| Before | After | ||
|---|---|---|---|
| 0 | Palantir Privacy and Security Statement /sitemap.xml Palantir Privacy and Security Statement Read CEO Alex Karp’s Letter to Shareholders Privacy Preference Center Privacy Preference Center Your Privacy Strictly Necessary Cookies Targeting Cookies Your Privacy When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. | 0 | Navigation Generate Alpha ↳ AIP ↳ Foundry ↳ Gotham ↳ Ontology ↳ Apollo Offerings Impact Studies Documentation Careers Newsroom Palantir Explained Latest News Newsroom ↗ The Times, June 9, 2026 Palantir software halves sepsis deaths at US hospital The Sepsis Hub, developed with Tampa General Hospital in Florida, detects subtle changes in vital signs so antibiotics are given early ↳ Read Here CNBC, July 1, 2026 Palantir CEO Alex Karp says 'something has gone completely wrong' with how AI is sold Palantir CEO Alex Karp joins CNBC's 'Squawk Box' to discuss the new Nvidia partnership, frontier AI models, and more. ↳ Watch Here Offerings View All Offerings ↗ Our platforms are used throughout the public, private, and non-profit sectors to help organizations quickly implement solutions to the hardest problems they face. ↳ Learn more about AIP Latest Impact View All Impact Studies ↗ Impact Study // Tampa General Hospital Infusing data throughout the care continuum Quick links About Palantir Blog Investor Relations Letters from the CEO Privacy & Civil Liberties Information Security Cloud Partners Palantir Learning Customer Success Services Palantir Apparel Store Contact Palantir's Privacy Statement Last updated June 2026 Who is Palantir? |
| 1 | This information might be about you, your preferences, or your device, and is mostly used to make the site work as you expect. | 1 | Who is Palantir? |
| 2 | The information does not usually identify you directly, but it can give you a more personalized web experience. | 2 | We are a technology company founded in the United States in 2003. |
| 3 | Because we respect your right to privacy, you can choose not to allow some types of cookies. | 3 | We provide software platforms and services to help public, private, and non-governmental organizations gain insights into their data through data analysis, in a secure and privacy-protective way. |
| 4 | Click on the different category headings to learn more and change our default settings. | 4 | You can read more about our business here . |
| 5 | Blocking some types of cookies may impact your experience of the site and the services we are able to offer. | 5 | This Privacy Statement (“Statement”) applies to the processing activities for which Palantir Technologies Inc. and its affiliates act as “data controllers” on their own behalf. |
| 6 | More information Strictly Necessary Cookies Always Active These cookies are necessary for the website to function and cannot be switched off in our systems. | 6 | This Statement does not cover our customers’ processing of personal data using Palantir products or services, as we act solely as a “data processor” for such processing activities. |
| 7 | They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. | 7 | For more information, please refer to the sections entitled Data Controllers and What does this Statement cover ? sections below. |
| 8 | You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. | 8 | How can you contact us? |
| 9 | These cookies do not store any personally identifiable information. | 9 | If you are looking: to understand more about how we use your information , or to exercise your rights You may also reach us at privacy@palantir.com . |
| 10 | Cookies Details Targeting Cookies Targeting Cookies These cookies may be set through our site by our advertising partners. | 10 | Data Controllers Palantir is a global company made up of multiple entities that process personal data in the course of conducting our business. |
| 11 | They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. | 11 | Depending on where you engage with us, the entity responsible as controller for the processing of your personal data under this Statement may vary. |
| 12 | They do not store directly personal information, but are based on uniquely identifying your browser and internet device. | 12 | Palantir Technologies Inc. is the parent company of the group, but the data controller of your information may be one of its affiliates depending on how you interact with Palantir entities. |
| 13 | If you do not allow these cookies, you will experience less targeted advertising. | 13 | If you visit a Palantir office or engage with an employee of a Palantir office outside of the US, the Palantir affiliate based in that country will be the relevant data controller of your personal data. |
| 14 | Cookies Details Cookie List Consent Leg.Interest checkbox label label checkbox label label checkbox label label Clear checkbox label label Apply Cancel Confirm My Choices Reject All Allow All | 14 | For example, if you attend a Palantir event in our London office, Palantir Technologies UK, Ltd. would be the data controller of your personal data. |
| 15 | To understand where Palantir has affiliates around the world, please see here . | ||
| 16 | In this Statement, where we refer to “Palantir,” “we,” “our,” or “us,” we are referring to the relevant Palantir group entity that decides how and why your information is used. | ||
| 17 | Why should you read this Statement and what does it cover? | ||
| 18 | Why should you read this Statement? | ||
| 19 | As a commercial business, Palantir may collect, use, and disclose personal data in the course of our standard operations. | ||
| 20 | Where a Palantir entity processes your personal data as controller (meaning that we determine why and how your personal data is used), this Statement sets out how we process that data in compliance with data protection and consumer privacy laws. | ||
| 21 | This Statement also explains what rights you have relating to that personal data. | ||
| 22 | What does this Statement cover? | ||
| 23 | This Statement sets out how we use and protect personal data globally. | ||
| 24 | If you live or work in certain countries, states or territories, there is additional information at the end of this Statement that relates to our use of your personal data. | ||
| 25 | It is important to note that this Statement does not apply to personal data we process on behalf of our customers. | ||
| 26 | When we provide our products and services to our customers, we act as a data processor. | ||
| 27 | This means it is our customers, and not Palantir, who are in control of what personal data and other information they process using our products or services, and how they do so. | ||
| 28 | Where we are a data processor, we follow our customers’ instructions relating to that processing, in line with applicable laws. | ||
| 29 | Consequently, this Statement does not apply to our customers’ processing of personal data using Palantir products or services. | ||
| 30 | If you are seeking to understand how one of our customers processes personal data using Palantir products or services – or if you wish to exercise your rights in relation to any personal data a customer may process using Palantir products or services – the relevant customer’s privacy statement is the best place to start to understand those details, or to learn how to contact them. | ||
| 31 | As you engage with our services or communications, you may encounter links to third parties outside of the control of Palantir that enable you to share information with the controllers of those websites or services. | ||
| 32 | We are not responsible for the privacy policies or the data collection, use, or disclosure practices of our customers, or third-party sites, unless we notify you otherwise. | ||
| 33 | If you wish to understand how they process your personal data, we encourage you to review the privacy policies of each site you visit. | ||
