The policy discloses that Brex may share identifiers, characteristics, internet activity, non-precise geolocation data, and inferences with third-party advertising vendors for cross-context targeted advertising, and that California residents may opt out by activating Global Privacy Control or adjusting cookie settings.
This analysis describes what Brex's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that sharing of personal data categories including identifiers, internet activity, and inferences with cross-context advertising vendors may constitute a CPRA sale or share, and that Brex recognizes Global Privacy Control as a valid opt-out mechanism, which is a compliance obligation under CPRA for covered businesses.
Under this clause, identifiers, internet activity, geolocation data, and inferences drawn about California resident users may be shared with third-party advertising vendors as a CPRA-defined share, and users can exercise the opt-out right by activating Global Privacy Control on applicable devices or modifying cookie preferences. The policy notes that opting out does not eliminate all advertising.
Cross-platform context
See how other platforms handle Interest-Based Advertising and CPRA Opt-Out via Global Privacy Control and similar clauses.
Compare across platforms →"Under the California Privacy Rights Act ("CPRA"), some marketing activities may be considered a "share" or "sale" even if no money is received for sharing the data. We may share categories of information such as identifiers, characteristics, internet activity, non-precise geolocation data, and inferences with third parties for business purposes, but we do not receive any monetary compensation from those third parties for doing so. The third parties we share with include vendors engaged in cross-context targeted advertising. To the extent that our marketing activities constitute a "share" or "sale" of your personal information, you can opt out. To opt out, you can modify your cookie choices as described in our Cookie Notice or activate Global Privacy Control on all applicable devices.Excerpt from Brex's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision directly engages the CPRA, which classifies sharing of personal information for cross-context behavioral advertising as a regulated activity subject to opt-out rights regardless of monetary compensation.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that sharing of personal data categories including identifiers, internet activity, and inferences with cross-context advertising vendors may constitute a CPRA sale or share, and that Brex recognizes Global Privacy Control as a valid opt-out mechanism, which is a compliance obligation under CPRA for covered businesses.
Under this clause, identifiers, internet activity, geolocation data, and inferences drawn about California resident users may be shared with third-party advertising vendors as a CPRA-defined share, and users can exercise the opt-out right by activating Global Privacy Control on applicable devices or modifying cookie preferences. The policy notes that opting out does not eliminate all advertising.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Brex.