6 Total
1 High severity
5 Medium severity
0 Low severity
Summary

This is Amazon's Privacy Notice, which explains how Amazon collects and uses your personal data when you shop on Amazon.com, use Alexa, or interact with Amazon devices and services. The most important thing to know is that Amazon collects a wide range of data about you including your voice recordings, browsing history, purchase history, and location, and shares this with third-party sellers, advertisers, and business partners to serve you targeted ads both on and off Amazon. If you want to limit how Amazon uses your data for advertising, you can adjust your advertising preferences at www.amazon.com/adprefs or opt out of interest-based ads through your account settings.

Technical / Legal Breakdown

This document is Amazon's Privacy Notice governing the collection, use, storage, and sharing of personal information across Amazon's retail marketplace, devices, and affiliated services, with stated legal bases including consent, contractual necessity, and legitimate interests depending on jurisdiction. The notice states that Amazon collects an extensive range of personal data including name, address, payment information, voice and image data, location data, browsing and purchase history, biometric identifiers through Alexa and Amazon devices, and inferences drawn from this data; the terms authorize sharing this information with third-party sellers, business partners, advertising networks, and affiliated entities, and permit use for purposes including targeted advertising, product improvement, and fraud prevention. Notably, the notice asserts broad data collection through Amazon devices including ambient voice recording, cross-context behavioral advertising, and the use of purchase data to serve advertising both on and off Amazon properties, practices that extend beyond transactional necessity; the agreement also reserves the right to retain data for undefined periods necessary for legal or operational purposes, which may interact with data minimization requirements under applicable law. The notice engages GDPR and UK GDPR for EU and UK residents respectively, CCPA and CPRA for California residents, and broader FTC Act obligations regarding unfair or deceptive data practices; jurisdiction-specific rights including access, deletion, portability, and opt-out of targeted advertising are acknowledged but vary materially by geography, and the practical enforceability of certain asserted data uses depends on regulatory interpretation in the applicable jurisdiction.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
High — 1 provision
Medium — 5 provisions

Monitoring

Amazon Marketplace has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle AI and Machine Learning Training Data Use and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:03 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000027
Version ID CA-V-000640
SHA-256 8d2e6f401e3074315cb3ef72d05c681865898ea8e39095517ad2ab8b4eb73cd6
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans