8 Total
5 High severity
3 Medium severity
0 Low severity
Summary

This is Amazon's privacy policy — it explains how Amazon collects and uses your personal data across its shopping site, Alexa devices, Amazon Prime, Kindle, AWS, and all affiliated services. Amazon collects an unusually wide range of information about you, including every purchase you make, every product you search or view, your location, your voice commands to Alexa, your financial and health-related data, and detailed inferences about your preferences — and shares this with thousands of third-party sellers and advertising partners. You can review and adjust your privacy settings, manage your ad preferences, and request deletion of your personal data by visiting Amazon's Privacy Central at amazon.com/privacy.

Technical Summary

This document is Amazon's Privacy Notice governing the collection, use, disclosure, and retention of personal information across Amazon's retail, digital, and third-party services platforms, with legal bases including consent, contractual necessity, and legitimate interests under applicable law. The most significant obligations include Amazon's collection of an exceptionally broad range of personal data — including purchase history, voice interactions (Alexa), location data, biometric indicators, health/financial information, and behavioral data — and its right to share this data with a wide network of third-party sellers, advertising partners, and affiliated companies. Notable deviations from industry standard include Amazon's explicit retention of voice recordings and interaction data from Alexa devices, its cross-device and cross-service tracking ecosystem, the breadth of inferences drawn from behavioral data for advertising, and the retention of personal data for unspecified periods tied to vague 'business purposes.' The policy engages GDPR (particularly Arts. 6, 13, and 17), CCPA/CPRA (§§1798.100–1798.140), COPPA, and FTC Act Section 5, with jurisdiction-specific supplements for California, UK, and EU residents. Material compliance considerations include the adequacy of consent mechanisms for voice data and sensitive health/financial inferences, the legal sufficiency of Amazon's data retention justifications, and the robustness of its third-party data sharing disclosures under CCPA's 'sale' and 'sharing' definitions.

Evidence Provenance
Captured April 19, 2026 06:03 UTC
Document ID CA-D-000027
Version ID CA-V-000640
Wayback Machine View archived versions →
SHA-256 8d2e6f401e3074315cb3ef72d05c681865898ea8e39095517ad2ab8b4eb73cd6
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
High Severity — 5 provisions
Medium Severity — 3 provisions

Cross-platform context

See how other platforms handle AI and Machine Learning Training Data Use and similar clauses.

Compare across platforms →

Applicable Regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CFAA
United States Federal
CAN-SPAM
United States Federal
DMA
European Union
DMCA
United States Federal
DSA
European Union
GDPR
European Union
HIPAA
United States Federal
TCPA
United States Federal
UK GDPR
United Kingdom