This is Twilio's privacy policy for its website, explaining what personal information Twilio collects when you visit twilio.com — including your name, email address, company details, browsing behavior, and device identifiers used for advertising and analytics. The most important thing to know is that Twilio shares your browsing and behavioral data with advertising and analytics partners including Google Tag Manager, Adobe, and its own Segment platform for targeted marketing purposes. If you are a California resident, you have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising by using the cookie consent tool on the site.
This document is Twilio's Website Privacy Notice, governing the collection, use, and disclosure of personal data from visitors to twilio.com and related Twilio-branded websites, with legal basis rooted in consent, legitimate interests, and contractual necessity depending on jurisdiction. The notice creates obligations on Twilio to disclose data categories collected (including identifiers, usage data, device information, and inferred interests), to honor data subject rights requests, and to maintain appropriate data transfer mechanisms for cross-border transfers. Notably, the document is a website-only privacy notice and explicitly excludes Twilio's customer data processing activities (governed by separate agreements), which creates a potential gap in consumer understanding of how Twilio processes end-user communications data through its API products. The notice engages GDPR (EU/UK), CCPA/CPRA (California), and general FTC Act Section 5 obligations, with material considerations around the use of third-party analytics, advertising cookies, and cross-context behavioral advertising that trigger opt-out rights for California residents. Compliance teams should note the document references TrustArc for consent management and Segment (a Twilio subsidiary) for analytics, creating first-party/third-party data flow complexity that requires careful mapping.
REGULATORY EXPOSURE: This notice directly engages GDPR Arts. 6, 13, and 17 (lawful basis, transparency, right to erasure) enforced by EU data protection authorities including the Irish DPC (Twilio's …
REGULATORY EXPOSURE: This notice directly engages GDPR Arts. 6, 13, and 17 (lawful basis, transparency, right to erasure) enforced by EU data protection authorities including the Irish DPC (Twilio's EU establishment); UK GDPR enforced by the ICO; CCPA/CPRA §§1798.100–1798.199 enforced by the Califo…
Compliance intelligence locked
Regulatory exposure, material risk, and due diligence action items.
1 change analyzed since monitoring began.