Privacy Program
Privacy Statement
California Notice at Collection: See the California Privacy Rights section below for important information about California residents’ rights.
Notice to European, United Kingdom and Swiss Residents: See the European, UK, and Swiss Data Protection Rights section below for important information about your rights under applicable European Union, United Kingdom and Swiss data protection laws.
This Privacy Statement reflects Mixpanel, Inc.’s (collectively with its subsidiaries and affiliated companies, “Mixpanel,” “we,” “our,” and “us”) commitment to privacy and data protection. This Privacy Statement describes how we collect and process data about visitors to our websites (the “Site”), users of our web and mobile applications (“Applications”) including individuals who use Mixpanel’s data analytics platform and professional services (collectively the “Services”).
Application of our Privacy Statement
This Privacy Statement applies to Mixpanel’s collection of personal data, and it is not intended to apply to the collection or use of personal data by Mixpanel’s customers’ use of our Services. This Privacy Statement also does not apply to third-party websites, applications, or services reachable from our websites or mobile applications.
Mixpanel collects information under the direction of its customers in connection with its provision of the Services. Because a customer’s collection or use of personal data is specific to their use and implementation of the Services, please consult the relevant customer’s privacy statement, privacy notice, or the relevant written contract for the Services for more information. We do not have a direct relationship with our customers’ customers or end-users.
If you are a customer of one of Mixpanel’s customers and would like more information on their use of your data, please contact the customer that you interact with directly. If you have further questions about the application of Mixpanel’s Privacy Statement, please contact our Privacy Program at compliance@mixpanel.com.
In addition, Mixpanel provides product analytics solutions to businesses and entities in a commercial context and our Services are not intended for consumers.
Information we collect
We collect information, including personal data, when you use our Services. We collect this information when you fill out forms or engage with us directly. We also collect this information via cookies, pixel tags, and certain software designed to interact with your computer or mobile device. We use this information to communicate with you, to market, provide, maintain, protect and improve our Services, and to develop new or enhanced versions of the Services.
Information you share with us
If you choose to share your data with us, we will collect the following information:
-
If you decide to create a Mixpanel application account to use our Services, you must enter your first and last name, email address, and password, or otherwise enter similar information into forms or surveys on our Site or Applications.
-
If you manage your account information, you may enter and share information like postal address, phone number, fax number, company name, and credit card payment information.
-
If you tell us where you are (e.g., by allowing your mobile device to send us your location), we may store and use that information for internal analytics purposes.
When you are asked to provide personal data, you may decline. And you may use application or device controls to prevent certain types of automatic data collection. But if you choose not to provide or allow information that is necessary for specific products or features, those products or features may not be available or may not function correctly.
Information collected via technology
We automatically collect certain information via technology when you use the Services:
-
IP Address, Location, Website Activity, and Browser Information. When you visit our Site or use our Applications, some information is automatically collected. We collect information about the type and language of the operating system (“OS”) running on your device, your internet protocol address (“IP Address”), the browser type you used during your visit, and the website you visited just before ours. We also collect information about which web-elements or objects you interact with, metadata about your activity on the Site, changes in your user state, and the duration of your visit.
-
Mobile Application Services. We may also collect information from your mobile device including, but not limited to, the first time the Application is opened, the mobile carrier, the device identifier, the type of device that is being used, if you have downloaded our Applications, and your usage activity while using the Application. This information is generally used to help us deliver the most relevant information to you and improve our Services and analytics platform. Also, in the event our Applications crash on your mobile device, we will receive information about your mobile device model and OS version, which allows us to identify and fix bugs and otherwise improve the performance of our Applications. We send you a push notification from time-to-time to update you about any events or promotions that we may be running. If you no longer wish to receive these types of communications, you may turn them off at the device level. To ensure you receive proper notifications, we will need to collect certain information about the device you are using, such as the OS and user identification information. We use mobile analytics software to allow us to better understand the functionality of our Applications on your phone. This software may record information such as how often you use the Application, the events that occur within the Application, aggregated usage, performance data, and what app store you used to download the Application.
-
Cookies. Mixpanel collects information about your use of our Services via cookies. Information obtained from third-party sources When we collect information in connection with our business relationship with you, we may also purchase data about you from third parties.
