarding automated decisions.
• The policy continues to state that users may express their views, contest decisions, and object to processing.
• This is a user-protective clarification, particularly for GDPR Article 22 rights, although the scope of decisions covered remains relatively general.

3. New and clarified contact details

• The Data Protection Officer’s email, dataprotection@domestika.org, is now inserted repeatedly throughout the policy.
• The address is provided for:
• Privacy inquiries and complaints;
• Exercising data rights;
• Objecting to direct marketing;
• Requesting processor and international-transfer information;
• Seeking human intervention concerning automated decisions.
• This improves usability and creates a clearer compliance contact channel.

4. California and other U.S. state privacy rights

• The California section now states that Personal Data may, in some circumstances, be “sold” under the broad CCPA definition, which can include certain sharing or transfers.
• New or clarified rights for residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia include:
• Access and copies of Personal Data;
• Deletion;
• Correction;
• Opt-out of data sales and targeted advertising;
• Data portability.
• Nevada residents are told they may opt out of certain sales, while Domestika states that it does not currently sell information as defined under Nevada law.
• The revised language may create compliance risk because the diff appears to contain duplicated or structurally corrupted section text, potentially making the applicable rights and jurisdictional notices difficult to interpret.

5. Other changes

• The policy is identified as last updated in March 2026.
• Various punctuation, defined-term, and formatting corrections were made.
• The inserted webpage navigation and promotional content appears accidental and should be removed from the legal policy version to avoid confusion about the operative terms.

Summary

Key Limitation

The supplied diff only states that approximately 152 words were removed. It does not identify:

• Which provisions were deleted;
• Whether any language was added or replaced;
• Whether the deletion affects data rights, confidentiality, intellectual property, privacy, or AI training; or
• Whether the deletion narrows or broadens either party’s obligations.

Accordingly, a substantive legal-risk analysis is not possible from the information provided.

AI Training and Customer Data

No conclusion can be drawn about whether the customer’s data may be used to train, fine-tune, evaluate, or improve AI models. The deleted language could have:

• Prohibited or restricted AI training using customer data;
• Required customer consent before such use;
• Limited training to aggregated, anonymized, or de-identified data;
• Required deletion or segregation of customer data;
• Granted the provider a broader license to use customer content; or
• Addressed whether prompts, outputs, metadata, or usage data are included within “customer data.”

The removal of any customer-data or AI-use restriction could materially increase the provider’s rights and the customer’s privacy, confidentiality, intellectual-property, and regulatory risks. Conversely, deletion of a provider permission could restrict the provider’s ability to use data for model improvement or service development.

Recommended Next Step

Provide the actual deleted text, or a full redline showing the surrounding provisions. The most important sections to review are:

1. Customer data and content rights

2. Data processing and privacy

3. Confidentiality

4. Artificial intelligence or machine-learning use

5. Service improvement and analytics

6. Security, retention, and deletion

7. Intellectual-property licenses

8. Subprocessors and third-party model providers

Until the deleted language is available, the principal risk is uncertainty: an important limitation or consent requirement may have been removed without being identifiable from the abbreviated diff.

No

Summary

The provided diff does not include the actual contract language. It only states:

> “Added approximately 156 words to the document”

Because the added words and any deleted or replaced language are not shown, it is not possible to identify:

• Changes to the parties’ rights or obligations
• New liability, indemnity, confidentiality, or security risks
• Changes to data ownership or permitted data uses
• Whether customer data may be used to train, fine-tune, test, or improve AI models
• Whether data may be shared with affiliates, vendors, or third parties
• Changes to retention, deletion, or anonymization requirements
• Any new customer consent or opt-out rights

AI Training and Customer Data

No conclusion can be reached about AI-model training from the supplied material. The actual added or modified language should be reviewed for terms such as:

• “train,” “fine-tune,” “develop,” “improve,” or “enhance” models
• “usage data,” “customer data,” “inputs,” “outputs,” or “content”
• Rights to use data in aggregated, de-identified, or anonymized form
• Disclosure to subprocessors or model providers
• Opt-out, deletion, confidentiality, or security protections
• Whether model-training rights continue after termination

Required Information

Please provide the full diff, including the actual text within {}, [], and []{}. Without that text, a substantive legal-risk analysis cannot be performed.

Summary of Important Changes

1. No express change concerning AI-model training

• The diff does not add or remove any express provision authorizing Domestika to use customer data, content, prompts, uploads, course activity, or other personal data to train artificial-intelligence models.
• The policy does mention profiling and personalisation based on platform activity, including courses viewed or purchased, members followed, and payment methods. This is described as being used to prioritise content and personalise the user experience—not to train AI models.
• “Artificial Intelligence courses” and “ChatGPT courses” appear only as website navigation or course-category content. They do not create an AI-training permission.
• The absence of an AI-training clause means the policy remains unclear on whether data may be used for model training under broad purposes such as analytics, service improvement, or product development. Users seeking certainty should request clarification or review any separate terms governing uploaded content, projects, or generative-AI features.

2. Expanded U.S. state privacy rights

The revised policy substantially expands the rights notice for residents of:

• Colorado
• Connecticut
• Montana
• Oregon
• Texas
• Utah
• Virginia

The listed rights now include:

• Access to and copies of personal data
• Deletion
• Correction of inaccurate data
• Opting out of data sales and targeted advertising
• Data portability
• Appeals where a request is denied

The policy also adds Nevada-specific privacy-rights language and states that requests should generally be submitted from the email address associated with the user’s Domestika account.

Risk: The policy now expressly contemplates data sales or transfers that may qualify as “sales” under applicable U.S. privacy laws, although the Nevada section says Domestika does not currently sell personal information as defined under Nevada law. The terminology is not entirely uniform across jurisdictions and may require careful interpretation.

3. New layered privacy notice

A new Section 13 provides a summary table covering:

• Domestika’s identity and contact details
• Processing purposes
• Legal bases
• Recipients and service providers
• International transfers
• Retention periods
• User rights

The summary lists profiling and personalisation, fraud prevention, legal compliance, analytics, CRM, mailing, hosting, IT, and payment providers.

Risk: The summary is expressly only an overview. The detailed provisions elsewhere in the policy control, so users must still review the full policy for the scope and limitations of each processing activity.

4. Profiling and automated decisions

The policy continues to permit profiling based on platform activity and allows content prioritisation. It preserves rights to object, express a view, contest relevant decisions, and request human intervention.

5. Mostly editorial changes

Many other changes correct punctuation, spacing, formatting, broken headings, and website-navigation text. These do not appear to materially alter substantive privacy rights or obligations.