Privacy Policy

Hugging Face · agreement dated March 28, 2023 · Official agreement

Read the agreement

11 of 54 cards in Sharing & Disclosure

Sharing & Disclosure · User right or choice

You choose whether content is shared publicly or kept private; public Personal Information can be viewed by anyone

The Policy says that at any time you may decide to share some information or content publicly or privately. If you share information publicly and include Personal Information, you understand that anyone may view it. If you keep information private and control access to it, you understand that only the users you authorize will view it.

Supporting quotations

At any time during your use of the Services, you may decide to share some information or content publicly or privately.
If you decide to share your information or content publicly, and if you decide to include Personal Information, you understand that anyone may view this information.
If you decide to keep your information private and control the access to it, you understand that only the users that you authorize will view this information.

Qualifications & exceptions

  • The statement about private information is subject to the Company access described in the next card: the Company reserves a right to access private information with consent, or without consent only for stated purposes.

Sharing & Disclosure · Company commitment

The Company will not sell, rent or lease Personal Information except as the Policy provides

The Company says it will not sell, rent or lease your Personal Information except as provided for by the Policy, and that it may also share other information as the Policy provides. "Personal Information" is the Policy's defined term for information that can identify an individual. The exception ("except as provided for by this Policy") refers to the other provisions of the Policy on sharing, such as affiliates, service providers, consent, security, legal disclosure and Anonymous Information, each described in its own card.

Supporting quotations

The Company will not sell, rent or lease your Personal Information except as provided for by this Policy. The Company may also share other information as provided by this Policy.
“Personal Information” means any information that can, alone or associated with other information, be used to identify an individual

Qualifications & exceptions

  • The commitment is qualified by "except as provided for by this Policy".

Not stated here

  • The sentence does not say which provisions it treats as exceptions, or whether any of the sharing the Policy describes is a sale, rental or lease.

Sharing & Disclosure · Permission or license

The Company may share User and Personal Information with group affiliates, including after a change of control

The Company may share User Information and Personal Information collected by the Services with businesses that are legally part of the same group as the Company, or that become part of that group in the event of a change of control, merger, acquisition or sale (called "Affiliates"). In the transfers section the Policy also says the Company may transfer your Personal Information to affiliated companies for the purpose of storing or processing it on the Company's behalf.

Supporting quotations

The Company may share User Information and Personal information collected by the Services with businesses that are legally part of the same group as the Company, or that become part of that group in the event of a change of control, merger, acquisition or sale (“Affiliates”).
The Company may transfer your Personal Information to affiliated companies for the purpose of storing or processing such information on its behalf.

Qualifications & exceptions

  • Affiliates include businesses that become part of the group through a change of control, merger, acquisition or sale.

Not stated here

  • "User Information" is not separately defined in the text supplied, and this passage does not limit the purposes for which Affiliates may use what they receive; the transfers sentence names storing or processing on the Company's behalf as a purpose for transfers to affiliated companies.

Sharing & Disclosure · Company commitment

Service providers may receive only the Personal Information they need and may not use it for other purposes

The Company says it may occasionally hire other companies to provide limited services on its behalf, such as customer support, hosting websites, processing transactions or statistical analysis of its Services. Those companies will be permitted to obtain only the Personal Information they need to deliver the relevant service, will be required to maintain confidentiality, and are prohibited from using the information for any other purpose. The Policy points to its list of Third Party Service Providers.

Supporting quotations

The Company may occasionally hire other companies to provide limited services on its behalf, such as providing customer support, hosting websites, processing transactions, or performing statistical analysis of its Services. Those companies will be permitted to obtain only the Personal Information they need to deliver the relevant service. They will be required to maintain the confidentiality of the information and are prohibited from using it for any other purpose. Please refer to the list of Third Party Service Providers below.

Qualifications & exceptions

  • The examples of services are introduced with "such as" and are not stated to be exhaustive.

Not stated here

  • The mechanism by which the Company requires confidentiality and limits use by these companies is not described in this passage.

Sharing & Disclosure · Permission or license

The Company reserves the right to disclose your information without consent for security and harm protection

The Company reserves the right to disclose your information without your consent in two situations. First, in the event of any fraud, security threats or incidents, for the purposes of ensuring and maintaining security on its Website and for all of its Users, and of detecting, preventing, investigating or otherwise addressing fraud or security issues. Second, for the purpose of protecting against harm to the rights, property or safety of the Company, its Users, you or the public.

Supporting quotations

In the event of any fraud, security threats or incidents, we reserve the right to disclose your information without your consent for the purposes of ensuring and maintaining security on our Website and for all of our Users, and detecting, preventing, investigating or otherwise addressing fraud or security issues.
Similarly, we reserve the right to disclose your information without your consent for the purpose of protecting against harm to the rights, property or safety of the Company, our Users, yourself or the public.

