8 Total
0 High severity
5 Medium severity
3 Low severity
Summary

This is Anyscale's Privacy Notice covering personal information collected through its websites and services, last updated July 1, 2025. The notice authorizes collection of identifiers, IP addresses, device and browsing data, location information, payment details, and third-party marketing data, and permits sharing this information with advertising partners who may use it for cross-site behavioral advertising. The notice also states Anyscale participates in the EU-U.S. Data Privacy Framework and its UK and Swiss extensions as the mechanism for transferring personal data internationally.

Technical / Legal Breakdown

This Privacy Notice governs Anyscale, Inc.'s collection, use, and disclosure of personal information across its websites and online/offline services, explicitly excluding Customer Data processed under the Platform Agreement and third-party services with separate privacy notices. The notice states that Anyscale collects identifiers, device information, IP addresses, browsing activity, location data derived from IP, payment details, and third-party marketing data; uses this information for service provision, administrative purposes including direct marketing and fraud prevention, and advertising; and discloses it to service providers, advertising partners, business partners, affiliates, and in connection with corporate transactions. The notice asserts participation in the EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. Data Privacy Framework as the transfer mechanism for international data flows, and includes supplemental sections for EU/UK GDPR and Nevada residents, while the policy update clause reserves the right to modify terms unilaterally with notice limited to posting the updated document. The notice engages GDPR (EU and UK), CCPA/CPRA (California), Nevada SB 220, and the FTC Act through its DPF participation commitments; California residents are granted rights to access, delete, correct, and opt out of sale or sharing of personal information, while EU/UK/Swiss individuals are entitled to rely on DPF recourse mechanisms. The document does not identify a specific legal basis matrix for each processing activity beyond contract performance, legitimate interests, and consent, which may require further evaluation under GDPR Article 6 obligations.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial

2 important changes detected

3 versions captured · Last updated: May 2026

What changed Anyscale removed promotional and navigational content from the header and footer of its Privacy Notice on May 21, 2026. The document previously displayed a Microsoft Build event banner, login prompt, and extensive footer navigation links. The updated version removes these elements, retaining only the core privacy notice content. This is a formatting and website layout change with no alteration to the substantive privacy terms or data handling practices disclosed in the policy.
Why this matters This change is a formatting and layout adjustment to Anyscale's Privacy Notice website presentation. The promotional banners, login links, and footer navigation elements have been removed from the document display. The substantive privacy terms, data handling practices, and user disclosures remain unchanged. No modifications to data collection, processing, retention, or user rights have been made.
View full change record →
What changed Anyscale's Privacy Notice header was updated on May 13, 2026 to replace a promotional banner referencing Ray Agent Skills with a new banner promoting Anyscale's presence at Microsoft Build 2026. The substantive Privacy Notice document and last-updated date remain unchanged. This is a formatting and promotional update to the document header with no operational change to the privacy terms themselves.
Why this matters This change affects only the promotional header of Anyscale's Privacy Notice, not the substantive privacy policy language or data handling practices. The privacy terms, data collection disclosures, and user protections remain as previously stated. No action is required on your part.
View full change record →

Recent Provision Changes May 21, 2026

Added (2)
Third-Party Information Collection and Data Combination Low

New provision adds transparency about third-party data acquisition from multiple sources and the company's practice of combining this data with other information collected.

Corporate Transaction Data Disclosure Low

New provision explicitly discloses data sharing in corporate transaction scenarios, informing users that M&A activity could involve transfer of personal information.

Removed (5)
Cross-Context Behavioral Advertising Disclosure

Removal of this standalone provision consolidates cross-context behavioral advertising disclosures into the more detailed 'Advertising Partner Data Sharing and Behavioral Tracking' provision in the current version.

Third-Party Data Sharing with Business Partners and Advertising Partners

Removal of this generic business partner sharing provision reflects consolidation into more specific advertising partner and corporate transaction provisions in the current version.

Data Retention at Company Discretion

Removal of explicit data retention language may reduce transparency about how long Anyscale retains personal information.

Children's Information Restriction

Removal of children's privacy protections and contact information for violations reduces stated commitment to protecting minors and reduces accessibility for parents to report issues.

Third-Party Websites and Applications Disclaimer

Removal of third-party website disclaimer reduces stated non-responsibility for linked websites and removes explicit encouragement for users to review third-party privacy policies.

Modified (6)
Advertising Partner Data Sharing and Behavioral Tracking

Current version adds specific details about tracking mechanisms (Technologies, tracking tools) and explicit examples of collected data points, plus clarification that partners use cross-service information for personalized ads.

EU-U.S. Data Privacy Framework Participation

No material change detected in available excerpt text.

Unilateral Privacy Notice Update Clause

Provision name changed from 'Privacy Notice Updates at Sole Discretion' to 'Unilateral Privacy Notice Update Clause' but text remains identical.

California Resident Privacy Rights

Current version simplifies and consolidates California rights into a more concise summary, removing detailed procedural language about verifiable requests and service provider obligations.

Automatic Collection of Personal Information and Cross-Service Identification

Provision renamed from 'Automatic Collection of Device and Behavioral Data' to include 'Cross-Service Identification' but excerpt text appears identical.

1 provision unchanged.

View full change record →
Medium — 5 provisions
Low — 3 provisions

Monitoring

Anyscale has updated this document before.

Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →

Compliance Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Compliance free trial

Cross-platform context

See how other platforms handle Advertising Partner Data Sharing and Behavioral Tracking and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 21, 2026 01:14 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000658
Version ID CA-V-002848
SHA-256 e8ad8372f6ba455879ffe530bdbb7c7813b7c2f87e0bb6b3e0beab3c3e400ee4
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans