Worst parts of this document
Data Retention & Governance
40No retention schedule or governance framework provided.
Security & Breach Notification
40Completely absent.
User Control & Rights
45Opt-out mentioned but no delete/know mechanisms detailed.
Third-Party Sharing
50Broad sharing with analytics/ad platforms without granular controls.
Consent Management
55Mentions opting out but lacks explicit consent withdrawal steps.
Extensive third-party data sharing with Meta, Google, Hotjar, and Drift disclosed.
58Personal Data processed for the following purposes and using the following services:
While the policy transparently lists numerous third-party tracking and analytics services, it lacks explicit GDPR/CCPA rights mechanisms, retention schedules, and breach notification protocols.