Qualifications & exceptions

  • The first right is tied to fraud, security threats or incidents; the second is tied to protection against harm to rights, property or safety.

Not stated here

  • The passages do not say to whom the information may be disclosed.

Sharing & Disclosure · Permission or license

Anonymous Information may be disclosed, with or without compensation, to third parties including advertisers

The Company may use Anonymous Information, or disclose it to third party service providers, to provide and improve the Services and other products or technologies of the Company. It may also disclose Anonymous Information, with or without compensation, to third parties including advertisers and partners, for purposes including, but not limited to, targeting advertisements. The permission is described for Anonymous Information, which the Policy defines as information that does not enable identification of an individual User.

Supporting quotations

The Company may use Anonymous Information (as defined below) or disclose it to third party service providers, to provide and improve the Services and other products or technologies of the Company. The Company may disclose Anonymous Information (with or without compensation) to third parties, including advertisers and partners, for purposes including, but not limited to, targeting advertisements.

Qualifications & exceptions

  • The stated purposes for disclosure to third parties are not limited to targeting advertisements ("including, but not limited to").
  • The permission covers disclosure "with or without compensation".

Not stated here

  • The passage does not say how information is anonymized, who the "partners" are, or whether disclosure to advertisers is limited to a particular kind of Anonymous Information.

Sharing & Disclosure · Permission or license

Personal Information may go to affiliated companies and other countries; the Company requires them to follow the Policy

The Company may transfer your Personal Information to affiliated companies for the purpose of storing or processing it on the Company's behalf. The information may be transferred to other countries around the world. The Policy says the Company requires "these parties" to agree to process the information in compliance with the Policy.

Supporting quotations

The Company may transfer your Personal Information to affiliated companies for the purpose of storing or processing such information on its behalf. Such information may be transferred to other countries around the world. The Company requires that these parties agree to process such information in compliance with the Policy.

Qualifications & exceptions

  • The stated purpose for transfers to affiliated companies is storing or processing on the Company's behalf.

Not stated here

  • The passage says "these parties" without stating whether it means the affiliated companies, subsidiaries, agents or all of them, and does not describe how the agreement is made.

Sharing & Disclosure · Company practice

The Company may share information with Third-Party Service Providers and ensures compliance with data protection laws

The Company says it may share your information with Third-Party Service Providers and that when it does, it ensures they access the information in compliance with applicable data protection laws. The list that follows is given in the format Subprocessor, Description of Subprocessing, and Location of Subprocessing. The sharing section separately says that companies hired for limited services will be permitted to obtain only the Personal Information they need to deliver the relevant service.

Supporting quotations

We may share your information with Third-Party Service Providers, and when we do, we ensure that they access your information in compliance with applicable data protection laws. The following list respects the format Subprocessor | Description of Subprocessing | Location of Subprocessing.
Those companies will be permitted to obtain only the Personal Information they need to deliver the relevant service.

Qualifications & exceptions

  • The compliance statement is about access "in compliance with applicable data protection laws".

Not stated here

  • The passage does not say how the Company ensures compliance, or which providers receive which information.

Sharing & Disclosure · Context

The Policy lists eleven subprocessors with their function and location

The list of Third-Party Service Providers gives, for each, a description of the subprocessing and a location: Discourse (Forum, United States); AWS SES (Emails, United States); Amazon Web Services, Inc. (Hosting/Infrastructure, United States); Metronome (Billing, United States); Stripe (Payment, United States); MongoDB Atlas (Hosting/Infrastructure, United States); Google Cloud Platform (Hosting/Infrastructure, United States/EMEA); GitHub (Hosting code, United States); OVHCloud (Hosting/Infrastructure, France); Slack Technologies (Communication, United States); and Hugging Face SAS ("All of the above", France).

Supporting quotations

Discourse | Forum | United States
AWS SES | Emails | United States
Amazon Web Services, Inc. | Hosting/Infrastructure | United States
Metronome | Billing | United States
Stripe | Payment | United States
MongoDB Atlas | Hosting/Infrastructure | United States
Google Cloud Platform | Hosting/Infrastructure | United States/EMEA
GitHub | Hosting code | United States
OVHCloud | Hosting/Infrastructure | France
Slack Technologies | Communication | United States
Hugging Face SAS | All of the above | France

Qualifications & exceptions

  • Each entry gives a function description and a location as written in the list.

Not stated here

  • The list does not say which categories of information each provider receives. It does not say whether "All of the above" for Hugging Face SAS means every function listed.