Governance document

CA-D-000450

ElevenLabs Privacy Policy (Superseded URL)

ElevenLabs

Last change detected August 7, 2026 Privacy policy

SHA-256: b3d25897d8cf0c57d57… 11 versions captured 10 changes documented

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

View original document at ElevenLabs ↗

This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology

98 Total

30 High severity

53 Medium severity

15 Low severity

Key Facts

What may ElevenLabs process users' Personal Data to do?

ElevenLabs may process users' Personal Data to research, develop, train, and/or otherwise improve its AI models.

What does ElevenLabs collect through certain of its Services?

ElevenLabs collects biometric information through certain of its Services for verification purposes.

For what purposes does ElevenLabs collect biometric information?

ElevenLabs collects biometric information through certain of its Services for verification purposes.

Until when will ElevenLabs retain biometric data?

ElevenLabs will retain biometric data until it is no longer needed for the purposes for which it was collected, or for three years after termination of the relationship with the user, whichever is sooner.

How do users consent to the use of their Personal Data?

ElevenLabs requires that users consent to the use of their Personal Data as described in the Policy by using the Services or otherwise engaging with ElevenLabs.

What describes the use of Personal Data that requires consent?

ElevenLabs requires that users consent to the use of their Personal Data as described in the Policy by using the Services or otherwise engaging with ElevenLabs.

What does ElevenLabs reserve the right to moderate?

ElevenLabs reserves the right to moderate all Input and Output on its Services.

Where does ElevenLabs transfer Personal Data?

ElevenLabs transfers all Personal Data to the United States for storage, regardless of the user's location.

When does ElevenLabs' Privacy Policy apply?

ElevenLabs' Privacy Policy applies only when ElevenLabs acts as a data controller under applicable laws, and does not apply when ElevenLabs processes Personal Data on behalf of enterprise or business customers.

When does the Privacy Policy not apply?

Stay ahead of the changes

Track ElevenLabs and get the diff the day its terms change.

Monitor ElevenLabs + up to 20 platforms — $4.99/mo →

Summary

This document explains how ElevenLabs collects and uses your personal data, including your voice, when you use its services. By using ElevenLabs, you consent to your data potentially being used to train its AI models—though you can opt out at any time through your account settings. Your personal data, including biometric information, is stored in the United States, and if you access ElevenLabs through a business or enterprise product, this policy does not protect you.

Analysis

ElevenLabs' Privacy Policy establishes the terms under which ElevenLabs, acting as a data controller, collects, uses, retains, and transfers users' Personal Data. It authorizes ElevenLabs to process Personal Data—including audio, text, and video content—to research, develop, train, and improve its AI models, with consent established through use of the Services rather than an affirmative opt-in. The Policy designates Voice Data processed for identity verification as Special Category or sensitive Personal Data, collects biometric information for verification purposes, and imposes defined retention limits of three years on both biometric and generated voice data. All Personal Data is transferred to the United States for storage regardless of the user's location, and the Policy explicitly does not apply when ElevenLabs processes Personal Data on behalf of enterprise or business customers.

What this means for you

Using ElevenLabs' Services constitutes consent to the processing of your Personal Data—including voice, audio, text, and video—for purposes that include AI model training. Your Voice Data processed for identity verification is treated as biometric and Special Category data, subject to defined retention limits of up to three years after your relationship with ElevenLabs ends. All of your Personal Data is transferred to and stored in the United States. If you do not want your Personal Data used for AI training, you can opt out at any time by navigating to the 'Data use' menu in the 'Terms and Privacy' section of your ElevenLabs account.

Institutional Analysis

Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Monitor ElevenLabs + up to 20 platforms — $4.99/mo → Get the research letter, free

10 important changes detected

11 versions captured · Last updated: August 2026

August 7, 2026

low

What changed In an update detected on August 7, 2026, ElevenLabs restructured the navigation menu at the top of its Privacy Policy. The BEFORE version listed 'ElevenCreative', 'ElevenAgents', and 'ElevenAPI' in the header; the AFTER version removed these product links and replaced them with a streamlined menu showing 'Products', 'Solutions', 'Customers', 'Resources', and 'Enterprise Pricing'. The operative privacy policy text itself remains unchanged. This is a navigation and site structure revision with no material change to ElevenLabs' data processing practices, disclosures, or user rights.

Why this matters This change is a website navigation update only. The substantive text of ElevenLabs' Privacy Policy—including data collection practices, processing methods, and user rights—remains unchanged. No action is required.

View full change record →

July 31, 2026

low

What changed In an update detected on July 31, 2026, ElevenLabs modified the header navigation of its Privacy Policy by adding menu items (Products, Solutions, Customers) to the top-level navigation. The substantive privacy policy text—including the policy's scope, effective date, affiliated entities, and data processing practices—remained unchanged. This is a formatting and navigation restructuring with no material effect on the privacy rights or obligations stated in the policy itself.

