The Company reserves the right to access your private information, without consent only for stated purposes
The Company reserves the right to access information you keep private. It may do so with your consent. Without your consent, it says it may access that information only for the purposes of pursuing legitimate interests, with maintaining security on its Services and complying with legal or regulatory obligations given as examples ("such as"). The examples are not stated to be the only legitimate interests.
Supporting quotations
The Company also reserves the right to access this information with your consent, or without your consent only for the purposes of pursuing legitimate interests such as maintaining security on its Services or complying with any legal or regulatory obligations.
Qualifications & exceptions
Access without consent is limited by the words "only for the purposes of pursuing legitimate interests such as" security and legal or regulatory compliance.
Not stated here
This passage does not define "legitimate interests". The Policy separately describes "Legitimate Interests" in its section on grounds for use of information, but this passage does not say that the two are the same.
Use & Processing · Permission or license
The Company may use information from Users for the listed purposes; legitimate interests are described more broadly
The Policy says the Company may use information from Users for the purposes listed in this section. These cover delivering and improving the Services, analysis and research, communicating with you, security, protecting against harm, enforcing terms and complying with law; each is described in its own card. Separately, the grounds subsection says that, apart from the consent and agreement cases, the Company will use the information collected from you to pursue legitimate interests such as legal or regulatory compliance, security control, business operations, scientific research, or any other interest reasonably held as legitimate.
Supporting quotations
The Company may use information from Users for the following purposes:
Apart from the above cases, Hugging Face will use the information collected from you to pursue legitimate interests such as legal or regulatory compliance, security control, business operations, scientific research, or any other interest reasonably held as legitimate.
Qualifications & exceptions
The lead-in uses "may", so the listed uses are permitted rather than stated as certain for every user.
The "legitimate interests" wording includes "any other interest reasonably held as legitimate".
Not stated here
The text does not say whether the list of purposes is complete or how the broader legitimate interests ground relates to it.
Use & Processing · Permission or license
Information may be used to deliver the Services, including accounts, profile and content display, and paid upgrades
The Company may use information from Users to deliver the Services. The Policy says this may include creating your account, displaying your profile or your content, or, where applicable, upgrading your account to a paid account.
Supporting quotations
to deliver the Services, which may include the creation of Your account, the display of Your profile or Your content, or if applicable the upgrading of Your account to a paid account,
Qualifications & exceptions
The account, profile, content and upgrade items are introduced with "which may include", so they are examples rather than a complete list.
Use & Processing · Permission or license
Information may be used to operate and improve the Services and the Company's other products and technologies
The Company may use information to operate and improve the Services. The listed examples are providing more effective customer service, making the Services easier to use by removing the need to re-enter the same information, performing research and analysis aimed at improving the Services or other products and technologies of the Company, automatically updating the Services, and diagnosing or fixing problems with the Services. So the stated improvement purpose reaches other Company products and technologies as well as the Services.
Supporting quotations
to operate and improve the Services by providing you with more effective customer service, making the Services easier to use by eliminating the need for you to enter the same information repeatedly; performing research and analysis aimed at improving the Services, or other products and technologies of the Company; automatically updating the Services; diagnosing or fixing problems with the Services,
Use & Processing · Permission or license
Information may be used for analysis or research on the Services or related topics, for business or scientific purposes
The Company may use information from Users to conduct analysis or research on the Services or any topics related to them, for business operations or scientific purposes.
Supporting quotations
to conduct analysis or research on the Services or any topics related to it, for business operations or scientific purposes,
Qualifications & exceptions
The research may cover "any topics related to" the Services and is described as being for business operations or scientific purposes.
Not stated here
The text does not say whether information is de-identified or aggregated for this research.
Use & Processing · Permission or license
Information may be used to communicate with you, including about anything the Company thinks may interest you
The Company may use information from Users to communicate with you. The examples given are welcome emails, information on technical service issues, security announcements, information on new services available, legal notices and responses to your requests. The Policy also lists "any other information that we think might interest or be relevant to you", which covers communications whose subject the Company chooses.
Supporting quotations
to communicate with you, especially through the sending of welcome emails, information on technical service issues, security announcements, information of new services available, legal notices, response to your requests, or any other information that we think might interest or be relevant to you,
Qualifications & exceptions
The scope of communications includes "any other information that we think might interest or be relevant to you".
Not stated here
This passage does not say whether you can opt out of these communications; the Policy's section on communications and email is a separate part of the Policy.
