Since they retain the right to change the privacy policy any time they like, I don't think this is enough. They need to have a contract with users that allows users some recourse (e.g. a partial refund or something) if they change the policy to one the users don't like.
|