Instacart Privacy

Data Access & Collection · Context

Policy covers Instacart sites, apps, devices, APIs and white-label sites where linked

The policy is issued by Maplebear Inc. (doing business as Instacart) and Maplebear Canada Inc. It describes how they collect, use and share your Personal Information through the "Services", which the policy defines as Instacart websites, mobile apps, devices and APIs, plus white-label retailer websites or apps ("Instacart White Labels") where this Privacy Policy is linked. "Personal Information" is defined broadly as any information Instacart can reasonably use to identify you.

Supporting quotations

This Privacy Policy explains how Maplebear Inc. d/b/a Instacart and Maplebear Canada Inc. (“Instacart,” “we,” or “us”) collect, use, and share your Personal Information in providing services, including any Instacart websites, mobile apps, devices, APIs, white-label retailer websites or apps (“Instacart White Labels”) where this Privacy Policy is linked (the “Services”).

“Personal Information” is any information that we can reasonably use to identify you.

Qualifications & exceptions

• White-label retailer sites and apps are covered only where this Privacy Policy is linked on them.
• Personal Information is defined by what Instacart can reasonably use to identify you, not by a fixed list.

Not stated here

• The policy does not list which retailer white-label sites or apps link to it.
• Other privacy notices that may apply to specific Instacart products are not part of the supplied text.

Legal Rights & Agreement Rules · Context

Policy states it was last updated January 15, 2026

The only date given at the top of the policy is "Last updated: January 15, 2026". The policy later says this date shows when it was last revised, so it marks the version being analyzed rather than a separate effective date or a future successor.

Supporting quotations

Last updated: January 15, 2026

Not stated here

• No separate effective date or announced future version is stated in the supplied text.

Data Access & Collection · Context

Summary notice signposts where collection, uses, disclosures, choices and the table are explained

A short summary notice tells you where to find what Instacart collects, its business and commercial purposes, who receives the information and why, your choices and rights (including how it sells or shares certain categories of Personal Information and how to opt out), and a summary table. It is a guide to later sections and the policy does not say it replaces them.

Supporting quotations

We collect Personal Information as described

We describe the business and commercial purposes

We describe our disclosures of Personal Information

how we sell or share certain categories of Personal Information

we have provided a table format that summarizes

Qualifications & exceptions

• The notice points to the sections for detail; the operative descriptions are in those sections.

Not stated here

• The summary notice says Instacart sells or shares certain categories of Personal Information without naming them; the Summary Table and Section 4 carry the detail.

Data Access & Collection · Restriction or exception

Prescription deliveries and restaurant orders are not available on white-label sites

The contents list and section headings mark two features as not available to Instacart White Labels: prescription deliveries and restaurant orders. The policy's prescription and restaurant sections therefore describe practices for the main Instacart Services, not the retailer white-label sites or apps.

Supporting quotations

Prescription Deliveries (Not Available on Instacart White Labels)

Restaurant Orders (Not Available on Instacart White Label Sites)

6. Prescription Deliveries (Not Available on Instacart White Labels)

7. Restaurant Orders (Not Available on Instacart White Label Sites)

Qualifications & exceptions

• The two headings use slightly different wording (White Labels and White Label Sites).

Data Access & Collection · Company practice

Contact, account and order details you give are collected

Instacart collects directly from you the contact details you provide (name, telephone number, email address), account information when you set up an account (username, password and other information it asks for), and order information needed to fulfil an order (delivery address, date and time, items ordered and any special instructions).

Supporting quotations

We collect the following Personal Information directly from you:

including your name, telephone number and email address.

we collect your username and password, and other relevant information we request.

we collect information necessary to fulfill the order, including your delivery address, the date and time of the order, the items you ordered and any special instructions.

Qualifications & exceptions

• Order information is collected only if you place an order through the Services.
• Account information is collected when you set up an Instacart account.

Not stated here

• Account information includes "other relevant information we request", which the policy does not list.

Data Access & Collection · Company practice

Government ID details collected for age- or amount-restricted orders

If you order alcohol, prescriptions or other age- or dollar-amount-restricted orders, Instacart collects information from your government ID to verify your age or identity: the ID number and state or country, and, when legally required, a copy of the full state ID card.

Supporting quotations

If you order alcohol, prescriptions, or other age- or dollar amount restricted orders, we collect information from your government ID to verify your age or your identity, including the government ID number and state or country, and, when legally required, a copy of the full state ID card.

Qualifications & exceptions

• Applies to orders for alcohol, prescriptions or other age- or dollar-amount-restricted orders.
• A copy of the full state ID card is collected only when legally required.

Not stated here

• The policy does not say which orders count as dollar-amount restricted or when a full ID copy is legally required.
• Retention of ID information is not described separately; Information Retention is general.

Data Access & Collection · Company practice

License plate may be collected for curbside pickup

For curbside pickup orders, Instacart may collect your vehicle license plate number or numbers.

Supporting quotations

For curbside pickup orders, we may collect your vehicle license plate number(s).

Qualifications & exceptions

• Applies to curbside pickup orders; the policy says "may", not that it always collects it.

Charges & Financial Obligations · Company practice

Billing address and payment method collected; card details go to payment processors

If you place an order, Instacart collects your billing address and method of payment. When you pay by credit card or other method, the policy says that payment information is collected and processed by third-party payment processors and transmitted directly to them; Instacart may receive limited card details back from them, such as the last four digits and the expiration month and year.

Supporting quotations

we collect your billing address and method of payment.

your credit card or other payment information is collected and processed by our third-party payment processors.

We may receive certain information about your payment card from our payment processors, such as the last 4 digits of your card number and its expiration month and year.

2. Payment Processors and Partners

Qualifications & exceptions

• Applies if you place an order through the Services.
• For restaurant orders, where available, the restaurant partner collects and processes your payment information instead.

Not stated here

• The policy does not name the payment processors.

Data Access & Collection · Company practice

Fresh Funds program details are collected

If you take part in a Fresh Funds program and enter a Fresh Funds code to redeem credits, Instacart collects the information it needs to run the program: the name of the Fresh Funds partner, your Fresh Funds balance and the products you bought with it.

Supporting quotations

If you participate in a Fresh Funds program and enter a Fresh Funds code to redeem your Fresh Funds credits, we collect information necessary for us to administer the program, including the name of the Fresh Funds partner in whose program you participate, your Fresh Funds balance, and the products you purchased with your Fresh Funds.

Qualifications & exceptions

• Applies only if you participate in a Fresh Funds program and enter a code.

Data Access & Collection · Company practice

Messages with shoppers and customer service are collected

Instacart collects the content of your communications with your personal shopper through the Services about replacements and other order questions, and the information you give when you interact or communicate with customer service representatives.

Supporting quotations

you may communicate with your personal shopper via the Services about product replacements and other questions you or your personal shopper may have regarding the order. We collect the information contained in those communications.

we collect the information you provide during such interactions.

Qualifications & exceptions

• Shopper messages apply when you place an order for delivery.

Data Access & Collection · Company practice

Information you make public is collected; others may access it

If you post in a public space on the Services or choose to make Personal Information public (for example, sharing a recipe publicly), Instacart collects it. The policy warns that Instacart cannot control what third parties who access or collect that public information do with it.

Supporting quotations

If you post in a public space on the Services or otherwise choose to make your Personal Information public on the Services (e.g., by sharing a recipe publicly on the Services), we collect such information. If you choose to share Personal Information publicly through the Services, please understand that we cannot control the actions of third parties who may access or collect this information.

Qualifications & exceptions

• Applies when you post publicly or choose to make Personal Information public.

Data Access & Collection · Company practice

Other information you choose to provide, including survey and retailer-experience responses, is collected

Instacart collects any other information you choose to provide in your interactions with the Services, including survey responses (such as customer satisfaction surveys) and information you give directly about an experience with one of its retailers.

Supporting quotations

We collect any other information that you choose to provide during your interactions with our Services, including your responses to surveys that you choose to participate in (for example customer satisfaction surveys) or information that you provide directly to us regarding an experience with one of our retailers.

Qualifications & exceptions

• Covers information you choose to provide.

Data Access & Collection · Restriction or exception

Details about other people are collected; you must have permission and may not provide children's data

If you provide information about other people, such as the name, email and delivery address of a friend you refer or a recipient of a gift delivery or gift card, Instacart collects it. It also collects information about your association with another customer if you take part in Family Accounts. You are responsible for having permission to share the other person's information, and you may not provide Personal Information about children under 18.

Supporting quotations

In some cases, you may provide information to us about other people. For example, you may refer a friend to Instacart or send an Instacart gift delivery or gift card to someone.

you are responsible for ensuring that you have permission to share their information with Instacart.

You may not provide Personal Information about children under the age of 18.

Qualifications & exceptions

• Recipient details are collected "as applicable" to the referral, gift delivery or gift card.
• The permission requirement is placed on you, not on Instacart.

Data Access & Collection · Company practice

Browsing, cart and marketing-interaction activity is collected automatically

When you browse the website or use the app, Instacart automatically collects information about your device, browser and activity, including products you engage with or add to your cart, order information, pages visited, and how often and how long you use the Services. It also collects how you interact with its chat bots, emails, texts, notifications and other marketing, such as whether you opened or clicked.

Supporting quotations

we automatically collect certain information about your device, browser, and activity:

we collect information about your activity and interactions with the Services. This includes the products with which you engage or place in your cart, information related to your orders, the pages that you navigate to, and the frequency and duration of your use of the Services.

We also collect information regarding your interactions with our chat bots, emails, texts, notifications, or other marketing from us (e.g., whether you opened or clicked

Data Access & Collection · Company practice

Third-party session replays can record clicks, scrolls and keystrokes

Instacart may use third-party services whose software code records how users interact with the Services. The policy says session replays include clicks, mouse movements, scrolls and keystrokes or key touches, and that they are used to diagnose usability problems and find areas for improvement.

Supporting quotations

We also may use third party services that employ software code to record users’ interactions with the Services.

Session replays include users’ clicks, mouse movements, scrolls, and keystrokes/key touches during those sessions.

Qualifications & exceptions

• Stated purpose is diagnosing usability problems and identifying areas for improvement.

Not stated here

• The policy does not say whether any fields, such as password or payment fields, are excluded from keystroke recording.
• The third-party providers are not named.

Data Access & Collection · Company practice

Device, browser, network and identifier information is recorded

Instacart's servers record information about the device you use, including IP address, device type, browser type and settings, internet service provider, mobile carrier, mobile country code, operating system and unique device identifiers. It may also generate new unique identifiers from existing device information.

Supporting quotations

Our servers will record information about the computer, phone, or other device you use to connect to the Services.

We may also generate new unique identifiers using existing user device information.

Data Access & Collection · Context

Device location may be collected in different ways

When you access the Services, Instacart may collect information about your device's location in different ways. The following entries distinguish general location from precise geolocation.

Supporting quotations

When you access the Services, we may collect information about your device’s location in different ways:

Not stated here

• Details are given in the next two entries, covered separately.

Data Access & Collection · Company practice

General location is inferred, for example from IP address

Instacart infers your general location (country, region or city), for example from your device's IP address. It says it relies on that to maintain security and prevent fraud, present localized experiences such as content availability, comply with regional laws and obligations (for example consent and opt-out prompts), and measure and improve its services through aggregated analytics. It warns IP-based location may be approximate and can reflect your internet provider's or a VPN's location.

Supporting quotations

We infer your general location (such as country, region, or city), for example by using your device’s IP address.

We rely on this general location to maintain security and prevent fraud (for example, detect suspicious or unusual access patterns), present localized experiences (such as content availability), comply with regional laws and obligations (for example, consent/opt-out prompts and notices), and to measure and improve our services through aggregated analytics.

IP-based geolocation may be approximate and can reflect the location of your internet service provider or a VPN endpoint.

Qualifications & exceptions

• Analytics use is described as aggregated.
• IP-based location may be approximate.

Data Access & Collection · Company practice

Precise location is collected only if you allow it through your device or browser

If you choose to allow the Services to use location services through your device's operating system or browser permission system, Instacart may collect your device's precise location. It says it uses location to hand off pickup orders, improve delivery accuracy and help you find nearby stores for pickup or delivery, and for other similar purposes. It may also use it for analytics and to understand how to improve the Services. You can control sharing through device or browser settings or when the app prompts you.

Supporting quotations

If you choose to allow the Services to access location services through the permission system used by your device’s operating system or browser, we may collect the precise location of your device.

We use your location information to facilitate the prompt hand-off of pickup orders (where available), to improve the accuracy of deliveries, to assist you in finding nearby stores for which pickup or delivery are available, and for other similar purposes.

We may also use such information for our analytics purposes and to better understand how we can improve the Services.

You can choose whether or not your device’s location information is shared with us by adjusting the settings on your device or browser, or when prompted by the Instacart application.

Qualifications & exceptions

• Collected only if you allow location access through your device or browser permission system.
• Pickup hand-off is described as applying where pickup is available.

Not stated here

• "Other similar purposes" is not defined.
• How long precise location is kept is not stated; the retention section is general.

Data Access & Collection · Company practice

Cookies, pixels and SDKs collect information for Instacart and its advertising partners

When you visit or use the Services, Instacart, along with its partners, advertisers and third-party advertising networks, may automatically collect information about you using device identifiers, cookies, pixels, tags, APIs, SDKs and similar technologies. Instacart says it uses this information to make the Services work, understand how you use them, personalize your experience, and measure, monitor, manage, display and customize the advertisements you see.

Supporting quotations

we (and our partners, advertisers, and third-party advertising networks) may automatically collect information about you using device identifiers, cookies, pixels, tags, application programming interfaces (“APIs”), software development kits (“SDKs”) and similar technologies.

We use this information for various purposes, including to make the Services function properly, understand how you use the Services, personalize your experience, and measure, monitor, manage, display, and customize the advertisements you see.

Qualifications & exceptions

• Collection is described as something that may happen automatically.
• Partners, advertisers and ad networks are named as collectors alongside Instacart.

Not stated here

• The partners, advertisers and ad networks are not named.

Data Access & Collection · Context

Instacart may also receive information about you from other sources and parties

Besides collecting directly from you and automatically, Instacart says it may receive Personal Information about you from other sources or parties, including vendors and business partners that send contact, account, order, payment and activity information. The entries below name the specific sources.

Supporting quotations

We may receive Personal Information about you from other sources or parties.

We may also receive information, including contact, account, order, payment, and activity information, from our vendors and business partners

Qualifications & exceptions

• Described as what Instacart "may" receive; the examples are introduced by "for example".

Data Access & Collection · Company practice

Third-party sign-in can give Instacart your name, email and identifiers

If you log in using a third-party platform such as Facebook or Google, Instacart may receive some information about you from that platform, depending on your settings there, including your name, email address, device identifier and other identifiers.

Supporting quotations

Certain of our Services allow you to login using your credentials from a third-party platform, for example, using your Facebook or Google logins. If you log in to the Services through these third-party platforms, then depending on your settings on these platforms, we may receive some information about you from them, including your name, email address, device identifier and other identifiers.

Qualifications & exceptions

• Applies only to Services that offer third-party login and only if you use it.
• What is received depends on your settings on the third-party platform.

Data Access & Collection · Company practice

Retailers may send loyalty-program membership status

Instacart may receive Personal Information from retail partners whose loyalty programs you participate in, such as confirmation of your loyalty member status, so you can receive loyalty benefits, discounts and promotions.

Supporting quotations

We may receive Personal Information from our retail partners in whose loyalty programs you participate, such as a confirmation of your loyalty member status, to enable you to receive your loyalty benefits, discounts, and special promotions.

Qualifications & exceptions

• Applies to retailers whose loyalty programs you participate in.

Data Access & Collection · Company practice

Pharmacies send prescription-delivery details; Section 6 governs health information

If you use the Services for prescription delivery, the pharmacy processing your prescription sends Instacart your name, delivery address, email, birth date and phone number, the amount charged, the prescription numbers, in some cases refill totals and counts, and whether the drug needs temperature control. If a delivered drug is recalled, the pharmacy shares your name, email, order date and refund amount. The policy's prescription section says it governs how Instacart uses and discloses the health-related part of this information.

Supporting quotations

If you use the Services for prescription delivery, the pharmacy processing your prescription will provide us with your name, delivery address, email address, birth date, telephone number, the total amount (including sales tax, where applicable) being charged to you for the prescription drug product(s) purchased, the prescription number(s) and in some case the total number of refills and your refill count (if you select to have refills fulfilled through Instacart).

if a prescription drug product delivered to you through the Services has been recalled, the pharmacy will share your name, email address, the date of the prescription drug product order, and the total amount to be refunded to you with us.

This Section governs our use and disclosure of your Personal Health Information.

6. Prescription Deliveries (Not Available on Instacart White Labels)

Qualifications & exceptions

• Applies only if you use the Services for prescription delivery, which is not available on Instacart White Labels.
• In a conflict, the prescription section governs over the rest of the policy for Personal Health Information.

Not stated here

• Which parts of this information count as Personal Health Information is defined in the prescription section, covered separately.

Data Access & Collection · Company practice

Service providers and vendors send information, including restaurant-order data

Instacart receives Personal Information from service providers and vendors that do work for it, including those that provide market research, delivery, map, email or SMS platforms, or help run parts of the Services. This also includes the vendor that processes and fulfils restaurant orders linked to your Instacart account.

Supporting quotations

We receive Personal Information from our service providers and other vendors that we engage to perform services for us, including those that provide market research, delivery services, map services, email, or SMS communication platforms, or who assist us with providing, operating, or maintaining parts of our Services.

This also includes our vendor who processes and fulfills your restaurant orders that are linked to your Instacart account.

Not stated here

• The vendors and the specific information they send are not named.

Data Access & Collection · Company practice

Partners that integrate Instacart can send information about your use of their sites and apps

Partners that have integrated Instacart services into their websites or apps may let Instacart collect, or may share with it, information about your use of their sites or apps. This includes sites that use Instacart's APIs for account creation or access and Instacart experiences embedded in a partner app. For example, if you use an Instacart Shoppable Recipe button on another site, Instacart receives information about your use of that button and the third-party site or app.

Supporting quotations

Partners who have implemented or integrated certain Instacart services on their websites or applications may also let us collect information about your use of their sites or applications or share such information with us.

For example, if you use an Instacart Shoppable Recipe button on another site, we will receive information about your use of that button and of the third-party website or application.

Partners with whom we operate co-branded businesses, offer co-branded products.

Not stated here

• The co-branded partners entry does not state what information is received from them.
• Partner sites and apps are not named.

Data Access & Collection · Company practice

Advertising and marketing partners send identifiers, contact and browsing data

Instacart receives Personal Information about you from other parties, including advertising identifiers, contact information and browsing activity, to supplement what it collects. It also receives data from partners it works with for advertising measurement, analytics and attribution.

Supporting quotations

We receive Personal Information about you, including advertising identifiers, contact information, browsing activity and related data about you from other parties, to supplement the information we collect, and from partners with whom we work for advertising measurement, analytics, and attribution.

Not stated here

• The partners are not named.

Charges & Financial Obligations · Company practice

Payment providers send payment information to Instacart

Instacart receives payment information from its payment providers, processors and partners. The policy points to the payment processors section for how payment information is handled.

Supporting quotations

We receive payment information from our payment providers, processors and partners (see below).

Not stated here

• The entry does not list which payment details are received; the payment processors section mentions the last four digits and expiry of a card.

Data Access & Collection · Company practice

Fraud and dispute partners may send information about you

Instacart may receive Personal Information about you from partners that help it prevent fraud or that are involved in claims or disputes.

Supporting quotations

We may receive Personal Information about you from partners who assist us in fraud prevention or in connection with claims or disputes.

Not stated here

• The partners and the types of information are not named.

Data Access & Collection · Company practice

Personal shoppers send delivery details and addresses

Instacart may receive Personal Information about you from its personal shoppers in connection with your delivery, including information about your address and delivery details.

Supporting quotations

We may receive Personal Information about you from Instacart personal shoppers in connection with your delivery, including information about your address and delivery details.

Data Access & Collection · Company practice

Account owners and other customers can cause information about you to be collected

If another Instacart account owner invites you to order through their account, such as a Family Account or Instacart Business Account, Instacart collects information about your activities on those accounts. If another customer refers you or sends you a gift or delivery through the Services, Instacart also receives personal information about you from that customer; related entries say it collects a referred or gift recipient's name, email and delivery address.

Supporting quotations

We also may collect or receive Personal Information relating to you from:

If other Instacart Services account owners invite you to place orders or request other services through their accounts, such as Family Accounts or Instacart Business Accounts, we collect information about your activities on those accounts.

Other Instacart customers, if they refer you to our Services, send you a gift or other order delivery through our Services.

you may refer a friend to Instacart or send an Instacart gift delivery or gift card to someone

Qualifications & exceptions

• Applies when another account owner invites you or another customer refers you or sends you a gift or delivery.

Data Access & Collection · Company practice

Government authorities and publicly available sources may supply information

Instacart may collect or receive Personal Information relating to you from law enforcement, public health and other governmental authorities, and from publicly available sources.

Supporting quotations

Law enforcement, public health, and other governmental authorities.

Publicly available sources.

Not stated here

• The policy does not say what information is received from these sources or for what purpose.
• The sources are listed without conditions.

Charges & Financial Obligations · Company practice

Payment processors collect card details; restaurant partners take restaurant-order payments

When you pay with a credit card or other method, third-party payment processors collect and process the payment information, which is transmitted directly to them. Instacart may receive limited card details such as the last four digits and the expiry month and year. Where restaurant orders are available, the restaurant partner collects and processes the payment information for those orders.

Supporting quotations

2. Payment Processors and Partners

your credit card or other payment information is collected and processed by our third-party payment processors.

the payment information that you provide through the Services is transmitted directly to our payment processor.

We may receive certain information about your payment card from our payment processors, such as the last 4 digits of your card number and its expiration month and year.

if you place a restaurant order, our restaurant partner will collect and process your credit card or other payment information in order to fulfill the order.

We receive payment information from our payment providers, processors and partners (see below).

Qualifications & exceptions

• Restaurant-order payment collection applies only where restaurant orders are available.

Not stated here

• The policy does not name the processors or say how long they keep card details.

Cross-references

• contrast (model-proposed): Customer-records categories (phone, payment information): advertising and marketing partners listed, not analytics — contrast: The payment processors section says card details are collected and processed by third-party processors. The Summary Table lists payment information (credit card information) as an example in a category whose recipients include advertising and marketing partners. The table assigns recipients per category, not per example, so the policy does not say whether card details reach those partners.

Charges & Financial Obligations · Company practice

Other payment partners may take you to their sites, where their privacy policies apply

Instacart also offers ways to pay through other payment partners that may redirect you to their own websites to enter payment information, for example an online payment system provider. The policy says those providers' privacy policies apply to the information you give them there.

Supporting quotations

We also make available opportunities to pay for orders via other payment partners that may redirect you to their websites to submit your payment information.

These payment providers’ privacy policies apply to the information you provide to them through their website.

Qualifications & exceptions

• Applies only when you choose a payment partner that redirects you to its own website.

Not stated here

• Those providers' privacy policies are not part of the supplied text.

Use & Processing · Company practice

Information is used to provide, administer and manage the Services

Instacart says it uses the Personal Information it collects or otherwise obtains for the purposes listed in this section, beginning with providing, administering and managing the Services, including operating its websites and mobile apps.

Supporting quotations

We use the Personal Information we collect or otherwise obtain about you for the following purposes:

We use your Personal Information in connection with the provision, administration, and management of the Services, including the operation of our websites and mobile applications.

Qualifications & exceptions

• The list that follows is the policy's statement of purposes; each entry is carded separately.

Use & Processing · Company practice

Information is used to process payment and deliver orders

If you place an order, Instacart uses your Personal Information to process your payment and facilitate delivery of your order. This may include information its payment processors and partners provide to it, as explained in the payment processors section.

Supporting quotations

If you place an order through the Services, we will use your Personal Information to process your payment and facilitate the delivery of your order.

This may include information provided to us by our payment processors and partners, as explained above.

2. Payment Processors and Partners

We may receive certain information about your payment card from our payment processors, such as the last 4 digits of your card number and its expiration month and year.

Qualifications & exceptions

• Applies if you place an order through the Services.

Use & Processing · Company practice

Information is used to answer support requests

Instacart uses your Personal Information to respond to your customer support communications and inquiries and to help you use the Services.

Supporting quotations

We use your Personal Information to respond to your customer support communications and inquiries and assist you in your use of the Services.

Use & Processing · Company practice

Information is used to send updates, feedback requests and policy-change messages

Instacart uses your Personal Information to give you relevant information about itself or the Services, including details about its community affairs efforts, to ask for information or feedback, and to send important updates from time to time. These include communications about changes to this policy or other applicable terms and policies.

Supporting quotations

We use your Personal Information to provide you with relevant information about us or our Services (including details about our community affairs efforts) or to request information or feedback.

communications about changes to this Privacy Policy or other applicable terms and policies.

Use & Processing · Company practice

Information is used for marketing and targeted, interest-based advertising

Instacart uses your Personal Information to send marketing and promotional communications, including interest-based and other advertisements, and to analyze and measure their effectiveness. It may do this using device identifiers, cookies, pixels, tags, APIs, SDKs and similar technologies. Some advertising partners may use cookies, SDKs or other trackers to collect information about your activity over time and across other websites or online services, so you may see tailored ads in the Services and Instacart ads elsewhere. The policy points to Your Privacy Choices for how to control this.

Supporting quotations

We use your Personal Information to send you marketing and promotional materials and communications, including interest-based and other advertisements, and to analyze and measure their effectiveness.

Details on how to exercise your choices with respect to marketing and interest-based advertisements can be found in Your Privacy Choices below.

Some of our advertising partners may use cookies, SDKs, or other trackers to collect information about your online activity over time and across different websites or online services.

measure, monitor, manage, display, and customize the advertisements you see.

Qualifications & exceptions

• Tracking across other websites and services is attributed to "some" advertising partners and described as something they "may" do.
• Choices are in the Your Privacy Choices section.

Not stated here

• The advertising partners are not named.

Use & Processing · Company practice

Information is used to personalize content, ads, recommendations and coupons

Instacart uses your Personal Information to understand which parts of the Services interest you and to personalize your experience. Based on how you browse, use or interact with the Services, it displays content, advertising, recommendations and digital coupons tailored to you.

Supporting quotations

We use your Personal Information to help us understand which parts of the Services are of most interest to you and customize or personalize your experience.

we display content, advertising, recommendations, digital coupons and otherwise personalize the Services to you.

Use & Processing · Company practice

Information is used for research, usage analytics and improving or testing the Services

Instacart uses your Personal Information, or lets its service providers and partners use it for Instacart, to research and analyze how the Services are used, identify usage trends, identify issues, test new features or changes and improve the Services.

Supporting quotations

We use your Personal Information to help us (or our service providers and partners) conduct research and analytics about your use of the Services and identify usage trends.

We also use your Personal Information to identify issues, test new features or changes in our features, and improve the Services.

Security & Safeguards · Company practice

Information is used for security, fraud prevention and safety

Instacart uses your Personal Information to maintain the security and integrity of the Services; to detect, prevent, investigate and protect you, its business, users and others from fraud, unauthorized transactions and other unsafe activity; and to protect the safety, rights or property of any person, the public or Instacart.

Supporting quotations

We use your Personal Information to (a) help maintain the security and integrity of the Services, (b) detect, prevent, investigate, and protect you, our business, our users, and others from fraud, unauthorized transactions, and other unsafe activity, and (c) protect the safety, rights, or property of any person, the public, or Instacart.

Legal Rights & Agreement Rules · Company practice

Information is used to meet legal obligations and respond to authorities

Instacart uses your Personal Information to comply with applicable laws and regulations, respond to legal process, and respond to requests and communications from law enforcement or other government officials.

Supporting quotations

We use your Personal Information to comply with applicable laws and regulations, respond to legal process, and/or respond to requests and communications from law enforcement authorities or other government officials.

Legal Rights & Agreement Rules · Company practice

Information is used in sales and business transactions

Instacart uses your Personal Information to carry out sales and business transactions in which information it holds is among the assets transferred or is relevant to evaluating, negotiating or completing the transaction.

Supporting quotations

We use your Personal Information to carry out sales and business transactions in which information held by us is among the assets transferred or is otherwise relevant to the evaluation, negotiation or completion of the transaction.

Use & Processing · Company practice

Information may be used for community affairs efforts, except on white-label sites

Instacart may use your information in connection with its community affairs efforts. The entry is marked as not applicable to Instacart White Labels.

Supporting quotations

Community Affairs (not applicable to Instacart White Labels).

We may use your information in connection with our community affairs efforts.

Qualifications & exceptions

• Not applicable to Instacart White Labels.

Not stated here

• The policy does not describe what community affairs efforts involve or which information is used.

Use & Processing · Company practice

Other uses at your direction or with your consent

Instacart says it will use your Personal Information for other purposes at your direction or with your consent. The entry's heading, "As otherwise necessary or appropriate", is broader than the sentence that follows, which mentions only direction or consent.

Supporting quotations

As otherwise necessary or appropriate.

We will use your Personal Information for other purposes at your direction or with your consent.

Qualifications & exceptions

• The stated basis is your direction or consent.

Not stated here

• The heading suggests other necessary or appropriate uses, but the sentence does not list any.

Linking & Identification · Company practice

Collected information may be combined with other sources

Instacart may combine the Personal Information it collects, as described in the policy, with information from other sources, and use the combined information for the purposes described in this policy.

Supporting quotations

we may combine Personal Information that we collect (as described above) with information from other sources and use the combined information for the purposes described in this Privacy Policy.

Qualifications & exceptions

• Use of combined data is tied to the purposes described in the policy.

Use & Processing · Company commitment

Deidentified data is treated as non-Personal Information

In some circumstances Instacart may deidentify Personal Information under applicable laws, or receive such information from a third party, and treat it as non-Personal Information. In those cases it says it will keep and use it in deidentified form and will not try to reidentify it unless applicable laws permit.

Supporting quotations

we may deidentify Personal Information in accordance with applicable laws or receive such information from a third party and treat that deidentified data as non-Personal Information

we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable laws.

Qualifications & exceptions

• The commitment not to reidentify has an exception where applicable laws permit.
• Applies in "some circumstances" that are not specified.

Not stated here

• The policy does not say how deidentified data is used or shared.

Sharing & Disclosure · Context

Information may be disclosed to listed recipient categories, depending on how you use the Services

Instacart may disclose your Personal Information to the categories of recipients listed in this section. The policy says what is shared with each category depends on how you interact with the Services; for example, browsing without an account involves different collection and disclosure practices than creating an account, placing orders or seeking support.

Supporting quotations

4. Information Disclosures

We may disclose your Personal Information to the categories of recipients listed below.

The specific Personal Information we may share with the categories of recipients listed below depends on how you interact with our Services. For instance, browsing our Services without an account involves different information collection and disclosure practices than activities like creating an account, placing orders, or seeking customer support.

Qualifications & exceptions

• The recipient categories below are described with "may" except where an entry says "we disclose" or "we will disclose".

Not stated here

• The policy does not say which data goes to which recipient for each type of interaction beyond the entries and the Summary Table.

Sharing & Disclosure · Permission or license

Information may go to affiliates, subsidiaries and companies under common control

Instacart may disclose your Personal Information to its affiliates, subsidiaries and other companies under common control and ownership, for purposes consistent with this policy and other business and operational purposes.

Supporting quotations

We may disclose your Personal Information to our affiliates, subsidiaries, and other companies under common control and ownership for purposes consistent with this Privacy Policy and other business and operational purposes.

Not stated here

• "Other business and operational purposes" is not defined.

Sharing & Disclosure · Company practice

Information is disclosed to service providers and vendors

Instacart discloses your Personal Information to service providers and vendors that provide services to it, for example cloud storage, system hosting, customer research and surveys, data security, delivery, legal, map, and email or SMS services, or that help provide, operate or maintain parts of the Services.

Supporting quotations

We disclose your Personal Information to our service providers and vendors who provide services to us, for example cloud storage services, system hosting services, research partners such as those who provide customer research and surveys, data security services, delivery services, legal services, map services, email or SMS communication services, or other vendors that assist us with providing, operating or maintaining parts of our Services.

Not stated here

• The vendors are not named and the policy does not limit what they may do with the data beyond the services they provide.

Sharing & Disclosure · Company practice

Information is shared with partners that integrate with Instacart

Instacart shares your Personal Information, such as contact and order information, with partners whose services it has integrated into its own, or who have integrated Instacart services into their sites or apps. Those integrations may also let Instacart collect information about your use of those partners' sites or apps.

Supporting quotations

We also share your Personal Information with Instacart partners whose services we have integrated into our own, or those who have integrated certain Instacart services into their sites or applications, such as your contact and order information.

These integrations may also let us collect information about your use of these partners’ sites or applications with us.

Not stated here

• Partners are not named.

Charges & Financial Obligations · Company practice

Payment information goes to payment processors when you order

Instacart uses payment processors and discloses your Personal Information to them when you place an order. The policy points to its payment processors section, where card details are said to be collected and processed by those processors.

