Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document explains how American Airlines handles your personal information — what it collects, how long it keeps it, and who it shares it with. American Airlines can share your data with third parties for joint activity purposes even if you opt out, and governments in multiple countries can legally require access to your travel information. American Airlines makes no warranty that your data will always be handled consistently with this policy, and it can update the policy at any time by posting the new version online.
American Airlines' Privacy Policy establishes the terms under which American Airlines collects, retains, shares, and processes personal information from users of its Travel Services, Program Services, and Interactive Services. The policy sets a seven-year general retention period for travel- and membership-related personal data, and a separate biometric retention limit tied to purpose fulfillment or three years from last interaction, whichever comes first. American Airlines reserves the right to share personal information with third parties for joint activity purposes regardless of user opt-out preferences, and discloses that foreign and domestic government agencies receive access to user travel data as legally compelled across multiple jurisdictions. The policy disclaims all warranties regarding data protection and limits liability for account compromise through password theft, while acknowledging a user right to seek revision of solely automated decisions affecting personal, professional, consumer, or credit profiles.
Your personal information related to travel or membership may be retained by American Airlines for up to seven years after your travel ends or membership is terminated, and biometric data is destroyed when its collection purpose is met or within three years of your last interaction. Opting out does not prevent American Airlines from sharing your data with third parties for joint activity purposes, including administrative, transactional, and analytical uses. If American Airlines uses automated processing of your personal data to make decisions affecting your personal, professional, consumer, or credit profile, you have a right under this policy to seek revision of those decisions — you can exercise that right by contacting American Airlines directly.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
American Airlines has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle American Not Responsible for Unauthorized Account Access and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.