The agreement states that Mixpanel may purchase personal data about users from third-party sources including social networks, location service providers, co-brand partners, and public databases, and combines this data with information collected directly.
This analysis describes what Mixpanel's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes external data enrichment through purchase of personal data from social networks and other third-party data sources, which may engage GDPR Article 14 transparency obligations regarding data obtained from sources other than the data subject and CCPA source disclosure requirements.
Under this clause, personal data about a user may be purchased from social networks, location providers, and public databases and incorporated into Mixpanel's records about that user, beyond what the user directly provides. The agreement requires Mixpanel to apply its Privacy Statement protections to this purchased data.
Cross-platform context
See how other platforms handle Third-Party Data Purchase Authorization and similar clauses.
Compare across platforms →"When we collect information in connection with our business relationship with you, we may also purchase data about you from third parties. We protect information obtained from third parties according to the practices described in this Privacy Statement, plus any additional restrictions imposed by the third party providing the data. These third-party sources include, for example: Applications and services, such as social networks that make users' information available to others; Service providers that help us determine your device's location based on its IP Address to customize certain products to your physical location; Partners with which we offer co-branded services or engage in joint marketing activities; and Publicly available sources, such as open government databases or other information in the public domain.Excerpt from Mixpanel's Privacy Statement
(1) REGULATORY LANDSCAPE: This provision implicates GDPR Article 14, which requires that controllers provide transparency notices to data subjects when personal data is obtained from sources other than the data subject, including the categories of …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes external data enrichment through purchase of personal data from social networks and other third-party data sources, which may engage GDPR Article 14 transparency obligations regarding data obtained from sources other than the data subject and CCPA source disclosure requirements.
Under this clause, personal data about a user may be purchased from social networks, location providers, and public databases and incorporated into Mixpanel's records about that user, beyond what the user directly provides. The agreement requires Mixpanel to apply its Privacy Statement protections to this purchased data.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mixpanel.