The policy states that Whatnot collects audio and video content from seller and user livestreams, along with session metadata including stream duration, viewer counts, and interaction data.
This analysis describes what Whatnot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Collection of audiovisual content from livestreams constitutes collection of biometric-adjacent data in some jurisdictions and may engage state biometric privacy statutes; session and interaction metadata from livestreams can be used for behavioral profiling and platform personalization as described elsewhere in the policy.
Interpretive note: Whether collection of livestream audio and video triggers Illinois BIPA or other biometric privacy statutes depends on whether Whatnot extracts biometric identifiers from the content, which the policy does not explicitly address.
The updated terms require all disputes arising from the Strategic Seller Agreement or a seller's relationship with Whatnot to be resolved through arbitration as defined in the main Terms of Service, rather than through litigation in California courts. Previously, sellers could bring claims in federal or state courts located in Los Angeles; under the revised language, this option is eliminated except where the Terms of Service arbitration section expressly permits court proceedings. The change applies to the relationship between individual sellers and Whatnot, affecting how contract disputes, payment disagreements, or other claims are processed and adjudicated.
View change record →The updated terms establish a new Creator Program for UK users that allows them to submit content (videos, shopping hauls, seller spotlights) and potentially receive program benefits including cash payments, shopping credit, or promotional support. The terms grant Whatnot a one-year non-exclusive license to use submitted content across all marketing channels worldwide for promotion, advertising, and derivative works without additional compensation beyond the stated program benefit. Creators must be at least 18 years old, maintain a valid Whatnot account, and complete identity verification and tax documentation before receiving any payment. The terms state explicitly that submission does not guarantee content will be selected, used, featured, or rewarded, and Whatnot retains discretion to reject, remove, or stop using content at any time.
View change record →This new provision explicitly discloses collection of audiovisual content and associated metadata from livestreams, which is a significant privacy-relevant data practice specific to Whatnot's core service.
View full change record →Under this provision, Whatnot collects and retains audiovisual content broadcast by users during livestream sessions, along with associated session metadata, which the policy authorizes for use in platform improvement and personalized features.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.
Monitoring
Whatnot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"When you use our live streaming features, we collect the audio and video content you broadcast, as well as information about your live stream sessions, including duration, viewer counts, and interaction data.— Excerpt from Whatnot's Whatnot Privacy Policy
1) REGULATORY LANDSCAPE: Collection of audio and video from livestreams may engage Illinois BIPA if facial geometry or voiceprint data is derived from the content, though the policy does not explicitly state that biometric identifiers are extracted. GDPR and UK GDPR treat audiovisual data as personal data requiring a lawful basis for processing; where content captures third parties (e.g., viewers visible in backgrounds), additional considerations apply. The FTC Act applies to representations about how livestream content is used and retained. 2) GOVERNANCE EXPOSURE: Medium. The primary exposure relates to the scope of downstream use of audiovisual content for platform improvement, AI model training, or personalization; the policy should be reviewed to confirm whether these uses are explicitly disclosed or merely permitted by broad language. 3) JURISDICTION FLAGS: Illinois BIPA creates heightened exposure if biometric data is derived from livestream audio or video; legal teams should confirm whether Whatnot's technical systems extract facial or voice biometrics from livestream content. California's CPRA treats certain audiovisual content as sensitive personal information depending on context. 4) CONTRACT AND VENDOR IMPLICATIONS: If livestream content is processed by third-party AI or moderation vendors, data processing agreements must address the scope of permitted use, retention periods, and prohibition on unauthorized secondary use of audiovisual content. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should confirm that users broadcasting livestreams are adequately informed about audiovisual data collection and retention periods; review whether any AI or machine learning processing of livestream content requires additional disclosure or consent under applicable law.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Collection of audiovisual content from livestreams constitutes collection of biometric-adjacent data in some jurisdictions and may engage state biometric privacy statutes; session and interaction metadata from livestreams can be used for behavioral profiling and platform personalization as described elsewhere in the policy.
Under this provision, Whatnot collects and retains audiovisual content broadcast by users during livestream sessions, along with associated session metadata, which the policy authorizes for use in platform improvement and personalized features.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Whatnot.