Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
For users in the EEA, Switzerland, and the UK, the policy enumerates data subject rights including access, correction, deletion, objection, processing restriction, and portability, exercisable through account settings or by contacting privacy@together.ai, along with the right to lodge a complaint with a data protection authority.
This analysis describes what Together AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational rights framework for GDPR-covered users and identifies the contact mechanism for exercising rights not available through account settings; the consent withdrawal provision clarifies that prior processing based on consent remains lawful after withdrawal, consistent with GDPR Article 7(3).
EEA, Swiss, and UK users may exercise access, correction, deletion, objection, restriction, and portability rights by contacting privacy@together.ai or through account settings as described in the policy's Summary Table. The right to lodge a complaint with a relevant data protection authority is also affirmed.
Cross-platform context
See how other platforms handle GDPR Data Subject Rights for EEA, Swiss, and UK Users and similar clauses.
Compare across platforms →Monitoring
Together AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Additionally, you have the following data protection rights: You can request access, correction, updates, or deletion of your Personal Data. You can object to our processing of your Personal Data, ask us to restrict processing of your Personal Data, or request portability of your Personal Data. If we have collected and processed your Personal Data with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.Excerpt from Together AI's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages GDPR Articles 15 through 22 covering the full range of data subject rights; the UK GDPR and Swiss Federal Act on Data Protection impose parallel requirements. Enforcement is by national data protection authorities within the EEA, the UK Information Commissioner's Office, and the Swiss Federal Data Protection and Information Commissioner. (2) GOVERNANCE EXPOSURE: Medium. The provision is largely consistent with GDPR requirements, but the interaction between the ZDR mode and data subject rights, particularly erasure and portability under Articles 17 and 20, warrants separate legal assessment as noted in the ZDR provision analysis. (3) JURISDICTION FLAGS: EEA member states, the UK, and Switzerland are explicitly covered; the policy's legitimate interests legal basis for certain processing purposes requires documented legitimate interests assessments that should be available to demonstrate compliance. (4) CONTRACT AND VENDOR IMPLICATIONS: B2B customers acting as GDPR data controllers using Together AI as a data processor should confirm that data subject rights requests received from their own end users can be operationally fulfilled through Together AI's mechanisms within GDPR-required timeframes. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that all data subject rights request types are operationally supported, that response timeframes meet GDPR Article 12 requirements (one month with possible two-month extension), and that the account settings pathway for exercising certain rights is clearly communicated to users.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the operational rights framework for GDPR-covered users and identifies the contact mechanism for exercising rights not available through account settings; the consent withdrawal provision clarifies that prior processing based on consent remains lawful after withdrawal, consistent with GDPR Article 7(3).
EEA, Swiss, and UK users may exercise access, correction, deletion, objection, restriction, and portability rights by contacting privacy@together.ai or through account settings as described in the policy's Summary Table. The right to lodge a complaint with a relevant data protection authority is also affirmed.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Together AI.