Use & Processing · Permission or license
Information may be used to protect against harm and enforce terms; disclosure without consent is reserved for harm
The Company may use information to protect against harm to the rights, property or safety of the Company, its Users, yourself or the public, and to enforce any applicable terms of service or agreement, including investigating potential violations. In the sharing section, the Company separately reserves the right to disclose your information without your consent for the purpose of protecting against harm to the rights, property or safety of the Company, its Users, yourself or the public. The disclosure right as written there refers to harm protection; it does not mention enforcing terms.
Supporting quotations
to protect against harm to the rights, property or safety of the Company, our Users, yourself or the public,
to enforce any applicable terms of service or agreement, including investigations of potential violations thereof,
Similarly, we reserve the right to disclose your information without your consent for the purpose of protecting against harm to the rights, property or safety of the Company, our Users, yourself or the public.
Qualifications & exceptions
The harm-protection purpose covers the Company, its Users, you, or the public.
Use & Processing · Company practice
Apart from consent and agreement, the Company uses information to pursue legitimate interests, broadly described
Under the heading "Legitimate Interests", the Policy says that apart from the consent and agreement cases, Hugging Face will use the information collected from you to pursue legitimate interests such as legal or regulatory compliance, security control, business operations, scientific research, or any other interest reasonably held as legitimate. The examples are introduced with "such as" and the sentence ends with "any other interest reasonably held as legitimate", so the grounds are described without a closed list.
Supporting quotations
Legitimate Interests
Apart from the above cases, Hugging Face will use the information collected from you to pursue legitimate interests such as legal or regulatory compliance, security control, business operations, scientific research, or any other interest reasonably held as legitimate.
Qualifications & exceptions
The ground applies "apart from the above cases", meaning the consent and agreement cases.
Not stated here
The text does not say who decides what is reasonably held as legitimate.
Use & Processing · Context
"Anonymous Information" means information that does not enable identification of an individual User
The Policy defines "Anonymous Information" as information which does not enable identification of an individual User, such as aggregated information about use of the Services.
Supporting quotations
"Anonymous Information" means information which does not enable identification of an individual User, such as aggregated information about use of the Services.
Qualifications & exceptions
The aggregated usage information is given as an example ("such as"), not as the whole definition.
Use & Processing · Company practice
Personal Information may be stored and processed in the US or any country where the Company or its affiliates operate
The Policy states that the Company and its servers are located in the United States. Personal Information collected by the Services may be stored and processed in the United States or any other country in which the Company or its affiliates, subsidiaries or agents maintain facilities. It also says that by using the Services you consent to any such transfer of information outside of your country.
Supporting quotations
The Company and its servers are located in the United States.
Personal Information collected by the Services may be stored and processed in the United States or any other country in which the Company or its affiliates, subsidiaries or agents maintain facilities. By using the Services, you consent to any such transfer of information outside of your country.
“Personal Information” means any information that can, alone or associated with other information, be used to identify an individual
Qualifications & exceptions
Consent to transfers outside your country is tied to using the Services.
The countries are not listed; the test is where the Company, its affiliates, subsidiaries or agents "maintain facilities".
Not stated here
This passage does not name the countries other than the United States.
Use & Processing · Company commitment
Personal Information you provide may be processed in the US and other countries; the Company strives to apply safeguards
The Policy says that if you provide Personal Information, it may be transferred to and processed on computers in the U.S. and other countries. The Company says it strives to take appropriate safeguards so that your Personal Information remains protected in a manner consistent with standard applicable data protection laws. "Strive" describes an effort, not a guarantee.
Supporting quotations
In particular, if you provide Personal Information, it may be transferred to and processed on computers in the U.S. and other countries. We strive to take appropriate safeguards to ensure that your Personal Information will remain protected in a manner consistent with standard applicable data protection laws.
Not stated here
The safeguards are not described, and the "standard applicable data protection laws" are not named.
Use & Processing · Context
Some listed subprocessing is located in EMEA and France rather than only the United States
In the list of Third-Party Service Providers, most entries show United States as the location. Google Cloud Platform (Hosting/Infrastructure) shows United States/EMEA, OVHCloud (Hosting/Infrastructure) shows France, and Hugging Face SAS ("All of the above") shows France.
Supporting quotations
Google Cloud Platform | Hosting/Infrastructure | United States/EMEA
OVHCloud | Hosting/Infrastructure | France
Hugging Face SAS | All of the above | France
Qualifications & exceptions
The entries are read as written; "EMEA" is not further defined in the list.
Not stated here
The list does not say which countries "EMEA" covers.