111 Total
26 High severity
63 Medium severity
22 Low severity

Key Facts

What may lead to account deactivation?
Instacart may use automated technological tools that detect fraud, which may lead to account deactivation.
Does Instacart use automated technological tools that detect fraud?
Instacart may use automated technological tools that detect fraud, which may lead to account deactivation.
What information does Instacart collect from a user's government ID?
Instacart collects information from a user's government ID to verify age or identity, including the ID number, state or country, and, when legally required, a copy of the full state ID card.
Does Instacart collect the ID number and state or country from a user's government ID?
Instacart collects information from a user's government ID to verify age or identity, including the ID number, state or country, and, when legally required, a copy of the full state ID card.
When may Instacart collect the precise location of a user's device?
Instacart may collect the precise location of a user's device if the user chooses to allow the Services to access location services through the permission system used by their device's operating system or browser.
May Instacart collect the precise location of a user's device if the user chooses to allow the Services to access location services?
Instacart may collect the precise location of a user's device if the user chooses to allow the Services to access location services through the permission system used by their device's operating system or browser.
To whom may Instacart disclose users' Personal Information?
Instacart may disclose users' Personal Information—including contact information, device information, browser and activity information, and general location—to its marketing and advertising partners, including social media platforms.
May Instacart disclose users' Personal Information to its marketing and advertising partners, including social media platforms?
Instacart may disclose users' Personal Information—including contact information, device information, browser and activity information, and general location—to its marketing and advertising partners, including social media platforms.
May Personal Information be sold or transferred to third parties in a bankruptcy or reorganization proceeding?
Instacart states that if a bankruptcy or reorganization proceeding is brought by or against it, Personal Information it holds may be considered an asset and may be sold or transferred to third parties.
Does the pharmacy provide the user's name and delivery address to Instacart?
Instacart states that the pharmacy processing a user's prescription will provide Instacart with the user's name, delivery address, email address, birth date, telephone number, total amount, prescription number(s), and in some cases the total number of refills.
Stay ahead of the changes
Track Instacart and get the diff the day its terms change.
Summary

Instacart collects a broad range of information about you—including your government ID, precise location, prescription details, and a recording of your clicks and keystrokes—and uses it partly to send you targeted ads, sharing some of it with marketing partners and social media platforms. You have the right to opt out of the sale or sharing of your personal information for targeted advertising and to request that Instacart delete what it holds about you. If Instacart ever goes through bankruptcy, your personal information could be sold as a company asset to third parties.

Analysis

Instacart's Privacy Policy establishes the scope of personal information Instacart collects—ranging from government ID numbers and precise device location to prescription data, session-replay recordings of keystrokes, and behavioral activity—along with the purposes for which that information is used, including interest-based advertising and fraud detection via automated tools. The document sets out Instacart's data-sharing practices, which include disclosure of contact details, device information, browsing activity, and general location to marketing and advertising partners including social media platforms, and acknowledges that Personal Information may be treated as a transferable asset in bankruptcy or reorganization proceedings. A heightened prior-written-consent requirement applies specifically to Personal Health Information, subject to a services-necessity exception. Users are recognized as holding rights to opt out of the sale, sharing, and targeted-advertising disclosure of their Personal Information, and to request deletion of their personal data. Automated fraud-detection tools may result in account deactivation without individual human review.

What this means for you

Instacart collects highly sensitive data about you, including government ID details, prescription information from pharmacies, precise device location (if you grant permission), and session-replay recordings of your in-app keystrokes and interactions. This information is used for interest-based advertising and may be shared with marketing partners and social media platforms. Your Personal Health Information will not be shared without your prior written consent except when necessary to provide the Services. You have the right to opt out of the sale or sharing of your Personal Information for targeted advertising—you can exercise this opt-out right directly with Instacart—and you may also request deletion of the personal information Instacart holds about you.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

1 important change detected

2 versions captured · Last updated: May 2026

What changed Instacart's Privacy Policy was updated on May 7, 2026 to remove a space before the final period in a sentence about contacting the company. The previous version read 'You may also contact us by writing to us at the address provided below under Contact Information .' with a space before the period. The updated version reads 'You may also contact us by writing to us at the address provided below under Contact Information.' without that space. This is a formatting correction with no operational impact on how users contact the company or what rights apply.
Why this matters This change has no operational impact on consumers. The updated terms state the same contact procedure as before; the modification corrects only formatting by removing an extra space before a punctuation mark. No rights, disclosures, obligations, or contact procedures were altered.
View full change record →
Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

111 provisions
12 featured
14 clause types
26 high severity
Data Collection 31 6 high
Show all 31 data collection provisions
Restricted or Prohibited Content/Industries 2 2 high
AI / Automated Decision-Making 1 1 high
Disclosure and Transparency Requirements 1 1 high
Enforcement Actions 1 1 high
General Contract Terms 1 1 high
Liability Limitation 1 1 high
Stay ahead of the changes

Monitoring

Instacart has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Advertising partners cross-site tracking via cookies and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 7, 2026 00:45 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000136
Version ID CA-V-002319
SHA-256 fb51d26dfa84f1b520c793e111ac08a7a40b9a95229cb7be0d25b7648000f3fd
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans