Upwork and its advertising partners use cookies and similar trackers to monitor how you use the platform and across the web, including for targeted advertising.
This analysis describes what Upwork's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Behavioral tracking technologies can build detailed profiles of your online activity, and the data collected may be shared with advertising partners. Users in the EU have a legal right to consent to or reject non-essential cookies.
Interpretive note: The exact verbatim text could not be confirmed from the truncated document. The actual configuration and compliance of Upwork's consent management platform cannot be assessed from the policy text alone.
The updated terms establish a new beta feature allowing invited users to connect third-party AI agents to their Upwork accounts. Agents can read information and draft communications (proposals, job posts, messages) without per-action confirmation, but cannot autonomously move money or finalize contracts; those actions require the user to authenticate and confirm on Upwork directly. Users are responsible for all agent actions and must ensure agent-generated content carries mandatory disclosure labels; submitting proposals through agents consumes Connects and incurs fees regardless of whether the user approves the draft-confirm action. You can revoke agent access by visiting the App Authorization page, and these beta terms apply only until you accept replacement terms.
View change record →Upwork's privacy policy previously disclosed that it complied with the U.S. Data Privacy Framework and certified adherence to its Principles regarding how it processes personal data from EU, UK, and Swiss residents. The updated policy removes nearly all of this language, including the explicit commitment to Data Privacy Framework Principles and the statement that those Principles would govern in case of conflict with other policy terms. Users in the EU, UK, and Switzerland no longer have a clear, policy-level statement of the legal framework protecting their data when transferred to the U.S., which may reduce transparency about data protection safeguards. You may contact Upwork to request copies of the data transfer mechanism documents it uses.
View change record →The updated policy now explicitly states that Upwork complies with the U.S. Data Privacy Framework and has certified to the U.S. Department of Commerce that it adheres to DPF principles when processing personal data from EU, UK, and Swiss residents. The policy establishes that if any conflict exists between Upwork's privacy policy and DPF principles, the DPF principles will govern. This creates an explicit legal hierarchy for data protection standards applicable to residents of those jurisdictions. Users from affected regions can visit https://www.dataprivacyframework.gov/ to view Upwork's certification and learn more about the DPF program.
View change record →Upwork uses cookies and third-party tracking tools that monitor your browsing behavior both on and potentially off the Upwork platform for advertising and analytics purposes. EU users must be given a genuine choice to accept or reject these cookies, and you can update your preferences through Upwork's cookie settings.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
to object to profiling activities based on our own legitimate interests
"We and our third-party partners may use cookies, web beacons, and other tracking technologies on our platform to collect information about your browsing activities, device, and usage of our services for purposes including analytics, advertising, and personalization.Excerpt from Upwork's Privacy Policy
REGULATORY LANDSCAPE: The ePrivacy Directive (EU Cookie Directive) and GDPR together require that non-essential cookies be set only with the user's prior, freely given, specific, and informed consent.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Behavioral tracking technologies can build detailed profiles of your online activity, and the data collected may be shared with advertising partners. Users in the EU have a legal right to consent to or reject non-essential cookies.
Upwork uses cookies and third-party tracking tools that monitor your browsing behavior both on and potentially off the Upwork platform for advertising and analytics purposes. EU users must be given a genuine choice to accept or reject these cookies, and you can update your preferences through Upwork's cookie settings.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Upwork.