Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
ElevenLabs authorizes sharing of user personal information with advertising partners, analytics providers, service providers, and business partners for platform operation and business purposes.
This analysis describes what ElevenLabs's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision may trigger CCPA/CPRA obligations regarding the sale or sharing of personal information with advertising partners, requiring ElevenLabs to offer California residents an opt-out mechanism. Under GDPR, sharing with advertising partners requires a valid legal basis, typically consent or a documented legitimate interests assessment.
Interpretive note: Whether specific data sharing activities constitute a CCPA 'sale' or 'sharing' depends on the commercial arrangements with individual advertising partners, which are not fully specified in the policy text.
Removed explicit language about sharing for business partners' own marketing purposes and added specific mention of advertising and analytics partners instead.
View full change record →Under this clause, personal information including identifiers, usage data, and device information may be disclosed to advertising and analytics third parties. California residents may have opt-out rights regarding sharing with advertising partners under CCPA/CPRA.
How other platforms handle this
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Monitoring
ElevenLabs has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"We may share your personal information with third-party service providers, advertising partners, analytics providers, and business partners who assist us in operating our platform, conducting our business, and serving our users.Excerpt from ElevenLabs's Privacy Policy (Superseded URL)
(1) REGULATORY LANDSCAPE: This provision engages CCPA/CPRA, which requires businesses that share personal information with third parties for cross-context behavioral advertising to provide a 'Do Not Sell or Share My Personal Information' opt-out mechanism. GDPR requires a valid legal basis for each data sharing activity. The FTC has jurisdiction over unfair or deceptive practices related to third-party data sharing disclosures. (2) GOVERNANCE EXPOSURE: Medium. The breadth of the sharing authorization covering advertising partners requires verification that opt-out mechanisms are implemented for California users and that GDPR legitimate interests assessments or consent records are maintained for EU users. Generic descriptions of partner categories without specific naming creates disclosure adequacy questions under CCPA and GDPR transparency requirements. (3) JURISDICTION FLAGS: California creates heightened exposure under CCPA/CPRA's sharing opt-out requirements. EU/EEA users are protected by GDPR's requirement for a specified legal basis for each sharing activity. Virginia, Colorado, Connecticut, and Texas have enacted comprehensive privacy laws with similar data sharing disclosure requirements. (4) CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should verify that data processing agreements or standard contractual clauses are in place with all advertising and analytics partners receiving EU user data. Business customers should assess whether ElevenLabs' sharing practices are consistent with their own downstream data commitments to end users. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should map specific third-party advertising and analytics partners receiving user data against the categories disclosed in the policy. CCPA opt-out mechanisms should be audited for accessibility and functionality. GDPR records of processing activities should document the legal basis for each sharing relationship.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision may trigger CCPA/CPRA obligations regarding the sale or sharing of personal information with advertising partners, requiring ElevenLabs to offer California residents an opt-out mechanism. Under GDPR, sharing with advertising partners requires a valid legal basis, typically consent or a documented legitimate interests assessment.
Under this clause, personal information including identifiers, usage data, and device information may be disclosed to advertising and analytics third parties. California residents may have opt-out rights regarding sharing with advertising partners under CCPA/CPRA.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ElevenLabs.