Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Sep 11, 2026; our capture on Oct 21, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“For Virginia, New Hampshire, Colorado, Connecticut, Delaware, Nebraska, Utah, Texas, and Oregon consumers, we will not process your Sensitive Personal Information without obtaining your consent.”
“Preferences, likelihood of interest in Palantir products and/or services. Data generated by combining data...collected by Palantir with information obtained from third parties...which assist with the sale of products or services, compliance with laws, and that detect, prevent...”
“When we provide our products and services to our customers, we act as a data processor. This means it is our customers, and not Palantir, who are in control of what personal data and other information they process using our products or services...”
“We process your information in connection with transactions if there is a proposed or actual merger, purchase, sale acquisition, financing due diligence, transition of service to another service provider, divestiture, bankruptcy, restructuring...”
“Sensitive Personal Information is only used or disclosed to perform the services or provide the goods reasonably expected by an average consumer...to prevent, detect, and investigate security incidents...to resist malicious, deceptive, fraudulent, harmful or illegal actions...”
“To ensure an adequate level of protection for your personal data, we will use a data transfer agreement with the recipient based on Standard Contractual Clauses approved by the European Commission, the UK Secretary of State, or the UK Information Commissioner's Office...”
This document explains what personal information Palantir collects about you, how it uses that information (including to build profiles and target advertising), and what rights you have over your data. If you are in certain U.S. states, Palantir must get your consent before processing sensitive personal information, and you may opt out of the sale or sharing of your personal information for targeted advertising. Importantly, if a Palantir customer processes your data using Palantir's products, this Statement does not cover that — the customer is responsible.
Palantir's Privacy Statement establishes how Palantir collects, uses, and shares personal data in its capacity as a data controller — distinct from its role as a data processor when providing products and services to customers, in which case customers control what personal data is processed and this Statement does not apply. Palantir automatically collects a broad range of technical data from website visitors, combines collected data with third-party information to generate Inferred Data profiles, and uses multiple categories of personal data to target advertisements through third-party platforms. Use and disclosure of Sensitive Personal Information is restricted to enumerated purposes, and processing of Sensitive Personal Information for consumers in specified U.S. states requires affirmative consent. International transfers from the EEA and UK are conducted under Standard Contractual Clauses approved by the European Commission, the UK Secretary of State, or the UK Information Commissioner's Office.
Palantir automatically collects identifying and behavioral data when you visit its websites, and it combines that data with third-party information to build profiles reflecting your preferences and likely interest in its products. Palantir uses these profiles — along with Contact, Professional, Communication, Technical, Transaction, Training and Educational, and Inferred Data — to target advertisements through third-party platforms. If you are a consumer in Virginia, New Hampshire, Colorado, Connecticut, Delaware, Nebraska, Utah, Texas, or Oregon, Palantir must obtain your consent before processing Sensitive Personal Information. Where applicable, you may opt out of the sale of your Personal Information or its sharing for targeted advertising purposes.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“For Virginia, New Hampshire, Colorado, Connecticut, Delaware, Nebraska, Utah, Texas, and Oregon consumers, we will not process your Sensitive Personal Information without obtaining your consent.”
“Preferences, likelihood of interest in Palantir products and/or services. Data generated by combining data...collected by Palantir with information obtained from third parties...which assist with the sale of products or services, compliance with laws, and that detect, prevent...”
“When we provide our products and services to our customers, we act as a data processor. This means it is our customers, and not Palantir, who are in control of what personal data and other information they process using our …”
“We process your information in connection with transactions if there is a proposed or actual merger, purchase, sale acquisition, financing due diligence, transition of service to another service provider, divestiture, bankruptcy, restructuring...”
“Sensitive Personal Information is only used or disclosed to perform the services or provide the goods reasonably expected by an average consumer...to prevent, detect, and investigate security incidents...to resist malicious, deceptive, fraudulent, harmful or illegal actions...”
“To ensure an adequate level of protection for your personal data, we will use a data transfer agreement with the recipient based on Standard Contractual Clauses approved by the European Commission, the UK Secretary of State, or the UK Information …”
“Consequently, this Statement does not apply to our customers' processing of personal data using Palantir products or services.”
“Palantir does not provide Payment Data to Stripe. As a result, Stripe is an independent controller of information provided in the course of using Stripe's payment processing service on Palantir platforms.”
“We use your Contact Data, Professional Data, Communication Data, Technical Data, Transaction Data, Training and Educational Data, and Inferred Data to target advertisements and messages to you, this can include targeted advertising via third party advertising platforms...”
“Request to Opt-Out of the Sale or Sharing: Where applicable, you may opt out of our "sale" of Personal Information or "sharing" of Personal Information for the purposes of (i) targeted advertising, or (ii) "sale" of personal data.”
“Our websites are not intended for children under 16 years of age. If you become aware that your child has provided us with personal data without your consent, please contact us at privacy@palantir.com and we will work to delete it.”
“IP address, operating system, browser information, user agent. identifiers such as cookie IDs...mobile device ID, Wi-Fi data, interactions with Palantir websites, authentication credentials, communications and promotional materials are collected automatically...”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle California right to limit Sensitive Personal Information use and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.