The Policy covers users of Hugging Face services and is part of the Terms of Use
This Privacy Policy is issued by Hugging Face, Inc. (called "the Company") and describes what information the Company gathers from users of the Hugging Face services and how it uses that information. It applies to all users of the Services, and it states that it is part of the Company Terms of Use. The document shows an effective date of March 28, 2023.
Supporting quotations
Effective Date: March 28, 2023
This Privacy Policy (the “Policy”) describes the type of information that Hugging Face, Inc. (the “Company”) gathers from users of the Hugging Face services (the “Services”), and how the Company uses that information.
The Policy is part of the Company Terms of Use. The Policy applies to all users of the Services (“Users”).
Qualifications & exceptions
"Users" and "Services" are the terms this Policy defines for itself; the Services are described only as "the Hugging Face services".
Not stated here
The Terms of Use that this Policy says it is part of are not part of this source text, so their contents are not described here.
Legal Rights & Agreement Rules · Company practice
Using the Services is treated as consent to the Policy and to processing of Personal Information
The Policy states that by using the Services you consent to its terms and to the Company processing Personal Information in the manner and for the purposes the Policy sets out. It also says that by creating an account on the Website and using the Services you consent to disclose information, some of which might be personal, and to that processing. If you do not agree with the Policy, it asks you not to use the Services. This describes how the Policy characterizes use of the Services; it does not say whether that characterization is effective in a particular legal system.
Supporting quotations
By using the Services, you consent to the terms of the Policy and to our processing of Personal Information in the manner and for the purposes set forth herein. If you do not agree with the Policy, please do not use the Services.
By creating an account on the Website and by using the Services, you consent to disclose information, some of which might be personal, and to our processing of such Personal Information in the manner and for the purposes set forth in this Policy.
Qualifications & exceptions
The consent described is tied to processing "in the manner and for the purposes set forth" in the Policy.
Not stated here
This passage does not itself describe how this consent can be withdrawn.
Legal Rights & Agreement Rules · Permission or license
The Company may change the Policy at any time; changes take effect 10 days after posting
The Company reserves the right, at its sole discretion, to change the Policy at any time. A change takes effect 10 days after the revised Policy is posted on the Hugging Face website. The Policy says that continuing to use the Services 10 days after that posting means you accept the changes.
Supporting quotations
The Company reserves the right, at its sole discretion, to change the Policy at any time, which change will be effective 10 days following posting the revision to the Policy on the Hugging Face website (the “Website”). Your continued use of the Services 10 days following such posting means you accept those changes.
Not stated here
This passage does not say whether users are told of a change in any way other than posting on the Website.
Legal Rights & Agreement Rules · User right or choice
California residents can request information about disclosures for direct marketing; one response per year
The Policy says California Civil Code Section 1798.83 permits customers who are California residents to request certain information about the Company's disclosure of Personal Information to third parties for direct marketing purposes. To make such a request, send an email to privacy@huggingface.co. The Company states that it is only required to respond to one request per customer each year.
Supporting quotations
California Civil Code Section 1798.83 also permits customers who are California residents to request certain information regarding Our disclosure of Personal Information to third parties for direct marketing purposes. To make such a request, please send an email to privacy@huggingface.co. Please note that the Company is only required to respond to one request per customer each year.
Qualifications & exceptions
The right described is for customers who are California residents, and covers disclosures to third parties for direct marketing purposes.
The Company states it need respond to only one request per customer each year.
Not stated here
The text of California Civil Code Section 1798.83 is not part of this source, so the full scope of the information that can be requested is not stated here.
The passage says "customers" rather than "Users", and does not say how the two terms relate.
Legal Rights & Agreement Rules · Permission or license
Information may be used to comply with law, regulation, legal process or governmental requests
The Company may use information from Users to comply with any applicable law, regulation, legal process or governmental requests.
Supporting quotations
to comply with any applicable law, regulation, legal process or governmental requests.
Legal Rights & Agreement Rules · Context
The Policy says GDPR and other data protection laws require it to state the legal basis for processing
The Policy says that under applicable data protection laws, especially the EU General Data Protection Regulation (EU) 2016/679, Hugging Face is under an obligation to notify Users of the legal basis on which their Personal Information is processed. It then sets out three headings: Consent, Agreement and Legitimate Interests. "Personal Information" is the Policy's defined term for information that can identify an individual.
Supporting quotations
Pursuant to applicable data protection laws, and especially the European Union’s General Data Protection Regulation (EU) 2016/679 (the “GDPR”), Hugging Face remains under an obligation to notify the Users about the legal basis on which their Personal Information is processed.
“Personal Information” means any information that can, alone or associated with other information, be used to identify an individual
Qualifications & exceptions
The three grounds are described in the following cards.
Not stated here
The text does not say whether these grounds are meant to apply to all Users or only to those covered by the GDPR or other data protection laws.
Legal Rights & Agreement Rules · Context
Creating an account and using the Services is stated as consent to disclose information and to its processing
Under the heading "Consent", the Policy says that by creating an account on the Website and by using the Services you consent to disclose information, some of which might be personal, and to the Company's processing of such Personal Information in the manner and for the purposes set forth in the Policy.
Supporting quotations
Consent
By creating an account on the Website and by using the Services, you consent to disclose information, some of which might be personal, and to our processing of such Personal Information in the manner and for the purposes set forth in this Policy.
Qualifications & exceptions
The consent is tied to processing "in the manner and for the purposes set forth in this Policy".
Legal Rights & Agreement Rules · Context
Entering into an agreement with Hugging Face is stated as consent to processing under that agreement
Under the heading "Agreement", the Policy says that if you or your organization enter into an agreement with Hugging Face, either by simply using the Services and abiding by the terms and conditions available on the Website or by executing another separate agreement, you also consent to the processing of your Personal Information as pursuant to the obligations of such an agreement.
Supporting quotations
Agreement
If you or your organization enter into an agreement with Hugging Face, either by simply using the Services and abiding by the terms and conditions available on the Website, or by executing another separate agreement, you also consent to our processing of your Personal Information as pursuant the obligations of such an agreement.
Qualifications & exceptions
The agreement can be the terms available on the Website or a separate agreement; the consent is to processing "as pursuant the obligations of such an agreement".
Not stated here
The terms and any separate agreements referred to are not part of this source text, so the obligations that processing may follow from are not described here.
Legal Rights & Agreement Rules · Context
The EU main establishment is Hugging Face, SAS in Paris, under the French data protection agency (CNIL)
The Policy states that the main establishment in the European Union is Hugging Face, SAS, a French société par actions simplifiée à associé unique registered in the Paris Trade and Companies Register under number 822 168 043, with headquarters at 9 rue des Colonnes, 75002 Paris, France. It says this designation gives full authority to the French Data Protection Agency, la Commission Nationale de l'Informatique et des Libertés (CNIL), per the GDPR. The Policy elsewhere states that Hugging Face is under an obligation to notify Users of the legal basis for processing under data protection laws, especially the GDPR.
Supporting quotations
The main establishment in the European Union is Hugging Face, SAS, a French société par actions simplifiée à associé unique registered in the Paris Trade and Companies Register under the number 822 168 043, and whose headquarters are located on 9 rue des Colonnes, 75002 Paris, France. The designation of this main establishment in the European Union gives full authority to the French Data Protection Agency, la Commission Nationale de l'Informatique et des Libertés (CNIL) per the General Data Protection Regulation (GDPR).
Hugging Face remains under an obligation to notify the Users about the legal basis on which their Personal Information is processed.
Qualifications & exceptions
The statement is framed in terms of the GDPR and the EU.
Not stated here
The passage does not say how this establishment relates to the Hugging Face, Inc. entity that the Policy names as "the Company".