Vercel AI · Vercel AI SDK Privacy · View original document ↗

CCPA/CPRA Rights for California Residents

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Vercel AI Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

California residents have specific legal rights under CCPA/CPRA to know what data Vercel holds on them, delete it, correct it, and opt out of having it sold or shared with advertising partners, without being penalized for exercising these rights.

This analysis describes what Vercel AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The opt-out of sale or sharing right is particularly significant because Vercel acknowledges sharing user data with advertising partners, and California residents can specifically prevent this by submitting a request.

Consumer impact (what this means for users)

California residents can stop Vercel from sharing their personal data with advertising partners by submitting an opt-out request to privacy@vercel.com, and Vercel must not discriminate against them for doing so.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Email privacy@vercel.com specifying that you are a California resident and wish to exercise one or more CCPA/CPRA rights, such as opting out of sale or sharing, requesting deletion, or limiting use of sensitive personal information. Include your account email address.

Cross-platform context

See how other platforms handle CCPA/CPRA Rights for California Residents and similar clauses.

Compare across platforms →

Monitoring

Vercel AI has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you are a California resident, you have the right to know what personal information we collect about you and how it is used and shared; the right to delete personal information we collect from you; the right to opt-out of the sale or sharing of your personal information; the right to correct inaccurate personal information; the right to limit the use and disclosure of sensitive personal information; and the right to non-discrimination for exercising your CCPA rights.

— Excerpt from Vercel AI's Vercel AI SDK Privacy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision implements California Consumer Privacy Act rights as amended by the California Privacy Rights Act, enforced by the California Privacy Protection Agency and the California Attorney General. Key operative rights include the right to opt out of sale or sharing (CPRA Section 1798.120), the right to limit use of sensitive personal information (CPRA Section 1798.121), and the right to non-discrimination (CCPA Section 1798.125). Vercel's acknowledgment of sharing data with advertising partners may constitute selling or sharing under CPRA's broad definitions. (2) GOVERNANCE EXPOSURE: Medium. Vercel must maintain a functional opt-out mechanism, honor opt-out requests within 15 business days under CPRA, and ensure that opted-out users' data is not subsequently used for advertising purposes by third parties. Failure to implement these mechanisms correctly creates enforcement exposure with the CPPA. (3) JURISDICTION FLAGS: These rights apply exclusively to California residents but may influence the privacy expectations of users in other US states with similar legislation, including Colorado, Virginia, Connecticut, and others with comprehensive consumer privacy laws. Organizations headquartered in California that use Vercel may have heightened obligations to disclose this data sharing relationship in their own CCPA privacy notices. (4) CONTRACT AND VENDOR IMPLICATIONS: Businesses that are themselves CCPA-covered entities and use Vercel as a service provider must ensure their contracts with Vercel prohibit Vercel from using shared personal data for purposes other than those specified in the service provider agreement. If Vercel is categorized as a third party rather than a service provider for advertising data flows, the business sharing data with Vercel for advertising purposes may itself be engaged in a sale under CCPA. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that Vercel's opt-out mechanism is accessible and functional, including testing the opt-out request process. Data mapping should document which California resident data flows to Vercel's advertising partners. Organizations subject to CCPA should assess whether their relationship with Vercel for advertising-related data flows requires disclosure in their own CCPA notices.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • State AG
    The California Attorney General and the California Privacy Protection Agency enforce CCPA/CPRA rights for California residents.
    File a complaint →

Provision details

Document information
Document
Vercel AI SDK Privacy
Entity
Vercel AI
Document last updated
May 12, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 10, 2026
Record ID
CA-P-008979
Document ID
CA-D-00548
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
b1d2dff022f60b8295c54f46539cf51b85afa976a386ba9d7131838ae80fc81c
Analysis generated
May 8, 2026 01:04 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Vercel AI
Document: Vercel AI SDK Privacy
Record ID: CA-P-008979
Captured: 2026-05-08 01:04:59 UTC
SHA-256: b1d2dff022f60b82…
URL: https://conductatlas.com/platform/vercel-ai/vercel-ai-sdk-privacy/ccpacpra-rights-for-california-residents/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Vercel AI's CCPA/CPRA Rights for California Residents clause do?

The opt-out of sale or sharing right is particularly significant because Vercel acknowledges sharing user data with advertising partners, and California residents can specifically prevent this by submitting a request.

How does this clause affect you?

California residents can stop Vercel from sharing their personal data with advertising partners by submitting an opt-out request to privacy@vercel.com, and Vercel must not discriminate against them for doing so.

Is ConductAtlas affiliated with Vercel AI?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Vercel AI.