Synthesia · Synthesia Privacy Policy · View original document ↗

Third-Party Data Sharing

Medium severity Medium confidence Explicitdocumentlanguage Uncommon · 24 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Synthesia Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Synthesia may share your personal data with service providers, partners, and other companies, including during a business transaction such as a merger, or when legally required.

This analysis describes what Synthesia's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Data sharing with third-party service providers and in the context of corporate transactions means your personal data, including potentially avatar data, could be transferred to new entities with different privacy practices.

Interpretive note: The categories of business partners and other companies are not exhaustively defined in the available policy text, creating some uncertainty about the full scope of third-party sharing.

Consumer impact (what this means for users)

Your personal data may be shared with vendors and partners that power Synthesia's platform, and could be transferred to a new owner if Synthesia is acquired; reviewing the sub-processor list and understanding your deletion rights before any major corporate change is advisable.

How other platforms handle this

Lime Medium

We may share your information with third-party advertising partners to provide you with targeted advertising. We also work with third-party analytics providers who help us understand how users interact with our Services. These third parties may use cookies, web beacons, and similar tracking technolo...

Oura Medium

We process personal data you provide to Oura to enable third party integrations, services, features, and offerings. For example, with your permission, our Services may integrate with third-party services like Google Health Connect and Apple HealthKit, or those of our partners. Oura takes measures to...

HubSpot Medium

We may share your personal data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We may also share your personal data with advertising partners to display relevant advertising to y...

See all platforms with this clause type →

Monitoring

Synthesia has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may share your personal data with third parties including service providers, business partners, and other companies in connection with our business operations. We may also share your personal data if required by law, or in connection with a business transaction such as a merger or acquisition.

— Excerpt from Synthesia's Synthesia Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: GDPR Article 28 requires that data sharing with processors be governed by a DPA meeting specified minimum requirements. Sharing with third-party controllers requires a lawful basis under Article 6. In the context of mergers and acquisitions, GDPR Article 14 may require notification to data subjects if their data is transferred to a new controller. CCPA and CPRA require disclosure of categories of third parties with whom personal information is shared and, in some cases, opt-out rights for sharing that constitutes a sale. (2) GOVERNANCE EXPOSURE: Medium. Third-party sharing for operational purposes is standard but the breadth of the categories described (service providers, business partners, other companies) requires scrutiny. M&A-related transfers are a specific area of GDPR compliance complexity because the acquiring entity must independently establish a lawful basis for continued processing. (3) JURISDICTION FLAGS: EU and UK users have the strongest protections governing third-party data transfers. California residents have rights to know which categories of third parties receive their personal information. In an M&A context, data protection regulators may need to be notified depending on the scale and nature of the transaction. (4) CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should request Synthesia's current sub-processor list and confirm that changes are notified with adequate lead time. In due diligence for organizations considering acquisition of Synthesia or relying on it as a critical vendor, the sub-processor chain and DPAs with all processors should be reviewed. Enterprise customers should confirm whether their DPA includes a right to object to sub-processor changes. (5) COMPLIANCE CONSIDERATIONS: Legal teams should maintain a record of Synthesia's disclosed third-party sharing categories and verify alignment with their own privacy notices to employees and end users. Monitoring for corporate transactions involving Synthesia is advisable to identify whether a new controller notification obligation arises.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over data sharing practices that may constitute unfair or deceptive acts, including sharing with undisclosed third parties or in connection with corporate transactions.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Synthesia Privacy Policy
Entity
Synthesia
Document last updated
May 5, 2026
Tracking information
First tracked
April 30, 2026
Last verified
May 10, 2026
Record ID
CA-P-009281
Document ID
CA-D-00470
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
7648d9071447f69ed848238281e6ab982ee2d650c8e20eb74c961b356314a183
Analysis generated
April 30, 2026 07:49 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Synthesia
Document: Synthesia Privacy Policy
Record ID: CA-P-009281
Captured: 2026-04-30 07:49:32 UTC
SHA-256: 7648d9071447f69e…
URL: https://conductatlas.com/platform/synthesia/synthesia-privacy-policy/third-party-data-sharing/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Synthesia's Third-Party Data Sharing clause do?

Data sharing with third-party service providers and in the context of corporate transactions means your personal data, including potentially avatar data, could be transferred to new entities with different privacy practices.

How does this clause affect you?

Your personal data may be shared with vendors and partners that power Synthesia's platform, and could be transferred to a new owner if Synthesia is acquired; reviewing the sub-processor list and understanding your deletion rights before any major corporate change is advisable.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 24 platforms. See the full comparison.

Is ConductAtlas affiliated with Synthesia?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Synthesia.