This is a critical-risk limitation. X disclaims all warranties and limits its total liability to the greater of $100 USD or what the user paid in the past six months. For free users, this is a $100 cap on all liability. The AS-IS/AS-AVAILABLE disclaimer is comprehensive, covers all X entities and affiliates, and explicitly disclaims responsibility for content moderation, data loss, and service availability. The liability cap is unconscionably low for a platform used by hundreds of millions; a user harmed by a platform outage, data loss, or defamatory content has essentially zero practical remedy.
The T&C grants X broad unilateral modification rights with weak notice requirements. In the US version, X uses "try to notify" language (not guaranteed) for material changes and defines materiality at its sole discretion. Continued use is treated as acceptance of changes, with no affirmative re-consent required. Changes are stated to be non-retroactive, which is good. The EU version provides 30-day advance notice for material changes, but the US version is far weaker. No version history or changelog is promised, making it impossible to verify what changed or what you originally agreed to.
Account termination provisions are extremely broad, with vague trigger language like "create risk or possible legal exposure for us" and "prolonged inactivity" or "commercial inviability." Notice is only "reasonable efforts," not guaranteed. An appeal process exists but is reactive. No clear data preservation, export, or backup options are outlined in the T&C. The combination of vague triggers and weak notice requirements creates high risk.
While users retain nominal ownership of their content, X obtains an extraordinarily broad, worldwide, royalty-free, sublicensable license covering all uses including AI/ML training, modification, and third-party syndication. Critically, the license explicitly allows X to use user content for machine learning and artificial intelligence training without compensation. No revenue sharing applies when content is commercialized. Third parties receive sublicense rights. The content license survives deletion. This is among the most consumer-hostile UGC provisions in the industry.
The T&C incorporates a separate Privacy Policy by reference but does not detail privacy practices itself. The document discloses international data transfer (to US, Ireland, other countries) and provides notice that users consent to such transfer through use. However, X reserves extremely broad rights to access, read, preserve, and disclose user information based on vague standards ("reasonably believe necessary"). The privacy category risks are partially opaque because full practices are in the Privacy Policy, but the data-access provisions in this T&C are concerning.
The main T&C does not detail auto-renewal, cancellation, or refund terms for paid services. Instead, these critical protections are delegated to separate "Terms for Paid Services." The main document merely states that by using paid features, users agree to those separate terms. Without reviewing the separate terms, the core T&C is incomplete on this category. This neutral score reflects the lack of detail; users must review the separate document for full information.
This is a high-risk provision that strips consumers of meaningful legal recourse through two mechanisms: (1) class-action waiver, which eliminates the only practical remedy for small-dollar harms, and (2) exclusive venue in Texas (US) or Ireland (EU), which is geographically inconvenient for most users and economically impossible to access for small claims. While X does not require arbitration (which is slightly better than forced arbitration), the exclusive venue plus class waiver combination is highly restrictive. Users are effectively barred from any practical legal remedy except small claims, which usually cannot be filed against X in a distant forum.
Interestingly, the T&C does not include a sweeping "defend, indemnify and hold harmless" clause that pushes third-party litigation costs onto users. Instead, there is a specific liquidated damages clause for excessive data access/scraping ($15,000 USD per million posts accessed in 24 hours). This is more limited than typical platform indemnification, though the liquidated damages amount for scraping is substantial. The absence of a broad indemnity for third-party claims is actually consumer-favorable relative to industry norms. However, the liquidated damages clause is somewhat problematic as a form of preagreed damages.
Clear age requirement (13+) and broadly scoped service definitions provide a reasonable foundation. The document includes a helpful summary section. However, the terms are extremely long and rely heavily on complex legal language rather than plain-English explanations. Scope is defined but not user-friendly.