| 34 | Palantir job candidates If you apply for a role with Palantir, our Candidate Privacy Statement contains information on how we will use your personal data. | ||
| 35 | Updates to this Statement We may make updates to this Statement from time to time. | ||
| 36 | When we do so, we will post those changes here, so please check back periodically for any updates. | ||
| 37 | Where we make changes to our processing that may affect the rights of individuals affected by those changes, we will inform those individuals where possible. | ||
| 38 | What personal data do we collect? | ||
| 39 | Palantir collects personal data through three main sources: 1. | ||
| 40 | Personal data you provide to us (for example, through forms or correspondence); 2. | ||
| 41 | Personal data we collect automatically (for example, when you visit Palantir websites and as described in the Technical Data as set out below); 3. | ||
| 42 | Personal data from other sources (such as our service providers, business partners, and publicly available personal data as set out below): Contact Data: Name, address, email address, telephone number, mobile phone number, country of residence and social media handles. | ||
| 43 | We may collect this information directly from you, your employer, from publicly available sources, our third-party partners who provide networking contact information, or indirectly through a third-party partner such as if we have co-hosted an event with them. | ||
| 44 | Professional Data : Company name, occupation contact details, occupation, employment history, areas of expertise, your experience with Palantir products and services. | ||
| 45 | We may collect this information directly from you, your employer, from publicly available sources, our third-party partners who provide networking contact information, or indirectly through a third-party partner such as if we have co-hosted an event with them. | ||
| 46 | Transaction Data: Products and/or services purchased, licenses purchased, types of products or services of interest, information provided in the course of the purchase or attempted purchase of Palantir products or services, eligibility information such as whether your company is a customer of Palantir this can be collected when you purchase products and services from Palantir. | ||
| 47 | Payment Data: Payment or billing information (including tokenized payment details, as necessary). | ||
| 48 | We may collect this information in the course of signing up for a Palantir product or service or through the use of our website to purchase Palantir products or services. | ||
| 49 | Technical data: IP address, operating system, browser information, user agent. identifiers such as cookie IDs (see Cookies and Tracking Technologies below, and our Cookies Statement ), mobile device ID, Wi-Fi data, interactions with Palantir websites, authentication credentials, communications and promotional materials are collected automatically when you interact with Palantir websites or third-party platforms hosting Palantir content. | ||
| 50 | For example, when we send marketing communications, we may collect data on whether you have opened a marketing communication you have received, or whether you clicked on any links in the message. | ||
| 51 | Training and Educational Data: This can include registrations for courses, assessments signed up for and/or taken, the results of same, and certifications issued. | ||
| 52 | We may collect this information when you sign up for a training or certification program, or it may be generated once you have taken part or completed a training or certification event. | ||
| 53 | Communication Data: Messages, correspondence and other data created, or generated, by you when communicating with Palantir via post, SMS, e-mail, posts on Palantir or third-party channels, forums, social media platforms, other third-party platforms, or other means of electronic communication. | ||
| 54 | We may collect this information when you interact with Palantir or Palantir employees, contractor, agents, third-party service providers and partners- for example through providing feedback or sharing your experiences of our products and services with us. | ||
| 55 | Government Identifiers: Government or state issued photographic identification documentation such as passport or driver license – for example when you provide it in the course of verifying your identity. | ||
| 56 | Audiovisual Data: Image, voice – including photographs, images and audio and video recordings – collected through security and monitoring systems or recorded during events, for example, when you participate in a Palantir or Palantir-affiliated event, visit a Palantir office or present at a seminar hosted by Palantir. | ||
| 57 | Inferred Data: Preferences, likelihood of interest in Palantir products and/or services. | ||
| 58 | Data generated by combining data (such as Contact Data, Professional Data, Transaction Data, Technical Data and Communication Data) collected by Palantir with information obtained from third parties (such as Contact Data, Professional Data, Transaction Data, Technical Data and Communication Data), including partners and publicly available sources, which assist with the sale of products or services, compliance with laws, and that detect, prevent and otherwise address fraudulent, deceptive, or illegal activity. | ||
| 59 | Contact Preference: Consents or preferences that you give us, such as how you would like us to contact you or what Palantir products or services interest you. | ||
| 60 | Why and how we use your personal data The following lets you know how and why we use the personal data we collect: 1. | ||
| 61 | To conduct our business operations and provide our products and services : To communicate with you: We use your information, including Contact Data and Communication Data so that we can communicate with you, answer your queries, or get in touch to understand if you are interested in Palantir products and services. | ||
| 62 | To provide you with our products and services: We use your information, including your Contact Data, Payment Data, Technical Data, Communication Data, Professional Data, and Training and Educational Data, depending on the services provided, for various reasons, including to: Verify your identity; Send communications relating to the product or service purchased; Provide you with our products and services including training or certification services; Fulfil our contract with you; Provide you with access to our AIP Now platforms and services. | ||
| 63 | To process financial transactions: We use your information, including Contact Data, Communication Data, Payment Data and Transactional Data to process transactions and to provide you with Palantir products and services. | ||
| 64 | When you make a payment on our website, our payment processor, Stripe, collects your Payment Data and Contact data directly from you. | ||
| 65 | Palantir does not provide Payment Data to Stripe. | ||
| 66 | As a result, Stripe is an independent controller of information provided in the course of using Stripe’s payment processing service on Palantir platforms. | ||
| 67 | To understand how Stripe will process your information please see Stripe’s privacy policy and Stripe’s terms . | ||
| 68 | To analyze activity on our websites, improve our public facing platforms and communications: We use your information, including Technical Data, Communication Data and Training and Certification Data to understand how you use our websites, forums or training platforms and to understand and improve your experience of those websites, training platforms and the communications we send. | ||
