Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy authorizes sharing of user identifiers, device information, and inferred interest data with third-party advertising and analytics partners for ad delivery, measurement, and service improvement purposes.
This analysis describes what Perplexity AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes data flows to third-party advertising and analytics partners, which under CCPA/CPRA may constitute a sale or sharing of personal information for cross-context behavioral advertising, triggering opt-out rights. Under GDPR, such sharing may require explicit consent or a documented legitimate interest basis.
Interpretive note: Whether the described sharing constitutes a CCPA 'sale' or 'sharing' depends on the specific contractual and financial arrangements with advertising partners, which are not fully detailed in the policy.
The updated Privacy Notice states that Perplexity does not sell personal data or send user queries, prompts, or conversation content to advertisers. The policy also expands disclosure about cookies, first-party advertising measurement, and user privacy choices. This clarification directly addresses advertiser data handling practices, which is a material privacy concern for users of AI services.
View change record →The updated privacy notice expands transparency about how Perplexity collects and processes data across its services. The revised terms explicitly disclose that Comet browser collects browsing history, local data, and usage patterns; that Email Assistant analyzes email content for response advice but does not use that content for AI training; and that account data collection applies when creating accounts, submitting queries, and uploading documents. The policy now clearly separates consumer and enterprise data handling, stating that enterprise and API offerings are governed separately where Perplexity acts as a processor rather than a controller. You can review Comet privacy settings through the browser's controls and configure data collection preferences through your account settings.
View change record →Current version increases severity from medium to high, specifies types of data shared (identifiers, device information, inferred interest data), and adds analytics providers alongside advertising partners.
View full change record →Under this clause, user identifiers, device signals, and inferred interest categories may be disclosed to advertising and analytics partners for targeted advertising purposes. California residents have the right to opt out of such sharing under CCPA/CPRA by submitting a request through Perplexity's privacy rights mechanism.
How other platforms handle this
In some cases, the third parties mentioned in this section may maintain the information they collect in personally identifiable form.
we may use, retain or share information with law enforcement or others in circumstances where a person's vital interests require protection, such as in the case of emergencies.
Third-party apps use data from Gemini consistent with their own privacy policies and terms.
Monitoring
Perplexity AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"We may share your information with third-party advertising partners and analytics providers to help us deliver and measure advertising, and to improve our services. We may share identifiers, device information, and inferred interest data with these partners.Excerpt from Perplexity AI's Perplexity Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages CCPA/CPRA definitions of 'sharing' personal information for cross-context behavioral advertising, GDPR Article 6 consent and legitimate interest bases for marketing-related processing, and FTC guidelines on data brokerage and advertising disclosures. The California Privacy Protection Agency and State AG are primary enforcement authorities for California users. 2) GOVERNANCE EXPOSURE: High. If the sharing of identifiers and inferred interest data with advertising partners constitutes 'sharing' under CPRA, Perplexity must provide a functional 'Do Not Sell or Share' opt-out and honor Global Privacy Control (GPC) signals. Failure to do so creates enforcement exposure under CPRA. 3) JURISDICTION FLAGS: California creates the highest immediate exposure given CPRA's active enforcement of advertising data sharing rules. EEA and UK users are protected by GDPR consent requirements for behavioral advertising. Other state privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA) may also apply depending on user geography. 4) CONTRACT AND VENDOR IMPLICATIONS: Data processing agreements or standard contractual clauses may be required with advertising and analytics partners to ensure compliance with GDPR transfer and processing requirements. Vendor assessments should confirm that advertising partners' data practices are consistent with Perplexity's stated privacy representations. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that a compliant opt-out mechanism exists, that GPC signals are honored for California users, and that a current list of advertising and analytics partners is maintained and disclosed as required by applicable law.
Regulatory citations, enforcement risk, and due diligence action items.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes data flows to third-party advertising and analytics partners, which under CCPA/CPRA may constitute a sale or sharing of personal information for cross-context behavioral advertising, triggering opt-out rights. Under GDPR, such sharing may require explicit consent or a documented legitimate interest basis.
Under this clause, user identifiers, device signals, and inferred interest categories may be disclosed to advertising and analytics partners for targeted advertising purposes. California residents have the right to opt out of such sharing under CCPA/CPRA by submitting a request through Perplexity's privacy rights mechanism.
ConductAtlas has identified this type of provision across 294 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Perplexity AI.