Mixpanel · Mixpanel Privacy Statement · View original document ↗

Dual Controller and Processor Role

Medium severity Medium confidence Inferredfromcontext Rare · 4 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Mixpanel Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Mixpanel's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This structure shifts primary compliance responsibility for end-user data onto the businesses that integrate Mixpanel, meaning Mixpanel's business customers, not Mixpanel itself, are primarily accountable for telling you what data is collected and obtaining your consent.

Interpretive note: The precise boundary between Mixpanel's processor and controller roles depends on the specific DPA language and how Mixpanel exercises discretion over data, which is not fully detailed in the public-facing policy.

Consumer impact (what this means for users)

Mixpanel's policy states that it collects identifiers, device information, IP addresses, behavioral event data, and email addresses from website visitors and customers, and shares this data with advertising, analytics, infrastructure, and professional services vendors. For end users of third-party apps and websites that use Mixpanel's analytics tools, the policy notes that Mixpanel acts as a data processor on behalf of that app or website operator, meaning Mixpanel's direct obligations to those individuals are limited and data rights must generally be exercised through the app or website they interact with. You can submit a data deletion, correction, or opt-out request directly to Mixpanel by emailing privacy@mixpanel.com or by visiting Mixpanel's privacy preference center at mixpanel.com/optout.

How other platforms handle this

Egnyte Medium

Egnyte is a data controller with respect to personal data it collects from visitors to its website and through its marketing activities. Egnyte acts as a data processor with respect to the content and data that customers store within the Egnyte platform. In that capacity, Egnyte processes data on be...

Workday Medium

At Workday, we believe privacy is a fundamental right, regardless of where you live. When you connect with Workday, we understand you are trusting us to handle your personal information appropriately. That is why we are committed to transparency about how we collect, use, and share that information.

Squarespace Medium

When you visit a website built on Squarespace, Squarespace acts as a service provider or data processor, meaning that we process your information on behalf of the website owner. In this case, the website owner is responsible for the information they collect through their website and you should conta...

See all platforms with this clause type →

Monitoring

Mixpanel has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Mixpanel acts as a data processor on behalf of its customers (the controllers) when processing end user data through the Mixpanel analytics platform, and as a data controller with respect to data it collects about its own website visitors and account holders.

— Excerpt from Mixpanel's Mixpanel Privacy Statement

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union

Provision details

Document information
Document
Mixpanel Privacy Statement
Entity
Mixpanel
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 12, 2026
Record ID
CA-P-010316
Document ID
CA-D-00704
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
58ece66c0abafda45174ec4cac6a28f2104769dfb6d084f03237ca0d1e49add5
Analysis generated
May 8, 2026 14:49 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Mixpanel
Document: Mixpanel Privacy Statement
Record ID: CA-P-010316
Captured: 2026-05-08 14:49:11 UTC
SHA-256: 58ece66c0abafda4…
URL: https://conductatlas.com/platform/mixpanel/mixpanel-privacy-statement/dual-controller-and-processor-role/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Mixpanel's Dual Controller and Processor Role clause do?

This structure shifts primary compliance responsibility for end-user data onto the businesses that integrate Mixpanel, meaning Mixpanel's business customers, not Mixpanel itself, are primarily accountable for telling you what data is collected and obtaining your consent.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 4 platforms. See the full comparison.

Is ConductAtlas affiliated with Mixpanel?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mixpanel.