| 69 | To enable business transfers and transactions: We process your information in connection with transactions if there is a proposed or actual merger, purchase, sale acquisition, financing due diligence, transition of service to another service provider, divestiture, bankruptcy, restructuring, receivership, reorganization, dissolution or other sale or transfer of some or all of Palantir’s assets, in which personal information processed by Palantir pursuant to this Statement forms part of the assets transferred or sold. | ||
| 70 | To ensure compliance with our obligations: We may access, preserve, process, or disclose your information, where required, to comply with a court order or legal requirement, including to respond to governmental or regulatory requests, verify your identity when purchasing Palantir AIP Now products and services, enforce our policies and contracts, collect amounts owed to us, or assist with an investigation or prosecution of suspected or actual illegal activity. | ||
| 71 | To protect the rights, property, life, health, safety or security: We process your information, where required, to protect the rights, property, life, health, safety or security of Palantir, our employees, our users (including you) or others. | ||
| 72 | To measure, develop and improve our products and services : We process your information, including Contact Data, Technical Data, and Communication Data to develop, improve and measure the performance of our products and services. | ||
| 73 | To create de-identified and aggregated information. | ||
| 74 | We may use personal information to create de-identified and/or aggregated information, such as demographic information, information about the device from which you assess our services, or other analysis we create. 2. | ||
| 75 | To enable our sales and marketing functions to carry out marketing related to Palantir products and services : To send sales and marketing communications: We use your Contact Data, Professional Data, Technical Data, Communication Data, Transaction Data, Training and Educational Data, Inferred Data and Contact Preferences to send you marketing communications about Palantir products and services you have purchased or attempted to purchase, or communications about Palantir products and services we think you might be interested in purchasing or events you might wish to attend, and to carry out targeted marketing campaigns including posts to third party platforms such as social media platforms and networking websites. | ||
| 76 | To understand who would be most interested in our products and services and to personalize our communications: We use your Contact Data, Communication Data, Professional Data, Technical Data, Transaction Data, Training and Educational Data, Inferred Data and Contact Preferences to understand who may be interested in our products and services to personalize our communications with you, including sending marketing communications. | ||
| 77 | To analyze the effectiveness of our communications: We use your Contact Data, Communication Data and Technical Data to understand the impact of our communications, for example to understand the effectiveness of our marketing campaigns and to improve them going forward. | ||
| 78 | To target advertising: We use your Contact Data, Professional Data, Communication Data, Technical Data, Transaction Data, Training and Educational Data, and Inferred Data to target advertisements and messages to you, this can include targeted advertising via third party advertising platforms including search engines and social media/networking platforms such as LinkedIn or Twitter. 3. | ||
| 79 | To manage your visit to a Palantir managed space or event : To enable your visit to a Palantir designated space: Depending on how you engage with Palantir’s facilities when you visit our designated spaces or offices, we process your Contact Data, Communication Data, Professional Data, Technical Data and Audiovisual Data when you attend a Palantir designated space such as offices or pop-ups. | ||
| 80 | Event management: Depending on the event or how you engage with Palantir in the course of an event hosted, or co-hosted by Palantir, we process your Contact Data, Professional Data, Communication Data, Audiovisual Data and Technical Data to enable your attendance as Palantir hosted or affiliated events such as conferences or webinars. | ||
| 81 | We may also process information we receive, including from our partners, during such events to understand whether you are interested in our products or services so that we can present you with the most relevant information on our products and services at the relevant event or in post event communications. | ||
| 82 | To protect our business, our affiliates, our visitors, and others : We process your personal data which can include Contact Data, Professional Data, Transaction Data, Technical Data, Audiovisual and Communication Data to monitor for, or detect, fraudulent, harmful or illegal activity. 4. | ||
| 83 | To comply with legal obligations and maintain the physical and information security of Palantir’s products and services, employees and partners : To comply with legal obligations: Where necessary, we use your personal data, including Contact Data, Technical Data, Communication Data and Government Identifiers, where necessary, to comply with legal obligations such as tax reporting, regulatory requirements or fulfilling your rights request. | ||
| 84 | To help you exercise your rights and control over your personal data: Where you contact us to exercise your rights as a data subject or to opt-out from certain forms of communication, we may need to further process your personal data such as Contact Data, Communication Data and any applicable personal data together with any Government Identifiers you may provide, to comply with your request (for example, if you request a copy of your personal data and you provide your ID to confirm your identity). | ||
| 85 | To protect our business, our affiliates, and others: We process your personal data which can include Contact Data, Professional Data, Payment Data, Transaction Data, Technical Data, Audiovisual and Communication Data to monitor for, or detect, fraudulent, harmful or illegal activity. | ||
| 86 | When do we share your personal data? | ||
| 87 | Palantir may disclose or transfer personal information that we process as required in the course of operating our business to the following recipients and purposes: Palantir affiliates: Personal data is disclosed to and from Palantir Technologies Inc. and its affiliates listed here to enable and fulfil our business operations requirements. | ||
| 88 | Affiliates are bound by contractual obligations to process any personal information in compliance with data protection and consumer privacy laws that apply. | ||
| 89 | Service providers: We disclose information as needed to our agents, contractors and service providers. | ||
| 90 | These parties are bound by contractual obligations to keep personal data confidential and use it only for the purposes of providing services for, or with, us. | ||
| 91 | Examples of service providers include marketing and sales services, event management, website hosting and training providers. | ||
