Klaviyo’s privacy notice now covers iOS and Android apps and discloses mobile SDK data collection, providers matching website IP addresses and browsing activity to business contacts, and customer-meeting recordings used to review business performance. It also adds providing Composer responses and content as a use of personal information, expanding disclosed collection and processing practices.
Machine-written from the diff below (Sol; type: terms change). Check the diff before relying on it.
What changed
Struck in red is what Klaviyo removed; blue is what they added. Muted text is unchanged context.
BeforeAfter
Changed#1
Before: …Rights 7. Security 8. Children 9. Third Party Websites and Services 10. Changes to Privacy Notice 11. Contact us…
After: …Rights 7. Security 8. Children 9. Third Party Websites, Services, and AI Providers 10. Changes to Privacy Notice 11. Contact us…
Changed#2
Before: …(United States) Additional Disclosures for the European Economic Area, United Kingdom, and Switzerland Additional Disclosures for Singapore Residents 13.…
After: …(United States) Additional Disclosures for the European Economic Area (EEA), United Kingdom (UK), and Switzerland Additional Disclosures for Singapore Residents 13.…
Added#3
Before: …we offer as a controller, our website https://www.klaviyo.com/ nothing here or any other Klaviyo Group product or service…
After: …we offer as a controller, our website https://www.klaviyo.com/ , our mobile applications (iOS and Android), or any other Klaviyo Group product or service…
Changed#4
Before: …to you. Specifically, we may collect the following information: Log Data : Including your internet protocol (IP)…
After: …to you. Specifically, we may collect the following information (with prior consent, where required): Log Data : Including your internet protocol (IP)…
Added#5
Before: …history (flows created, campaigns scheduled, emails opened, total nothing here as well as the pages, links, objects, products…
After: …history (flows created, campaigns scheduled, emails opened, total log-ins), interactions with our emails, as well as the pages, links, objects, products…
Added#6
Before: …referring web page/source through which you accessed the nothing here and statistics associated with the interaction between device…
After: …referring web page/source through which you accessed the Services, and statistics associated with the interaction between device…
Added#7
Before: …the interaction between device or browser and the nothing here Location Data : Including your general geographic location…
After: …the interaction between device or browser and the Services. Location Data : Including your general geographic location…
Added#8
Before: …health status, event attendance, status as lead/account, integrations. nothing here For more information about these practices and your…
After: …health status, event attendance, status as lead/account, integrations. Mobile App Data: If you use our mobile app, we collect the Log Data, Analytics Data and Platform Data described above through software development kits (SDKs) in the app, which are covered by our Cookie Notice . This includes crash and error reports, usage events (such as sessions, screens viewed and buttons tapped), your user ID and company ID, a random install or session identifier, your device model, operating system, app version and language and region settings, and your approximate location based on your IP address. Crash reports can include the web addresses the app visited before an error, with query strings removed. These tools do not receive the text of your messages, prompts, file names, screenshots or screen recordings. For how Composer uses AI providers, see Section 9. For more information about these practices and your…
Added#9
Before: …some or all of this information with us. nothing here : We may receive personal information from data…
After: …some or all of this information with us. Data Providers : We may receive personal information from data…
Added#10
Before: …Providers : We may receive personal information from nothing here 2. How we Use your Personal Information We…
After: …Providers : We may receive personal information from data providers that help us find and connect with prospective customers, such as your name, business email address, job title and company. This includes providers that match your IP address and browsing activity on our websites to a company or business contact. 2. How we Use your Personal Information We…
Added#11
Before: …for account and contract management (including customer support); nothing here Communicate with individuals, including via email, text message,…
After: …for account and contract management (including customer support); Provide Composer, and generate the responses and content you request; Communicate with individuals, including via email, text message,…
Changed#12
Before: …and/or telephone and video calls; Review our business performance; Market and sell our Services to individuals, including…
After: …and/or telephone and video calls; Review our business performance, including through the use of recordings of customer meetings; Market and sell our Services to individuals, including…
Added#13
Before: …platforms (i.e., WhatsApp); Send gifts to you; Administer, nothing here improve and personalize our Services, including by recognizing…
After: …platforms (i.e., WhatsApp); Send gifts to you; Administer, evaluate, improve and personalize our Services, including by recognizing…
Added#14
Before: …remembering their information when they return to our nothing here and analyzing our client-base; Process payment for our…
After: …remembering their information when they return to our Services, and analyzing our client-base; Process payment for our…
Changed#15
Before: …Conduct market research; Opportunity tracking, conversion and lead generation; Test, enhance, update and monitor the Services, or…
After: …Conduct market research; Opportunity tracking, conversion and lead generation, including identifying organizations and individuals that visit our websites; Test, enhance, update and monitor the Services, or…
Added#16
Before: …assets and business; Enforce our Terms of Service nothing here resolve disputes, carry out our obligations and enforce…
After: …assets and business; Enforce our Terms of Service or agreements, resolve disputes, carry out our obligations and enforce…
Changed#17
Before: …web hosting and maintenance services, technology support providers, email and messaging communications providers, analytics providers, data storage…
After: …web hosting and maintenance services, technology support providers, AI providers (see Section 9), data providers (including visitor identification providers), email mail data providers, and messaging communications providers, analytics providers, data storage…
Changed#18
Before: …post content on the Klaviyo Community portion of the website : Remember, our websites allow you to…
After: …post content on the Klaviyo Community portion of our website : Remember, our websites allow you to…
Changed#19
Before: …through social media platforms, such as LinkedIn, Facebook, Twitter, Google, and others. These companies have interest-based advertising…
After: …through social media platforms, such as LinkedIn, Facebook, X (formerly Twitter), Google, and others. These companies have interest-based advertising…
Added#20
Before: …of those social media companies that provide them. nothing here For more information on our online practices specifically…
After: …of those social media companies that provide them. We do not use Google user data for advertising, including targeted, personalized, retargeted or interest-based advertising. For more information on our online practices specifically…
Added#21
Before: …please see our Terms of Service . Modifying nothing here Account Information . If you have a Klaviyo…
After: …please see our Terms of Service . Modifying of Deleting Account Information . If you have a Klaviyo…
Changed#22
Before: …If you would like to request access to, or correction or deletion of personal information, you may send…
After: …If you would like to request access to, correction, or deletion of personal information, you may send…
Changed#23
Before: …of your personal information, subject to certain exceptions. Right to opt-out . You may have the right to opt-out of…
After: …of your personal information, subject to certain exceptions. You can also delete your account in our mobile app, as described in Section 5. Right to opt-out. You may have the right to opt-out of…
Changed#24
Before: …by filling out our Privacy Rights Request . Unless you have exercised your right to opt-out, Before processing your request, we will need to…
After: …by filling out our Privacy Rights Request . Depending on where you live, you may have additional rights, which are described in Section 12 (Region-Specific Disclosures) Before processing your request, we will need to…
Removed#25
Before: …parties for monetary or other valuable consideration, or use your information for all the purposes described in this Privacy Notice, including for targeted advertising. The third parties to whom we sell or…
After: …parties for monetary or other valuable consideration, or removed The third parties to whom we sell or…
Changed#26
Before: …reasons for declining to comply with the request. To exercise your right to opt-out : please submit a request, as follows: Opt-out of targeted advertising (cookies opt-out), continue to collect, use, disclose or process your…
After: …reasons for declining to comply with the request. Please note that notwithstanding any exercise of your rights described above by you, we may continue to collect, use, disclose or process your…
Removed#27
Before: …The third parties to whom we sell or disclose personal information may use such information for their…
After: …The third parties to whom we sell or removed personal information may use such information for their…
Removed#28
Before: …own purposes in accordance with their own privacy statements. You do not need to create an account…
After: …own purposes in accordance with their own privacy removed You do not need to create an account…
Added#29
Before: …to collect, use, disclose or process your personal nothing here please use our cookie management tool: Cookie Settings…
After: …to collect, use, disclose or process your personal information where we are permitted or required to do so by law or requested or ordered to do so by relevant authorities or law enforcement agencies. To opt out of targeted advertising cookies, please use our cookie management tool: Cookie Settings…
Removed#30
Before: …able to identify you in our data systems. We may not process your request if we, in good faith, believe that the request is fraudulent. In such instances, we will send a notice to the requestor explaining our decision. 7. Security Security procedures are in place to…
After: …able to identify you in our data systems. removed 7. Security Security procedures are in place to…
Changed#31
Before: …promptly delete that personal information. 9. Third Party Websites and Services The Services may contain integrations or links to…
After: …promptly delete that personal information. 9. Third Party Websites, Services, and AI Providers The Services may contain integrations or links to…
Added#32
Before: …more about how they handle your personal information. nothing here 10. Changes to Privacy Notice We reserve the…
After: …more about how they handle your personal information. Google User Data (Google Drive Integration) If you connect your Google account to Klaviyo’s Google Drive integration, we access the Google user data you authorize, such as files you select and related file information. We use it only to provide and improve the integration’s user-facing features, such as helping you create campaigns and flows. Whether we act as a controller or a processor, we handle Google user data as described in this section. We keep it only as long as needed for these features. You can disconnect at any time and revoke access at https://myaccount.google.com/permissions . We delete Google user data when you disconnect or ask us to under our Privacy Rights Request form, unless the law requires us to keep it. We do not sell Google user data or transfer it to third parties, except to service providers (including AI providers) that process it on our behalf solely to provide these features and may not use it for their own purposes or to train models, or as needed for security, to comply with law, or in a merger or asset sale with your explicit prior consent. We do not use it for advertising (including retargeting, personalized or interest-based advertising), credit or … 10. Changes to Privacy Notice We reserve the…
