The notice references CCPA and CPRA rights for California residents, including the right to know, delete, correct, and opt out of the sale or sharing of personal data for cross-context behavioral advertising purposes.
This analysis describes what Segment's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that California residents have specific statutory rights regarding personal data collected on twilio.com, and that Twilio discloses mechanisms for exercising those rights, including opt-out of data sharing for advertising.
Interpretive note: The specific privacy request portal URL and the full scope of California rights mechanisms are not directly quoted in the available document text.
The updated policy establishes a new opt-out mechanism allowing users to decline having their data disclosed to third parties (other than service providers) or used for purposes materially different from the original collection purpose. The policy also explicitly discloses that Twilio Inc. is subject to FTC investigatory and enforcement powers, providing users with notice of the regulatory authority overseeing the company's privacy practices. You can exercise this opt-out right by contacting Segment through the mechanism specified in their privacy policy.
View change record →The updated terms establish clearer disclosure of how Segment transfers personal data internationally. Segment now explicitly certifies its compliance with the EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. Data Privacy Framework, and states that these DPF Principles take precedence if they conflict with other policy terms. The updated policy also adds specific rights allowing you to opt out of: (i) disclosure of your personal data to third parties other than service providers acting under Segment's instructions, or (ii) use of your personal data for purposes materially different from the original purpose or your subsequent authorization. You can exercise these rights by contacting privacy@twilio.com.
View change record →Provision renamed from 'California Resident Privacy Rights' to 'California Resident Rights and Opt-Out' to explicitly highlight opt-out mechanisms available to California residents.
View full change record →Under these terms, California residents can request access to, deletion of, or correction of personal data held by Twilio, and can opt out of the sharing of their personal data for cross-context behavioral advertising. The agreement states that these rights are available through Twilio's privacy request channels.
How other platforms handle this
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
Monitoring
Segment has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
(1) REGULATORY LANDSCAPE: This provision directly engages CCPA and CPRA, enforced by the California Privacy Protection Agency and the California Attorney General. CPRA requirements include timely response to consumer rights requests, maintenance of opt-out mechanisms, and restrictions on sensitive personal data use. (2) GOVERNANCE EXPOSURE: Medium. The adequacy of the opt-out mechanism and the response procedures for California rights requests are operationally significant; failure to honor requests within statutory timeframes creates enforcement exposure. (3) JURISDICTION FLAGS: This provision applies to California residents; other US states with similar privacy laws (Virginia, Colorado, Connecticut, Texas, and others) may impose analogous requirements that are not explicitly addressed in the notice. (4) CONTRACT AND VENDOR IMPLICATIONS: Twilio's data sharing with advertising partners must be evaluated against CPRA's definition of sharing for cross-context behavioral advertising; vendors receiving data for advertising purposes should be identified in data maps and subject to appropriate contractual restrictions. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the opt-out mechanism is functional and accessible, that rights request procedures meet CPRA response timelines, and that data sharing with advertising partners is accurately disclosed in the notice's categories of sharing.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes that California residents have specific statutory rights regarding personal data collected on twilio.com, and that Twilio discloses mechanisms for exercising those rights, including opt-out of data sharing for advertising.
Under these terms, California residents can request access to, deletion of, or correction of personal data held by Twilio, and can opt out of the sharing of their personal data for cross-context behavioral advertising. The agreement states that these rights are available through Twilio's privacy request channels.
ConductAtlas has identified this type of provision across 5 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Segment.