Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Mixpanel may derive de-identified aggregated data from Customer Content combined with data from other customers, and asserts ownership of that aggregated data for use in product development and generating industry insights, with a stated commitment not to use it to identify individuals or customers.
This analysis describes what Mixpanel's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes Mixpanel to derive aggregated insights from Customer Content and assert ownership over that derived data, which is a common practice in analytics platforms; the provision includes a stated prohibition on using aggregated data to identify individuals or customers.
Interpretive note: The adequacy of the de-identification standard described in the agreement is a technical and legal question that cannot be resolved by the contractual assertion alone; regulatory evaluation under GDPR and CCPA may apply different standards.
The updated terms remove a contractual protection that previously prohibited Mixpanel from treating individually identifiable data as Usage Data. Under the revised language, Mixpanel may now classify data that identifies or is attributable to specific individuals as Usage Data, potentially making such data subject to uses and disclosures beyond what the Customer Content exclusion permits. This broadens the category of data Mixpanel may process and analyze under the Usage Data definition. The terms do not provide a mechanism to opt out of this reclassification.
View change record →The updated terms establish an automatic 7% fee increase mechanism that takes effect upon each subscription renewal. Previously, subscription fees remained fixed for the duration of the subscription term, with new pricing becoming effective only at the start of a new subscription term and only if the parties agreed in writing. Under the revised language, fees will now automatically escalate by 7% upon commencement of each renewal term unless the parties expressly agree otherwise in writing. This shifts the default pricing behavior from fixed-term rates to automatic annual escalation.
View change record →Under this clause, data derived from Customer Content that has been de-identified and aggregated with other customers' data may be used by Mixpanel to develop its products, publish industry insights, and generate benchmarks, with Mixpanel asserting ownership of such derived data.
Cross-platform context
See how other platforms handle Aggregated and De-Identified Data Ownership and similar clauses.
Compare across platforms →Monitoring
Mixpanel has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Mixpanel may derive from Customer Content data that has been de-identified and aggregated with data from other customers such that it cannot reasonably be used to identify Customer, its End Users, or any individual ("Aggregated Data"). Mixpanel owns all right, title and interest to the Aggregated Data and any derivative works thereof and may use it to improve and develop its products and services and to generate industry insights. Mixpanel will not use Aggregated Data for the purpose of identifying Customer or any individual.Excerpt from Mixpanel's Terms of Use
(1) REGULATORY LANDSCAPE: The aggregated data clause engages GDPR and CCPA insofar as the adequacy of de-identification methods is a regulatory question. Under GDPR, data is only considered outside the scope of personal data protection if it is genuinely and irreversibly de-identified; regulators and courts have applied scrutiny to de-identification claims. Under CCPA, aggregate consumer information is excluded from certain requirements, subject to similar standards. The FTC has addressed de-identification adequacy in enforcement guidance. (2) GOVERNANCE EXPOSURE: Medium. The provision asserts that aggregated data cannot reasonably be used to identify individuals, but the adequacy of de-identification is a technical and legal question that the agreement does not resolve by assertion alone. Organizations with strict data governance policies regarding derived data should evaluate the DPA and Mixpanel's technical de-identification standards separately. (3) JURISDICTION FLAGS: EU and UK data protection authorities have indicated that de-identification must meet a high standard to remove data from GDPR scope. California's CPRA introduced new requirements around de-identification. Organizations in regulated industries such as healthcare or financial services should assess whether sector-specific regulations impose additional constraints. (4) CONTRACT AND VENDOR IMPLICATIONS: The agreement does not describe the specific technical methods used to de-identify Customer Content before aggregation. Procurement and compliance teams may wish to request documentation of Mixpanel's de-identification methodology as part of vendor due diligence. (5) COMPLIANCE CONSIDERATIONS: Organizations should assess whether the aggregated data use practice requires disclosure in their own privacy notices to end users, particularly where end user Personal Information is included in the Customer Content from which aggregated data is derived.
This provision authorizes Mixpanel to derive aggregated insights from Customer Content and assert ownership over that derived data, which is a common practice in analytics platforms; the provision includes a stated prohibition on using aggregated data to identify individuals or customers.
Under this clause, data derived from Customer Content that has been de-identified and aggregated with other customers' data may be used by Mixpanel to develop its products, publish industry insights, and generate benchmarks, with Mixpanel asserting ownership of such derived data.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mixpanel.