We protect information obtained from third parties according to the practices described in this Privacy Statement, plus any additional restrictions imposed by the third party providing the data. These third-party sources include, for example:
-
Applications and services, such as social networks that make users’ information available to others;
-
Service providers that help us determine your device’s location based on its IP Address to customize certain products to your physical location;
-
Partners with which we offer co-branded services or engage in joint marketing activities; and
-
Publicly available sources, such as open government databases or other information in the public domain.
Information obtained from third-party sources
When we collect information in connection with our business relationship with you, we may also purchase data about you from third parties.
We protect information obtained from third parties according to the practices described in this Privacy Statement, plus any additional restrictions imposed by the third party providing the data. These third-party sources include, for example:
-
Applications and services, such as social networks that make users’ information available to others;
-
Service providers that help us determine your device’s location based on its IP Address to customize certain products to your physical location;
-
Partners with which we offer co-branded services or engage in joint marketing activities; and
-
Publicly available sources, such as open government databases or other information in the public domain.
Information created or generated
We infer new information from the information we collect, including using automated means to make inferences about your likely preferences or other personal information. For example, we may infer your city, state, and country location based on your IP Address.
Cookies and Tracking Technologies
Cookies are small text files we send to individuals’ computers when they visit our Sites. Cookies make our Sites work more efficiently and effectively and help us improve our Site, the relevance of our marketing activities, and your experience while using the Services.
Some of the cookies we use may provide us with information about you. The text in a cookie often consists of a string of numbers and letters that uniquely identifies your computer, but it can contain other information as well.
We use cookies to see which areas and features are popular and to count visits to our Site. Most web browsers are set to accept cookies by default. If you prefer, you can choose to set your browser to remove cookies or to reject cookies. Where appropriate, you may also be provided with further options to control the use of cookies when visiting the Site or using the Applications.
If you want to delete, remove or refuse cookies, this could affect certain features or functionality of our Site and could remove cookies used to opt-out of tracking for the Services.
Mixpanel uses cookies and similar technologies for:
-
Site Authentication, Identity and Access Management, Security, and to Conduct Its Business. When you sign into the Site using your username and password, we store an encrypted cookie on your device. This cookie allows you to move from page to page within the Site without having to sign in again on each page. You can also save your sign-in information, so you do not have to sign in each time you return to the Site.
-
Marketing. Mixpanel uses cookies and related technologies to measure your interest in Mixpanel’s products and services so it can market those products and services to you.
-
Interest-based advertising. Our third-party advertising partners may use cookies and similar technologies to collect information about your interaction (including the data described in the “Information collected via technology” section above) with the Services, our communications and other online services and with different browsers and devices, and use that information to serve online ads that they think will interest you. This is called interest-based advertising. We may also share information with these partners to facilitate interest-based advertising to those or similar users on other online platforms.
-
Performance. Mixpanel uses cookies for load balancing to help ensure that our websites remain up and running.
-
Social Media. Portions of our Services include social media cookies or widgets, including those that enable users who are logged in to the social media service to share content via that service.
-
Storing Information for Purchases on the Site. When you seek to purchase one of our Services, we may store the data in a cookie to remember the products and information you have added for purchase.
-
Site Experience. When you use or view certain content on the Services, Mixpanel will store a cookie to ensure that you do not see the same content again or to save your interest preferences.
-
Opt-Out Cookie. When you opt-out of interest-based advertising on the Site by using third party services such as the Network Advertising Initiative (or if located in the European Union, the European Interactive Digital Advertising Alliance, Mixpanel will store a cookie that will block other cookies from being stored.
Some of the cookies we commonly use are listed below. This list is not exhaustive, but it is intended to illustrate the main reasons we typically set cookies. If you visit one of our sites, the Site may set some or all of the following cookies:
-
IRB, Insights, or MP: We use these cookies for Site analytics and operational purposes.
-
SessionID: Helps to authenticate you when you sign into your account.
