AWS Privacy Notice

This document is the Amazon Web Services (AWS) Privacy Notice, governing how AWS collects, uses, and discloses personal information in connection with its websites, cloud services, and marketing activities, with Amazon.com, Inc. serving as the data controller. The policy states that AWS collects information users provide directly (name, email, payment details, credentials), information collected automatically (IP addresses, cookies, device identifiers, browsing behavior on AWS properties), and information from third parties, and the terms authorize use of this data for service delivery, fraud prevention, marketing communications, and improvement of AWS products. The policy discloses sharing of personal information with third-party service providers, business partners, and in the context of corporate transactions, and reserves the right to transfer data internationally, including to the United States, where AWS's principal operations are based; the policy asserts compliance with frameworks such as EU-US Data Privacy Framework but does not foreclose transfers under standard contractual clauses or other mechanisms. The policy engages GDPR for EU and UK data subjects, CCPA for California residents, and various other regional frameworks, granting specific rights such as access, correction, deletion, and objection to processing, though the practical scope of these rights and the enforceability of certain transfer mechanisms depends on jurisdiction and evolving regulatory interpretation.