The unroll.me privacy policy says "We may collect, use, transfer, sell, and disclose non-personal information for any purpose." People aren't going to read a c

The unroll.me privacy policy says "We may collect, use, transfer, sell, and disclose non-personal information for any purpose." People aren't going to read a clearly written privacy policy they have to acknowledge during signup, but they're going to read SEC filings? This is perfectly legal so public/private companies will both do it and I believe it would be illegal for private companies not to disclose it in their privacy policy anyway.