California residents have specific rights under CCPA and CPRA, including the right to know what personal information is collected and how it is used, the right to delete their data, the right to opt out of sale and sharing, and the right to limit use of sensitive personal information.
This analysis describes what Instacart's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The California supplemental disclosures section provides the most detailed account of what data Instacart collects and shares with third parties, and it is the section most relevant to consumers who want to understand and exercise rights over their personal information.
California residents can request access to, deletion of, and portability of their personal information, and can opt out of sale, sharing, and certain uses of sensitive personal information; these rights are exercisable via the privacy choices page at instacart.com/privacy-choices or by contacting privacy@instacart.com.
How other platforms handle this
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
We may also collect your personal data from other people or companies.
Monitoring
Instacart has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We describe choices and rights you may have with respect to our use and disclosure of your Personal Information, including with respect to how we sell or share certain categories of Personal Information, and how you may exercise these rights, including your right to opt out, under "Your Privacy Choices."— Excerpt from Instacart's Instacart Privacy Policy
REGULATORY LANDSCAPE: The California supplemental disclosures section engages CCPA and CPRA, enforced by the California Privacy Protection Agency and California Attorney General. CPRA expanded CCPA to add rights to correct personal information, limit use of sensitive personal information, and opt out of sharing for cross-context behavioral advertising. The policy must provide the categories of personal information sold or shared, the categories of third-party recipients, and the purposes of collection for each category. GOVERNANCE EXPOSURE: High. The CPPA has active enforcement authority and has issued significant fines for CCPA non-compliance. The requirement to honor Global Privacy Control signals is a specific technical obligation that requires ongoing monitoring and platform-level implementation. JURISDICTION FLAGS: California creates direct enforcement exposure. Other states with comprehensive privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Texas TDPSA) have analogous rights that the policy does not explicitly address in separate supplemental sections, which may create compliance gaps for users in those states. CONTRACT AND VENDOR IMPLICATIONS: Service provider agreements with all third parties receiving California residents' personal information must include CCPA-compliant data processing terms prohibiting use outside the stated purposes. Any recipient that uses data for its own purposes is a third party for CCPA purposes, and the transfer constitutes a sale or sharing. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the categories of personal information, purposes, and third-party recipients disclosed in the California section are complete and current; confirm GPC signal processing is technically implemented; review the sensitive personal information opt-out mechanism for scope and functionality; and assess whether users in non-California states with comprehensive privacy laws receive equivalent rights under a unified policy approach or require separate disclosures.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The California supplemental disclosures section provides the most detailed account of what data Instacart collects and shares with third parties, and it is the section most relevant to consumers who want to understand and exercise rights over their personal information.
California residents can request access to, deletion of, and portability of their personal information, and can opt out of sale, sharing, and certain uses of sensitive personal information; these rights are exercisable via the privacy choices page at instacart.com/privacy-choices or by contacting privacy@instacart.com.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Instacart.