This is so important! I think Shortcut Labs want to be a nice company, but they found a dodgy standard policy that they took to be safe. If your agreement is binding though it’s too bad because they won’t be able to answer it...
The policy link is probably a real biggie also. With GDPR coming into effect in EU next year I think that’s the sort of thing that they can be fined for.