Supporting quotations

We use payment processors as described here , and disclose your Personal Information to such payment processors when you place an order through the Services.

2. Payment Processors and Partners

your credit card or other payment information is collected and processed by our third-party payment processors.

Qualifications & exceptions

• Applies when you place an order through the Services.

Security & Safeguards · Company practice

Device, activity and order history go to fraud prevention providers

To protect customers and prevent fraudulent purchases, Instacart discloses your Personal Information, such as device and activity information and order history, to third-party fraud prevention providers so they can check whether a purchase is legitimate.

Supporting quotations

To help protect our customers and prevent fraudulent purchases, we disclose your Personal Information (such as your device and activity information and order history) to our third-party fraud prevention providers so they can check whether the purchase is legitimate.

Sharing & Disclosure · Company practice

Contact, device, activity and general location may go to advertising partners, including for cross-site ads

Instacart may disclose personal information, such as contact, device, browser and activity information and general location, to marketing and advertising partners, including social media platforms, ad networks, other websites and publishers. This is so Instacart can market to you and provide advertising services to other companies, for example serving and measuring ads. The policy adds that some advertising partners may use cookies, SDKs or other trackers to collect information about your online activity over time and across websites or services, so you may see tailored ads in the Services or Instacart ads elsewhere. It points to Your Privacy Choices for controls.

Supporting quotations

We may disclose your Personal Information (such as contact information, device information, browser and activity information, and general location) to our marketing and advertising partners, including social media platforms, third-party advertising networks, other websites and publishers, and other parties so we can both market our products to you and provide advertising services to other companies (e.g., to assist in serving and measuring our or their advertisements).

Some of our advertising partners may use cookies, SDKs, or other trackers to collect information about your online activity over time and across different websites or online services.

based on your use of the Services or your browsing behavior across other online services

Qualifications & exceptions

• Described as what Instacart "may" disclose; the examples in parentheses are not a complete list.
• Cross-site tracking is attributed to "some" advertising partners.

Not stated here

• The advertising partners and publishers are not named.

Sharing & Disclosure · Company practice

Analytics providers, including Google Analytics, may collect device, location and activity data

Instacart uses third-party analytics providers that may deploy cookies, pixels and similar technologies to analyze traffic, understand usage of the Services and measure advertisement performance. They may collect device, location, browser and activity information. Instacart gives Google Analytics as an example.

Supporting quotations

We use third-party analytics providers who may deploy cookies, pixels, and similar technologies to analyze traffic to the Services and understand the usage of the Services as well as the performance of advertisements.

Such providers may collect device, location, browser and activity information.

For example, we use Google Analytics, an analytics tool that helps us understand how our customers engage with the Services.

Not stated here

• Analytics providers other than Google Analytics are not named; the linked Google page is not part of the supplied text.

Sharing & Disclosure · Company practice

Order details, address and precise location go to your personal shopper until delivery

If you place an order, Instacart discloses your Personal Information to the personal shopper who will pick up and deliver it, including order information, delivery preferences, name, address and precise geolocation. The policy says the shopper will no longer have access to your Personal Information once the order has been delivered.

Supporting quotations

If you place an order through the Services, we will disclose your Personal Information to the personal shopper who will pick it up and deliver it to you.

Such information includes order information, delivery preferences, name, address and precise geolocation.

the shopper will no longer have access to your Personal Information once your order has been delivered.

Qualifications & exceptions

• Applies if you place an order through the Services.
• The shopper's access is said to end once the order is delivered.

Sharing & Disclosure · Company practice

Retailers receive order information and, where required by law, alcohol and ID details

Instacart may disclose your Personal Information to retailers to provide and maintain the Services, for example order information so the retailer can prepare your order, and loyalty program information so Instacart can verify your participation or obtain your loyalty number and make sure you see loyalty pricing and credit. The policy adds that Instacart may be required by law to give retailers certain information. For example, where available in your region, when you buy alcohol, it may have to share your name, delivery address, government-issued ID information, and the quantity, brand, price, proof and volume of the alcohol.

Supporting quotations

Retailers.

We may disclose your Personal Information to our retailers to provide and maintain the Services.

We may also disclose your Personal Information to retailers to enable us to verify your participation in their loyalty programs or to obtain your loyalty number where you do not submit it to us directly. This enables us to make sure you see loyalty pricing if available and that eligible purchases are credited to your loyalty account.

In certain cases, we may be required by law to provide certain of your information to our retailers. For example, if available in your region, when you buy alcohol using the Services, we may be required by law to share certain information with the retailer who makes the sale, including name, delivery address, government-issued ID information, the quantity, brand, price, proof, and volume of the alcohol purchased.

Qualifications & exceptions

• The alcohol-related disclosure is described as legally required and applies where available in your region.
• Loyalty disclosures are tied to retailers whose loyalty programs you participate in.

Not stated here

• Which regions or retailers require the alcohol disclosures is not stated.

Sharing & Disclosure · Company practice

On white-label sites, the retailer may receive contact, order and combined information

If you use an Instacart White Label Site, Instacart may share with the retailer information collected from your interactions on that site, including your contact information, your order details, and information Instacart combines from other sources.

Supporting quotations

If you use an Instacart White Label Site, we may share with the retailer information collected from your interactions on that White Label Site, including your contact information, your order details, and information that we combine from other sources.

Qualifications & exceptions

• Applies to Instacart White Label Sites, in addition to the general retailer disclosures.

Not stated here

• The policy does not limit which "other sources" can be combined into the information shared with the retailer.

Sharing & Disclosure · Context

Restaurant-order disclosures are described in the Restaurant Orders section

For restaurant orders, which are not applicable to Instacart White Labels, the policy points to its Restaurant Orders section. That section says Instacart shares certain Personal Information with a restaurant partner that facilitates the restaurant experience.

Supporting quotations

Restaurant orders (not applicable to Instacart White Labels).

7. Restaurant Orders (Not Available on Instacart White Label Sites)

we share certain of your Personal Information with our restaurant partner who facilitates the restaurant experience for Instacart

Qualifications & exceptions

• Not applicable to Instacart White Labels.

Not stated here

• The detail of what is shared is in the Restaurant Orders section, covered separately.

Cross-references

• related (model-proposed): Restaurant orders involve a restaurant partner that handles your payment and shares with couriers and restaurants — references: The Section 4 restaurant-orders entry points to the Restaurant Orders section for detail, and that section describes the partner sharing.

Sharing & Disclosure · Company practice

Fresh Funds partners receive your balance and purchases

If you take part in a Fresh Funds program, Instacart shares with the Fresh Funds partner whose program you are in your Fresh Funds balance, the products you purchased, and other information connected with the program. The entry is marked as not applicable to Instacart White Labels.

Supporting quotations

Fresh Funds Partners (not applicable to Instacart White Labels).

we share with the Fresh Funds partner in whose program you participate your Fresh Funds balance, the products you purchased, and other information in connection with the program.

Qualifications & exceptions

• Applies if you participate in a Fresh Funds program.
• Not applicable to Instacart White Labels.

Not stated here

• "Other information in connection with the program" is not defined.

Sharing & Disclosure · Company practice

Co-branded partners may receive your information

Instacart operates businesses and offers services or product lines jointly with third-party businesses, such as co-branded credit cards, and may share your Personal Information with companies that offer co-branded services or products.

Supporting quotations

We operate businesses and offer services or sell product lines jointly with third-party businesses (such as co-branded credit cards) and we may share your Personal Information with companies that offer co-branded services or products.

Not stated here

• The co-branded partners and the information shared are not named.

Sharing & Disclosure · Company practice

Other users and account participants can see information you make public or share

Instacart may disclose your Personal Information to other account owners and users of the Services if you make it public or choose sharing features. For example, a recipe shared publicly is viewable by others with your first name and last initial. If you join a Family Account or Instacart Business, the account owner who invited you and the other participants see some of your information and carts.

Supporting quotations

We may disclose your Personal Information to other Instacart Services account owners and users of the Services if you choose to make such information public or select sharing features on the Services.

if you share a recipe publicly on the Services, the recipe, along with your first name and last initial, will be viewable by other users.

if you select to participate in a Family Account or Instacart Business, the account owner who invited you to participate and the other participants will see some of your information and carts.

Qualifications & exceptions

• Triggered by your choice to make information public, to use sharing features, or to join a Family Account or Instacart Business.

Not stated here

• "Some of your information" visible to account participants is not itemized.

Legal Rights & Agreement Rules · Company practice

Information may be shared where reasonably necessary under law or legal process

Instacart may share your information when it believes disclosure is reasonably necessary or appropriate under, or to comply with, applicable laws, regulations, legal processes or legal requests. It says it shares information relevant to the legal matter.

Supporting quotations

We may share your information when we believe that the disclosure is reasonably necessary or appropriate under, or to comply with, applicable laws, regulations, legal processes, or legal requests.

In such cases, we share information that is relevant to the legal matter.

Qualifications & exceptions

• The trigger is Instacart's own belief that disclosure is reasonably necessary or appropriate.

Sharing & Disclosure · Company practice

Information may be transferred in a sale, acquisition or bankruptcy

Instacart says it may buy or sell assets in the normal course of business. If another entity acquires Instacart or any of its assets, information it collected may be transferred to that entity and its advisors before and after the transaction. In a bankruptcy or reorganization proceeding, Personal Information Instacart holds may be considered an asset and may be sold or transferred to third parties.

Supporting quotations

If another entity acquires us or any of our assets, information that we have collected may be transferred to such entity and its advisors leading up to and/or following the transaction.

if any bankruptcy or reorganization proceeding is brought by or against us, Personal Information that we hold may be considered an asset of ours and may be sold or transferred to third parties.

Qualifications & exceptions

• Transfers are said to be possible before and after the transaction, including to the acquirer's advisors.

Not stated here

• The policy does not say whether the recipient must honor this policy.

Sharing & Disclosure · Company practice

Other disclosures at your direction, or if Instacart believes it necessary to protect operations, rights or remedies

Instacart will disclose your Personal Information to other parties at your direction or with your consent. It may also disclose it to other parties if it believes that is necessary or appropriate to protect its operations and those of its affiliates, to protect its rights, privacy, safety or property or those of others, or to pursue remedies or limit damages. It may also disclose information for other reasons it describes at the time of collection or before sharing.

Supporting quotations

We will disclose your Personal Information to other parties at your direction or with your consent.

We may also disclose your Personal Information to other parties if we believe it necessary or appropriate either: (a) to protect our operations and those of any of our affiliates; (b) to protect our rights, privacy, safety, or property, and/or those of others; or (c) to allow us to pursue available remedies or limit damages that we may sustain.

We may disclose your Personal Information for other reasons that we will describe at the time of information collection or prior to sharing your information.

Qualifications & exceptions

• The protective disclosures depend on Instacart's own belief that disclosure is necessary or appropriate.
• Disclosure at your direction or with consent is phrased as "will".

Not stated here

• The other reasons in the last entry are not listed here.

Sharing & Disclosure · Restriction or exception

Prescription health information has narrower disclosure limits than the general list

The general disclosure reasons in this section, including the broad protective reasons and the open-ended last entry, sit alongside the prescription section. That section says it governs Instacart's use and disclosure of Personal Health Information and wins if it conflicts with the rest of the policy. It limits disclosure of that information without your prior written consent to listed circumstances: necessary to provide the Services, to your pharmacy on its instruction, de-identified data, required by law, or in connection with a business transaction or bankruptcy proceeding. The protective reasons in this section's last entries are not on that list.

