If you're outside the US, your personal data will be transferred to and stored in the United States, where privacy laws may offer fewer protections than your home country.
EU and UK users' personal data is transferred to the United States, where it is subject to US law including potential government access — the adequacy of the legal transfer mechanism should be confirmed before sharing sensitive data.
Cross-platform context
See how other platforms handle International Data Transfers and similar clauses.
Compare across platforms →For EU and UK users, transferring personal data to the US requires specific legal mechanisms under GDPR (such as Standard Contractual Clauses), and reliance on blanket consent for international transfers is generally insufficient under GDPR.
REGULATORY FRAMEWORK: This provision implicates GDPR Chapter V (international data transfers; Arts. 44-49) requiring either an adequacy decision, Standard Contractual Clauses (SCCs; Commission Decision 2021/914), or Binding Corporate Rules. The EU-US Data Privacy Framework (effective July 2023) provides an adequacy mechanism for certified US companies. UK GDPR similarly requires appropriate transfer safeguards. Reliance on 'consent' as a transfer mechanism (Art. 49(1)(a)) is generally disfavored by EDPB guidelines for systematic transfers.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.