WeVideo's Privacy Policy Simplified

- The Privacy Policy is dated "Effective as of March 20, 2026," which is a future date, creating confusion about its current applicability and validity.

- The document uses vague language such as "possible," "may," and "might" throughout, which weakens the commitment to specific privacy practices and could lead to unpredictable data handling.

- Under "Personal information we collect," the policy includes "education information" and "employment related information" as categories but does not specify what specific data points these refer to, leaving users uninformed.

- The policy allows for the collection of "User-generated content data," including "comments you make on videos" and "associated metadata" such as "geographical or location information," without clear explanation of how this location data is used or protected.

- There is an overly broad statement that the company "may combine personal information we receive from you with personal information we obtain from other sources," including "public sources" and "private sources," without detailing what those sources are or how users can opt out.

- The section on "How we share your personal information" lists sharing with "business and marketing partners" for their own purposes, but does not provide a way for users to opt out of such sharing, which could lead to unwanted marketing.

- The policy states that "Your profile and other user-generated content data (except for messages) may be visible to other users of the Platform," which could expose sensitive user content without explicit consent.

- The "AI tools" section says "WeVideo does not use any personal data for training of AI models," but it also lists processing "user uploaded media" and "user generated prompts" for generative AI features, which could include personal data, creating a contradiction.

- The "Children" section for Education Services Users states that "the education institution may opt to post Child User videos publicly on the Platform along with the Child User’s name," which raises privacy concerns for minors and lacks clear parental control mechanisms.

- For Education Services Users, the policy says "students are always opted-out of WeVideo privacy settings," but it also mentions that admin users can modify services, potentially overriding student privacy without their knowledge.

- The policy includes a section on "New York Education Law §2-d and Regulation 121" but only states that the company "is committed to working diligently to ensure our practices are in alignment," without confirming actual compliance, leaving ambiguity for New York users.

- The "State Privacy Rights" section provides rights for California residents but does not specify how users can exercise these rights in a simple, direct manner, instead directing them to "contact us as set forth below."

- The "Notice to European users" claims that "WeVideo, Inc. generally acts as a data processor," but the policy also describes uses for research and development and marketing, which are typically controller activities, creating confusion about the company's role.

- Under "Data Processing outside Europe," the policy relies on the EU-U.S. Data Privacy Framework (DPF) for transfers but does not explain what happens if the DPF is invalidated or if users' data is transferred to countries without adequacy decisions, despite noting that the US lacks such protection.