| 92 | Third Parties: We disclose your personal data to third parties, including third party partners where applicable to: Verify your identify when signing up for AIP Now products and services; To provide payment processing services; Provide your employer, or the organization that provides you with your Palantir Learning or certification exam code, with details of your participation, progress, and results for any training courses, quizzes, or certifications you register for with us, when these are taken as part of your employment; To enable Palantir partners who have provided you with a promotional code to contact you if you sign up for a Palantir service using that code; Enable business transfers to a buyer or other party to a transaction if there is a proposed or actual merger, purchase, sale acquisition, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Palantir’s assets, in which personal data processed by Palantir pursuant to this Statement, forms part of the assets transferred; Disclose personal data to our partners when offering co-branded services, selling or distributing our services, running branded events with our partners, or engaging in joint marketing activities; Show you relevant adverts – we may disclose pseudonymous data with advertising networks as set out in more detail in Cookies and Similar Technologies ; Comply with a court order or legal requirement, including to respond to government, regulatory requests, tax authorities, police agencies, public prosecutors, civil disclosure requests or judicial requests; and Protect the rights, property, life, health, safety or security of Palantir, our employees, our users (including you), our products and services, or others. | ||
| 93 | We may also disclose personal data to third parties at your request or direction. | ||
| 94 | You also may provide personal data directly to third parties, such as when inputting credit card information on our websites to purchase products or services. | ||
| 95 | In this case the information is processed directly by our payment processor partner. | ||
| 96 | Cookies and Tracking Technologies We use cookies and similar technologies, such as pixels and beacons, to understand how you engage with our websites, communications, advertisements or content on third party platforms. | ||
| 97 | See our Cookies Statement for more information on the types of cookies we use, and how to control which cookies are stored on your device. | ||
| 98 | If you activate a social media plug-in, the social media platform automatically makes available the content to your browser, which then integrates it into our websites. | ||
| 99 | In this situation, personal data may also be transferred that is initiated and controlled by the respective social network, e.g., LinkedIn. Your connection to a social media platform, the personal data transfers that take place between the social media platform and your system and your interactions on this platform are governed exclusively by the data protection provisions of the relevant social media platform. | ||
| 100 | How long do we keep your personal data? | ||
| 101 | We collect and keep personal data only as needed or allowed for the purposes set out in this Statement, based on the reason we collected the personal data in the first instance and what is permitted under the laws that apply to the processing. | ||
| 102 | We keep the personal data we collect in line with our internal data retention policies for as long as you use our services or as long as is necessary to: (i) fulfil the purpose(s) for which we collected the personal data; (ii) provide and secure our products and services; (iii) resolve disputes, establish legal defenses, enforce our agreements and comply with applicable laws; (iv) conduct audits; and (v) comply with our internal policy requirements. | ||
| 103 | International transfers of your personal data If there is an international transfer of your personal data, we will use a data transfer agreement with the recipient based on any data transfer requirements imposed by local data protection laws. | ||
| 104 | If your personal data is transferred out of the EEA, UK or Switzerland, your personal data may be transferred to the United States or other countries worldwide. | ||
| 105 | If your personal data is transferred to a country or organization that is not subject to an adequacy decision by the European Commission or (where relevant) the UK Secretary of State, we will put in place suitable safeguards to ensure that any transfer is carried out in compliance with applicable data protection rules. | ||
| 106 | To ensure an adequate level of protection for your personal data, we will use a data transfer agreement with the recipient based on Standard Contractual Clauses approved by the European Commission, the UK Secretary of State, or the UK Information Commissioner’s Office (as applicable) under the UK GDPR and the EU GDPR (as applicable). | ||
| 107 | You may request additional information in this respect and obtain information regarding the relevant safeguard by exercising your rights as set out in the Exercising your rights section. | ||
| 108 | Children's personal data Our websites are not intended for children under 16 years of age. | ||
| 109 | If you become aware that your child has provided us with personal data without your consent, please contact us at privacy@palantir.com and we will work to delete it. | ||
| 110 | We do not knowingly collect personal information (including as defined by the U.S. Children’s Privacy Protection Act, or “COPPA”) from children under 16. | ||
| 111 | Your rights in relation to your personal data In some countries and territories, data protection and consumer privacy laws provide individuals with rights regarding the personal data processed by organizations. | ||
| 112 | If you live or work in the UK, EEA or Switzerland, you have the rights below in relation to the personal data processed by Palantir. | ||
| 113 | If you live or work in any other country, and that country you live or work in grants similar rights, you may also have some or all of the rights below in relation to the personal data processed by Palantir. | ||
| 114 | Please note that these rights are not absolute, and in some circumstances may be balanced against other considerations, including the privacy rights of other individuals. | ||
| 115 | Your rights: The right of access to your personal data: You may have the right to receive confirmation about whether we process your personal data and, if we do, to obtain access to your personal data. | ||
| 116 | You may also have the right to obtain certain information about how we process your personal data. | ||
| 117 | The right to ask us to correct any personal data we hold on you: You may have a right to request correction of your personal data if it is inaccurate or incomplete. | ||
| 118 | The right to request erasure of your personal data: You may have a right to request the deletion of your personal data if certain grounds for erasure apply. | ||
| 119 | The right to restrict how we process your personal data: In certain circumstances, you may have a right to restrict our ability to keep using your personal data. | ||
| 120 | When processing is restricted, we may still store your personal data, but may not use it unless we have your consent or need to process your personal data in connection with a legal claim, important public interest, or to protect the right of others. | ||
| 121 | The right to object to our processing of your personal data: In certain circumstances, you may have a right to object to our ability to use your personal data in certain ways. | ||
| 122 | In particular, in certain circumstances, you may have: (i) the right to object to the processing of your personal data where that processing is based on our legitimate interests; (ii) the right to object to processing for direct marketing purposes (including profiling). | ||
| 123 | The right to data portability: In certain circumstances, you may have a right to obtain and reuse certain of your personal data in a structured, commonly used and machine-readable format. | ||
| 124 | Where certain conditions apply, you may also have the right to have that personal data transferred directly to a third party. | ||
| 125 | Right to withdraw your previously given consent to our use of your personal data: Where you have given us your consent to engage in certain types of processing of your personal data (e.g., where we have said we rely on consent as a lawful basis for processing your personal data), you may have the right to withdraw your consent at any time. | ||
| 126 | Your withdrawal of consent will only apply to our use of your personal data in the future, and will not affect the lawfulness of anything we have done with your personal data prior to your consent being withdrawn. | ||
| 127 | Right to lodge a complaint with the data protection or consumer privacy regulatory or authority: If you believe that the processing of your personal data violates legal requirements, and if the right exists in your country, state or territory, you have the right to lodge a complaint with the competent data protection authority or consumer privacy supervisory authority If you live or work in the United Kingdom, you may complain to the Information Commissioner’s Office using this link . | ||
| 128 | If you live or work in the European Economic Area, you can find details of the data protection authority in your country here . | ||
| 129 | Depending on your country of residence, you may have additional rights to those listed in this section. | ||
| 130 | See below for further sections that may apply to you: Additional disclosures for US Residents France: In accordance with applicable laws and regulations, you have the right to provide instructions regarding the handling, retention, and deletion of your personal information after your death. | ||
| 131 | These instructions may include, but are not limited to, the nomination of a person responsible for carrying out your instructions called a data executor. | ||
| 132 | To exercise this right, you may provide clear and specific instructions about the management of your personal data after your death. | ||
| 133 | These instructions should detail your preferences concerning the retention, deletion, and disclosure of your personal data to third parties. | ||
| 134 | You may modify or revoke these instructions at any time. | ||
| 135 | To designate a data executor, please provide their full name, contact information, and relationship to you. | ||
| 136 | The data executor must be a natural person who is legally capable of carrying out your instructions. | ||
| 137 | In the absence of a designated data executor or clear instructions, your heirs may exercise your rights concerning your personal data after your death, as permitted by applicable laws and regulations. | ||
| 138 | Please note that your instructions and the designation of a Data Executor do not guarantee that your personal data will be exempt from disclosure if required by law, regulation, or court order. | ||
| 139 | To provide, modify, or revoke your instructions, or to designate a data executor, please contact our Data Protection Officer at privacy@palantir.com . | ||
| 140 | We may require additional information to verify your identity and ensure the proper execution of your instructions. | ||
| 141 | Exercising your rights To exercise the above rights, you have the option of sending your request to the email, or address, listed below. | ||
| 142 | If you are not satisfied with how we process your personal data, please let us know and we will investigate your concern. | ||
| 143 | Please raise any concerns by contacting our Data Protection Officer by email at privacy@palantir.com , or using the relevant details as follows: United States Palantir Technologies Inc. | ||
| 144 | Attention : Data Protection Officer 19505 Biscayne Boulevard, Suite 2350 Aventura, Florida 33180 Email : privacy@palantir.com United Kingdom Palantir Technologies UK, Ltd. | ||
| 145 | Attention: Data Protection Officer Birchin Court 5 th Floor 19-25 Birchin Lane London EC3V 9DU Email: privacy@palantir.com European Union Palantir Technologies GmbH Attention : Data Protection Officer Marienstraße 15 60329 Frankfurt am Main Germany Email: privacy@palantir.com United Kingdom, European Economic Area and Switzerland Information Territory Specific Information The following lets you know why and how we use your personal data and what our legal basis for processing is: To communicate with you: Our legitimate interests. | ||
| 146 | We may communicate with you in various contexts utilizing various bases for processing. | ||
| 147 | Certain communications may be in our legitimate interests in marketing our products and services to you, or in providing our products and services to you. | ||
| 148 | Your consent. | ||
| 149 | Some communications may be on the basis of your voluntary, explicit and informed consent, which you can revoke at any time. | ||
| 150 | Our contract with you. | ||
| 151 | Other communications may be for the purposes of performing a contract between you and Palantir, including to carry out pre-contractual measures at your request or to enter into a contract or execute a contract with you (when you are acting on behalf of a business partner or customer). | ||
| 152 | To provide you with our products and services: Our contract with you. | ||
| 153 | We process this personal data to fulfil any contract between you and Palantir. | ||
| 154 | Our legitimate interests. | ||
| 155 | Where we do not have a contract with you directly, we process your personal data on the basis of Palantir’s legitimate interest to provide the products and services. | ||
| 156 | To process financial transactions: Our contract with you. | ||
| 157 | We process this personal data to fulfil the contract between us and you. | ||
| 158 | To measure, develop and improve our products and services: Your consent. | ||
| 159 | We may send you communications (for instance to contact you based on your feedback) on the basis of your consent, which you can revoke at any time. | ||
| 160 | Our legitimate interests. | ||
| 161 | We may process this personal data on the basis of Palantir’s legitimate interest to improve, develop, and measure the performance of, our products and services. | ||
| 162 | To send sales and marketing communications: Your consent. | ||
| 163 | When we communicate with you for the purposes of marketing, we may do this on the basis of your consent, which you may revoke at any time. | ||
| 164 | Our legitimate interests. | ||
| 165 | If we have not asked for your consent, we might send you marketing communications on the basis of Palantir’s legitimate interest in marketing our products and services. | ||
| 166 | To understand who would be most interested in our products and services and to personalize our communications: Your consent. | ||
| 167 | We may process your personal data to understand your needs and preferences to personalize the communications we send to you on the basis of your consent, which you may revoke at any time. | ||
| 168 | Our legitimate interests. | ||
| 169 | If we have not asked for your consent, we might process your personal data to deliver relevant advertising communications to you on the basis of Palantir’s legitimate interest in marketing our products and services. | ||
| 170 | To target advertising: Our legitimate interests. | ||
| 171 | We process this personal data on the basis of Palantir’s legitimate interest in understanding who best to market our products and services to. | ||
| 172 | To analyze activity on our websites and improve our public facing platforms and communications user experience: Our legitimate interests. | ||
| 173 | We process this personal data on the basis of Palantir’s legitimate interest in understanding how Palantir’s websites are used and how best they can be improved. | ||
| 174 | To enable your visit to a Palantir designated space: Our legitimate interests. | ||
| 175 | We process this personal data on the basis of our legitimate interest to keep our employees, contractors, visitors, our confidential information, intellectual property and that of our customers safe in Palantir designated spaces. | ||
| 176 | Event management: Our legitimate interests. | ||
| 177 | We process this personal data on the basis of Palantir’s legitimate interest to provide engaging and relevant content to promote Palantir products, services and ethical values. | ||
