Change record
CA-C-003369
Upwork Privacy Policy
Entity
Date detected
July 1, 2026
Effective date
June 30, 2026
Severity
Direction
Neutral
Taxonomy
Ai training rights
Changes
+115 sentences added · 1 sentence modified

Impact Summary

Medium Neutral for users
Affected users
Beta testers Upwork freelancers Upwork clients All users

Upwork introduced new terms governing access to its Model Context Protocol (MCP) Beta, a limited invitation-only feature that allows third-party AI agents to perform certain actions on the platform on a user's behalf. The MCP Beta establishes three tiers of agent capabilities: Read Actions (search, view information, draft content without confirmation), Draft-Confirm Actions (agent prepares actions like submitting proposals or posting jobs, user confirms before execution), and Binding Actions (contract creation and money movement, which remain restricted to authenticated user action only). Users who connect an AI agent to Upwork authorize the agent to act within these defined limits and are responsible for all agent actions; agent-generated communications must carry a mandatory disclosure label, and users cannot represent agent-generated content as human-created.

4 new obligations

Beta participants: Every proposal, message, job post, or invitation generated by an agent must clearly state that an agent created it; users cannot hide this fact.

Beta participants: If an agent violates Upwork's rules, the user who connected the agent is liable for that violation.

Beta participants: You will pay platform fees for every action an agent performs, even if you reject the draft before it goes live.

Beta participants: You certify that your AI agent is legal to use and won't process special categories of personal data through Upwork unless the specific Upwork capability explicitly allows it.

Stay ahead of the changes
Track Upwork and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

What this means for you

The updated terms establish a new beta feature allowing invited users to connect third-party AI agents to their Upwork accounts. Agents can read information and draft communications (proposals, job posts, messages) without per-action confirmation, but cannot autonomously move money or finalize contracts; those actions require the user to authenticate and confirm on Upwork directly. Users are responsible for all agent actions and must ensure agent-generated content carries mandatory disclosure labels; submitting proposals through agents consumes Connects and incurs fees regardless of whether the user approves the draft-confirm action. You can revoke agent access by visiting the App Authorization page, and these beta terms apply only until you accept replacement terms.

What you can do

If invited to the MCP Beta, review the three capability tiers and determine which tasks you are willing to delegate to an AI agent.

Ensure any agent-generated communications (proposals, messages, job posts) carry the mandatory disclosure label before they are sent.

Monitor your Connect consumption and account fees, as the terms charge for all agent actions regardless of whether you approve draft confirmations.

Historical Context

ConductAtlas has recorded 3 material changes to this document over 72 days of monitoring (since April 2026).

Across all monitored documents, Upwork has made 5 significant changes.

2 of Upwork's significant changes have been classified as negative for consumers.

Key Clauses Affected

Binding Action Gate

Agents cannot autonomously create, activate, or fund contracts; all money-moving and binding actions require the user to authenticate and confirm on Upwork directly.

Agent-Action Disclosure Requirement

All agent-generated user-visible communications must carry a mandatory, clear, standard disclosure label; users cannot remove, obscure, or misrepresent the label.

User Responsibility and Authorization

Users are responsible for all agent actions as if they took the actions themselves and authorize the agent only within stated capability limits.

Full clause-by-clause analysis available with Insight.

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
e1123dbf9ceb71e5f5a07776864b5455c3c3fa3180df8783706cec3bd811c67b
May 1, 2026 06:08 UTC
✓ Verified
Current Version
6a049194b5e1d5b6d7c24f0f189be9e9570171de21a03e4a539fb013db7ff2a2
July 1, 2026 00:20 UTC
✓ Verified
Change Detected
July 1, 2026 00:20 UTC
Analysis Methodology
✓ Verified
Source Document
https://www.upwork.com/legal/privacy-policy/
Citation Record
Entity: Upwork
Document: Upwork Privacy Policy
Record ID: CA-C-003369
Captured: 2026-07-01 00:20:25 UTC
URL: https://conductatlas.com/change/2026-07-01-upwork-upwork-privacy-policy-3369/
Accessed: Aug. 15, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
For legal and compliance teams

Institutional Analysis

Assessment

Upwork introduced beta participation terms for its Model Context Protocol server, permitting invited users to connect third-party AI agents to perform limited actions on the platform. The terms establish a three-tiered capability model (Read, Draft-Confirm, …

🔒 Full institutional analysis

Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.

Unlock the full institutional analysis — Insight

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003369.

Full Changes

View complete diff →

Document Context

Version history → Policy drift analysis → Document page →
Document
Upwork Privacy Policy
Entity
Upwork
Captured
July 1, 2026
Source URL
https://www.upwork.com/legal/privacy-policy/
Other changes to Upwork Privacy Policy
Previous change May 1, 2026
Upwork removed detailed language about its compliance with the U.S. Data Privacy Framework (a legal mechanism for transferring personal data …
High Negative
Next change Jul 8, 2026
Upwork updated its MCP Beta Participation Terms from version 1.1 to 1.2, effective July 7, 2026. The document was reformatted …
Low Neutral
View full version history →
More from Upwork
Jul 21, 2026 Low
Upwork Terms of Service

Upwork updated its Terms of Service on July 20, 2026 (detected July 21, 2026) with three categories of changes: structural …

Jul 9, 2026 Low
Upwork Privacy Policy

Upwork added a new Upwork Now Beta Addendum effective July 8, 2026, governing a pilot program that allows clients and …

Jul 9, 2026 Medium
Upwork Terms of Service

Upwork added a new Beta Addendum governing Upwork Now, a pilot feature enabling faster, session-based hiring and freelancer outreach. The …

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Stay ahead of the changes

Track Upwork policy changes

Get alerted when this policy changes again, including what changed and why it matters.

All Upwork changes →