Supporting quotations

We may also disclose your Personal Information to other parties if we believe it necessary or appropriate either: (a) to protect our operations and those of any of our affiliates; (b) to protect our rights, privacy, safety, or property, and/or those of others; or (c) to allow us to pursue available remedies or limit damages that we may sustain.

If there is a conflict between the terms of this Section and any other terms of this Privacy Policy or the Instacart Terms of Services, the terms in this Section will govern.

We will not disclose your Personal Health Information without your prior written consent with other people or non-affiliated companies unless: (i) such disclosure is necessary in order to provide the Services; (ii) to your pharmacy on their instruction, (iii) the Personal Health Information has been “de-identified” so that it cannot identify you; (iv) such disclosure is required by law; or (v) such disclosure is in connection with a business transaction or bankruptcy proceeding.

6. Prescription Deliveries (Not Available on Instacart White Labels)

Qualifications & exceptions

• Applies only to Personal Health Information from prescription deliveries, which are not available on Instacart White Labels.
• The prescription section says it governs when it conflicts with other policy terms or the Instacart Terms of Services.

Not stated here

• The Instacart Terms of Services are not part of the supplied text.
• The policy does not say how business-transaction disclosures of health information are limited.

Sharing & Disclosure · Context

Summary Table lists categories collected, their sources and recipients of sale, sharing or targeted-ad disclosures

The Summary Table covers the categories of Personal Information Instacart has collected in the past twelve months, the sources it came from, and the categories of recipients to whom Instacart may have sold it or may have "shared" it for cross-context behavioral advertising or targeted advertising. Its three columns are the category (with examples), the source or sources, and those recipients. The policy adds that Instacart also discloses some or all of these categories to vendors, partners, service providers, contractors (such as personal shoppers) and the other recipients in Section 4 for business purposes, and that which categories go to them depends on how you interact with Instacart, the Services and features you use, and what the recipient does for Instacart.

Supporting quotations

5. Summary Table

The table below provides a summary of

the categories of Personal Information we have collected in the past twelve (12) months,

the sources from which we’ve collected the information, and

the categories of recipients to whom we may have sold Personal Information or with whom we may have “shared” Personal Information for cross-context behavioral advertising or targeted advertising.

As detailed in Section 4 above , we also disclose some or all categories of Personal Information listed in the table below to our vendors, partners, service providers, contractors (e.g., our personal shoppers) and the other recipients listed above for various business purposes, including to operate, secure, improve, and market our Services, to fulfill orders and process transactions, to allow business partners to integrate with our Services, for co-branding, and to support customer service and analytics. The specific categories of Personal Information we disclose to these recipients depend on how you interact with us, the Services you use, the features you choose, and the nature of the services the recipient of the data provides to us.

Category of Personal Information (and examples)

Source(s)

Categories of third parties to whom we may have sold/shared your Personal Information or to whom we have disclosed Personal Information for targeted advertising

4. Information Disclosures

We may disclose your Personal Information to the categories of recipients listed below. The specific Personal Information we may share with the categories of recipients listed below depends on how you interact with our Services. For instance, browsing our Services without an account involves different information collection and disclosure practices than activities like creating an account, placing orders, or seeking customer support.

Qualifications & exceptions

• The recipients column covers sale, sharing for cross-context behavioral advertising, and disclosure for targeted advertising; it is not the full list of everyone who receives data.
• Business-purpose disclosures to vendors, partners, service providers and contractors are made on top of the table and depend on how you interact with the Services.
• The wording is "may have sold" or "may have shared", not a statement that every listed disclosure occurred for every user.

Not stated here

• The table assigns recipients per category row, not per example item within a category.

Data Access & Collection · Company practice

Identifiers: from you, automated means and third parties; sold or shared with advertising and analytics categories

Row: Identifiers (name, email, phone number, physical address, IP address and device identifiers, loyalty program numbers). Sources: directly from individuals, through automated means and third-party sources. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers. Third-party sources, as described earlier, include third-party sign-in platforms that can supply a name, email and identifiers.

Supporting quotations

Identifiers

Example: Name, Email address, Phone number, Physical address, IP address and device identifiers, Loyalty program numbers

Directly from individuals

Through automated means

Third-party sources

Advertising and marketing partners

Analytics providers

we may receive some information about you from them, including your name, email address, device identifier and other identifiers.

Qualifications & exceptions

• Recipients are given at category level for sale, sharing or targeted-advertising disclosures.

Data Access & Collection · Company practice

Customer-records categories (phone, payment information): advertising and marketing partners listed, not analytics

Row: Personal Information categories listed in the California Customer Records statute, with examples of telephone numbers and payment information (credit card information). Sources: directly from individuals, through automated means and third-party sources. Recipient listed in the sale, sharing or targeted-advertising column: advertising and marketing partners only. This row sits beside the payment processors section, which says card details are collected and processed by payment processors and Instacart may receive certain card details such as the last four digits and expiry.

Supporting quotations

Personal Information categories listed in the California Customer Records statute

Example: Telephone numbers, Payment information (credit card information)

Directly from individuals

Through automated means

Third-party sources

Advertising and marketing partners

your credit card or other payment information is collected and processed by our third-party payment processors.

Qualifications & exceptions

• Recipients are given per category row, so the table does not say whether card details themselves are among what advertising partners receive.

Not stated here

• The table does not say which items under this category reach advertising and marketing partners, or whether card details do.

Data Access & Collection · Company practice

Protected-classification characteristics (gender): from you only; advertising and analytics categories listed

Row: Characteristics of protected classifications under California or federal law, with the example of gender. Source: directly from individuals only. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers. The collection section does not separately describe collecting gender.

Supporting quotations

Characteristics of protected classifications under California or federal law

Example: Gender

Directly from individuals

Advertising and marketing partners

Analytics providers

Qualifications & exceptions

• Recipients are given per category row.

Not stated here

• The body of the policy does not describe how or when gender is collected.

Data Access & Collection · Company practice

Commercial information, incl. payment and gift-card details: three sources; advertising and analytics listed

Row: Commercial information (products purchased or considered, purchase history, preferences and interest profiles, consuming tendencies, reviews), which the row says also includes payment information such as card details, digital wallet information, gift card numbers, account status and transaction details. Sources: directly from individuals, through automated means and third-party sources. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers.

Supporting quotations

Commercial Information

Products you purchased or considered, Purchase history, Preferences and interest profiles, Consuming tendencies, Reviews

This also includes Payment information, including Payment card details, Digital wallet information, Gift card numbers, Account status and transaction details

Directly from individuals

Through automated means

Third-party sources

Advertising and marketing partners

Analytics providers

Qualifications & exceptions

• Recipients are given per category row, so which of the listed items go to which recipient is not itemized.

Not stated here

• The row does not say whether payment card details or gift card numbers are among what advertising partners or analytics providers receive.

Data Access & Collection · Company practice

Internet and network activity, incl. session replay: automated and third-party sources; advertising and analytics listed

Row: Internet/network activity (browsing and search history, clickstream data, app usage, interactions with the Services, emails, chatbots and advertisements, session replay and similar information). Sources: through automated means and third-party sources; "directly from individuals" is not listed for this row. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers.

Supporting quotations

Internet/Network Activity

Your browsing and search history, Clickstream data, App usage, Interactions with the Services, emails, chatbots and advertisements, Session replay, and similar information

Through automated means

Third-party sources

Advertising and marketing partners

Analytics providers

Qualifications & exceptions

• Recipients are given per category row.

Data Access & Collection · Company practice

Geolocation row covers approximate location only; advertising and analytics categories listed

Row: Geolocation data, described as approximate location data. Sources: directly from individuals and through automated means. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers. Precise geolocation appears separately under the sensitive row.

Supporting quotations

Geolocation Data

Approximate location data

Directly from individuals

Through automated means

Advertising and marketing partners

Analytics providers

Qualifications & exceptions

• The row names approximate location data; precise geolocation is listed under Sensitive Personal Information.

Data Access & Collection · Company practice

Audio, electronic and visual information: from you and automated means; recipients column says N/A

Row: Audio, electronic, visual or similar information (customer service call recordings, chat transcripts, training recordings, customer-uploaded information). Sources: directly from individuals and through automated means. The sale, sharing or targeted-advertising column says N/A. Elsewhere the policy describes collecting customer service interactions and shopper messages but does not separately describe call recordings or training recordings.

Supporting quotations

Audio, electronic, visual, or similar information Customer service call recordings, Chat transcripts, Training recordings, Customer-uploaded information

Directly from individuals

Through automated means

N/A

Qualifications & exceptions

• N/A is in the column for sale, sharing and targeted-advertising recipients; it does not on its own say the category is never disclosed for other business purposes.

Not stated here

• Call recordings and training recordings are not described outside the table, including how long they are kept.

Inference & Profiling · Company commitment

Inferences are drawn from other data; Instacart says they are not used for legal or significant decisions

Row: Inferences (preferences, behaviors, interests and characteristics drawn from other Personal Information, including past orders or browsing history). The row states Instacart does not use any inferences to make legal or other significant decisions affecting you, as understood under applicable laws. Sources: through automated means and third-party sources. Recipients listed in the sale, sharing or targeted-advertising column: advertising and marketing partners and analytics providers.

Supporting quotations

Inferences

Your preferences, behaviors, interests, and characteristics drawn from other Personal Information, including past orders or browsing history

We do not use any inferences to make legal or other significant decisions affecting you (as such term is understood under applicable laws)

Through automated means

Third-party sources

Advertising and marketing partners

Analytics providers

Qualifications & exceptions

• The statement about legal or other significant decisions is limited to inferences and to the term as understood under applicable laws.
• Recipients are given per category row.

Not stated here

• The statement does not address automated decisions that use other data, which the Canada section separately describes.

Cross-references

• contrast (model-proposed): Automated tools that detect fraud can make decisions about you and may lead to account deactivation — contrast: The Summary Table says Instacart does not use inferences to make legal or other significant decisions. The Canada section says it may use tools that decide about you automatically, including fraud detection that may lead to account deactivation. They pull in different directions: one denies significant decisions from inferences, the other describes automated decisions with a significant account effect. Scope differs (inferences in the table; Canada residents' section).

Data Access & Collection · Company practice

Sensitive Personal Information (IDs, passwords, precise location, race/ethnicity, medical): recipients column N/A

Row: Sensitive Personal Information. Depending on your interaction with the Services, Instacart collects government-issued IDs, log-in information combined with passwords that gives account access, precise geolocation, race or ethnicity, and medical information. Sources: directly from individuals and through automated means. The sale, sharing or targeted-advertising column says N/A. The collection section separately describes precise geolocation that you allow through device permissions, and pharmacy-supplied prescription data.

Supporting quotations

Sensitive Personal Information

Depending on your interaction with the Services, we collect government-issued IDs, Log-in information for accounts in combination with passwords allowing access to the accounts, Precise geolocation, Race/ethnicity, and Medical information

Directly from individuals

Through automated means

N/A

we may collect the precise location of your device.