| 178 | To protect our business, our affiliates, and others: Our legitimate interests. | ||
| 179 | We process this personal data on the basis of Palantir’s legitimate interest to protect against harm to Palantir’s rights and property, and to ensure the safety of our employees, users and others such as bringing or defending legal claims. | ||
| 180 | To comply with legal obligations: Our legal obligation. | ||
| 181 | We process this personal data on the basis of Palantir’s legal obligation to perform such processing, such as where the processing is necessary to comply with our legal or regulatory obligations, such as tax reporting or regulatory requirements. | ||
| 182 | To help you exercise your rights and control over your personal data: Your consent. | ||
| 183 | We will process this personal data where you ask us to process this data. | ||
| 184 | To provide training and certification services: Our legitimate interests. | ||
| 185 | We process this personal data on the basis of Palantir’s legitimate interest if you take a course through your employer. | ||
| 186 | Our contract with you. | ||
| 187 | We will process this personal data in order to fulfil our contract with you if you engage with us directly to understand the use of our training and certification services and how best they can be improved. | ||
| 188 | You have the right to object to our processing of your personal data where we rely on Palantir’s legitimate interest . | ||
| 189 | Where we rely on our legitimate interests as the legal basis for processing your personal data, you can object to that processing. | ||
| 190 | We will action your request unless we have compelling legitimate grounds to continue to process your personal data, or where it is needed for legal reasons. | ||
| 191 | Where we have a compelling legitimate interest to continue the processing, we will communicate that clearly to you following your request. | ||
| 192 | You have the right to object to your processing of your personal data where we use your personal data for marketing. | ||
| 193 | Where we use your personal data for marketing purposes, you can unsubscribe from, or “opt out” of, receiving marketing communications from us by using the “unsubscribe” link in any communications we send to you. | ||
| 194 | See the Cookies and Similar Technologies and Your rights sections. | ||
| 195 | Where we rely on your consent, you may withdraw your consent. | ||
| 196 | Where we rely on your consent to process your personal data, you may withdraw that consent at any time to prevent our continued processing of your personal data for that purpose. | ||
| 197 | See the Your rights section. | ||
| 198 | Where we need your personal data to comply with a contractual obligation or the law. | ||
| 199 | Where we require your personal data to fulfil our contract with you, or to comply with a legal obligation, if you fail to provide us with the personal data we need, it might prevent us from being able to comply with our obligations under that contract or fulfil our legal obligations, which might ultimately prevent us from providing you with our products or services. | ||
| 200 | We will let you know where this is the case. | ||
| 201 | Additional disclosures for US residents US Consumer Privacy Act Notice Last updated June 2026 This section (the “US Notice”) provides additional information regarding the applicable US state comprehensive privacy laws that are in effect as of January 15, 2025 (individually known as a “US State Privacy Law” and collectively known as “US State Privacy Laws”) and supplements the disclosures and information throughout this Statement. | ||
| 202 | The commitments in this US Notice apply only to individuals covered by the US State Privacy Laws and are subject to certain statutory exceptions laid out in the US State Privacy Laws. | ||
| 203 | This US Notice does not apply to information we collect about individuals in their capacity as present or former job applicants, employees, contractors, owners, directors, or officers of Palantir. | ||
| 204 | This Statement and US Notice have been designed to be accessible to people with disabilities. | ||
| 205 | If you experience any difficulties accessing the information here, please contact us at accommodations@palantir.com or use the relevant details in the Contact Us section. | ||
| 206 | To print this Privacy Statement and CCPA Notice, please click here → Personal Information we collect “Personal Information” is defined under each US State Privacy Law and includes information that identifies, relates to, or could reasonably be linked with a particular consumer or household. “Personal Information” does not include publicly available information, deidentified or aggregated information, or information covered by certain sector- specific privacy laws. “Sensitive Personal Information” is defined under each US State Privacy Law. | ||
| 207 | Below, we identify (1) the categories of Personal Information and Sensitive Personal Information that we plan to collect, process, and use, and have collected, processed, and used within the preceding 12 months; (2) the categories of recipients to which we have disclosed each category of Personal Information or Sensitive Personal Information for our operational business purposes within the preceding 12 months; (3) the criteria we use to determine the retention period for each category of Personal Information or Sensitive Personal Information; and (4) the categories of Personal Information and Sensitive Personal Information we have sold or shared within the preceding 12 months, as “sale” and “sharing” are defined under the respective US State Privacy Laws. | ||
| 208 | Please note, we do not sell Personal Information in the traditional sense of the word for monetary consideration. | ||
| 209 | However, because the definitions of “sale” and “sharing” under the US State Privacy Laws are broad enough such that they include the disclosure of your information to certain types of advertising and marketing partners, we provide consumers with the right to opt-out of any such sale or sharing of their Personal Information. | ||
| 210 | We do not knowingly sell or share the Personal Information of anyone under 16 years old. | ||
| 211 | Use of Personal Information We use Personal Information for a variety of business and commercial purposes, as described in the Why and how we use your personal information section above. | ||
| 212 | Category of Personal Information Collected and Processed: Contact Data identifiers such as name, address, email address, telephone number, mobile phone number, IP address, and social media handles. | ||
| 213 | Disclosed to Which Categories of Recipients for Operational Business Purposes: Palantir affiliates Service providers that provide services to us, such as performing functions around provision of technical infrastructure, marketing services, general processing, and maintenance services Third-party partners, such as partners offering co-branded services with us, selling or distributing our services, carrying out identity checks for our AIP Now products and services, payment processing, event partners, or engaging in joint marketing activities with us (“Third-Party Partners”) Government authorities, state institutions, or other parties pursuant to law Sold and/or Shared for Cross-Contextual Behavioral Advertising? | ||
| 214 | If so, to Which Categories of Third Parties: Yes IP address, social media handles and other Technical Data, Advertising and marketing partners Advertising technology vendors Social media platforms Category of Personal Information Collected and Processed: Personal information categories listed in the California Customer Records statute (Cal. | ||
| 215 | Civ. | ||