Certain third parties may also set cookies on your computer or device when you visit our Sites. In some cases, that is because we have hired a third party to provide services on our behalf, such as payment processing for credit card billing. In other cases, it is because our web pages may contain content or ads from third parties, such as videos, news content, or ads delivered by other ad networks. Because your browser connects to those third-parties’ web servers to retrieve that content, those third parties set and read their cookies on your device and may collect information about your online activities across websites or online services. To control cookies from those third parties, visit their sites. If you wish to opt-out of interest-based advertising, click here (or if located in the European Union, click here). Please note you will continue to receive generic and certain interest based ads. These opt out tools are provided by third parties and are not offered, controlled, operated or managed by Mixpanel. These third-party cookies include:
-
AdRoll
-
AdScale
-
AppNexus
-
BidSwitch
-
Bing
-
Bizible
-
Casale Media
-
DoubleClick
-
Facebook
-
G2
-
Google Analytics
-
Google Tag Manager
-
LinkedIn
-
Loom
-
Marketo
-
Microsoft
-
PubMatic
-
Reddit
-
Rubicon
-
Segment
-
Shopify
-
Stripe
-
Twitter
-
Youtube
-
ZoomInfo
We also use “pixel tags” (also referred to as clear gifs, web beacons, or web bugs). Pixel tags are tiny graphic images with a unique identifier, similar in function to cookies (as noted below), that are used to track the online movements of web users. We embed these on our web pages but do not store them locally on your device. Pixel tags also allow us to see if emails we send are opened. We may use this information to reduce or eliminate messages sent to a user.
We also store data locally on your device to enhance the user experience on our Site. For example, browser local storage allows us to save the state of your current page so that when you return at a later time or refresh the browser, the page will remain the same. We also use browser local storage to display “recently viewed items” or to mark your place in a tutorial, video, tooltip, or onboarding flow.
Our Use of Collected Information
We use the personal data we collect for the purposes described in the “Information We Collect” section above or as otherwise disclosed to you in this Privacy Statement.
Here is a list of how we use your information:
-
Facilitate the creation of and securing of your account on our network;
-
Identify you as a user in our Services;
-
Improve our Services and how we operate our business;
-
Understand and enhance your experience using our Services;
-
Provide and deliver products and services, including the Services, that you request, including securing, troubleshooting, and personalizing those Services;
-
Respond to your comments or questions, including assistance from our support team related to the Services;
-
Send you related information, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages;
-
Communicate with you about promotions, upcoming events and news about products and services offered by Mixpanel and our selected partners, and for other marketing purposes of Mixpanel;
-
Link or combine it with additional information we get from third parties, to help understand your needs and provide you with better service, as described under “Profiling” below; and
-
Protect, investigate, and deter against fraudulent, unauthorized, or illegal activity.
Creation of De-Identified Data. We may create de-identified data records sourced or extracted from data connected to or associated with personal data by excluding information (such as your name) that makes the data personally identifiable to you. We use this de-identified data to analyze request and usage patterns so that we may enhance the content of our Services and improve our Services navigation. We reserve the right to use de-identified data for any purpose and disclose de-identified data to third parties in our sole discretion where permitted by applicable law.
Profiling. When you interact with our Services by completing a form (such as a request for us to contact you, creation of an account, request for information on pricing, or downloading content), we will collect your personal data and analyze your information to build individual profiles. We use third-party tools to help us make the profile by providing information about your business (like, company size and industry, for example). These profiles will be used to help us predict future interest in our Services. We base our profiling on your activity on the Services, and we update your profile in real-time based on your use of the Services.
Sharing of Information
We share personal data with your consent or as necessary to complete your transactions or to provide the services you have requested or authorized. For example, when you provide payment information to make a purchase, we will share that information with banks and other entities as necessary for payment processing, fraud prevention, or other related financial services. We also share personal data as follows:
-
Affiliates and Subsidiaries. Our subsidiaries and affiliates share standard information systems and process information as needed to provide our products and operate our business.
-
Third-Party Service Providers. With third parties who work on our behalf for the purposes described in this Privacy Statement. These services may include providing cloud computing infrastructure, website crash reporting, analytics, email delivery, and providing customer support or account administration.
-
Professional Advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.
-
Authorities and Others.
-
Lawful Requests. To comply with laws or to respond to lawful requests and legal process, provided that Mixpanel will endeavor to notify you, where practical and permitted by applicable law or regulation, if Mixpanel has received a lawful request for your information.
-
Protection of Rights and Property. To protect the rights and property of Mixpanel, our agents, customers, and others, including to enforce our agreements and policies.
-
Emergency. In an emergency, including to protect the personal safety of any person.
-
-
Business Transferees. For a corporate transaction (or negotiation of a corporate transaction) involving a proposed or actual sale or transfer of all or a part of our business or assets (corporate transaction may include, for example, any merger, financing, acquisition, divestiture or dissolution transaction or proceeding). We may transfer your personal data in the event of an insolvency, bankruptcy, or receivership.