Added#33
Before: …contractual obligations, as described in our Privacy Notice. nothing here D. YOUR CALIFORNIA PRIVACY RIGHTS As a California…
After: …contractual obligations, as described in our Privacy Notice. Our mobile app does not use advertising identifiers and does not sell or share personal information for cross-context behavioral advertising. D. YOUR CALIFORNIA PRIVACY RIGHTS As a California…
Removed#34
Before: …your behalf, to such sales. The Right to Limit Use and Disclosure of Personal Information You have the right to…
After: …your behalf, to such sales. The Right to removed of Personal Information You have the right to…
Removed#35
Before: …Information You have the right to direct us to limit the use of your sensitive personal information to certain purposes, subject to certain exceptions. The Right to Control…
After: …Information You have the right to direct us removed subject to certain exceptions. The Right to Control…
Added#36
Before: …collect and disclose your personal information (including preferences, nothing here geolocation, commercial information and internet, network and device…
After: …collect and disclose your personal information (including preferences, general geolocation, commercial information and internet, network and device…
Changed#37
Before: …visit or interact with our websites, use our apps or otherwise engage with us. These third parties…
After: …visit or interact with our websites, use our Services,apps or otherwise engage with us. These third parties…
Changed#38
Before: …Request . Additional Disclosures for the European Economic Area, United Kingdom, and Switzerland Klaviyo Group maintains operations in Europe…
After: …Request . Additional Disclosures for the European Economic Area (EEA), United Kingdom (UK), and Switzerland Klaviyo Group maintains operations in Europe…
Added#39
Before: …natural person Users (who may be customer employees) nothing here Name, email address, mailing address, phone number, company/company…
After: …natural person Users (who may be customer employees) Website visitors and prospective customers Name, email address, mailing address, phone number, company/company…
Changed#40
Before: …dates and times, applicable marketing interests and communication preferences Communications with customers and users of Klaviyo,. and…
After: …dates and times, applicable marketing interests and communication preferences, and name, business email address, job title and company received from data providers Communications with customers and users of Klaviyo,. and…
Changed#41
Before: …data providers Communications with customers and users of Klaviyo. and Sales of our Services to individuals, including…
After: …data providers Communications with customers and users of Klaviyo,. and Marketing and Sales of our Services to individuals, including…
Added#42
Before: …interest to communicate with and market to customers nothing here customers Consent Customers, if a natural person Users…
After: …interest to communicate with and market to customers and prospective customers Consent Customers, if a natural person Users…
Removed#43
Before: …participation in the Klaviyo network with other account holders. Legitimate interest in providing the Klaviyo Community to…
After: …participation in the Klaviyo network with other account removed Legitimate interest in providing the Klaviyo Community to…
Added#44
Before: …the Klaviyo network with other account holders and nothing here Legitimate interest in providing the Klaviyo Community to…
After: …the Klaviyo network with other account holders and as required to administer Klaviyo Community. Legitimate interest in providing the Klaviyo Community to…
Added#45
Before: …and office address. Participation in the Klaviyo Partner nothing here To process your application to become a Klaviyo…
After: …and office address. Participation in the Klaviyo Partner Program. To process your application to become a Klaviyo…
Changed#46
Before: …a Klaviyo Partner and to administer the Klaviyo Partner. Legitimate interest in providing the Klaviyo Partner Program…
After: …a Klaviyo Partner and to administer the Klaviyo Partner Program. Legitimate interest in providing the Klaviyo Partner Program…
Added#47
Before: …Program. Legitimate interest in providing the Klaviyo Partner nothing here to customers and users Consent Customers, if a…
After: …Program. Legitimate interest in providing the Klaviyo Partner Program to customers and users Consent Customers, if a…
Changed#48
Before: …Representative the European Data Protection Office (“ EDPO ”), by contacting the EDPO on their online webform at: Ireland (EU GDPR): https://edpo.com/gdpr-data-request/ UK…
After: …Representative the European Data Protection Office (“ EDPO ”) EDPO online webform at: Ireland (EU GDPR): https://edpo.com/gdpr-data-request/ UK…
Changed#49
Before: …applicable address set forth below: Ireland (EU): EDPO Ground Floor 71 Lower Baggot Street Dublin D02 P593 IRELAND United Kingdom: EDPO UK Unit 33, Waterside,…
After: …applicable address set forth below: Ireland (EU): EDPO 60 Merrion Square South Dublin 2 Dublin D02 HE24 IRELAND United Kingdom: EDPO UK Unit 33, Waterside,…
Compared with the previous archived version (#935 to #15480). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).
Archive proof
Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.
Klaviyo’s privacy notice now covers iOS and Android apps and discloses mobile SDK data collection, providers matching website IP addresses and browsing activity to business contacts, and customer-meeting recordings used to review business performance. It also adds providing Composer responses and content as a use of personal information, expanding disclosed collection and processing practices.
Cite this
Privacy (legal) page changed on Klaviyo’s Privacy (legal) page, changed 2026-11-05 09:00 UTC (change 1 of 1).