Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy discloses that users in certain jurisdictions have rights to access, delete, correct, and receive a portable copy of their personal information, with the specific rights available depending on the user's location.
This analysis describes what Whatnot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the framework under which users may exercise regional statutory privacy rights; the practical availability of these rights depends on Whatnot's response procedures, the exceptions asserted in the policy, and the verification requirements imposed on requesters.
The updated Influencer Engagement Agreement now requires all disputes between influencers and Whatnot to be resolved through binding arbitration under the Terms of Service Section 21, rather than through California state or federal courts. This replaces the previous language permitting influencers to pursue legal claims in Los Angeles courts and waives jury trial rights. The agreement also removes language that explicitly limited dispute resolution to claims arising solely from the Influencer Agreement, extending arbitration to disputes relating to Whatnot Platform use and the influencer-platform relationship.
View change record →The new Australian Creator Program Terms establish binding legal requirements for creators submitting video content and promotional codes. Creators grant Whatnot a non-exclusive, worldwide, irrevocable license to use submitted videos across platforms (organic and paid social media, television, in-app, websites, and more) for one year from submission. The terms require creators to comply with Australian Consumer Law, AANA ethical standards, and AiMCO guidelines, with explicit disclosure requirements when promoting Whatnot or affiliated products. Rewards for approved Shopping Hauls submissions are issued within 30 business days of receiving both ad codes and raw video. You can review the specific disclosure and content standards on the Program Page before submitting content.
View change record →Under the updated agreement, Australian sellers can no longer resolve disputes through court proceedings in Los Angeles. Instead, all disputes related to the Whatnot platform or the seller relationship must be resolved through mandatory individual arbitration under Whatnot's main Terms of Service. The updated terms eliminate the jury trial waiver provision and replace court access with binding arbitration, with limited exceptions only as expressly permitted in the main Terms of Service.
View change record →Removed explicit mention of 'restrict or object to processing' and 'opt out of sale/sharing'; reframed as 'right to know' rather than 'access'; added 'data portability' language.
View full change record →Under this provision, users in California, the EU, UK, Canada, and Australia may submit requests to access, delete, correct, or receive a portable copy of their personal information, subject to the verification procedures and exceptions described in the policy. The agreement states that Whatnot will respond to verified requests within the timeframes required by applicable law.
Cross-platform context
See how other platforms handle Regional Privacy Rights (Access, Deletion, Correction, Portability) and similar clauses.
Compare across platforms →Monitoring
Whatnot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Depending on where you live, you may have certain rights with respect to your personal information, such as a right to know about personal information we collect, use, and disclose about you, a right to request that we delete your personal information, a right to correct inaccurate personal information, and a right to data portability.Excerpt from Whatnot's Legal Terms
1. REGULATORY LANDSCAPE: This provision directly implicates CCPA/CPRA (California right to know, delete, correct, portability, and non-discrimination), GDPR Articles 15-20 (access, erasure, rectification, portability, restriction, and objection rights), UK GDPR equivalents, PIPEDA access and correction rights, and Australian Privacy Principle 12. Enforcement authorities include the CPPA and California AG, EU member state supervisory authorities, UK ICO, OPC, and OAIC. 2. GOVERNANCE EXPOSURE: Medium. The policy's rights framework must be operationally implemented with verified request intake mechanisms, response workflows meeting statutory timelines (45 days under CCPA extendable to 90 days; 30 days under GDPR extendable to 90 days), and documented exception determinations. Failure to respond to verified requests within statutory timelines is an active area of CPPA and EU supervisory authority enforcement. 3. JURISDICTION FLAGS: California (CPRA right to know, delete, correct, portability, opt-out of sale and sharing, and sensitive data limit), EU and UK (GDPR full suite of data subject rights), Quebec (Law 25 access and portability rights), and Australia (APP 12 access obligations). Verification requirements must not be so burdensome as to impede the exercise of rights under applicable law. 4. CONTRACT AND VENDOR IMPLICATIONS: Data processors (advertising partners, analytics vendors, payment processors) must be contractually required to assist with data subject rights requests under GDPR Article 28. Vendor agreements should specify timelines and mechanisms for processors to respond to deletion and access requests affecting data held by or shared with those processors. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should audit the data subject rights intake process for each jurisdiction to confirm statutory response timelines are met, verification requirements are proportionate, and exceptions are applied consistently and documented. Data mapping should be sufficiently current to enable complete responses to access and portability requests. Where processors hold personal data, deletion workflows must cascade to those processors.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes the framework under which users may exercise regional statutory privacy rights; the practical availability of these rights depends on Whatnot's response procedures, the exceptions asserted in the policy, and the verification requirements imposed on requesters.
Under this provision, users in California, the EU, UK, Canada, and Australia may submit requests to access, delete, correct, or receive a portable copy of their personal information, subject to the verification procedures and exceptions described in the policy. The agreement states that Whatnot will respond to verified requests within the timeframes required by applicable law.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Whatnot.