Vercel discloses that it has shared identifiers, commercial information, and internet activity data with third-party advertising networks in the preceding 12 months in a manner that may qualify as 'selling' or 'sharing' personal information under applicable US state privacy laws.
This analysis describes what Vercel AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision constitutes a disclosure of advertising-related data sharing practices that trigger opt-out rights under CCPA, CPRA, and equivalent state laws; the document states that Vercel honors GPC signals and provides a linked opt-out form, which are operationally relevant compliance mechanisms for California and other state law compliance.
The updated policy establishes a new mechanism for resolving privacy disputes related to Data Privacy Framework transfers. Users in the EU, UK, and EEA who have unresolved privacy complaints can now submit them to VeraSafe for independent review, which will be conducted free of charge. Additionally, the policy introduces an explicit Right to Restriction, permitting users to request that Vercel limit processing of their personal information or restrict further disclosures in certain instances, particularly for sensitive information. You can file a complaint with VeraSafe by submitting required information at https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/.
View change record →Under these terms, identifiers such as name, email, and IP address, along with commercial information and internet activity data, may have been shared with advertising networks in a manner that US state laws may classify as a sale or sharing of personal information; users can opt out using the provided form or by enabling a Global Privacy Control signal in their browser.
Cross-platform context
See how other platforms handle Advertising Data Sharing as Sale or Sharing Under US State Laws and similar clauses.
Compare across platforms →"To the extent that certain US Data Privacy Laws consider some sharing of personal information for Advertising purposes to be "selling" or "sharing" of personal information, Vercel may have shared the following categories of personal information with third-party advertising networks in the preceding 12 months: Identifiers; Commercial information; and Internet or similar network activity.Excerpt from Vercel AI's SDK Privacy
(1) REGULATORY LANDSCAPE: This provision directly engages CCPA and CPRA, which establish opt-out rights for the sale and sharing of personal information; the California Privacy Protection Agency (CPPA) and California Attorney General enforce these requirements.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision constitutes a disclosure of advertising-related data sharing practices that trigger opt-out rights under CCPA, CPRA, and equivalent state laws; the document states that Vercel honors GPC signals and provides a linked opt-out form, which are operationally relevant compliance mechanisms for California and other state law compliance.
Under these terms, identifiers such as name, email, and IP address, along with commercial information and internet activity data, may have been shared with advertising networks in a manner that US state laws may classify as a sale or sharing of personal information; users can opt out using the provided form or by enabling a Global Privacy Control signal in …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Vercel AI.