Eventbrite may use your personal data to train and improve its artificial intelligence and machine learning models.
This analysis describes what Eventbrite's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational scope for data inference activities. It permits the company to develop and expand algorithmic capabilities that generate new data attributes beyond information directly provided by users, creating derived data sets that may be used in service optimization and feature development.
The updated terms expand the circumstances under which your email address is shared with event organizers. Previously, Eventbrite shared email addresses only with organizers of events you registered for. Under the revised policy, your email is also shared with organizers if you elect to receive their marketing communications through the Eventbrite platform. The policy clarifies that organizers own the data relationship with you for these marketing subscriptions, while Eventbrite processes the consent and delivery on their behalf.
View change record →The updated terms establish formal procedures for UK-based users to lodge data protection complaints directly with Eventbrite via privacy@eventbrite.com, with assurance that complaints will follow ICO guidelines. The revised policy also confirms that all users have the right to escalate complaints to their national data protection authority or applicable regulator if they believe Eventbrite has violated privacy laws or has not adequately addressed their request. Previously, the policy referenced a Data Privacy Framework Notice but did not specify complaint procedures or regulatory escalation pathways. These additions clarify existing legal rights under UK and EU data protection law rather than creating new consumer obligations.
View change record →Removal of this provision eliminates explicit disclosure about AI/ML use cases, making it unclear whether the policy still permits these practices or simply chose not to highlight them.
View full change record →Users' data may be incorporated into AI training datasets, potentially without a clear opt-out mechanism specific to this use, raising concerns about data minimization and purpose limitation.
How other platforms handle this
We use your personal information to send you newsletters and other promotional communications, including information about MyFitnessPal's new offerings, features, offers, events, webinars, and other information.
We will only use your Personal Data to provide services directly to you...and/or to provide services to you on behalf of our clients...except as otherwise described in this Privacy Policy or with your consent.
We may use your personal data to conduct research...we conduct and publish research about the labor market, the economy, job opportunities, jobseeker and employee behaviors...
"We may derive or infer additional Personal Data about you, including demographic characteristics such as age range, gender, and parental status, based on your use of our Services and other available information. We may expand our inference capabilities over time to improve our Services.Excerpt from Eventbrite's Privacy Policy
Use of personal data for AI/ML training implicates GDPR Article 5 purpose limitation and data minimization principles, as well as emerging EU AI Act obligations regarding high-risk AI system training data governance.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the operational scope for data inference activities. It permits the company to develop and expand algorithmic capabilities that generate new data attributes beyond information directly provided by users, creating derived data sets that may be used in service optimization and feature development.
Users' data may be incorporated into AI training datasets, potentially without a clear opt-out mechanism specific to this use, raising concerns about data minimization and purpose limitation.
ConductAtlas has identified this type of provision across 279 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Eventbrite.