Qualifications & exceptions

• Collected "depending on your interaction with the Services".
• N/A is in the column for sale, sharing and targeted-advertising recipients and is not a statement that the data is never disclosed for business purposes, such as precise location to shoppers or ID details to retailers for alcohol orders.

Not stated here

• Race or ethnicity is not described outside the table.
• The policy does not say which interactions lead to which sensitive categories.

Sharing & Disclosure · Context

Advertising and analytics categories in the table correspond to the Section 4 ad and analytics recipients

The categories named in the table's sale, sharing or targeted-advertising column, advertising and marketing partners and analytics providers, match two Section 4 entries. Section 4 says Instacart may disclose contact, device, browser and activity information and general location to marketing and advertising partners, some of whom track activity across websites over time, and that analytics providers, including Google Analytics, may collect device, location, browser and activity information.

Supporting quotations

Advertising and marketing partners

Analytics providers

We may disclose your Personal Information (such as contact information, device information, browser and activity information, and general location) to our marketing and advertising partners

Some of our advertising partners may use cookies, SDKs, or other trackers to collect information about your online activity over time and across different websites or online services.

We use third-party analytics providers who may deploy cookies, pixels, and similar technologies to analyze traffic to the Services and understand the usage of the Services as well as the performance of advertisements.

Qualifications & exceptions

• This card links table labels to Section 4 entries; it does not add recipients beyond those entries.

Sharing & Disclosure · Context

Other Section 4 recipients receive data for business purposes beyond the table's sale and sharing column

The table's recipient column is not the whole picture. Section 4 also lists affiliates, service providers and vendors, integrated partners, payment processors, fraud prevention providers, personal shoppers, retailers (including on white-label sites), restaurant orders, Fresh Funds partners, co-branded partners, other users, legal matters, business transfers and other third parties, and says the categories it discloses to them depend on how you interact with Instacart. Examples are precise geolocation to your shopper and government ID details to retailers in certain alcohol orders.

Supporting quotations

We may disclose your Personal Information to our affiliates, subsidiaries, and other companies under common control and ownership

We disclose your Personal Information to our service providers and vendors who provide services to us

We also share your Personal Information with Instacart partners whose services we have integrated into our own

We use payment processors as described here , and disclose your Personal Information to such payment processors when you place an order through the Services.

we disclose your Personal Information (such as your device and activity information and order history) to our third-party fraud prevention providers

Such information includes order information, delivery preferences, name, address and precise geolocation.

We may disclose your Personal Information to our retailers to provide and maintain the Services.

If you use an Instacart White Label Site, we may share with the retailer information collected from your interactions on that White Label Site

Fresh Funds Partners (not applicable to Instacart White Labels).

we may share your Personal Information with companies that offer co-branded services or products.

We may disclose your Personal Information to other Instacart Services account owners and users of the Services

We may share your information when we believe that the disclosure is reasonably necessary or appropriate under, or to comply with, applicable laws, regulations, legal processes, or legal requests.

If another entity acquires us or any of our assets, information that we have collected may be transferred to such entity and its advisors

We will disclose your Personal Information to other parties at your direction or with your consent.

we also disclose some or all categories of Personal Information listed in the table below to our vendors, partners, service providers, contractors

Qualifications & exceptions

• These Section 4 disclosures are described as business or operational disclosures and are not described as sales or sharing for advertising.
• Which categories go to which recipient depends on how you interact with the Services.

Not stated here

• The policy does not map Section 4 recipients to specific table categories beyond advertising and analytics.

Legal Rights & Agreement Rules · Restriction or exception

Prescription section governs Personal Health Information and wins over conflicting policy terms

For prescription deliveries, Instacart collects information from the pharmacy processing your prescription. The policy defines Personal Health Information as information that may relate to your past, present or future physical or mental health or condition, the provision of health care to you, or payment for health care. This prescription section governs Instacart's use and disclosure of that information and, if it conflicts with any other term of this policy or the Instacart Terms of Services, the terms of this section govern. The heading marks it as not available on Instacart White Labels.

Supporting quotations

6. Prescription Deliveries (Not Available on Instacart White Labels)

If you use the Services for a prescription delivery, we collect information from the pharmacy processing your prescription as described in Information We Collect above.

Some of this information that we collect about you in connection with your prescription delivery may relate to: (i) your past, present or future physical or mental health or condition; (ii) the provision of health care to you; or (iii) your past, present, or future payment for the provision of health care (“Personal Health Information”).

This Section governs our use and disclosure of your Personal Health Information. If there is a conflict between the terms of this Section and any other terms of this Privacy Policy or the Instacart Terms of Services, the terms in this Section will govern.

If you use the Services for prescription delivery, the pharmacy processing your prescription will provide us with your name

Qualifications & exceptions

• Applies to prescription deliveries, which are not available on Instacart White Labels.
• The priority rule covers conflicts with the rest of this policy and the Instacart Terms of Services.

Not stated here

• The Instacart Terms of Services are not part of the supplied text.
• "May relate to" means only some of the pharmacy data counts as Personal Health Information; the policy does not say which.

Security & Safeguards · Company commitment

Instacart commits to protect health information as applicable law, including HIPAA, requires

To the extent Instacart receives, creates, maintains, uses or discloses your Personal Health Information, it says it will maintain the privacy and security of that information as required by applicable law, including HIPAA and its regulations.

Supporting quotations

To the extent that we receive, create, maintain, use, or disclose any of your Personal Health Information, we will maintain the privacy and security of such information as required by applicable law, including the Health Insurance Portability and Accountability Act and the regulations promulgated under that Act (“HIPAA”).

Qualifications & exceptions

• The commitment is tied to what applicable law requires and applies to the extent Instacart handles Personal Health Information.

Not stated here

• The policy does not say whether Instacart is itself a HIPAA-covered entity or business associate.

Legal Rights & Agreement Rules · User right or choice

US residents' health information is protected under HIPAA and state law; see the pharmacy's notice

If you live in the U.S., the policy says your Personal Health Information is protected under HIPAA and state law, depending on your state, and that these laws give you rights over access, use and disclosure of it by providers such as pharmacies and by Instacart. Your status as a pharmacy patient, which the pharmacy discloses to Instacart when you place a pharmacy order, is protected by HIPAA. For a fuller description of your HIPAA rights and the uses and disclosures of health information, it refers you to your pharmacy's Notice of Privacy Practices.

Supporting quotations

If you reside in the U.S., your Personal Health Information is protected under HIPAA and state law (depending on your state of residence).

Information concerning your status as a patient of the pharmacy is protected by HIPAA.

For a more complete description of your rights under HIPAA and the uses and disclosures of your Personal Health Information, please refer to your pharmacy's Notice of Privacy Practices.

Qualifications & exceptions

• The statement is for U.S. residents; the policy says protection depends on state of residence.
• The pharmacy's notice, not this policy, gives the fuller description of HIPAA rights.

Not stated here

• The pharmacy's Notice of Privacy Practices is not part of the supplied text.

Sharing & Disclosure · Restriction or exception

Health information is not disclosed without prior written consent except in five listed cases

Instacart says it will not disclose your Personal Health Information to other people or non-affiliated companies without your prior written consent unless one of five things applies: the disclosure is necessary to provide the Services, it is to your pharmacy on its instruction, the information has been de-identified so it cannot identify you, the disclosure is required by law, or it is in connection with a business transaction or bankruptcy proceeding.

Supporting quotations

We will not disclose your Personal Health Information without your prior written consent with other people or non-affiliated companies unless: (i) such disclosure is necessary in order to provide the Services; (ii) to your pharmacy on their instruction, (iii) the Personal Health Information has been “de-identified” so that it cannot identify you; (iv) such disclosure is required by law; or (v) such disclosure is in connection with a business transaction or bankruptcy proceeding.

Qualifications & exceptions

• The consent rule covers disclosures to other people or non-affiliated companies, so disclosures to affiliates are not addressed by this sentence.
• "Necessary to provide the Services" is not defined further.

Not stated here

• The policy does not say how business-transaction disclosures of health information are limited.

Cross-references

• narrows (model-proposed): Other disclosures at your direction, or if Instacart believes it necessary to protect operations, rights or remedies — narrows: The prescription section limits disclosure of Personal Health Information to listed circumstances absent prior written consent. The general disclosure entry allows disclosure to other parties for protective purposes that are not on that list. For health information, the prescription section governs.
• narrows (model-proposed): Contact, device, activity and general location may go to advertising partners, including for cross-site ads — narrows: The general list allows disclosure to marketing and advertising partners. The prescription section says Personal Health Information is not disclosed to non-affiliated companies without prior written consent unless a listed circumstance applies, and that section governs for health information.

Sharing & Disclosure · Company practice

Restaurant orders involve a restaurant partner that handles your payment and shares with couriers and restaurants

For restaurant orders, which are not available on Instacart White Label Sites, Instacart shares certain Personal Information with its restaurant partner. When you place a restaurant order, that partner collects and processes your credit card or other payment information. It may use certain of your information to provide the restaurant services, including customer support, and will disclose it to the couriers and restaurants so they can prepare and hand over your order. Your restaurant orders are linked to your Instacart account, and you can request information about them through Your Privacy Choices.

Supporting quotations

7. Restaurant Orders (Not Available on Instacart White Label Sites)

we share certain of your Personal Information with our restaurant partner who facilitates the restaurant experience for Instacart

When you place a restaurant order, our restaurant partner will collect and process your credit card or other payment information in order to fulfill the order.

will also disclose this information to the couriers and restaurants from which you placed an order

Your restaurant orders are linked to your Instacart account, and you can request information about those orders by exercising your Privacy Choices below.

Where available, if you place a restaurant order, our restaurant partner will collect and process your credit card or other payment information in order to fulfill the order.

Qualifications & exceptions

• Applies to restaurant orders, which are not available on Instacart White Label Sites.
• Payment collection by the restaurant partner applies where restaurant orders are available.

Not stated here

• The restaurant partner is not named.

Data Access & Collection · Company commitment

Services are not for children under 18; Instacart says it will take reasonable steps to remove their data

The Services are not designed for or intentionally directed to children under 18. If Instacart becomes aware it received Personal Information from someone under 18, it says it will take reasonable steps to remove it from its records. Separately, the collection section says you may not provide Personal Information about children under 18.

Supporting quotations

8. Children’s Privacy

The Services are not designed for or intentionally directed to children under the age of 18.

If we become aware that we have received Personal Information from an individual under the age of 18, we will take reasonable steps to remove the individual’s Personal Information from our records.

You may not provide Personal Information about children under the age of 18.

Qualifications & exceptions

• The removal commitment applies once Instacart becomes aware, and is limited to reasonable steps.

Not stated here

• The policy does not describe any age check beyond the ID verification for restricted orders.

Cross-references

• related (model-proposed): Details about other people are collected; you must have permission and may not provide children's data — references: The collection section tells users not to provide Personal Information about children under 18, which pairs with the Children's Privacy statement that the Services are not directed to children under 18.

Sharing & Disclosure · Context

Third-party sites and sharing tools follow their own privacy policies

Some links on the Services lead to third-party websites and services that Instacart does not operate, and it may offer social sharing tools. The privacy practices of those sites and services are governed by their own privacy policies, and Instacart encourages you to read them before giving them Personal Information.

