American Airlines can change its privacy policy at any time, and for material changes, will display a notice label on aa.com for 30 days. The policy explicitly states it is not a contract and creates no legal rights or obligations.
This analysis describes what American Airlines's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The disclaimer that this policy is not a contract means you cannot rely on it as a legally binding commitment, and the notification mechanism is limited to a website label rather than direct notice such as email, which may be easily missed.
American can modify how it collects, uses, or shares your personal data at any time, with the primary notice mechanism being a label on aa.com that many users will not see, and the policy expressly disclaims any contractual status or enforceable obligations.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
Not be Discriminated Against by us for exercising your privacy rights.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
"American reserves the right to change this Privacy Policy at any time by posting the updated Policy here along with the date on which the Policy was changed. If we make material changes to this Privacy Policy that affect the way we collect, use and/or share your personal information, we will notify you by including a 'NEWLY UPDATED' label with the 'PRIVACY POLICY' link on aa.com for 30 days after material changes are made. This Privacy Policy is not a contract and does not create any contractual rights or obligations.Excerpt from American Airlines's Privacy Policy
REGULATORY LANDSCAPE: The non-contract disclaimer and change-by-posting mechanism engage FTC guidance on privacy policy commitments, under which the FTC has treated published privacy policies as enforceable representations even when disclaimed as non-contractual.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The disclaimer that this policy is not a contract means you cannot rely on it as a legally binding commitment, and the notification mechanism is limited to a website label rather than direct notice such as email, which may be easily missed.
American can modify how it collects, uses, or shares your personal data at any time, with the primary notice mechanism being a label on aa.com that many users will not see, and the policy expressly disclaims any contractual status or enforceable obligations.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by American Airlines.