Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Aug 5, 2026; our capture on Oct 21, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“American is not responsible if someone gains access to your accounts by obtaining your password.”
“To the extent it is required to do so by law, American will permanently destroy any biometric data or identifiers in our possession once the initial purpose for collecting or obtaining them has been satisfied, or within three years of your last interaction with American, whichever comes first.”
“revision of decisions made solely based on automated processing of personal data affecting your interests, including decisions intended to define your personal, professional, consumer and credit profile, or aspects of your personality.”
“American does not knowingly collect personal information directly from children – persons under the age of 13, or another age if required by applicable law – other than when required to comply with the law or for safety and security reasons.”
“the laws and regulations of several countries...require to provide foreign and domestic government agencies with access to the personal information you disclose to us and data that we have about you and your travel plans, history, or status...”
“Regardless of your opt-out preferences, we reserve the right to share your information with third parties for joint activity purposes, including administrative, transactional, and analytical purposes.”
This document explains how American Airlines handles your personal information — what it collects, how long it keeps it, and who it shares it with. American Airlines can share your data with third parties for joint activity purposes even if you opt out, and governments in multiple countries can legally require access to your travel information. American Airlines makes no warranty that your data will always be handled consistently with this policy, and it can update the policy at any time by posting the new version online.
American Airlines' Privacy Policy establishes the terms under which American Airlines collects, retains, shares, and processes personal information from users of its Travel Services, Program Services, and Interactive Services. The policy sets a seven-year general retention period for travel- and membership-related personal data, and a separate biometric retention limit tied to purpose fulfillment or three years from last interaction, whichever comes first. American Airlines reserves the right to share personal information with third parties for joint activity purposes regardless of user opt-out preferences, and discloses that foreign and domestic government agencies receive access to user travel data as legally compelled across multiple jurisdictions. The policy disclaims all warranties regarding data protection and limits liability for account compromise through password theft, while acknowledging a user right to seek revision of solely automated decisions affecting personal, professional, consumer, or credit profiles.
Your personal information related to travel or membership may be retained by American Airlines for up to seven years after your travel ends or membership is terminated, and biometric data is destroyed when its collection purpose is met or within three years of your last interaction. Opting out does not prevent American Airlines from sharing your data with third parties for joint activity purposes, including administrative, transactional, and analytical uses. If American Airlines uses automated processing of your personal data to make decisions affecting your personal, professional, consumer, or credit profile, you have a right under this policy to seek revision of those decisions — you can exercise that right by contacting American Airlines directly.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“American is not responsible if someone gains access to your accounts by obtaining your password.”
“To the extent it is required to do so by law, American will permanently destroy any biometric data or identifiers in our possession once the initial purpose for collecting or obtaining them has been satisfied, or within three years of …”
“revision of decisions made solely based on automated processing of personal data affecting your interests, including decisions intended to define your personal, professional, consumer and credit profile, or aspects of your personality.”
“American does not knowingly collect personal information directly from children – persons under the age of 13, or another age if required by applicable law – other than when required to comply with the law or for safety and security …”
“We generally retain personal information related to your use of our Travel Services or Program Services for up to seven years after you complete your travel or terminate your membership with us.”
“the laws and regulations of several countries...require to provide foreign and domestic government agencies with access to the personal information you disclose to us and data that we have about you and your travel plans, history, or status...”
“Regardless of your opt-out preferences, we reserve the right to share your information with third parties for joint activity purposes, including administrative, transactional, and analytical purposes.”
“if you decline to provide information required by law for us to transport you, you will not be able to board or travel on our aircraft.”
“no method of transmitting or storing electronic information is ever completely secure, and thus we make no warranty, express, implied, or otherwise, that your information will never be accessed, used or released in a manner that is inconsistent with this …”
“Where required by law, and where no other lawful bases exist for processing such data (such as to fulfill laws promoting a substantial public interest), American will seek your specific consent before processing sensitive personal information.”
“When you use our Interactive Services, we may receive technical information such as your browser type, the type of operating system you use, your geolocation, the name of your internet service provider, mobile advertising identifiers, and pages visited.”
“American reserves the right to change this Privacy Policy at any time by posting the updated Policy here along with the date on which the Policy was changed.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle American Not Responsible for Unauthorized Account Access and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.