As the others have been saying, you need to absolutely spell this out in the ToS. The language in the ToS is far too broad and no matter how trustworthy your company may be now, people are cluing into the fact that that trustworthiness is one heartbeat away from a change in leadership that decides to push the boundary up to the legal limits in the law or ToS.