Palantir Privacy Statement

This is Palantir's privacy policy explaining how the company — a major data analytics and AI platform serving governments and corporations — collects and uses personal data from people who visit its website. The most important thing for everyday visitors to know is that Palantir uses third-party tracking tools including Google Analytics and LinkedIn's Insight Tag on its own website, meaning your browsing behavior is shared with those companies even when reading this privacy policy. If you are a California resident or EU/UK data subject, you have specific rights to access, delete, or object to processing of your personal data by contacting privacy@palantir.com.

This document is Palantir's Privacy and Security Statement governing the collection, use, and disclosure of personal data submitted to or collected via Palantir's website and related services, with legal basis rooted in legitimate interests, contractual necessity, and consent as applicable under GDPR and other frameworks. The most significant obligation Palantir creates is its commitment to not sell personal data to third parties and its explicit promise that customer-uploaded data is not used to train Palantir's AI/ML models without consent. Notably, the document distinguishes between 'Website Data' (collected from site visitors) and 'Customer Data' (uploaded by enterprise clients), a structural separation that is more rigorous than typical SaaS privacy policies but leaves some ambiguity around inference and derived data. The policy engages GDPR (with Palantir acting as data controller for website visitors and processor for customer data), CCPA/CPRA for California residents, and UK GDPR post-Brexit, with Palantir Technologies UK Limited serving as the EEA/UK representative. Material compliance considerations include the adequacy of Standard Contractual Clauses for international data transfers, the sufficiency of Palantir's cookie consent mechanism, and the scope of third-party analytics tools (Google Analytics, LinkedIn Insight Tag) deployed on the privacy policy page itself.