Personal Data Security
In compliance with applicable laws, Mixpanel maintains administrative, technical, and physical safeguards designed to help protect your personal data to prevent loss, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no transmission over the internet is 100% secure. We encourage you to protect your usernames and passwords to help prevent anyone from accessing or abusing your Services account(s), including not using the same passwords that you use with other accounts. If you have any questions about the security of your personal data, you can contact us at security@mixpanel.com.
Your Information Choices and Changes
In addition to the choices outlined in other parts of this Privacy Statement, you also have control over the following:
-
Access, Correction, and Deletion. If you wish to request access to or correction or deletion of personal data about you that we hold, you have some controls available to you from the “Account Settings” portion of the Services. You can also contact our Privacy Program at compliance@mixpanel.com. However, to the extent permitted by applicable law, we reserve the right to charge a fee or decline requests that are unreasonable or excessive, where providing the information would be prohibited by law or could adversely affect the privacy or other rights of another person, or where we are unable to authenticate you as the person to whom the information relates.
-
Email Communications. You may opt-out of receiving promotional or marketing emails from Mixpanel by following the instructions in those emails. If you opt-out, we may still send you non-promotional emails, such as emails about your Mixpanel projects or our ongoing business relationship.
-
Application(s). You can stop all collection of information by our Application(s) by uninstalling the Application(s). You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.
-
Do Not Track Signals. Some web browsers allow a “do not track” (“DNT”) setting to transmit signals instructing websites and other online services not to track information of an individual user. When a DNT setting is turned on, a signal is sent by your browser to websites, analytics companies, ad networks, plug in providers, and other web services that are encountered, to stop tracking your activity. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com. You can turn on DNT functionality by following the instructions provided here. If you choose to turn on DNT settings, Mixpanel will turn off all non-required cookies on Mixpanel’s Sites for you. Please note that turning on the DNT setting may affect the functionality of our Services.
-
Social Media Widgets. As noted above, our website may include social media features, such as the Facebook and LinkedIn button or interactive mini-programs that run on our website. These features may collect your IP Address, which page you are visiting on our Site and may set a cookie to enable the feature to function correctly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy statement or notice of the third party providing it. To control cookies from those third parties, visit their sites.
California Privacy Rights
This section applies only to California residents. It describes how we collect, use, disclose and share Personal Information of California residents in operating our business, and their rights with respect to that Personal Information. For purposes of this section, “Personal Information” has the meaning given in the California Consumer Privacy Act but does not include data exempted from the scope of the CCPA.
Your California privacy rights. As a California resident, you have the rights listed below. However, these rights are not absolute and, in certain cases, we may decline your request as permitted by law.
-
Information. You can request information about the categories of Personal Information that we have collected; the categories of sources from which we collected Personal Information; the business or commercial purpose for collecting, sharing and/or selling Personal Information; the categories of any Personal Information that we sold or disclosed for a business purpose; and the categories of any third parties with whom Personal Information was sold, shared or disclosed for a business purpose.
-
Access. You can request a copy of the Personal Information that we have collected about you.
-
Deletion. You can ask us to delete the Personal Information that we have collected from you.
-
Correction. You can ask us to correct inaccurate Personal Information that we have collected about you.
-
Opt-out. You can opt-out of the sharing of your Personal Information for cross-contextual behavioral advertising purposes and/or from the sale of your Personal Information for monetary or other valuable consideration.
-
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination. This means that we will not penalize you for exercising your rights by taking actions such as denying you services; increasing the price/rate of services; decreasing service quality; or suggesting that we may penalize you as described above for exercising your rights.
How to Exercise Your Rights
-
Right to information, access, correction, and deletion. You can request to exercise these rights by emailing us at compliance@mixpanel.com.
-
Right to opt-out of the “sale” or “sharing” of your Personal Information. You can request to opt-out of the “sharing” of your Personal Information by clicking the Your Privacy Choices link in the footer of this webpage. Your request to opt-out will apply only to the browser and the device from which you submit the request. We do not “sell” Personal Information as defined by the CCPA.
-
Opt-Out of Interest-Based Advertising via Global Privacy Control. Global Privacy Control (“GPC”) is a browser setting that notifies websites of a user’s privacy preferences, i.e., not to share or sell personal data without their consent, by sending a signal to each website a user visits. We respond to a GPC signal on the browser and our website automatically honors requests to opt-out of interest-based advertising sent via GPC signal. For more information, you can visit the Global Privacy Control website].
