Mixpanel Privacy Statement

This document is Mixpanel's Privacy Policy, governing the collection, use, storage, and disclosure of personal data by Mixpanel, Inc. in its capacity as both a data controller (for data collected about visitors to its own website and marketing contacts) and a data processor (for personal data that Mixpanel's business customers send to Mixpanel's analytics platform on behalf of their own end users). The policy states that Mixpanel collects identifiers, device information, IP addresses, usage and behavioral event data, and customer-provided profile data; authorizes use of this data for product analytics, service delivery, marketing communications, and security purposes; and discloses sharing with infrastructure, analytics, advertising, and professional services vendors as well as in corporate transaction contexts. The policy's dual-role structure (controller and processor) is operationally significant: as a processor, Mixpanel's obligations to end users of its customers' applications are governed by those customers' own privacy practices rather than this policy, which may limit end users' direct recourse against Mixpanel. The policy states compliance with GDPR and engages the EU-U.S. Data Privacy Framework, UK GDPR, and the California Consumer Privacy Act (CCPA); it provides data subject rights mechanisms including deletion, correction, portability, and opt-out of sale or sharing of personal information. Material compliance considerations include the adequacy of Mixpanel's processing agreements with its business customers, the lawfulness of cross-border data transfers, and the scope of Mixpanel's data deletion obligations where it acts as a processor on behalf of enterprise clients.