@tokyo_0 It gets interesting here...
"As explained above, when we use personal information to provide Identity Services to our clients, we are acting on their behalf as their service provider and processor. However, we also process the personal information of users, and others, on our own behalf"
First point after is "To develop and improve our Identity Services (including machine learning technologies)" and then it's the standard "to do whatever we please" jargon after that.