Identity verification. We need to verify your identity to process your requests to exercise your rights to know, access, deletion, and correction, and we reserve the right to confirm your California residency. To verify your identity, we may require you to log into your account if you have one, provide identifiers we can match against information we may have collected from you previously, confirm your request using the email address used to make the request, provide government identification, or provide a declaration under penalty of perjury, where permitted by law.
Authorized agents. Your authorized agent may make a request on your behalf upon our verification of the agent’s identity and our receipt of a copy of a valid power of attorney given to your authorized agent pursuant to applicable state law. If you have not provided your agent with such a power of attorney, we may ask you and/or your agent to take additional steps permitted by law to verify that your request is authorized, such as information required to verify your identity and that you have given the authorized agent permission to submit the request.
Information practices. The following describes our practices currently and during the past 12 months:
-
Sale and sharing of Personal Information. Our use of the interest-based advertising services described above may constitute “sharing” of your Personal Information with our advertising partners from which you have the right to opt-out under the CCPA. You can request to opt-out of this “sharing” as detailed above. The categories of Personal Information shared include Identifiers and Internet or Network Information as described in the CCPA. As stated above, we do not “sell” Personal Information as defined by the CCPA. Although our Services are not intended for children under 16 years of age, we are required to inform you that we do not have actual knowledge that we have sold or shared the Personal Information of children under 16.
-
Sensitive personal information. We do not use or disclose sensitive personal information (as that term is defined under CCPA) for purposes that California residents have a right to limit under the CCPA.
-
Deidentified data. We do not to attempt to reidentify deidentified information that we derive from Personal Information except that we may do so to test whether our deidentification processes comply with applicable law.
-
Retention. Our criteria for deciding how long to retain Personal Information is generally based on whether such period is sufficient to fulfill the purposes for which we collected it as described in this Privacy Statement, including complying with our legal obligations.
-
Sources and purposes. We collect all categories of Personal Information from the sources, use them for the business purposes described in the Our Use of Collected Information section above, and disclose them for the business purposes described in the Sharing of Information section above.
-
Collection and disclosure. The chart below describes the Personal Information we collect by reference to the categories of personal information specified in the CCPA (Cal. Civ. Code §1798.140), and the categories of third parties to whom we disclose Personal Information for business purposes. The terms in the chart refer to the categories of information and third parties described above in this Privacy Statement in more detail. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of Personal Information not described below. We may also disclose Personal Information to professional advisors, authorities and others, and business transferees as described above in the Sharing of Information section above.
European, UK, and Swiss Data Protection Rights
If the processing of personal data about you is subject to European Union, United Kingdom and Swiss data protection laws, you have certain rights with respect to that information:
-
You can request access to, and rectification or erasure of, personal data;
-
If any automated processing of personal data is done with your consent or under a contract with you, you have a right to transfer or receive a copy of the personal data in a usable and portable format;
-
If the processing of personal data is based on your consent, you can withdraw consent at any time for future processing;
-
You can object to, or obtain a restriction of, the processing of personal data under certain circumstances; and
-
For residents of France, you can send us specific instructions regarding the use of your data after your death.
To make such requests or contact our Privacy Program) at compliance@mixpanel.com. We process data as a processor on behalf of our customers. If you are a customer of our Customer, you should contact them. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns.
We may rely on different lawful bases for collecting and processing personal data about you, for example, with your consent and/or as necessary to provide the Services you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests.
Location of Personal Data
Mixpanel is committed to respecting the laws and regulations of data subjects, regardless of where their personal data is stored. The personal data we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, or service providers maintain facilities. Mixpanel primarily uses data centers in the United States and European Union. The storage location of personal data is chosen to operate efficiently and improve performance. We take steps designed to ensure that the personal data we collect under this Privacy Statement is processed in accordance with this Privacy Statement and applicable law wherever the data is located.
Location of Processing European Personal Data. We may transfer personal data from the European Union, United Kingdom and Switzerland to other countries. When we do so, we use a variety of legal mechanisms, including contractual guarantees and data privacy certifications, to help ensure your rights and protections. To learn more about the European Commission’s decisions on the adequacy of personal data protection, please visit https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
EU-US Data Privacy Framework, UK Extension to the EU-US Data Privacy Framework and Swiss-US Data Privacy Framework
Data Privacy Frameworks: Mixpanel uses several mechanisms to lawfully transfer personal data from the European Union, United Kingdom, and Switzerland to other countries. These mechanisms include the following frameworks (together, the “Data Privacy Frameworks”):
-
the EU-U.S. Data Privacy Framework
-
the UK Extension to the EU-U.S. Data Privacy Framework, and
-
the Swiss-U.S. Data Privacy Framework
Mixpanel participates in the U.S. Department of Commerce self-certification process and adheres to the Data Privacy Framework Principles (“Principles”) with regard to the processing of personal data received from the European Union, United Kingdom and Switzerland, in reliance on these Data Privacy Frameworks. If there is any conflict between the terms in this Privacy Statement and the Data Privacy Frameworks or the Principles, the Data Privacy Frameworks and Principles shall govern. To learn more about the EU-US Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework and Swiss-US Data Privacy Framework, and to view our certification, please visit the Data Privacy Framework website.
