My apologies, I posted late last night and didn’t realize I was linking to a non-public forum. Here’s the post I was referring to:
That section is intended to cover basic operation of the service. The first line declares that you retain ownership of your content. In order to use Plex features like uploading photos from your home computer and seeing them on your mobile device, Plex needs the right to access and copy that content in order to make everything work.
For example, when you playback a video on your iPhone there’s a few things that need to happen. We need the right to create a copy of the video that exists on your Plex Media Server, the right to create a derivative work if it’s transcoded, and the right to transmit it to your iPhone.
This paragraph is largely a carryover from our previous terms of service which were in place for nearly three years. We did notice that the “limited purpose” qualifier was removed and we’ll work with our lawyers ASAP to make make this even clearer.
Based on some of the feedback here we’ve gone back to our lawyers and worked with them on an updated version of paragraph 6 of the new Terms of Service that should describe our original intentions better. The new version explicitly states that we can only use this data to enable you to use the Plex service. We have similar language in our current Terms of Service and this was unintentionally removed in the version that was published yesterday.
This page has been updated with the new version: https://www.plex.tv/about/privacy-legal/terms-of-service-may-2018/
With regards to GDPR as a whole, Plex has been working for the last few months to meet our obligations under the GDPR. The Terms of Service and Privacy Policy we published yesterday were prepared and reviewed with a legal team that specializes in privacy law and understands the impact of the GDPR. Based on their advice, we are confident that we will be in compliance with the regulation.