AIgree

Recent changes

A chronological feed of substantive shifts in the legal documents we track. 53 changes so far.

Messenger Privacy Policy shift +1 2026-05-10

Meta added a detailed GDPR legal-basis section and expanded Accounts Centre, ads, partner-data, and transaction disclosures.

added: legal basis for processing and GDPR rights expanded: Accounts Centre data sharing across accounts expanded: ad personalization and measurement disclosures added: joint-controller language for some partner data clarified: Meta Ireland Limited as the controller
Threads Privacy Policy shift +1 2026-05-10

Meta broadened ad and cross-account data use, added Accounts Centre and rights-management details, and clarified U.S. entity and partner-sharing language.

added: sponsored or commercial content in ad use added: accounts centre connected-experience processing clarified: rights management and deletion section changed: controller entity from Meta Platforms Ireland Limited to Meta Platforms, Inc.
Bolt Privacy Policy shift +1 2026-05-09

Bolt reorganized and clarified its privacy policy, but also expanded biometric identity verification, passive data collection, safety, fraud, rating, and marketing processing details.

added: facial recognition and biometric verification details expanded: cookies/SDKs/analytics and calendar/location use cases clarified: rider rating warnings, suspensions, and unmatching clarified: marketing and service communication purposes reformatted: section headings and data category labels
Messenger Privacy Policy shift +1 2026-05-09

Meta clarified and expanded ad/measurement, Accounts Centre, and integrated-partner processing, and renamed rights and legal-basis sections, with the controller changing to Meta Platforms, Inc.

added: ads and commercial content language added: Accounts Centre cross-account experiences added: new rights-management section changed: controller reference from Meta Platforms Ireland Limited to Meta Platforms, Inc. clarified: integrated-partner access and retention
Threads Privacy Policy shift +1 2026-05-09

Threads updated its privacy policy with a new legal-basis section, clarified joint-controller processing with partners, and expanded account-centre and ad-use disclosures.

added: legal basis and GDPR rights section added: joint controller language for partner data expanded: Accounts Centre data sharing details clarified: ad personalisation and cookies use changed: Meta entity references to Ireland Limited
Instagram Privacy Policy shift +1 2026-05-09

Meta renamed and expanded sections around rights management, ads, cross-account use, and Instagram/Accounts Centre data sharing, while adding advertising and communication-use details.

added: new rights-management section for managing, deleting, downloading, and porting data added: more explicit ad use, including sponsored/commercial content and audience network ads added: cross-account use through Accounts Centre and connected experiences changed: legal basis and controller references from Ireland to Meta Platforms, Inc. clarified: how message opens and other interactions may be used for communication and outreach
Medium Privacy Policy shift +1 2026-05-08

Added a contact-import feature that hashes and matches device address book data to find people you know on Medium, retaining encrypted identifiers up to 30 days.

added: address book contact processing added: encrypted, non-reversible matching against member database added: deletion of non-member identifiers immediately after checking added: retention limit of all encrypted identifiers to 30 days moved: inbox signup language into a new contact-discovery section
Messenger Privacy Policy shift +1 2026-05-08

Meta added a legal-basis section, named its Ireland entity, and expanded ad and cross-account data use disclosures including Accounts Centre and partner processing.

added: legal bases and GDPR rights section changed: controller entity to Meta Platforms Ireland Limited expanded: ad personalization and measurement disclosures added: Accounts Centre cross-account data combination added: partner joint-controller processing disclosure
Threads Privacy Policy shift +1 2026-05-08

Meta expanded its privacy policy to cover more ad targeting, account linking, partner data use, and user rights management, while changing the covered entity to Meta Platforms, Inc.

added: ads and commercial content wording added: manage/delete rights section added: Accounts Centre cross-account experiences changed: policy entity from Meta Platforms Ireland Limited to Meta Platforms, Inc.
Facebook Privacy Policy shift +1 2026-05-08

Facebook added a detailed legal-basis section and clarified cross-account, partner, and ad-use processing, including optional Accounts Center linking and WhatsApp integration.

added: legal bases for processing and GDPR-style rights added: optional Accounts Center cross-account data use clarified: partner data may be processed as joint controller expanded: ad personalization and measurement details clarified: WhatsApp account integration within Accounts Center
Expedia Privacy Policy shift +1 2026-05-07

Expedia added a new disclosure for third-party apps and AI assistants, letting connected tools access travel and account data under their own terms, with users responsible for self-configured tools.

added: disclosure for third-party apps, AI assistants, APIs, and connected tools added: sharing of travel search, account, booking, and technical request data via connected tools clarified: users are responsible for tools they install, configure, or authorize clarified: third-party tools are governed by their own privacy policies
Messenger Privacy Policy shift +1 2026-05-07

Meta expanded ad and account-sharing disclosures, added a new rights-management section, and clarified use of Messenger interactions and Marketplace/Shop transactions.

added: section on managing/deleting information and exercising rights expanded: advertising to include sponsored or commercial content and Meta Audience Network clarified: account linking in Accounts Centre and across accounts expanded: transaction data to include payments in Marketplace, Shops, or groups changed: controller entity from Meta Platforms Ireland Limited to Meta Platforms, Inc. in several sections
Threads Privacy Policy shift +1 2026-05-07