Why this matters This change is a formatting and navigation update to the Privacy Policy webpage. The substantive privacy terms, data collection practices, and user rights described in the policy text remain unchanged. No action is required on the part of consumers.

View full change record →

June 26, 2026 low

ElevenLabs removed a call-to-action button labeled 'Contact Sales' from its privacy policy document on June 26, 2026. The substantive text of the privacy policy—including the statement that Eleven Labs Poland …

View change record →

June 25, 2026 low

ElevenLabs updated footer navigation links in their privacy policy on June 25, 2026. The change involved removing 'X' and adding 'ElevenLabs ElevenCreative Developers' in the social and product navigation sections. …

View change record →

June 24, 2026 low

ElevenLabs updated its privacy policy on June 24, 2026 by adding a reference to an 'Ads Engine' product in the navigation menu. The previous version did not list this product. …

View change record →

June 23, 2026 low

ElevenLabs updated its Privacy Policy on June 23, 2026. The change involved the addition of a reference to a 'Human Rights Statement' in the policy footer, alongside existing policy links …

View change record →

June 17, 2026 low

ElevenLabs updated its privacy policy on June 17, 2026 to add 'Travel & Hospitality' to the list of industry integrations described in the policy. This is a minor expansion of …

View change record →

May 30, 2026 low

ElevenLabs modified a single sentence in their privacy policy on May 30, 2026, removing a reference to the EU Digital Services Act (DSA) from the footer navigation while reorganizing the …

View change record →

May 21, 2026 low

ElevenLabs updated its privacy policy on May 21, 2026, making several modifications to how it describes legal bases for data processing and contact procedures for exercising data rights. The policy …

View change record →

May 19, 2026 low

ElevenLabs removed two social media platform links from their privacy policy footer on May 19, 2026. The updated policy no longer includes direct links to X-Developers and YouTube-Developers accounts in …

View change record →

Featured, High severity

AI Model Training Using Personal Data Compare →

Users' personal data, including sensitive content like audio and video, may be used directly to build and refine ElevenLabs' commercial AI products.

Added July 10, 2026 Standard Seen across 279 platforms
Biometric Data Collection for Verification Purposes Compare →

Biometric data is a sensitive category of personal information; its collection for verification purposes carries significant privacy implications for affected users.

Added July 10, 2026 Standard Seen across 296 platforms
Biometric Data Retention Until Purpose Fulfilled or Three Years Compare →

The clause places a defined outer limit on how long biometric data—a sensitive category—can be held, protecting users from indefinite retention.

Added July 10, 2026 Standard Seen across 275 platforms
Consent to Personal Data Processing Compare →

Consent is established through use or engagement rather than an affirmative opt-in act, meaning the full scope of data uses in the Policy applies to any user who interacts with ElevenLabs.

Added July 10, 2026 Standard Seen across 279 platforms
ElevenLabs Right to Moderate All Input and Output Compare →

ElevenLabs' reservation of a right to moderate all inputs and outputs means no user content on the platform is exempt from potential review or restriction.

Added July 10, 2026 Common Seen across 142 platforms
International Transfer to United States for Storage Compare →

Users located outside the United States—including those in jurisdictions with stronger data protection laws—have their personal data transferred to and stored in the US, where different legal protections apply.

Added July 10, 2026 Standard Seen across 288 platforms
Policy Scope Limited to Controller Role Compare →

Users whose data is processed by ElevenLabs on behalf of an enterprise or business customer are not covered by this Policy, meaning different or no stated protections may apply to them.

Added July 10, 2026 Standard Seen across 297 platforms
Prohibition on Uploading Children's Voice Data Compare →

The strict prohibition protects minors' voice data from being introduced into ElevenLabs' platform in any form, placing a clear compliance obligation on all users.

Added July 10, 2026 Standard Seen across 282 platforms
Right to Opt Out of AI Training Data Use Compare →

Users have a specific, accessible mechanism to prevent their Personal Data from being used for AI training, and this right can be exercised at any time.

Added July 10, 2026 Standard Seen across 290 platforms
Third-Party Public Data Collection for Model Training Compare →

ElevenLabs' training data is not limited to information provided directly by its users; it also draws from publicly available third-party sources.

Added July 10, 2026 Standard Seen across 296 platforms
Voice Data Retention Maximum Three Years Compare →

The clause sets a defined maximum retention period for generated voice data, with a legal compliance carve-out that could extend retention in some circumstances.

Added July 10, 2026 Standard Seen across 275 platforms
Voice Verification Processing Including Biometric Data Compare →

The classification of identity-verification Voice Data as Special Category or sensitive Personal Data triggers heightened legal protections under applicable data protection laws.

Added July 10, 2026 Standard Seen across 279 platforms