Supporting quotations

9. Third-Party Websites

Some links on the Services may redirect you to third-party websites and services that we do not operate.

The privacy practices of these websites and services will be governed by their own privacy policies.

Qualifications & exceptions

• Applies to sites and services Instacart does not operate.

Not stated here

• Those third-party policies are not part of the supplied text.

Security & Safeguards · Company commitment

Instacart maintains reasonable measures to protect information, including health information

Instacart says it employs and maintains reasonable administrative, physical and technical measures designed to protect Personal Information under its control from unauthorized access, use and disclosure. For Personal Health Information, it says it uses systems and processes consistent with federal and state privacy and security requirements, including HIPAA.

Supporting quotations

10. Information Security

We employ and maintain reasonable administrative, physical, and technical measures designed to safeguard and protect Personal Information under our control from unauthorized access, use, and disclosure.

In addition, when we collect, maintain, access, use, or disclose your Personal Health Information, we do so using systems and processes consistent with information privacy and security requirements under applicable federal and state laws, including, without limitation, HIPAA.

Qualifications & exceptions

• The commitment is to reasonable measures "designed to" protect information, not to prevent every incident.

Not stated here

• No specific security measures, certifications or breach-notice commitments are described.

Security & Safeguards · Restriction or exception

Instacart does not guarantee the security of your information

Because no data transmission or storage system is completely secure, Instacart says it cannot guarantee the security of your information.

Supporting quotations

Nevertheless, because no data transmission or storage system is completely secure, we cannot guarantee the security of your information.

Qualifications & exceptions

• The disclaimer sits after the health-information security sentence and is worded about your information generally.

Cross-references

• qualifies (model-proposed): Instacart maintains reasonable measures to protect information, including health information — qualifies: The commitment to reasonable security measures is qualified by the statement that no system is completely secure and Instacart cannot guarantee security.

Sharing & Disclosure · Company practice

Information may be transferred outside your country or region, including Canadian data to the United States

Instacart says it operates a global business and uses vendors around the world, so the disclosures described in the policy may transfer your Personal Information outside the country or region where you live. For example, Personal Information of customers in Canada is transferred outside Canada, and for Quebec residents outside Quebec, including to the United States. The Canada section points back to this section for transfer and storage outside Canada.

Supporting quotations

11. Cross-Border Transfers

Instacart operates a global business, and we use vendors located around the world to help us run our business.

the disclosures described above may result in the transfer of your Personal Information outside of the country or region in which you reside.

the Personal Information of customers located in Canada will be transferred outside of Canada (and for residents of Quebec, outside of Quebec), including to the United States.

16. Disclosures for Residents of Canada

For information about the transfer and storage of your Personal Information outside of Canada

Qualifications & exceptions

• The general statement is that disclosures "may result in" transfers; the Canada and Quebec statement is that transfers "will" happen.
• The Canadian example names the United States as one destination, not the only one.

Not stated here

• Other destination countries are not named.

Security & Safeguards · Company commitment

Transfers follow applicable law, but foreign authorities may be able to access the data

When Instacart transfers Personal Information outside your country or province of residence, it says it does so in accordance with applicable law and takes appropriate steps to ensure the information is protected. It warns that outside the jurisdiction where you live, some of your information will be subject to local laws that may permit government and national security authorities there to access it in certain circumstances.

Supporting quotations

When we transfer your Personal Information outside of your country or province of residence, we do so in accordance with applicable law and take appropriate steps to ensure your information is protected.

some of your Personal Information will be subject to applicable local laws, which may permit government and national security authorities in those jurisdictions to access your Personal Information in certain circumstances.

Qualifications & exceptions

• The protection commitment is to "appropriate steps", which are not specified.
• The warning about authority access is limited to circumstances allowed by local laws.

Not stated here

• The steps taken to protect transferred information are not described.

Retention & Deletion · Company commitment

Information is kept only as long as necessary for the purposes it was collected, including legal requirements

Instacart says it keeps Personal Information only as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting or reporting requirements. No fixed retention periods are stated.

Supporting quotations

12. Information Retention

We keep Personal Information only for as long as necessary to fulfill the purposes for which we have collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Not stated here

• The policy gives no retention period for any category of information, including IDs, session replays, call recordings or precise location.

Retention & Deletion · Company practice

Retention periods are set by information type, risk, purpose, alternatives and legal requirements

To decide how long to keep Personal Information, Instacart says it considers the amount, nature and sensitivity of the information, the risk of harm from unauthorized use or disclosure, the purposes for which it uses it, whether it can achieve those purposes by other means, and applicable laws that require it to retain information for regulatory purposes or permit it to retain information to preserve its legal rights.

Supporting quotations

To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information; the potential risk of harm from unauthorized use or disclosure of the Personal Information; the purposes for which we use the Personal Information; whether we can achieve those purposes through other means; and the applicable laws that require us to retain information for regulatory purposes or permit us to retain the information to preserve our legal rights.

Qualifications & exceptions

• The factors guide the decision; the policy does not say which factor prevails.

Not stated here

• The policy does not say how these factors apply to specific categories.

Legal Rights & Agreement Rules · User right or choice

Your choices and rights depend on where you live, may have exceptions, and exercising them is not penalized

Depending on where you live and applicable law, you can make certain choices and exercise certain rights over how Instacart uses your Personal Information. Rights and requests may be subject to applicable exceptions. Instacart says it will not discriminate against you if you exercise these rights.

Supporting quotations

13. Your Privacy Choices

Depending on your place of residence, under applicable law, you can make certain choices and exercise certain rights with respect to our use of your Personal Information.

Please note that rights and requests may be subject to applicable exceptions.

We will not discriminate against you if you decide to exercise these rights.

Qualifications & exceptions

• Rights depend on place of residence and applicable law, and requests may be subject to exceptions.

Not stated here

• The policy does not list which states' laws apply, apart from the California, Nevada and Canada sections.

Use & Processing · User right or choice

You can opt out of marketing messages, but not administrative or transactional messages

Instacart may send periodic marketing and promotional emails, push notifications and text messages, and says it will get your consent where the law requires. You can opt out by following the opt-out instructions in any message or by visiting your Account Settings. Even if you opt out, Instacart may still send administrative and transactional messages, which you cannot opt out of. Elsewhere the policy points to this section for controls over marketing and interest-based advertising.

Supporting quotations

Your Marketing Choices

We may send you periodic marketing and promotional emails, push notifications and/or text messages to your mobile device and, where required by law, we will obtain your consent to do so.

you may opt out of receiving them by following the opt-out instructions included in any communication that you receive from us or by visiting your Account Settings.

we may still send you administrative and transactional messages from which you cannot opt out.

Details on how to exercise your choices with respect to marketing and interest-based advertisements can be found in Your Privacy Choices below.

Qualifications & exceptions

• Consent is obtained "where required by law".
• Administrative and transactional messages are excluded from the opt-out.

Not stated here

• This entry covers messages Instacart sends; opting out of interest-based advertising is covered by the Right to Opt Out entry.

Account & Service Control · User right or choice

You can review and update account information in Account Settings, or email if you lost access

If you have an account, you can review, correct or update your information, including name, telephone number, delivery address and payment information, at any time through the Account Settings page. Changes may take some time to take effect. If you do not have or no longer have access to your account, you can email customerprivacy@instacart.com.

Supporting quotations

Correct or Update your Account Information and Settings

you may review, correct, or update your information (including your name, telephone number, delivery address, and payment information) at any time by logging in to your account and visiting the “Account Settings” page.

changes to your settings may require some time to take effect.

If you do not have or no longer have access to your Instacart account, please email us at customerprivacy@instacart.com to submit your requests.

Qualifications & exceptions

• Self-service applies if you have created an account and can log in.

Not stated here

• No timeframe is given for changes to take effect.

Account & Service Control · User right or choice

Right to know categories and, in some states, specific third parties; right to access a portable copy

Depending on where you live, you may have additional privacy rights that vary by state and have exceptions. The Right to Know covers the categories of data collected about you, the categories of sources, and the categories of third parties to whom Instacart discloses it. Residents of certain states may also ask for categories or specific third parties to which Instacart discloses or sells personal information or shares it for targeted advertising; Instacart says it provides that as part of the Right to Access request. The Right to Access lets you obtain a copy of your Personal Information in a portable format. Instacart's restaurant section says you can request information about restaurant orders through these Privacy Choices.

Supporting quotations

Other Privacy Rights

Depending on where you reside, you may have certain additional privacy rights with respect to your Personal Information, under applicable law. The exact scope of these rights may vary by state and include certain exceptions:

Right to Knowwhat categories of data we have collected about you, the categories of sources of this data, and the categories of third parties to whom we disclose your information (as described above in this Privacy Policy).

Residents of certain states may have additional information rights, such as the right to request categories or specific third parties to which we disclose or sell Personal Information or share it for targeted advertising. If you reside in a state that allows for these additional disclosures, we will provide such information as part of your Right to Access request.

Right to Access and obtain a copy of your Personal Information in a portable format.

you can request information about those orders by exercising your Privacy Choices below.

Qualifications & exceptions

• The scope varies by state and has exceptions.
• Specific third parties are provided only if you live in a state that allows the additional disclosure.

Not stated here

• The policy does not list the states that allow these additional disclosures.

Account & Service Control · User right or choice

Right to correct inaccurate information and right to delete

Depending on where you live, you may have the right to correct inaccurate Personal Information Instacart holds about you and the right to delete the Personal Information it holds about you. The policy says these rights vary by state and have exceptions, and that it will process access, deletion and correction requests only after verifying your identity.

Supporting quotations

Right to Correct inaccurate Personal Information we hold about you.

Right to Delete the Personal Information we hold about you.

The exact scope of these rights may vary by state and include certain exceptions:

we will only process your request for access, deletion and correction when your identity has been verified (or where otherwise not permitted).

Qualifications & exceptions

• Scope varies by state and includes exceptions.
• Requests are processed only after identity verification.

Not stated here

• The policy does not say what Personal Information may be kept after a deletion request.

Sharing & Disclosure · User right or choice

Right to opt out of sale, sharing and targeted advertising, including through GPC browser signals

You may have a right to opt out of the sale and sharing of your Personal Information, or its disclosure for targeted advertising. You can exercise it, where available, through the privacy choices page, or by turning on a browser-based opt-out preference signal such as Global Privacy Control (GPC). Instacart says it listens for and honors GPC signals as required under applicable laws.

Supporting quotations

Right to Opt Out of sale and sharing of your Personal Information or disclosure of your Personal Information for targeted advertising.

Right to Opt Out - you may exercise your right to opt out, where available, by visiting this

You may also exercise your opt out rights by enabling a browser-based opt-out preference signal that complies with applicable laws, such as the Global Privacy Control (“GPC”).

We listen for and honor GPC signals as required under applicable laws.

Qualifications & exceptions

• Available "where available", depending on where you reside.
• GPC signals are honored "as required under applicable laws".

Not stated here

• The policy does not say which jurisdictions require Instacart to honor GPC signals.

