Third-Party Advertising and Analytics Data Sharing

What it is

The policy authorizes sharing of user identifiers, device information, and inferred interest data with third-party advertising and analytics partners for ad delivery, measurement, and service improvement purposes.

Why it matters (compliance & governance perspective)

This provision establishes data flows to third-party advertising and analytics partners, which under CCPA/CPRA may constitute a sale or sharing of personal information for cross-context behavioral advertising, triggering opt-out rights. Under GDPR, such sharing may require explicit consent or a documented legitimate interest basis.

Consumer impact (what this means for users)

Under this clause, user identifiers, device signals, and inferred interest categories may be disclosed to advertising and analytics partners for targeted advertising purposes. California residents have the right to opt out of such sharing under CCPA/CPRA by submitting a request through Perplexity's privacy rights mechanism.

What you can do

Institutional analysis (Compliance & governance intelligence)

1) REGULATORY LANDSCAPE: This provision engages CCPA/CPRA definitions of 'sharing' personal information for cross-context behavioral advertising, GDPR Article 6 consent and legitimate interest bases for marketing-related processing, and FTC guidelines on data brokerage and advertising disclosures. The California Privacy Protection Agency and State AG are primary enforcement authorities for California users. 2) GOVERNANCE EXPOSURE: High. If the sharing of identifiers and inferred interest data with advertising partners constitutes 'sharing' under CPRA, Perplexity must provide a functional 'Do Not Sell or Share' opt-out and honor Global Privacy Control (GPC) signals. Failure to do so creates enforcement exposure under CPRA. 3) JURISDICTION FLAGS: California creates the highest immediate exposure given CPRA's active enforcement of advertising data sharing rules. EEA and UK users are protected by GDPR consent requirements for behavioral advertising. Other state privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA) may also apply depending on user geography. 4) CONTRACT AND VENDOR IMPLICATIONS: Data processing agreements or standard contractual clauses may be required with advertising and analytics partners to ensure compliance with GDPR transfer and processing requirements. Vendor assessments should confirm that advertising partners' data practices are consistent with Perplexity's stated privacy representations. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that a compliant opt-out mechanism exists, that GPC signals are honored for California users, and that a current list of advertising and analytics partners is maintained and disclosed as required by applicable law.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• AI Model Training Use of Conversation Data high
• Data Collection Scope medium
• California Resident Privacy Rights medium
• EEA and UK User Rights and Cross-Border Transfers medium
• Children's Privacy medium
• Data Retention medium

Related Analysis

• Meta Removed 438 Sentences From Its Privacy Policy. Here Is What Disappeared.

  ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.

• 23andMe Is Bankrupt. What Happens to Your DNA Now?

  Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.