Snowflake · Snowflake Terms of Service · View original document ↗

Usage Data License

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Snowflake recorded 15 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Snowflake Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Snowflake collects data about how you use the platform and can use it to improve its products, but agrees not to share it in a form that identifies you.

This analysis describes what Snowflake's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The terms authorize Snowflake to collect behavioral and interaction data from all platform users for internal product development purposes, which is a permitted use that operates without requiring separate consent for each instance of use.

Interpretive note: Whether Usage Data constitutes personal data under GDPR or CCPA depends on its specific content and the aggregation method applied, which is not defined in the agreement text.

Change history

modified May 14, 2026

Added explicit restrictions on external disclosure of Usage Data, requiring aggregation and de-identification, while removing the clarification that Usage Data excludes Customer Data.

View full change record →

Consumer impact (what this means for users)

The agreement authorizes collection of Usage Data describing platform interactions and its use for service operation and improvement; the protection offered is limited to a commitment that externally disclosed Usage Data will be aggregated and de-identified before disclosure.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Garmin Medium

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...

Strava Medium

We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...

See all platforms with this clause type →

Monitoring

Snowflake has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Snowflake may collect and use Usage Data to operate, improve, and develop the Snowflake products and services. Snowflake will not disclose Usage Data externally unless it is aggregated and de-identified such that it does not identify Customer or its Users.

— Excerpt from Snowflake's Snowflake Terms of Service

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision may require evaluation under GDPR Article 6 (lawful basis for processing) and Article 13/14 (transparency obligations) if Usage Data constitutes personal data in the applicable context, as well as under CCPA's service provider restrictions if Usage Data includes information that could be linked to California residents. The FTC Act's prohibition on unfair or deceptive practices is also a relevant framework. Enforcement authorities include the European Data Protection Board, national DPAs, the California Privacy Protection Agency, and the FTC. GOVERNANCE EXPOSURE: Medium. The provision authorizes broad collection and internal use of Usage Data without a defined retention period or user-level opt-out mechanism. Whether Usage Data constitutes personal data depends on its content and aggregation method, and that determination will vary by jurisdiction and regulatory guidance. JURISDICTION FLAGS: EU/EEA customers must assess whether Usage Data collected from their users constitutes personal data under GDPR, which could require a valid legal basis and disclosure in privacy notices. California customers should evaluate whether Usage Data falls within CCPA's definition of personal information and whether its use for product improvement is consistent with the service provider relationship. UK GDPR creates parallel obligations. CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should request clarification on the specific categories of data included in 'Usage Data' and confirm whether the DPA addresses this data stream. The de-identification commitment in the agreement should be evaluated against applicable de-identification standards (e.g., GDPR Recital 26, CCPA regulations) to confirm it is operationally meaningful. COMPLIANCE CONSIDERATIONS: Organizations should update their own privacy notices to disclose that Usage Data may be collected by their cloud service providers. Data mapping exercises should categorize Usage Data and assess whether it requires inclusion in GDPR Article 30 records of processing activities. The absence of a defined retention schedule for Usage Data is a gap that legal teams may wish to address in contract negotiations.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over unfair or deceptive data practices and is a primary enforcement authority for privacy-related representations in commercial agreements.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Snowflake Terms of Service
Entity
Snowflake
Document last updated
May 5, 2026
Tracking information
First tracked
May 10, 2026
Last verified
May 12, 2026
Record ID
CA-P-011315
Document ID
CA-D-00697
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
1ff84094bd39f9066b642f93cceeda7f67de590fbe6c3a1d08d48cc036234cc1
Analysis generated
May 10, 2026 12:52 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Snowflake
Document: Snowflake Terms of Service
Record ID: CA-P-011315
Captured: 2026-05-10 12:52:25 UTC
SHA-256: 1ff84094bd39f906…
URL: https://conductatlas.com/platform/snowflake/snowflake-terms-of-service/usage-data-license/
Accessed: June 27, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Snowflake's Usage Data License clause do?

The terms authorize Snowflake to collect behavioral and interaction data from all platform users for internal product development purposes, which is a permitted use that operates without requiring separate consent for each instance of use.

How does this clause affect you?

The agreement authorizes collection of Usage Data describing platform interactions and its use for service operation and improvement; the protection offered is limited to a commitment that externally disclosed Usage Data will be aggregated and de-identified before disclosure.

Is ConductAtlas affiliated with Snowflake?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Snowflake.