Whatnot · Whatnot Privacy Policy · View original document ↗

Sensitive Personal Information Collection and Use

High severity Rare · 3 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Whatnot recorded 6 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Whatnot Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Whatnot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the operational framework for handling sensitive personal information categories that receive heightened regulatory treatment under data protection laws. The clause conditions collection and use practices on legal requirements and contemplates consent or limitation mechanisms where mandated by jurisdiction.

Recent Activity

This document changed recently

High Jun 24, 2026

The updated Influencer Engagement Agreement now requires all disputes between influencers and Whatnot to be resolved through binding arbitration under the Terms of Service Section 21, rather than through California state or federal courts. This replaces the previous language permitting influencers to pursue legal claims in Los Angeles courts and waives jury trial rights. The agreement also removes language that explicitly limited dispute resolution to claims arising solely from the Influencer Agreement, extending arbitration to disputes relating to Whatnot Platform use and the influencer-platform relationship.

View change record →
High Jun 16, 2026

Under the updated agreement, Australian sellers can no longer resolve disputes through court proceedings in Los Angeles. Instead, all disputes related to the Whatnot platform or the seller relationship must be resolved through mandatory individual arbitration under Whatnot's main Terms of Service. The updated terms eliminate the jury trial waiver provision and replace court access with binding arbitration, with limited exceptions only as expressly permitted in the main Terms of Service.

View change record →
High May 30, 2026

The updated terms require all disputes arising from the Strategic Seller Agreement or a seller's relationship with Whatnot to be resolved through arbitration as defined in the main Terms of Service, rather than through litigation in California courts. Previously, sellers could bring claims in federal or state courts located in Los Angeles; under the revised language, this option is eliminated except where the Terms of Service arbitration section expressly permits court proceedings. The change applies to the relationship between individual sellers and Whatnot, affecting how contract disputes, payment disagreements, or other claims are processed and adjudicated.

View change record →

Consumer impact (what this means for users)

Users should understand that Whatnot collects payment card information, identity verification data, and geolocation information as part of service operations. The terms specify that consent requests or limitation options will be provided where required by applicable law, meaning the scope of available user controls depends on the legal requirements of the user's jurisdiction.

Cross-platform context

See how other platforms handle Sensitive Personal Information Collection and Use and similar clauses.

Compare across platforms →

Monitoring

Whatnot has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may collect certain information that may be considered sensitive personal information under applicable law, including payment card information, government-issued identification numbers (where required for identity verification), and precise geolocation data. Where required by applicable law, we will obtain your consent before collecting such information or will provide you with the right to limit the use and disclosure of such sensitive personal information.

— Excerpt from Whatnot's Whatnot Privacy Policy

Provision details

Document information
Document
Whatnot Privacy Policy
Entity
Whatnot
Document last updated
May 5, 2026
Tracking information
First tracked
May 20, 2026
Last verified
May 20, 2026
Record ID
CA-P-007067
Document ID
CA-D-00732
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
edfabe18c30c0c9dfe08867c3872885e0d963241db8222ec0afffc7bd4e70e0c
Analysis generated
May 20, 2026 21:58 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Whatnot
Document: Whatnot Privacy Policy
Record ID: CA-P-007067
Captured: 2026-05-20 21:58:33 UTC
SHA-256: edfabe18c30c0c9d…
URL: https://conductatlas.com/platform/whatnot/whatnot-privacy-policy/sensitive-personal-information-collection-and-use/
Accessed: July 4, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Whatnot's Sensitive Personal Information Collection and Use clause do?

This provision establishes the operational framework for handling sensitive personal information categories that receive heightened regulatory treatment under data protection laws. The clause conditions collection and use practices on legal requirements and contemplates consent or limitation mechanisms where mandated by jurisdiction.

How does this clause affect you?

Users should understand that Whatnot collects payment card information, identity verification data, and geolocation information as part of service operations. The terms specify that consent requests or limitation options will be provided where required by applicable law, meaning the scope of available user controls depends on the legal requirements of the user's jurisdiction.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 3 platforms. See the full comparison.

Is ConductAtlas affiliated with Whatnot?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Whatnot.