| 216 | Code § 1798.80(e)), such as name, address, telephone number, driver’s license or state identification card number, or financial information such as payment or billing information. | ||
| 217 | Disclosed to Which Categories of Recipients for Operational Business Purposes: Palantir affiliates Service providers that provide services to us, such as performing functions around provision of technical infrastructure, marketing services, general processing and maintenance services Third-Party Partners Government authorities, state institutions, or other parties pursuant to law Sold and/or Shared for Cross-Contextual Behavioral Advertising? | ||
| 218 | If so, to Which Categories of Third Parties: Yes, name, address and telephone number: Advertising and marketing partners Advertising technology vendors Social media platforms Category of Personal Information Collected and Processed: Commercial information, such as records of personal property, history of products or services purchased, obtained or considered. | ||
| 219 | Disclosed to Which Categories of Recipients for Operational Business Purposes: Palantir affiliates Third Party Partners Service providers that provide services to us, such as performing functions around provision of technical infrastructure, marketing services general processing and maintenance services Sold and/or Shared for Cross-Contextual Behavioral Advertising? | ||
| 220 | If so, to Which Categories of Third Parties: No Category of Personal Information Collected and Processed: Internet or other similar network activity, such as information on a consumer’s interaction with a website, application, or advertisement. | ||
| 221 | Disclosed to Which Categories of Recipients for Operational Business Purposes: Palantir affiliates Service providers that provide services to us, such as performing functions around provision of technical infrastructure, marketing services, general processing and maintenance services Sold and/or Shared for Cross-Contextual Behavioral Advertising? | ||
| 222 | If so, to Which Categories of Third Parties: Yes Advertising and marketing partners Advertising technology vendors Social media platforms Category of Personal Information Collected and Processed: Sensory data, such as audio, electronic, visual, or similar information. | ||
| 223 | Disclosed to Which Categories of Recipients for Operational Business Purposes: Palantir affiliates Service providers that provide services to us, such as performing functions around provision of technical infrastructure, marketing services, general processing and maintenance services Government authorities, state institutions, or other parties pursuant to law Sold and/or Shared for Cross-Contextual Behavioral Advertising? | ||
| 224 | If so, to Which Categories of Third Parties: No Category of Personal Information Collected and Processed: Professional or employment-related information, such as company name, occupation contact details, occupation, employment history, areas of expertise, and your experience with Palantir products. | ||
| 225 | Disclosed to Which Categories of Recipients for Operational Business Purposes: Palantir affiliates Third Party Partners Service providers that provide services to us, such as performing functions around provision of technical infrastructure, marketing services general processing, and maintenance services Sold and/or Shared for Cross-Contextual Behavioral Advertising? | ||
| 226 | If so, to Which Categories of Third Parties: Yes Advertising and marketing partners Social media platforms Category of Personal Information Collected and Processed: Education information, such as information about your educational attainments (this category is defined to exclude any publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)), registrations for courses, assessments, and the results of courses and assessments. | ||
| 227 | Disclosed to Which Categories of Recipients for Operational Business Purposes: Palantir affiliates Service providers that provide services to us, such as performing functions around provision of technical infrastructure, marketing services, general processing and maintenance services Your employer or the applicable entity through which you applied for training or certification. | ||
| 228 | Sold and/or Shared for Cross-Contextual Behavioral Advertising? | ||
| 229 | If so, to Which Categories of Third Parties: No Category of Personal Information Collected: Inferences drawn from other Personal Information to create a consumer’s profile reflecting personal or professional preferences, characteristics, or predispositions. | ||
| 230 | Disclosed to Which Categories of Recipients for Operational Business Purposes: Palantir affiliates Service providers that provide services to us, such as performing functions around provision of technical infrastructure, marketing services, general processing and maintenance services Government authorities, state institutions, or other parties pursuant to law Sold and/or Shared for Cross-Contextual Behavioral Advertising? | ||
| 231 | If so, to Which Categories of Third Parties: Yes Advertising and marketing partners Advertising technology vendors Social media platforms Below, we provide this information related to Sensitive Personal Information: Category of Personal Information Collected and Processed: Personal Information that reveals a consumer’s driver’s license, state identification card, or passport number Disclosed to Which Categories of Recipients for Operational Business Purposes: Palantir affiliates Third-party service partners that provide services to us, such as performing functions around technical infrastructure and processing, maintenance, and payment processing carrying out identity checks for our self-serve products payment processing and identity verification when signing up for one of our AIP Now products and services. | ||
| 232 | Government authorities, state institutions, or other parties pursuant to law Sold and/or Shared for Cross-Contextual Behavioral Advertising? | ||
| 233 | If so, to Which Categories of Third Parties: No We may use Personal Information to generate deidentified data sets. | ||
| 234 | To the extent we treat data as deidentified under the US State Privacy Laws, we will maintain and use that data solely in deidentified form and will not attempt to reidentify that data with any individuals, other than to assess whether the deidentification process complies with applicable law or as otherwise permitted by applicable law. | ||
| 235 | Retention Period We use the following criteria to determine the period of time for which we retain each category of Personal Information and Sensitive Personal Information: for as long as our services to which this Statement applies; as long as we anticipate you may be interested in our products; to fulfill the purpose(s) for which we collected the Personal Information or Sensitive Personal Information; to provide and secure our products and services; to resolve disputes, establish legal defenses, enforce our agreements and comply with applicable laws; to conduct audits; and to comply with our internal policy requirements. | ||
| 236 | Sources of Personal Information We obtain the categories of Personal Information listed above (including Sensitive Personal Information) directly from consumers or from devices on which our products or services are installed, as well as from the following categories of sources: our affiliates, publicly-available databases, third-party business partners, social media sites, and other third-party sources. | ||
| 237 | Use of Sensitive Personal Information Sensitive Personal Information is only used or disclosed to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services; to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Information or other information; to resist malicious, deceptive, fraudulent, harmful or illegal actions directed at the business and to prosecute those responsible for those actions; to ensure the physical safety of natural persons; short-term, transient use; or perform services on behalf of the business. | ||
