Mixpanel · Mixpanel Privacy Statement · View original document ↗

Data Access, Correction, and Deletion Rights with Fee and Declination Reservation

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 352 platforms
Get alerted the next time Mixpanel changes these terms. Get same-day alerts →
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Mixpanel Monitor emails you the same day this changes. The archive stays free.
Get same-day alerts →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

Document Record

What it is

The agreement grants access, correction, and deletion rights exercisable through Account Settings or by emailing compliance@mixpanel.com, while reserving the right to charge a fee or decline requests deemed unreasonable or excessive, prohibited by law, or where the requester cannot be authenticated.

This analysis describes what Mixpanel's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the procedural mechanism for exercising data subject rights but reserves the right to impose fees or decline requests on grounds that include 'unreasonable or excessive' thresholds, which may require evaluation under GDPR Article 12 and CCPA nondiscrimination provisions in specific jurisdictions.

Consumer impact (what this means for users)

Under this clause, users may request access to, correction of, or deletion of personal data via Account Settings or email to compliance@mixpanel.com, subject to identity verification. The agreement reserves the right to charge a fee or decline requests on grounds of excessive burden, legal prohibition, third-party privacy, or authentication failure.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Email compliance@mixpanel.com to request access to, correction of, or deletion of your personal data. Alternatively, use the Account Settings section of the Mixpanel platform. Identity verification will be required before the request is processed.

Cross-platform context

See how other platforms handle Data Access, Correction, and Deletion Rights with Fee and Declination Reservation and similar clauses.

Compare across platforms →

Monitoring

Mixpanel has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you wish to request access to or correction or deletion of personal data about you that we hold, you have some controls available to you from the "Account Settings" portion of the Services. You can also contact our Privacy Program at compliance@mixpanel.com. However, to the extent permitted by applicable law, we reserve the right to charge a fee or decline requests that are unreasonable or excessive, where providing the information would be prohibited by law or could adversely affect the privacy or other rights of another person, or where we are unable to authenticate you as the person to whom the information relates.

Excerpt from Mixpanel's Privacy Statement

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision implicates GDPR Article 12 (transparent information and communication), Articles 15 through 17 (access, rectification, erasure rights), and CCPA rights to access, correction, and deletion. GDPR Article 12(5) permits refusal of manifestly unfounded or excessive requests and allows for a reasonable fee, subject to DPA oversight. CCPA prohibits fees for rights exercises absent an exception. Relevant enforcement authorities include EU DPAs, the UK ICO, the California Privacy Protection Agency, and the FTC. (2) GOVERNANCE EXPOSURE: Medium. The 'unreasonable or excessive' declination and fee reservation is broadly permitted under GDPR but must be applied on a per-request basis with documented justification. Under CCPA, a fee for rights requests is generally not permitted unless an exception applies, creating potential tension between the fee reservation language and CCPA requirements in the California context. (3) JURISDICTION FLAGS: EU and UK users have GDPR-backed rights with DPA complaint mechanisms. California residents are entitled to nondiscriminatory exercise of rights under CCPA, and the document includes a specific CCPA nondiscrimination statement. Other US state privacy laws including Virginia, Colorado, and Connecticut also establish access and deletion rights that may limit fee imposition. (4) CONTRACT AND VENDOR IMPLICATIONS: The authentication requirement creates an operational dependency on users being able to verify their identity, which is relevant for B2B customers whose end users may not have direct accounts with Mixpanel. The policy's statement that it does not apply to customer end users means end users seeking data rights must first contact the Mixpanel customer. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether the fee and declination reservation is applied consistently with GDPR Article 12(5) requirements; document the internal criteria used to determine 'unreasonable or excessive' thresholds; confirm that CCPA rights requests are not subject to fee imposition absent a documented exception; and ensure that response timelines meet applicable statutory deadlines under GDPR and CCPA.

Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Start Professional · $99/mo Start with Monitor · $29/mo

Applicable agencies

  • State AG
    State attorneys general, particularly the California Attorney General and California Privacy Protection Agency, have enforcement authority over CCPA data subject rights and nondiscrimination requirements.
    File a complaint →
  • FTC
    The FTC has enforcement authority over consumer protection aspects of data access and rights mechanisms under the FTC Act and Data Privacy Framework obligations.
    File a complaint →

Provision details

Document information
Document
Mixpanel Privacy Statement
Entity
Mixpanel
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-016205
Document ID
CA-D-00704
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
2bcb11dee9567aec1e9bcab8282833836bab779cdc687c86cbcbe7d1f0318fab
Analysis generated
July 9, 2026 09:49 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Mixpanel
Document: Mixpanel Privacy Statement
Record ID: CA-P-016205
Captured: 2026-07-09 09:49:04 UTC
SHA-256: 2bcb11dee9567aec…
URL: https://conductatlas.com/platform/mixpanel/mixpanel-privacy-statement/provision/CA-P-016205/data-access-correction-and-deletion-rights-with-fee-and-declination-reservation/
Accessed: July 23, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Governance intelligence across arbitration, AI governance, data rights, indemnification, and retention
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Start Professional · $99/mo Start with Monitor · $29/mo

Frequently Asked Questions

What does Mixpanel's Data Access, Correction, and Deletion Rights with Fee and Declination Reservation clause do?

This provision establishes the procedural mechanism for exercising data subject rights but reserves the right to impose fees or decline requests on grounds that include 'unreasonable or excessive' thresholds, which may require evaluation under GDPR Article 12 and CCPA nondiscrimination provisions in specific jurisdictions.

How does this clause affect you?

Under this clause, users may request access to, correction of, or deletion of personal data via Account Settings or email to compliance@mixpanel.com, subject to identity verification. The agreement reserves the right to charge a fee or decline requests on grounds of excessive burden, legal prohibition, third-party privacy, or authentication failure.

Is ConductAtlas affiliated with Mixpanel?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mixpanel.