DeepL updated its privacy policy to clarify its corporate structure and data controller responsibilities. Previously, the policy identified only DeepL SE as the data controller responsible for processing personal data. The updated policy now states that 'DeepL' refers to the entity within the DeepL group that acts as the controller, and lists seven legal entities across Germany, UK, Netherlands, Poland, US, and Japan that may process data. The policy also added language disclosing that when users access DeepL through third-party AI tools via DeepL's MCP integration, DeepL receives the user's ID and organization name for authentication purposes.
The updated policy clarifies that DeepL operates through multiple legal entities across Germany, the UK, Netherlands, Poland, the US, and Japan. Previously the policy identified only DeepL SE as the controller, but the revised terms now state that 'DeepL' refers to whichever group entity acts as the controller for your data. Additionally, the policy now discloses that when you use DeepL through ChatGPT, Claude, Cursor, or similar tools via DeepL's MCP (Model Context Protocol) integration, DeepL receives your user ID and organization name for authentication. This is a clarification rather than a new practice authorization; no specific action is required by users.
Policy now identifies seven legal entities across six jurisdictions as potential data controllers rather than DeepL SE alone.
Policy now explicitly states that third-party AI tool integrations (ChatGPT, Claude, Cursor) result in DeepL receiving user ID and organization name.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
DeepL's updated privacy policy makes explicit what was previously implicit: the company operates as a group of legal entities rather than a single entity, and the applicable data controller varies by jurisdiction and service configuration. …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003132.
DeepL's Terms and Conditions were updated on September 10, 2026, with one sentence modified in the document. The specific language …
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the …
TikTok's data collection extends to device sensors, clipboard content, geolocation, and cross-site tracking. Here is what their Privacy Pol…
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.