What are the institutional and regulatory implications of this document?

(1) REGULATORY LANDSCAPE: This policy engages GDPR and UK GDPR through its cross-border transfer disclosures referencing standard contractual clauses and adequacy decisions, enforced by EU data protection authorities and the UK ICO. It engages CCPA/CPRA through its California-specific rights disclosures, enforced by the California Privacy Protection Agency (CPPA) and California AG. COPPA is engaged through the children's data restriction for users under 18. The inference-drawing practices descr…

How does Airtable's Airtable Privacy Policy affect users?

Users' account information, activity logs, and behavioral data are subject to collection and processing by Airtable, including the generation of inferred psychological profiles. For accounts created by employers or organizations, usage data and account activity are accessible to the account administrator. Users may opt out of marketing communications through the unsubscribe mechanism in Airtable emails or by contacting privacy@airtable.com, and may request content deletion through the same emai…

How often is Airtable's Airtable Privacy Policy updated?

ConductAtlas monitors this document daily and captures every version with cryptographic hashing and timestamp verification. Update frequency varies — see the change timeline on this page for complete version history.

Can I get alerted when Airtable updates this document?

Yes. Monitor subscribers ($19/month) can add Airtable to their watchlist and receive same-day email alerts whenever this document or any other Airtable document changes.

CA-D-000552

Airtable Privacy Policy

Airtable

Last change detected June 25, 2026 Privacy policy

SHA-256: 8a99a08944c4d7713c3… 3 versions captured 1 change documented

Create free account

Track 1 platform and get the weekly governance digest. No credit card required.

View original document at Airtable ↗

This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology

8 Total

0 High severity

5 Medium severity

3 Low severity

Summary

This document establishes Airtable's data collection, use, and sharing practices for users of its database and workflow platform. Airtable collects account details, browsing behavior, payment information, employer details, and derives inferences about psychological traits, attitudes, and aptitudes from platform usage data. The policy authorizes sharing of collected data with vendors, partners, and organizations that manage user accounts.

Technical / Legal Breakdown

This document is Airtable's Privacy Policy (last updated April 16, 2026), governing the collection, use, disclosure, retention, and transfer of personal information collected through airtable.com, its hosted services, and its software including mobile applications, browser extensions, and APIs. The policy states that Airtable collects a broad range of data categories including identifiers, commercial information, internet and network activity, audio/visual information, employment information, and inferences drawn from usage data, and the terms authorize use of this data for service provision, marketing, analytics, security, legal compliance, and participation in partner programs. Notably, the policy reserves the right to derive behavioral inferences including predictions about 'psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes' from user activity, which is operationally distinct from many peer-level B2B SaaS policies, though the agreement's assertion of this right does not foreclose applicable legal constraints on inference-based profiling. The policy engages GDPR and equivalent frameworks through its cross-border transfer mechanism disclosures (referencing standard contractual clauses and adequacy decisions), CCPA/CPRA through its California-specific rights section, and COPPA through its children's data restriction; jurisdiction-specific rights are acknowledged as variable, and compliance obligations will depend on the user's location and applicable regulatory context.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial

1 important change detected

3 versions captured · Last updated: June 2026

June 12, 2026

low

What changed Airtable updated a single sentence in their Privacy Policy on June 12, 2026, changing 'Table of Contents 1.' to 'Table of contents 1.' This is a minor formatting change to the table of contents heading, lowercasing the word 'contents'. The change has no operational effect on privacy practices, data handling, user rights, or policy substance.

Why this matters This change is a formatting update to the table of contents in Airtable's Privacy Policy with no effect on substantive privacy practices, data collection, user rights, or obligations. The capitalization of a single heading does not modify how personal data is collected, processed, retained, or shared under the policy.

View full change record →

Recent Provision Changes Jun 25, 2026

8 provisions unchanged.

View full change record →

Medium — 5 provisions

Behavioral and Psychological Inference Collection Compare →

Airtable can analyze how you use its platform to build a profile about you that includes predictions about your psychology, intelligence, and personal attitudes.

Added May 10, 2026 Standard Seen across 284 platforms
Employer and Organization Disclosure of User Data Compare →

If your employer or an organization set up your Airtable account, or if your work email domain is associated with an Airtable organization, Airtable may share your data with that employer or organization.

Added May 10, 2026 Standard Seen across 284 platforms
Content Access and Deletion at Airtable's Sole Discretion Compare →

Airtable can delete your data or cut off your access to it if the company decides, on its own judgment, that you have violated its Terms of Service.

Added May 10, 2026 Standard Seen across 179 platforms
Cross-Border Data Transfer Compare →

Airtable may move your personal data to other countries for processing, and commits to using legal mechanisms like standard contractual clauses when required by law.

Added May 10, 2026 Standard Seen across 284 platforms
Third-Party Integration Data Collection Compare →

When you connect a third-party service like Google Drive to Airtable, Airtable can access and store data from that third-party account and link it to your Airtable profile.

Added May 10, 2026 Standard Seen across 284 platforms

Low — 3 provisions

Data Retention Policy Compare →

Airtable keeps your personal data for as long as it needs it for business or legal purposes, using a multi-factor test to determine how long that is, but does not specify exact retention periods.

Added May 10, 2026 Standard Seen across 284 platforms
Children's Data Restriction Compare →

Airtable's services are not for users under 18, and the company says it will delete any children's data it accidentally collects.

Added May 10, 2026 Standard Seen across 284 platforms
Marketing Communications and Opt-Out Compare →

Airtable may send you promotional emails and marketing messages, but you can opt out at any time by clicking Unsubscribe or emailing privacy@airtable.com.

Added May 10, 2026 Standard Seen across 284 platforms