American Airlines links data about you from airport interactions, website activity, app usage, and third-party sources into a combined profile used to personalize offers and services.
This analysis describes what American Airlines's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Combining offline airport interactions with online behavioral data and third-party information creates a comprehensive profile that is more revealing than any single data source, and is used both to serve you and for commercial personalization purposes.
Interpretive note: The policy conditions data combination on consent where required by law but does not specify the jurisdictions or use cases where consent is required versus when other lawful bases apply, creating interpretive ambiguity.
Your in-person airport interactions, online browsing, booking history, and data from external sources may all be linked together to build a profile used for targeted offers and advertising, meaning data collected in one context can be used in others.
How other platforms handle this
We use your personal information to personalize your experience with our products and services, improve and develop new features and products, conduct research and analytics, and to send you communications about products and services that may interest you.
Perplexity may collect and use aggregated and de-identified data derived from Customer's and Authorized Users' use of the Service for purposes of improving, developing, and enhancing the Service and Perplexity's AI models, provided that such data does not identify Customer or any individual user.
If you access or use any of Oura's location-based services, such as by enabling GPS-based activity tracking through our Services, Oura may process the approximate or precise location of your device while the service is active. This data may be obtained via your device's service provider network ID, ...
Monitoring
American Airlines has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We may link or combine information that we collect about you (such as linking your travel booking to your AAdvantage® account, or adding saved AAdvantage® account information to your booking). This may include information that we collect offline (such as in-person airport interactions), information we collect online (such as our website or mobile apps), and information that we get from third-party sources. Additionally, and with your specific consent where required by law, American may combine information we receive from you via the Interactive Services with information collected from other sources. This information may be used to provide offers and / or services specifically tailored to your interests in accordance with applicable laws.— Excerpt from American Airlines's American Airlines Privacy Policy
REGULATORY LANDSCAPE: The combination of offline and online data into unified profiles engages GDPR's data minimization and purpose limitation principles under Articles 5 and 6, which require that data collected for one purpose not be repurposed without a compatible lawful basis. CPRA's rules on sensitive personal information and data minimization are also relevant. The FTC's commercial surveillance framework addresses large-scale data combination and profiling practices. GOVERNANCE EXPOSURE: Medium. The policy qualifies data combination with a consent carve-out where required by law, but does not specify when consent is required versus when other lawful bases are relied upon. This ambiguity may create exposure under GDPR where purpose compatibility between offline collection and online profiling is not clearly established. JURISDICTION FLAGS: EU/EEA data subjects have GDPR rights to object to profiling under Article 21, including profiling based on combined online and offline data. California residents have CPRA rights regarding automated decision-making and profiling. The breadth of data combination may also engage state consumer protection laws in states with comprehensive privacy frameworks. CONTRACT AND VENDOR IMPLICATIONS: Third-party data sources used to supplement the combined profile should be assessed for lawful basis of original collection and compatibility of transfer purpose. Data brokers or enrichment vendors feeding into this combination practice should be identified and reviewed under applicable data processing agreements. COMPLIANCE CONSIDERATIONS: Legal teams should document the lawful basis for each data combination use case, confirm that GDPR-required compatibility assessments have been conducted where data collected offline is combined with online behavioral data for marketing purposes, and review whether the consent mechanisms referenced in the policy are operationally implemented.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Combining offline airport interactions with online behavioral data and third-party information creates a comprehensive profile that is more revealing than any single data source, and is used both to serve you and for commercial personalization purposes.
Your in-person airport interactions, online browsing, booking history, and data from external sources may all be linked together to build a profile used for targeted offers and advertising, meaning data collected in one context can be used in others.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by American Airlines.