The collection of data, as stated in the terms of service, does not necessarily absolve the company of potential privacy violations, as it is ultimately governed by the laws of the nation(s) in which it operates.

TOS cannot supersede the laws of countries themselves.