Reading further down that issue, it doesn't seem to be what it initially sounded like.

?

Still wild to reserve permission to to that

doing that would be flat out unlawful under the GDPR, regardless of whatever crap they put into their EULA

and enough to get that company into rather expensive trouble