The agreement reserves Mixpanel's right to derive de-identified data from personal data and to use and disclose that de-identified data to third parties for any purpose, at Mixpanel's sole discretion, subject to applicable law.
This analysis describes what Mixpanel's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision asserts broad discretion over the secondary use and third-party disclosure of data derived from personal information, conditioned on de-identification rather than on user consent or specified purpose limitations. The practical scope of this reservation depends on the robustness of the de-identification standard applied and applicable law in relevant jurisdictions.
Interpretive note: The enforceability of the 'any purpose' reservation depends on whether Mixpanel's de-identification standard meets applicable legal thresholds under CCPA and GDPR, which the document does not specify.
Under this clause, data derived from a user's personal information may be shared with third parties for any purpose Mixpanel chooses, provided Mixpanel has applied a de-identification process. The policy separately states that Mixpanel may re-identify de-identified data to test de-identification processes, which is a condition that may interact with CCPA and GDPR standards for de-identified and pseudonymized data.
Cross-platform context
See how other platforms handle De-Identified Data Sole Discretion Reservation and similar clauses.
Compare across platforms →"We may create de-identified data records sourced or extracted from data connected to or associated with personal data by excluding information (such as your name) that makes the data personally identifiable to you. We use this de-identified data to analyze request and usage patterns so that we may enhance the content of our Services and improve our Services navigation. We reserve the right to use de-identified data for any purpose and disclose de-identified data to third parties in our sole discretion where permitted by applicable law.Excerpt from Mixpanel's Privacy Statement
(1) REGULATORY LANDSCAPE: This provision implicates CCPA's definition of 'deidentified' data and associated obligations, including the requirement that businesses implementing de-identification maintain technical and administrative safeguards.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision asserts broad discretion over the secondary use and third-party disclosure of data derived from personal information, conditioned on de-identification rather than on user consent or specified purpose limitations. The practical scope of this reservation depends on the robustness of the de-identification standard applied and applicable law in relevant jurisdictions.
Under this clause, data derived from a user's personal information may be shared with third parties for any purpose Mixpanel chooses, provided Mixpanel has applied a de-identification process. The policy separately states that Mixpanel may re-identify de-identified data to test de-identification processes, which is a condition that may interact with CCPA and GDPR standards for de-identified and pseudonymized data.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mixpanel.