Mixpanel is responsible for the processing of the personal data it receives under each Data Privacy Framework, and subsequent transfers to any third party acting as an agent on its behalf. If third-party agents process personal data on our behalf in a manner inconsistent with the principles of any of the Data Privacy Frameworks, we remain liable unless we prove we are not responsible for the event giving rise to the damage. Mixpanel complies with the Principles for all onward transfers of personal data from the European Union, the United Kingdom, and Switzerland, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to each Data Privacy Framework, Mixpanel is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Mixpanel may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. You can learn more about these requests in Mixpanel’s Transparency Reports.
In compliance with the Principles, Mixpanel commits to resolve any complaints about your privacy and our collection, use, or disclosure of your personal data. If you have any inquiries or complaints regarding this Privacy Statement or our compliance with and of the Data Privacy Frameworks you should first contact Mixpanel at the contact information set forth below.
Should there be violations of the Principles that remain fully or partially unremedied, you may seek binding arbitration with Mixpanel to resolve such claims.
You may have the right to access or submit requests to review, correct, update, or delete your personal data. You can ask to review or correct personal data that we maintain about you by sending a written request to compliance@mixpanel.com. We may limit or deny access to personal data where providing such access is unreasonably burdensome, expensive under the circumstances, or as otherwise permitted by the Data Privacy Frameworks.
Mixpanel has committed to cooperating with the panels established by the European Union data protection authorities (“DPAs”), the United Kingdom Information Commissioner’s Office (“ICO”) and the Swiss Federal Data Protection and Information Commissioner (“FDPIC”), and and to complying with the advice given by such authorities with regard to personal data transferred from these jurisdictions in the context of providing application services to our customers.
Contractual Measures: In addition to participating in the above mentioned privacy frameworks, Mixpanel also uses contractual measures to ensure that the rights of European data subjects are respected. Mixpanel offers to sign EU Standard Contractual Clauses with its Customers located in the EU, UK and Switzerland to facilitate the transfer and subsequent processing of EU, UK and Swiss Personal Information. Where Mixpanel transfers EU, UK and Swiss Personal Information from our EU and UK entities to the US, we do so on the basis of the privacy framework or under an intra-group agreement that includes the Standard Contractual Clauses. Finally, to the extent that personal information is transferred by Mixpanel to external (sub-)processors, Mixpanel enters into Standard Contractual Clauses with such parties. Additionally, Mixpanel has in place technical and organizational safeguards to comply with its legal obligations to protect personal data.
Retention of Personal Data
We retain personal data for as long as necessary to provide the products and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. These needs can vary for different information types in the context of different Services. Accordingly, our actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the information, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.
Children
Our Services are not intended for use by anyone under 13 years of age. If you are a parent or guardian of a child from whom you believe we have collected Personal Information in a manner prohibited by law, please contact us. If we learn that we have collected Personal Information through our Services from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.
Changes to this Privacy Statement
Mixpanel may change this Privacy Statement from time to time to reflect changes in our offerings, how we collect, use, or disclose personal data, or applicable law. If we make any changes to this Privacy Statement, we will change the “Last Updated” date above. If we make any material changes, we will provide notice or obtain consent regarding such modifications as may be required by law.
How to Contact Us
If you have a privacy concern, complaint, or a question for Mixpanel please contact our Privacy Program at compliance@mixpanel.com. Mixpanel’s EU Data Protection Representative is MIXPANEL S.L. and may be reached by email at compliance@mixpanel.com or by post at the following address: Avenida Diagonal, 442 - P. 3 PTA. 1 08037, Barcelona, Spain.
Mixpanel’s UK Data Protection Representative is MIXPANEL UK LIMITED. and may be reached by email at compliance@mixpanel.com or by post at the following address: 1-2 Berners St, London W1T 3LA, United Kingdom.