Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy affirms that Together AI does not currently sell Personal Data as defined under the CCPA, commits to providing prior notice and opt-out rights if that practice changes, and establishes a deletion right for California residents exercisable by verifiable request to privacy@together.ai with a 45-day response window.
This analysis describes what Together AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The explicit non-sale affirmation is a material CCPA compliance disclosure; the commitment to provide notice and opt-out rights before any future sale establishes a procedural obligation that would apply if business practices change. The 45-day response timeline with a permissible 90-day extension is consistent with CCPA statutory requirements.
California residents may submit verifiable deletion, access, and portability requests to privacy@together.ai; the agreement limits access and portability requests to two per twelve-month period and requires responses within 45 days, with a possible 90-day extension upon written notice. The policy states no fee is charged for processing requests unless they become excessive or manifestly unfounded.
Cross-platform context
See how other platforms handle CCPA Rights and Non-Sale of Personal Data and similar clauses.
Compare across platforms →Monitoring
Together AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"The Company does not sell your Personal Data as defined under CCPA. If, in the future, we do sell your Personal Data, we will notify you, and you may have the right to opt out of such sale. You have the right to request that the Company delete any of your Personal Data that we collected from you and/or retained. Unless subject to a certain limited exception, once the Company receives and confirms your verifiable data deletion request, we will delete (and direct our service providers to delete) your Personal Data from our records.Excerpt from Together AI's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages the California Consumer Privacy Act as amended by the California Privacy Rights Act, enforced by the California Privacy Protection Agency and California Attorney General. The 45-day response window with permissible 90-day extension is consistent with CCPA statutory timelines. The non-sale affirmation engages CCPA Section 1798.120 and the associated opt-out right. (2) GOVERNANCE EXPOSURE: Low. The provision reflects standard CCPA compliance language; the non-sale affirmation reduces current opt-out obligation exposure. The commitment to provide future notice before any sale introduces a prospective obligation requiring operational processes to ensure compliance if business practices change. (3) JURISDICTION FLAGS: California residents and individuals whose data was collected in California are the covered population; the policy explicitly limits this section to those individuals. Other US state privacy laws, including those in Virginia, Colorado, and Texas, are not separately addressed in the policy, which may warrant assessment depending on user geography. (4) CONTRACT AND VENDOR IMPLICATIONS: B2B customers with California employee or customer data processed through Together AI should confirm whether their data processing agreements address CCPA service provider requirements, including restrictions on using Personal Data for purposes beyond the service agreement. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should ensure that the identity verification process for CCPA requests is documented and that the two-requests-per-twelve-months limitation for access and portability is operationally implemented; they should also assess whether the fee-for-excessive-requests provision is calibrated in a manner consistent with CCPA guidance.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The explicit non-sale affirmation is a material CCPA compliance disclosure; the commitment to provide notice and opt-out rights before any future sale establishes a procedural obligation that would apply if business practices change. The 45-day response timeline with a permissible 90-day extension is consistent with CCPA statutory requirements.
California residents may submit verifiable deletion, access, and portability requests to privacy@together.ai; the agreement limits access and portability requests to two per twelve-month period and requires responses within 45 days, with a possible 90-day extension upon written notice. The policy states no fee is charged for processing requests unless they become excessive or manifestly unfounded.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Together AI.