Whatnot · Whatnot Privacy Policy · View original document ↗

California Consumer Privacy Rights

Low severity High confidence Explicitdocumentlanguage Uncommon · 17 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Whatnot recorded 10 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Whatnot Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

California residents have a set of legal rights over their personal data held by Whatnot, including the right to access, delete, correct, and opt out of data sharing, and can exercise these rights by contacting Whatnot directly.

This analysis describes what Whatnot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

These rights give California users meaningful control over how Whatnot uses their personal data, including the ability to stop data sharing for advertising purposes and to have their data deleted.

Recent Activity

This document changed recently

High Jun 24, 2026

The updated Influencer Engagement Agreement now requires all disputes between influencers and Whatnot to be resolved through binding arbitration under the Terms of Service Section 21, rather than through California state or federal courts. This replaces the previous language permitting influencers to pursue legal claims in Los Angeles courts and waives jury trial rights. The agreement also removes language that explicitly limited dispute resolution to claims arising solely from the Influencer Agreement, extending arbitration to disputes relating to Whatnot Platform use and the influencer-platform relationship.

View change record →
High Jun 16, 2026

Under the updated agreement, Australian sellers can no longer resolve disputes through court proceedings in Los Angeles. Instead, all disputes related to the Whatnot platform or the seller relationship must be resolved through mandatory individual arbitration under Whatnot's main Terms of Service. The updated terms eliminate the jury trial waiver provision and replace court access with binding arbitration, with limited exceptions only as expressly permitted in the main Terms of Service.

View change record →
High May 30, 2026

The updated terms require all disputes arising from the Strategic Seller Agreement or a seller's relationship with Whatnot to be resolved through arbitration as defined in the main Terms of Service, rather than through litigation in California courts. Previously, sellers could bring claims in federal or state courts located in Los Angeles; under the revised language, this option is eliminated except where the Terms of Service arbitration section expressly permits court proceedings. The change applies to the relationship between individual sellers and Whatnot, affecting how contract disputes, payment disagreements, or other claims are processed and adjudicated.

View change record →

Clause Stability Mostly Stable

1
Change
1
Month Monitored
May 11, 2026
First Seen
May 20, 2026
Last Seen
This clause type exists across 3350 other provisions on other platforms.
This clause has changed once in 1 month of monitoring.

Change history

removed May 30, 2026

This California-specific rights provision was replaced by a more generalized multi-jurisdiction rights statement, potentially reducing California-specific privacy protections visibility.

View full change record →

Consumer impact (what this means for users)

California residents can submit requests to access, delete, or correct their personal data, or to limit how their sensitive personal information is used, by contacting privacy@whatnot.com or through the Whatnot website.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Email privacy@whatnot.com to submit a California Consumer Privacy Act request. Specify the right you are exercising (access, deletion, correction, or opt-out of sharing) and provide your account details for identity verification.

How other platforms handle this

Revolut Medium

We may also collect your personal data from other people or companies.

Target Medium

If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, sell, or share. Correct inaccurate personal information. Delete your personal information. Opt out of the sale or sharing of your personal information. Limit the use and disclosure ...

Garmin Medium

If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...

See all platforms with this clause type →

Monitoring

Whatnot has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
California residents have the right to know what personal information is collected, used, shared or sold, not to sell or share personal information, to access personal information, to request deletion of personal information, to request correction of inaccurate personal information, to limit the use of sensitive personal information, and to non-discrimination for exercising these rights. To exercise these rights, please contact us by submitting a request at privacy@whatnot.com or through our website.

— Excerpt from Whatnot's Whatnot Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision reflects CCPA as amended by CPRA, enforced by the California Privacy Protection Agency and the California AG. CPRA expanded consumer rights to include correction and limitation of sensitive personal information, and introduced enhanced protections for sharing data with advertising partners. Non-discrimination provisions are also mandated by CCPA. GOVERNANCE EXPOSURE: Medium. The breadth of rights asserted is consistent with CPRA requirements. The primary compliance risk lies in the operationalization of these rights, including response timelines (45 days under CCPA, with one extension), identity verification procedures, and the technical capability to fulfill correction and limitation requests. JURISDICTION FLAGS: California-specific. However, several other US states including Virginia, Colorado, Connecticut, Texas, and others have enacted similar comprehensive privacy laws that may impose analogous rights obligations for users in those states, and the policy should be assessed for adequacy across those jurisdictions. CONTRACT AND VENDOR IMPLICATIONS: Vendor contracts should include provisions requiring service providers to assist with consumer rights requests, including deletion and access, within required timeframes. Failure to flow down these obligations may impair Whatnot's ability to fulfill requests. COMPLIANCE CONSIDERATIONS: Compliance teams should audit the consumer rights request process end-to-end, including identity verification steps, response timing, and the technical capability to correct or restrict processing of specific data categories. The process for honoring 'limit sensitive personal information' requests deserves particular attention given CPRA's expanded sensitive data category definitions.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • State AG
    The California AG and the California Privacy Protection Agency enforce CCPA/CPRA consumer rights obligations, including access, deletion, correction, and opt-out rights
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Whatnot Privacy Policy
Entity
Whatnot
Document last updated
May 5, 2026
Tracking information
First tracked
May 11, 2026
Last verified
May 11, 2026
Record ID
CA-P-010492
Document ID
CA-D-00732
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
b004999cb5790fcea852f2c7a74f97dc701c834bd53dc7719ae5d0ff36889183
Analysis generated
May 11, 2026 06:35 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Whatnot
Document: Whatnot Privacy Policy
Record ID: CA-P-010492
Captured: 2026-05-11 06:35:36 UTC
SHA-256: b004999cb5790fce…
URL: https://conductatlas.com/platform/whatnot/whatnot-privacy-policy/california-consumer-privacy-rights/
Accessed: June 28, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Low
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Whatnot's California Consumer Privacy Rights clause do?

These rights give California users meaningful control over how Whatnot uses their personal data, including the ability to stop data sharing for advertising purposes and to have their data deleted.

How does this clause affect you?

California residents can submit requests to access, delete, or correct their personal data, or to limit how their sensitive personal information is used, by contacting privacy@whatnot.com or through the Whatnot website.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 17 platforms. See the full comparison.

Is ConductAtlas affiliated with Whatnot?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Whatnot.