| 238 | Disclosure Any disclosures of your information to third parties over the preceding 12 months have been in accordance with the permitted categories in the When do we disclose your personal information section of the Privacy Statement above. | ||
| 239 | Your Consumer Rights Residents of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia (collectively known as “US Residents”) may make the following types of requests under the US State Privacy Laws: Requests to Know, Delete, Correct, Obtain a copy or Opt-out of Sharing: Request to Know: You may request that we confirm whether or not we are processing your Personal Information. | ||
| 240 | Where applicable, you may request that we disclose the following information to you about our collection and use of your Personal Information, in each case including Sensitive Personal Information: (1) the categories of Personal Information we collected or processed about you; (2) the categories of sources from which we collected this Personal Information; (3) the categories of Personal Information that we have sold, shared, or disclosed, (4) the categories of recipients to whom this information was sold, shared, or disclosed; (5) the business or commercial purpose for selling, sharing, or disclosing Personal Information; and (6) the specific pieces of information we collected about you, unless doing so would require us to reveal a trade secret. | ||
| 241 | Request to Delete: Where applicable, you may request that we delete Personal Information and Sensitive Personal Information that we have collected from you. | ||
| 242 | We may limit or deny your deletion request in certain cases, in accordance with exceptions specified in the US State Privacy Laws. | ||
| 243 | Request to Correct: Where applicable, you may request that we correct inaccurate Personal Information and Sensitive Personal Information that we maintain about you, taking into account the nature of the information and the purposes of the processing of the information. | ||
| 244 | Request to Obtain a Copy: Where applicable ,you may request that we provide a copy of your Personal Information that you have previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance. | ||
| 245 | Colorado residents may exercise this right no more than two times per calendar year. | ||
| 246 | We are not required to provide such information to Connecticut, Colorado, and Oregon residents if doing so would require us to reveal a trade secret. | ||
| 247 | List of specific third parties: Oregon, Minnesota, and Delaware consumer may request a list of specific third parties to whom we have disclosed your Personal Data. | ||
| 248 | Sensitive Information: For Virginia, New Hampshire, Colorado, Connecticut, Delaware, Nebraska, Utah, Texas, and Oregon consumers, we will not process your Sensitive Personal Information without obtaining your consent. | ||
| 249 | California consumers will have the right, at any time, to limit the use of their Sensitive Personal Information. | ||
| 250 | For California consumers, please visit “Limit the Use of My Sensitive Personal Information by submitting a form here or by emailing us at data-subject-request@palantir.com to exercise this right. | ||
| 251 | These requests will be processed in accordance with California Consumer Privacy Act, as amended by the California Privacy Rights Act “CCPA”. | ||
| 252 | Request to Opt-Out of the Sale or Sharing: Where applicable, you may opt out of our “sale” of Personal Information or “sharing” of Personal Information for the purposes of (i) targeted advertising, or (ii) “sale” of personal data. | ||
| 253 | Opt-out preference signals will be processed in accordance with applicable laws. | ||
| 254 | How to Submit Requests to Know, Delete, or Correct, or Obtain a Copy If you would like to exercise a right under US State Privacy Laws with respect to Palantir, please complete the form here or submit an email request to data-subject-request@palantir.com with “Request to Know,” “Request to Delete,” “Request to Obtain a Copy” or “Request to Correct” in the subject line. | ||
| 255 | For a “Request to Know,” please specify what details you would like to know, including any specific pieces of Personal Information you would like to access. | ||
| 256 | For a “Request to Delete,” please specify what information you would like to have deleted (which may be all your information). | ||
| 257 | For a “Request to Correct,” please specify what information you would like to have corrected. | ||
| 258 | If you submit a request, we may ask for information necessary to verify your identity and eligibility to assert this right, and we will respond to verified requests in accordance with the US State Privacy Laws. | ||
| 259 | If your request relates to Personal Information that we process about you as a service provider or contractor on behalf of a customer, please direct your request to our relevant customer. | ||
| 260 | If you wish to make your request directly to us, please provide the name of our customer on whose behalf we processed your Personal Information. | ||
| 261 | We will refer your request to that customer and will support them to the extent required by applicable law in responding to your request. | ||
| 262 | Authorized Agent. | ||
| 263 | You may also utilize an authorized agent to exercise your US State Privacy Law rights on your behalf. | ||
| 264 | As part of our verification process, we may request that an authorized agent provide, as applicable, proof concerning status as an authorized agent to act on your behalf. | ||
| 265 | If an authorized agent is making a Request to Know, Request to Delete, Request to Obtain a Copy, or Right to Correct on behalf of a US Resident and has not provided a power of attorney from the resident pursuant to applicable US laws, we may also require the resident to verify their own identity directly with us; or directly confirm with us that they provided you permission to submit the request. | ||
| 266 | Right to appeal. | ||
| 267 | You may also appeal to our refusal to take action on a consumer request. | ||
| 268 | Within 45 days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written application of the reasons for the decision. | ||
| 269 | Under the CPA, Palantir may extend the 45-day period to response to an appeal by another 60 days, where reasonably necessary, taking into account the complexity and number of requests serving as the basis of appeal. | ||
| 270 | We will inform Colorado consumers of any extension within 45 days after receipt of an appeal, together with the reasons for delay. | ||
| 271 | If the appeal is denied, Virginia , Colorado , Connecticut , Delaware, Iowa, Montana , Nebraska, New Hampshire, New Jersey, and Texas consumers may contact their state Attorney General and submit a complaint. | ||
| 272 | Right to non-discrimination. | ||
| 273 | You may not be discriminated against because you exercise any of your rights under the US State Privacy Laws, and Palantir is committed to this principle. | ||
| 274 | How to Submit Requests to Opt-Out of Sale or Sharing To opt-out of sale or sharing, please visit “Do Not Sell or Share My Personal Information” by submitting a form here, clicking on “Do Not Sell” which can be found at the bottom left of this web page, or by emailing us at data-subject-request@palantir.com. | ||
| 275 | Opt-out preference signals will be processed in accordance with the US State Privacy Laws. | ||
| 276 | Contact Us If you have any questions or requests in connection with the US State Privacy Laws, please contact us at: Email: privacy@palantir.com Customize your communication preferences | ||
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.