Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The agreement authorizes Mixpanel to build and continuously update individual behavioral profiles by combining on-platform activity data with third-party business intelligence data, for the purpose of predicting future interest in Mixpanel's services.
This analysis describes what Mixpanel's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes automated, real-time construction of individual profiles using combined first-party behavioral data and third-party enrichment data, which may engage GDPR Article 22 automated processing safeguards and CCPA profiling disclosure requirements depending on the jurisdiction of the user.
This provision establishes that any form interaction on Mixpanel's platform may trigger individual profile creation, with profiles updated continuously based on behavioral activity and supplemented by third-party business data. Under this clause, users do not receive per-profile notice at the time of profile creation.
Cross-platform context
See how other platforms handle Real-Time Behavioral Profiling and similar clauses.
Compare across platforms →Monitoring
Mixpanel has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"When you interact with our Services by completing a form (such as a request for us to contact you, creation of an account, request for information on pricing, or downloading content), we will collect your personal data and analyze your information to build individual profiles. We use third-party tools to help us make the profile by providing information about your business (like, company size and industry, for example). These profiles will be used to help us predict future interest in our Services. We base our profiling on your activity on the Services, and we update your profile in real-time based on your use of the Services.Excerpt from Mixpanel's Privacy Statement
(1) REGULATORY LANDSCAPE: This provision implicates GDPR Article 22 (automated individual decision-making and profiling) and GDPR Articles 13 and 14 regarding transparency obligations for profiling activities. Under CCPA, profiling using sensitive or network information may require disclosure and potentially an opt-out mechanism. The FTC Act's unfair or deceptive practices framework may also engage if profiling is not adequately disclosed at point of collection. Enforcement authority includes EU national data protection authorities, the UK ICO, and the FTC. (2) GOVERNANCE EXPOSURE: Medium. The provision discloses profiling as a practice and identifies its basis (platform activity plus third-party enrichment). However, the absence of an explicit opt-out mechanism for profiling itself, as distinct from the interest-based advertising opt-out, may create exposure under GDPR Article 22 if profiling produces legal or similarly significant effects, or under CCPA's opt-out of automated decision-making requirements as they develop under implementing regulations. (3) JURISDICTION FLAGS: EU and UK users have the strongest statutory basis to object to or request restriction of profiling under GDPR Article 21 and Article 22. California residents may have rights under CCPA's automated decision-making provisions as further regulations are finalized. Other jurisdictions may have limited direct recourse under this provision. (4) CONTRACT AND VENDOR IMPLICATIONS: Businesses deploying Mixpanel as a data processor and whose end users interact with Mixpanel-instrumented forms should assess whether this profiling practice is disclosed in their own privacy notices to end users, as Mixpanel's Privacy Statement explicitly states it does not apply to customer end users. Data processing agreements with Mixpanel should be reviewed to confirm scope of processing authorized under customer contracts. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate whether their GDPR Article 13/14 notices and CCPA notices adequately disclose Mixpanel's profiling practices to end users; whether automated processing impacts require a Data Protection Impact Assessment under GDPR Article 35; and whether any Mixpanel-generated profiles constitute outputs that require specific handling under applicable law.
This provision authorizes automated, real-time construction of individual profiles using combined first-party behavioral data and third-party enrichment data, which may engage GDPR Article 22 automated processing safeguards and CCPA profiling disclosure requirements depending on the jurisdiction of the user.
This provision establishes that any form interaction on Mixpanel's platform may trigger individual profile creation, with profiles updated continuously based on behavioral activity and supplemented by third-party business data. Under this clause, users do not receive per-profile notice at the time of profile creation.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mixpanel.