Palantir Technologies
Information Technology
69
out of 100. Number 50 of 512, counting from the worst.
Where Palantir Technologies does well
- Renewals 3 of 20. Few problems found.
- The Privacy Statement explicitly excludes customer data that Palantir processes as a data processor — 'This Statement does not apply to personal data we process on behalf of our customers' — and Palantir's Data Protection Addendum commits that it will 'not Sell Customer Personal Data or otherwise Process Customer Personal Data for any purpose other than for the fulfillment of Customer Instructions.'
- Customer Data is actually deleted after termination: 'Palantir shall thereafter delete all Customer Data,' with a 30-day post-termination window just to retrieve your data.
- Real, exercisable privacy rights are granted: know/delete/correct/portability requests via a form or data-subject-request@palantir.com, an honored 'Do Not Sell or Share My Personal Information' opt-out, a dedicated privacy@palantir.com DPO contact, no knowing sale/sharing of under-16 data, and limits on sensitive-data use for California residents.
- Palantir's AIP security FAQ states third-party model providers do not retain prompts or completions, their personnel have no access, no customer data is used to retrain models, and all data transmitted to the underlying services is immediately discarded after prompt completion.
- UK natural-person customers get a 14-day cooling-off cancellation period with reimbursement of any payments.
You cannot sue Palantir in court over any dispute under these terms.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
You cannot sue Palantir in court over any dispute under these terms. After a 60-day negotiation period, everything goes to binding private arbitration under JAMS rules in New York, NY, under New York law. You cannot join or start a class action, class arbitration, or PAGA/representative claim, and the arbitrator cannot combine your claim with anyone else's.
ANY DISPUTE, CONTROVERSY, OR CLAIM ARISING FROM OR RELATING TO THIS AGREEMENT, INCLUDING ARBITRABILITY, THAT CANNOT BE RESOLVED FOLLOWING GOOD FAITH DISCUSSIONS WITHIN SIXTY (60) DAYS AFTER NOTICE OF A DISPUTE SHALL BE FINALLY SETTLED BY ARBITRATION... THE PARTIES AGREE TO ARBITRATE SOLELY ON AN INDIVIDUAL BASIS, AND THIS AGREEMENT DOES NOT PERMIT CLASS ARBITRATION OR ANY CLAIMS BROUGHT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS, REPRESENTATIVE, PAGA, JOINT, OR REPRESENTATIVE ARBITRATION PROCEEDING. THE ARBITRAL TRIBUNAL MAY NOT CONSOLIDATE MORE THAN ONE PERSON'S CLAIMS AND MAY NOT OTHERWISE PRESIDE OVER ANY FORM OF A REPRESENTATIVE OR CLASS PROCEEDING. (Section 13)
-
Palantir's brand is built on never selling your data, but its own privacy table admits it legally 'sells or shares' your identifiers, contact details, web activity, job info, and even algorithmically inferred profiles to advertising networks, ad-tech vendors, and social-media platforms for behavioral advertising. You can opt out — but the sharing is on by default.
Please note, we do not sell Personal Information in the traditional sense of the word for monetary consideration. However, because the definitions of 'sale' and 'sharing' under the US State Privacy Laws are broad enough such that they include the disclosure of your information to certain types of advertising and marketing partners, we provide consumers with the right to opt-out of any such sale or sharing... 'Sold and/or Shared for Cross-Contextual Behavioral Advertising?' — Yes: IP address, social media handles and other Technical Data; name, address and telephone number; internet or network activity; professional or employment-related information; and inferences drawn to create a consumer's profile — shared with Advertising and marketing partners, Advertising technology vendors, Social media platforms.
-
Palantir can rewrite the contract whenever it wants. A notice posted on its website (or an email) counts as telling you, and if you keep using the product within 30 days, you have legally accepted the new terms — there is no explicit accept step and no right to reject while keeping service.
Palantir reserves the right to amend this Agreement at any time and will update this Agreement in the event of any such amendments. Palantir will notify Customer of expost changes to this Agreement by posting a notice on the Website and/or sending an email... Any amendments to this Agreement will become effective thirty (30) days after Palantir provides such notice. Customer's continued use of the Palantir Technology within thirty (30) days after Palantir provides the foregoing notice constitutes agreement to those revisions of this Agreement. (Section 14.1)
-
Your personal data can be kept for as long as Palantir guesses you 'may be interested in our products' — a vague, open-ended marketing standard with no fixed deadline. And even after your contract ends, Palantir keeps two full years of security logs containing your IP address, usernames, login attempts, and search queries.
We use the following criteria to determine the period of time for which we retain each category of Personal Information... as long as we anticipate you may be interested in our products; ... to comply with our internal policy requirements. And: 'Palantir shall retain, subject to the other terms of this Agreement, and solely for security purposes, usage information and metadata related to the security of the Service... (except for security-related information such as IP addresses, usernames, login attempts, and search queries), for a period of two (2) years following the last event logged.' (Privacy Statement, 'Retention Period' / AIP Now ToS Section 8.3)
-
Palantir can cut off your access instantly, for any reason or none at all — and it can unilaterally rewrite the 'compliance requirements' you're judged against at any time, at its sole discretion. You, by contrast, can only terminate for cause after giving 30 days' notice and a chance to cure.
If Palantir determines at its sole discretion that Customer has not satisfied the Palantir Compliance Requirements, Palantir's obligations under Section 2.1, 2.2, and 2.3... shall immediately terminate upon Palantir determining that Customer has not satisfied the Palantir Compliance Requirements... Palantir reserves the right to amend the definition of Palantir Compliance Requirements at any time, as needed, and at its sole discretion. (Section 2.8) / 'Palantir may terminate this Agreement for convenience, for any or no reason, at any time, upon providing Customer notice of such termination.' (Section 8.1)
-
Palantir builds profiles on you using data pulled from public databases, partners, and social media, infers how likely you are to buy, and uses that to sell you products. And if you take a Palantir training course or certification through your job, your employer gets a report of your participation, progress, and quiz/exam results — even if you failed.
We obtain the categories of Personal Information listed above... from the following categories of sources: our affiliates, publicly-available databases, third-party business partners, social media sites, and other third-party sources. / 'Inferred Data': Preferences, likelihood of interest in Palantir products and/or services. Data generated by combining data... collected by Palantir with information obtained from third parties... which assist with the sale of products or services. / We disclose your personal data to third parties... 'Provide your employer, or the organization that provides you with your Palantir Learning or certification exam code, with details of your participation, progress, and results for any training courses, quizzes, or certifications you register for with us, when these are taken as part of your employment.'
How these were found
Documents actually read on Oct 1, 2026: (1) Palantir Privacy and Security Statement at https://www.palantir.com/privacy-and-security, live page marked 'Last updated July 2026' — fully read; (2) Palantir AIP Now Terms of Service PDF at https://palantir.pactsafe.io/versions/667421577694d29a4a7e9494.pdf (undated version; search-index crawls ~2 months old) — fully read. Partial quotes for the Data Protection Addendum and AIP security/privacy FAQ taken from official-domain search snippets; the DPA text itself was not fully opened. Palantir is primarily B2B, so its public consumer-facing documents are the Privacy Statement and the AIP Now self-serve terms; no separate palantir.com 'website Terms of Use' page was found. Scores are editorial: Palantir looks comparatively good on no auto-renew (30-day terms, no renewal language found) but scores high on arbitration and data sharing.
These notes come from the original draft and are not independent verification.