Panda Express

"We may make changes to these Terms from time to time. If we make changes, we will provide you with notice of such changes through our Services or updating the date at the top of these Terms. Unless we say otherwise in our notice, the amended Terms will be effective immediately, and your continued use of our Services after we provide such notice will confirm your acceptance of the changes."

Panda can modify the terms at any time, with changes effective immediately, and continued use is treated as acceptance — the only "notice" may be updating the date on the page.

"Geolocation data, such as when you use your Panda app to find a nearby restaurant. ... Certain Personal Information that Panda collects from California residents may be considered Sensitive Personal Information within the meaning of California Privacy Law, including: credit card information (for billing and transactional purposes in connection with providing products and services) and precise geolocation information."

Panda collects precise geolocation data classified as sensitive personal information, and may disclose geolocation data to third-party service providers and social media/ad networks for commercial purposes.

"We may disclose Identifiers, Internet or other electronic network activity information, and Geolocation data for the commercial purposes described above to: Third party service providers; and Social media and ad networks."

Panda shares identifiers, browsing/network activity, and geolocation data with social media platforms and advertising networks for commercial purposes like personalized advertising.

"Inferences, including inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes."

Panda builds detailed consumer profiles from collected data including psychological trends and predispositions, and shares internet activity and identifiers with ad networks for cross-context behavioral advertising.

"We keep your Personal Information for as long as needed or permitted according to the purpose(s) for which it was obtained. The criteria used to determine our retention periods include (i) for as long as we have an ongoing relationship with you; (ii) as required by a legal obligation to which we are subject to; or (iii) as advisable considering our legal position. ... Furthermore, we may delete Personal Information from our database at any time and without providing any reason."

Retention periods are vague and open-ended with no specific timelines, and Panda reserves the right to delete data at any time without reason — giving users no certainty about how long their data is kept or when it will be removed.