Hacker News Reader

The two subclauses of "when we" are joined by an "or", so only one of them has to be true to fulfill the "when" condition.

I think what he is saying is that if they get the user to agree through TOS then they always have permission via the first subclause you omitted.