What can I do about this clause?

{'method': 'EMAIL', 'recipient': 'privacy@ideogram.ai', 'difficulty': 'MODERATE', 'action_type': 'EXPORT_DATA', 'instructions': 'Submit a data access request to Ideogram asking for a copy of your personal data and the categories of third parties it has been shared with. Under CCPA and GDPR you are entitled to this information within 30 days / one month respectively.', 'deadline_days': 30, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'FTC', 'reason': 'The FTC oversees unfair or deceptive practices related to third-party data sharing disclosures and vendor oversight obligations for US-based consumers.', 'complaint_url': 'https://reportfraud.ftc.gov/'}, {'agency': 'State_AG', 'reason': "California's AG and CPPA enforce CCPA/CPRA rights including the right to know about third-party data sharing and to opt out of data sale or sharing.", 'complaint_url': 'https://www.naag.org/find-my-ag/'}

What is the severity of this clause?

ConductAtlas classifies this Third-Party Service Provider Disclosure clause as medium severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Do other platforms have similar clauses?

Yes. ConductAtlas has identified similar Third-Party Service Provider Disclosure clauses across approximately 1 other tracked platforms. You can compare how platforms differ on this clause type in the cross-platform comparison view.

Third-Party Service Provider Disclosure — Ideogram

Share 𝕏 Share in Share 🔒 PDF

What it is

Ideogram shares your personal information with outside companies that help run its service, including payment processors, analytics providers, and marketing partners.

Consumer impact (what this means for users)

Your personal data, including usage behavior and account information, is shared with an unspecified number of third-party vendors for operational and marketing purposes, which increases your exposure to data breaches and secondary uses beyond Ideogram's direct control.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Export Your Data
Within 30 days
Submit a data access request to Ideogram asking for a copy of your personal data and the categories of third parties it has been shared with. Under CCPA and GDPR you are entitled to this information within 30 days / one month respectively.

Cross-platform context

See how other platforms handle Third-Party Service Provider Disclosure and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Your data — including usage patterns, account details, and potentially prompt content — flows to multiple third-party vendors, expanding the number of entities that hold your personal information and the associated privacy risks.

View original clause language

We may share your personal information with third-party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: GDPR Art. 28 requires written data processing agreements with all processors handling EU personal data. CCPA §1798.140(ag) requires service provider contracts to prohibit secondary use of personal data. FTC Act Section 5 applies where third-party disclosures are not adequately disclosed. State data breach notification laws (e.g., California Civil Code §1798.82, New York SHIELD Act) impose obligations on both Ideogram and its processors. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

FTC

The FTC oversees unfair or deceptive practices related to third-party data sharing disclosures and vendor oversight obligations for US-based consumers.
File a complaint →
State AG

California's AG and CPPA enforce CCPA/CPRA rights including the right to know about third-party data sharing and to opt out of data sale or sharing.
File a complaint →

Provision details

Document information

Document

Ideogram Privacy Policy

Entity

Ideogram

Document last updated

April 29, 2026

Tracking information

First tracked

May 2, 2026

Last verified

May 2, 2026

Record ID

CA-P-004443

Document ID

CA-D-00490

Evidence Provenance

Source URL

https://ideogram.ai/privacy

Wayback Machine

View archived versions →

SHA-256

33f445f42f1bbf4ff46e8ff0ddf6f46772818422d079b8a43477799871ef9d50

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Ideogram | Document: Ideogram Privacy Policy | Record: CA-P-004443
Captured: 2026-05-02 00:49:23 UTC | SHA-256: 33f445f42f1bbf4f…
URL: https://conductatlas.com/platform/ideogram/ideogram-privacy-policy/third-party-service-provider-disclosure/
Accessed: May 2, 2026

Classification

Severity

Medium

Third-Party Service Provider Disclosure