Behavioral and Psychological Inference Collection

What it is

Airtable can analyze how you use its platform to build a profile about you that includes predictions about your psychology, intelligence, and personal attitudes.

Why it matters (compliance & governance perspective)

This provision goes beyond standard usage analytics to assert the right to profile users on psychological and aptitude dimensions, which has implications for how your data is categorized and potentially shared.

Consumer impact (what this means for users)

Your usage patterns on Airtable may be used to generate inferred profiles including predictions about your intelligence, psychological tendencies, and aptitudes, which may be shared with vendors, partners, or employers who manage your account.

What you can do

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision may require evaluation under GDPR Article 22 (automated decision-making and profiling) and Article 5 data minimization principles, enforced by EU supervisory authorities. Under CCPA/CPRA, inferences drawn about consumers are defined as personal information and subject to disclosure and deletion rights, enforced by the California Privacy Protection Agency. The breadth of psychological inference categories asserted may also engage the FTC Act's prohibition on unfair or deceptive practices if such inferences are used in ways not clearly disclosed to users. (2) GOVERNANCE EXPOSURE: High. The explicit enumeration of psychological, intelligence, and aptitude inferences is unusually broad for a B2B SaaS platform. If these inferences are used for any decision-making affecting users (such as product access tiers, support prioritization, or partner referrals), GDPR Article 22 obligations could be triggered. Even where automated decision-making is not involved, the breadth of the profiling assertion creates compliance surface area across multiple frameworks. (3) JURISDICTION FLAGS: EU/EEA users face the highest exposure given GDPR's explicit profiling and automated decision-making provisions. California users have CPRA rights to know about and opt out of sharing of inferred data. Illinois users should note that psychological profiling inferences are not covered by BIPA, but the breadth of the assertion may attract AG scrutiny under the Illinois Consumer Fraud Act. Enterprise deployments in the UK should consider UK GDPR alignment. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise procurement teams should request clarification from Airtable on whether these inferences are operationalized in practice and, if so, how they are used and with whom they are shared. Data processing agreements (DPAs) should specify whether inference data constitutes personal data under applicable law and how it is handled. This provision could affect vendor risk assessments, particularly for organizations subject to employee privacy obligations. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether current employee or user privacy notices adequately disclose the possibility of psychological inference profiling. If Airtable is used in HR or performance management contexts, the inference provision may create heightened obligations under employment law in the EU and some US states. Data mapping exercises should include inference categories as a distinct data type. Organizations should request Airtable's DPA and review whether inference data is addressed therein.

Applicable agencies

Provision details

Other risks in this policy

• Employer and Organization Disclosure of User Data medium
• Content Access and Deletion at Airtable's Sole Discretion medium
• Cross-Border Data Transfer medium
• Data Retention Policy low
• Third-Party Integration Data Collection medium
• Children's Data Restriction low