ElevenLabs updated its Privacy Policy on May 21, 2026 to add two new affiliate entities (Eleven Labs Auto India Private Limited and Eleven Labs Technology Middle East Limited), revise legal bases for data processing to encompass contract performance and legitimate interests alongside consent, simplify contact procedures for exercising privacy rights by removing physical mailing details from the main contact section, and replace references to 'state, province or country' with the broader term 'location' when describing residency. The practical effect is that the policy now explicitly permits processing based on multiple legal grounds beyond consent, establishes a clearer data protection contact mechanism via email and online form, and expands the organizational entities authorized to process personal data.
Consumers: ElevenLabs can now process your data for reasons beyond what you explicitly agreed to, including when necessary to deliver a service or comply with law.
The updated terms establish that ElevenLabs may process personal data under multiple legal bases, including contract performance, compliance with legal obligations, and legitimate interests in fraud prevention and legal defense, rather than relying solely on user consent. The policy now identifies a Data Protection Office at legal@elevenlabs.io as the primary contact for privacy rights requests and clarifies the mechanism for exercising those rights. For Brazil residents, the policy specifically names Paulo Eduardo Lilia as the Data Protection Officer. You can submit privacy rights requests using the online form or by emailing the Data Protection Office.
→ Review the updated Data Protection Office contact information at legal@elevenlabs.io to know where to direct privacy rights requests.
→ If you are a Brazil resident, note that Paulo Eduardo Lilia is named as the Data Protection Officer for your jurisdiction.
Expanded from consent-only to include contract performance, legitimate interests, and legal obligation compliance.
Simplified to direct email to Data Protection Office; removed physical mailing address from primary contact; added Brazil-specific DPO naming.
Added Eleven Labs Auto India Private Limited and Eleven Labs Technology Middle East Limited to the list of authorized processing entities.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
ElevenLabs' updated privacy policy on May 21, 2026 expands the legal bases it may invoke for data processing beyond consent to include contract performance, legitimate interests, and legal obligations. This aligns with GDPR Article 6 …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002230.
ElevenLabs removed navigation menu items from its Safety Policy page header. The BEFORE version listed 'ElevenCreative' and 'ElevenAgents' as navigation …
The navigation menu displayed at the top of ElevenLabs' Terms of Service page was modified in an update detected on …
In an update detected on August 7, 2026, ElevenLabs restructured the navigation menu at the top of its Privacy Policy. …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.