Provision record
Shopify · Shopify Privacy Policy · View original document ↗

No sale of Personal Data under US Privacy Laws

High confidence Common · 281 of 343 platforms

Key Facts · in the document’s own words

Does Shopify "sell" Personal Data as that term is defined under US Privacy Laws?
“We do not "sell" your Personal Data as that term is defined under US Privacy Laws.”
Version CA-V-006650, captured Sept. 11, 2026 · live source ↗
Our reading, not the document’s words
Shopify does not "sell" Personal Data as that term is defined under US Privacy Laws.
Stay ahead of the changes
Track Shopify and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

Generated by a model from the captured document; not read by a person

The policy states that Shopify does not sell Personal Data as defined under the named US Privacy Laws, which include the CCPA, Colorado Privacy Act, Connecticut data privacy law, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act. The statement is qualified to the legal definitions of sale under those specific statutes rather than a broader general assertion.

ⓘ

This analysis describes what Shopify's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Generated by a model from the captured document; not read by a person

This commitment tracks a specific legal definition of "sell" under US Privacy Laws, meaning the scope of the protection is bounded by that definition rather than any broader ordinary meaning.

⚠

Interpretive note: The practical scope of this commitment depends on the legal definition of "sell" under US Privacy Laws, which is not elaborated in the excerpt. The claim is stated exactly as written without interpretation of that definition.

Consumer impact (what this means for users)

Generated by a model from the captured document; not read by a person

Under these terms, Shopify states it does not sell Personal Data as defined under the CCPA and other named US state privacy laws. The policy separately discloses that Personal Data is shared with advertisers and marketing vendors, which some US state privacy laws treat differently from selling depending on whether the sharing constitutes cross-context behavioral advertising.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Submit a Right to Know request through Shopify's online privacy portal to obtain a disclosure of the categories of Personal Data collected and with whom it has been shared over the past 12 months.

How other platforms handle this

ActiveCampaign

If any portion of ActiveCampaign is sold, Contact Data may be part of the business assets we transfer. Contact Data also may be disclosed if ActiveCampaign is considering or completes the financing, securitization, insuring, sale, assignment or other transfer...

Together AI

We may share your Personal Data with Service Providers, Third-Party Vendors, Consultants, and other Business Partners in order to provide Services on our behalf...

Harvey AI

We will share Personal Data that we collect, such as Account Information with any corporate affiliates...used for the purposes described in this Privacy Policy and generally to operate our business...

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
We do not "sell" your Personal Data as that term is defined under US Privacy Laws.

Excerpt from Shopify's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

(1) REGULATORY LANDSCAPE: The CCPA and its amendment (CPRA) distinguish between selling personal information and sharing it for cross-context behavioral advertising, with both activities requiring opt-out rights.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Provision details

Document information
Document
Shopify Privacy Policy
Entity
Shopify
Tracking information
First captured by ConductAtlas
March 15, 2026
Text quoted from version
CA-V-006650, captured Sept. 11, 2026
Record ID
CA-P-015862
Document ID
CA-D-000122
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-006650)
3be7b8341e0df3f36f7603abf219b5e600dcbb3540ee86d5d08f3a558bc888ba
Analysis generated
April 28, 2026 10:00 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-006650, captured Sept. 11, 2026 (checked Oct. 5, 2026)
Citation Record
Entity: Shopify
Document: Shopify Privacy Policy
Record ID: CA-P-015862
Version: CA-V-006650
Captured: 2026-09-11 00:24:34 UTC
SHA-256: 3be7b8341e0df3f3…
URL: https://conductatlas.com/platform/shopify/shopify-privacy-policy/provision/CA-P-015862/no-sale-of-personal-data-under-us-privacy-laws/
Accessed: Nov. 5, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Related Analysis

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does Shopify's No sale of Personal Data under US Privacy Laws clause do?

This commitment tracks a specific legal definition of "sell" under US Privacy Laws, meaning the scope of the protection is bounded by that definition rather than any broader ordinary meaning.

How does this clause affect you?

Under these terms, Shopify states it does not sell Personal Data as defined under the CCPA and other named US state privacy laws. The policy separately discloses that Personal Data is shared with advertisers and marketing vendors, which some US state privacy laws treat differently from selling depending on whether the sharing constitutes cross-context behavioral advertising.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 281 platforms. See the full comparison.

Is ConductAtlas affiliated with Shopify?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Shopify.