Threads added a detailed legal-basis section, shifted account-centre and partner-processing disclosures, and expanded ad and data-use explanations.

added: legal bases and GDPR rights section added: joint controller processing for partner data expanded: ads, account centre, and cross-account data use clarified: Meta company name and processing entity removed: some prior rights/help text and moved sections
Instagram Privacy Policy shift +1 2026-05-07

Instagram added a GDPR-style legal basis and rights section, plus expanded explanations for ads, Accounts Centre sharing, and joint-controller partner processing.

added: legal bases for processing and GDPR rights expanded: ad personalization and controls using accounts centre and cookies added: joint-controller disclosure for certain partner data changed: Meta Platforms entity named as Ireland Limited in more places
Facebook Privacy Policy shift +1 2026-05-07

Meta broadened ad and sponsored content use, added Accounts Centre cross-account features, and revised rights management and controller details.

added: sponsored/commercial content in ad use added: Accounts Centre connected experiences across accounts changed: controller/legal entity references added: new rights-management section and tools
GitLab Privacy Policy shift +1 2026-05-06

Removed the detailed DPF complaint and arbitration provisions and deleted GitLab’s office addresses, leaving the privacy contact section less informative.

removed: DPF dispute-resolution and arbitration details removed: DPF commitments, liability, and public-authority request language removed: GitLab U.S./EEA/UK mailing addresses clarified: privacy concern contact still points to [email protected]
Messenger Privacy Policy shift +1 2026-05-06

Meta added a formal legal-basis section, clarified ad targeting and account-centre data sharing, and stated it may process certain partner data as joint controller.

added: legal basis and GDPR rights section clarified: optional Accounts Centre combining across accounts expanded: ad personalization uses account data and cookies added: joint-controller language for some partner data updated: Meta entity references to Ireland Limited
Prime Video Privacy Policy shift +1 2026-05-06

Amazon expanded its privacy notice with new U.S. disclosures, added data access/deletion rights, and updated advertising and dispute-resolution terms.

added: state-specific privacy and consumer health data disclosures added: access/delete request path via Data Privacy Queries updated: advertising controls to Your Ads Privacy Choices added: EU/UK/Swiss data privacy framework section added: Washington law and dispute limitations in conditions of use
Amazon Privacy Notice shift +1 2026-05-06

Amazon updated its privacy notice for U.S. services, adding state privacy disclosures, broader in-store data collection, new account access rights, and Washington-law dispute terms.

added: consent and links to U.S. state privacy disclosures expanded: collection from physical stores using cameras, sensors, and computer vision added: rights to request access or deletion via Data Privacy Queries added: dispute terms tied to Amazon Conditions of Use and Washington law expanded: advertising and account access/controls, including authors and recommendations
Substack Privacy Policy shift +1 2026-05-05

Substack added sharing of account identifiers with child safety consortia, expanded direct-message handling, and added one-month response and objection rights for privacy requests.

added: share account identifiers with child safety consortia to detect/prevent OCSEA added: one-month response deadline and extension notice for rights requests added: right to object to legitimate-interest processing, including recommendation profiling clarified: Substack may restrict access to received DMs when senders delete or block changed: privacy notices now mention only material policy changes
Messenger Privacy Policy shift +1 2026-05-05

Meta expanded ad/personalization and account-linking uses, added guidance for managing/deleting information, and changed some legal-entity references and partner-sharing details.

added: new rights section for managing or deleting information expanded: ads to include sponsored/commercial content and audience network added: account-centre cross-account connected experiences clarified: processing entity and partner-sharing language removed: standalone legal-basis and retention section headings
Instagram Privacy Policy shift +1 2026-05-05

Meta expanded ad, account-linking, and communication tracking disclosures, and changed the covered controller and rights section to add more account-management options.

added: ads and sponsored/commercial content disclosures added: account linking and cross-account experience details added: email/message interaction tracking for communications changed: controller reference from Meta Platforms Ireland Limited to Meta Platforms, Inc. replaced: legal-basis/rights section with manage-or-delete-your-information section
Facebook Privacy Policy shift +1 2026-05-05

Meta updated its privacy policy to add a legal-basis section, clarify ad and accounts-centre processing, and expand data use for partner/joint-controller and account linking purposes.

added: legal basis and GDPR rights section clarified: ads may use account, cross-account, and cookie data added: joint controller processing for some partner data expanded: Accounts Centre information combining and optionality
Instagram Privacy Policy shift +1 2026-05-04

Instagram added a legal-basis and GDPR rights section, clarified its Ireland entity, and expanded explanations of Accounts Centre and ad processing.

added: legal basis for processing and rights under GDPR changed: controller entity to Meta Platforms Ireland Limited expanded: Accounts Centre data combining across accounts expanded: ad targeting and measurement disclosures
Threads Privacy Policy shift +1 2026-05-02

Meta reorganized and expanded privacy explanations, especially around ads, Accounts Centre, partner sharing, and rights management, with some policy-controller and deletion wording changes.

added: explicit ads/sponsored content explanation added: Accounts Centre cross-account experiences changed: controller references to Meta Platforms, Inc. added: new rights-management section expanded: partner and business-sharing details