The new privacy policy is very poorly implemented. A user who wants to deny collection of data by your new subprocessor until they have had time to investigate their reputation who clicks "Deny" can lose years of hard work. The wording is also coercive (do it "or else") and there may be a legal issue about a user who doesn't want the new subprocessor, wants to archive or export their work (which is their absolute right) but cannot get into their account to do so without giving away the very data rights they choose to deny.

The usual thing to do is to say something like "in 45 days this new policy/new subprocessor/new whatever goes into effect" to give time to gather feedback and for users to meaningfully opt out. This didn't happen here.