Account & Service Control · Procedure

How to submit privacy requests: logged-in request, email for others, or an authorized agent

Account holders with an active account can submit a request through a link that asks them to log in again. People without an account, who no longer have access, or who used Instacart through an embedded partner experience such as Groceries Powered by Instacart should email customerprivacy@instacart.com. Depending on where you live, an authorized agent can submit eligible privacy requests for you by email, and can use the opt-out instructions. The policy says that to confirm requests from an agent it may require written proof of permission and may confirm directly with you, other than for opt-outs.

Supporting quotations

How to Exercise These Privacy Rights

All other Privacy Rights -

If you have an active Instacart account, click

You will be prompted to re-log in to your Instacart account.

If you do not have an Instacart account, no longer have access to your Instacart account, or you used Instacart through one of our embedded partner experiences (such as Groceries Powered by Instacart), please email us at customerprivacy@instacart.com to submit your request.

Depending on where you reside, you may authorize another person or entity to exercise certain rights on your behalf (an “Authorized Agent”).

Authorized Agents can submit all eligible privacy requests on behalf of consumers by emailing us at customerprivacy@instacart.com.

If your request was submitted by an Authorized Agent, where permitted or necessary to maintain security, we may require written proof of the Authorized Agent’s permission to submit the request on your behalf and may confirm the request directly with you (other than for opt-outs).

To exercise these Privacy Rights, please follow the instructions below:

Qualifications & exceptions

• Authorized agents are available only in states that allow them.
• Written proof and direct confirmation may be required where permitted or necessary for security, but not for opt-outs.

Not stated here

• No response deadline is stated.

Legal Rights & Agreement Rules · User right or choice

You can appeal a refusal by email, and may complain to your state attorney general

If you ask to exercise a right and Instacart does not act on the request, you may appeal if you are in an eligible jurisdiction by emailing PrivacyAppeals@instacart.com with the subject line "Rights Request Appeal". If you are unsatisfied with how the appeal was handled, you may have the right to complain to your state's attorney general.

Supporting quotations

Right to appeal

If you submit a request to exercise any of the rights described above and we do not take action on the request, you may appeal our decision if you are in an eligible jurisdiction.

please email us at PrivacyAppeals@instacart.com with the subject line “Rights Request Appeal.”

you may have the right to complain to your state’s attorney general.

Qualifications & exceptions

• Appeals are available only in eligible jurisdictions.
• The attorney general complaint right is stated as something you "may" have.

Not stated here

• The policy does not say which jurisdictions are eligible or how long an appeal takes.

Data Access & Collection · Company practice

Instacart does not respond to Do Not Track signals

Do Not Track is a developing browser standard that tells websites you do not want your activity collected over time and across third-party websites. Although Instacart says it tries to honor users' privacy preferences, it does not interpret or respond to DNT or similar browser signals at this time. This sits beside the policy's statement that it honors Global Privacy Control signals as required under applicable laws, and its description of advertising partners that may track activity across websites over time.

Supporting quotations

Do Not Track

we do not interpret or respond to DNT or other similar signals from your browser at this time.

“Do Not Track” (“DNT”) is a developing standard for web browsers that aims to inform the websites you visit that you do not want information about your online activity collected over time and across third-party websites or online services.

Some of our advertising partners may use cookies, SDKs, or other trackers to collect information about your online activity over time and across different websites or online services.

Qualifications & exceptions

• The statement is limited to DNT and similar browser signals "at this time".

Not stated here

• Whether any signals other than GPC are honored is not stated beyond "other similar signals".

Cross-references

• contrast (model-proposed): Right to opt out of sale, sharing and targeted advertising, including through GPC browser signals — contrast: Instacart says it does not respond to Do Not Track or similar signals, while it says it listens for and honors Global Privacy Control signals as required under applicable laws. The two statements treat different browser signals differently, and the policy does not explain the basis for the distinction beyond the legal requirement.

Legal Rights & Agreement Rules · User right or choice

California residents' CCPA rights are as described in the policy, with categories in the Summary Chart

For California residents, the policy says the California Consumer Privacy Act gives certain rights, as described in the policy's privacy rights section, and points to its Summary Chart for the categories of Personal Information Instacart collects and sells or shares for cross-context behavioral advertising, as the CCPA requires.

Supporting quotations

14. Supplemental Disclosures for Residents of California

The California Consumer Privacy Act (“CCPA”) provides California residents with certain rights, as described above

Please refer to our Summary Chart in this Privacy Policy for details regarding the categories of Personal Information that we collect and sell or share for cross-context behavioral advertising as required under the CCPA.

Qualifications & exceptions

• Applies to California residents.

Cross-references

• related (model-proposed): Summary Table lists categories collected, their sources and recipients of sale, sharing or targeted-ad disclosures — references: The California section sends CCPA details about categories sold or shared for cross-context behavioral advertising to the Summary Table.

Use & Processing · Company commitment

Sensitive Personal Information is used or disclosed only for four stated purposes

Under the California supplemental disclosures, Instacart says it uses or discloses sensitive Personal Information only as necessary to provide the Services; to resist malicious, deceptive, fraudulent or illegal actions aimed at its business; to ensure the physical safety of people; and to verify, maintain and improve the quality of its Services.

Supporting quotations

We only use or disclose sensitive Personal Information as necessary to provide the Services; resist malicious, deceptive, fraudulent, or illegal actions directed at our business; ensure the physical safety of natural persons; and verify, maintain, and improve the quality of our Services.

Qualifications & exceptions

• The statement sits in the California supplemental section; the policy does not say whether it applies the same way outside California.
• The fourth purpose, verifying, maintaining and improving quality, is broad.

Not stated here

• Whether the statement applies outside California is not stated.

Cross-references

• contrast (model-proposed): Precise location is collected only if you allow it through your device or browser — contrast: The California section says sensitive Personal Information is used or disclosed only as necessary for four purposes. The location entry says precise location, which the Summary Table lists as sensitive, may also be used for analytics and to understand how to improve the Services. Whether analytics fits the fourth stated purpose, verifying, maintaining and improving quality, is not stated, and the California statement may be limited to California.

Legal Rights & Agreement Rules · User right or choice

California consumer-rights notice: email legal@instacart.com or reach the Complaint Assistance Unit

The policy gives the California Civil Code Section 1789.3 consumer rights notice. If you have a question or complaint about the website, email legal@instacart.com or write to the address under Contact Information. California residents may contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 400 R Street, Suite 1080, Sacramento, California 95814 or by telephone.

Supporting quotations

Under California Civil Code Section 1789.3, California residents are entitled to the following specific consumer rights notice:

If you have a question or complaint regarding our website, please send an email to legal@instacart.com.

California residents may reach the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 400 R Street, Suite 1080, Sacramento, California 95814, or by telephone at (916) 445-1254 or (800) 952-5210.

Qualifications & exceptions

• The notice is stated for California residents.

Not stated here

• The text of California Civil Code Section 1789.3 is not supplied; the policy states the notice without quoting the statute.

Sharing & Disclosure · User right or choice

California residents can opt out of disclosure to third parties for their own direct marketing

If Instacart discloses information subject to California's Shine the Light law to third parties for their own direct marketing, California residents may opt out through the privacy choices page linked in the policy.

Supporting quotations

If we disclose information subject to California’s “Shine the Light” law to third parties for their own direct marketing purposes, California residents may opt out

Qualifications & exceptions

• Conditioned on Instacart disclosing information subject to the Shine the Light law for third parties' own direct marketing.

Not stated here

• The policy does not say whether such disclosures occur.

Sharing & Disclosure · User right or choice

Nevada residents can opt out of the sale of personal information by request form

If you live in Nevada, you can opt out of the sale of your personal information by completing the privacy request form linked in the policy.

Supporting quotations

15. Disclosures for Residents of Nevada

If you live in Nevada, you can opt out of the sale of your personal information by completing the privacy request form

Qualifications & exceptions

• Applies to Nevada residents.

Sharing & Disclosure · Context

Canada section points to Cross-Border Transfers for transfers outside Canada or Quebec

The Canada section sends residents of Canada, and residents of Quebec for transfers outside their province, to the Cross-Border Transfers section for information about transfer and storage of their Personal Information outside Canada.

Supporting quotations

16. Disclosures for Residents of Canada

For information about the transfer and storage of your Personal Information outside of Canada, or if you are a resident of Quebec, outside of your province of residence, please see Cross-Border Transfers

Qualifications & exceptions

• Applies to residents of Canada and Quebec.

Use & Processing · Company practice

Automated tools that detect fraud can make decisions about you and may lead to account deactivation

For some of the uses described in the Information Uses section, Instacart may use technological tools that make decisions about you automatically. The policy says these include tools that detect fraud, which may lead to account deactivation. This statement is in the Canada section.

Supporting quotations

For some of the uses described in Information Uses above, we may use technological tools that render decisions about you automatically. These include tools that detect fraud, which may lead to account deactivation.

Qualifications & exceptions

• The statement appears in the Disclosures for Residents of Canada section.
• The word "include" means fraud detection is an example, not the only automated tool.

Not stated here

• The policy does not say whether the same tools are used outside Canada or what recourse you have after a deactivation.

Legal Rights & Agreement Rules · User right or choice

Canadian residents can request access or deletion, use agents, appeal to Instacart and complain to the regulator

Residents of Canada can submit an access or deletion request as explained in the Your Privacy Choices section, and requests may be submitted by authorized agents as described there. If you believe applicable data protection laws have not been complied with, you may lodge an appeal with Instacart using the contact information below. You also have the right to complain directly to the appropriate data protection authority.

Supporting quotations

If you are a resident of Canada, you may submit an access or deletion request as explained in Your Privacy Choices

Requests may be submitted by Authorized Agents as described in Your Privacy Choices

you may lodge an appeal with us by using the contact information provided below.

You also have the right to complain directly to the appropriate data protection authority.

Qualifications & exceptions

• Applies to residents of Canada.
• The access and deletion process follows the Your Privacy Choices section, including identity verification.

Not stated here

• The data protection authority is not named.

Cross-references

• related (model-proposed): How to submit privacy requests: logged-in request, email for others, or an authorized agent — references: The Canada section refers to authorized agents as described in Your Privacy Choices; the submission entry gives the agent process and its limits.

Legal Rights & Agreement Rules · Company practice

The policy may be updated; the Last updated date shows the latest revision

Instacart may update the policy from time to time to reflect changes in its practices or applicable law. The Last updated date at the top shows when it was last revised, and Instacart encourages you to review it periodically.

Supporting quotations

17. Changes to this Privacy Policy

We may occasionally update this Privacy Policy to reflect changes in our practices with respect to the collection, use, and disclosure of Personal Information and/or changes in applicable law.

The “Last updated” date at the top of this page indicates when this Privacy Policy was last revised.

We encourage you to review this Privacy Policy periodically to remain informed about our information handling and privacy practices.

Legal Rights & Agreement Rules · Company commitment

Material changes may come with extra notice and, where the law requires, a request for consent

If Instacart makes changes, it says it will revise the date at the top of the policy. For material changes it may give additional notice, such as a notice on the Services or a message to the email address on file, and seeks your consent where applicable privacy laws require it.

Supporting quotations

If we make changes, we will revise the date at the top of this Privacy Policy and, in the case of material changes to this Privacy Policy, we may provide you with additional notice (such as a notice posted on the Services or a message delivered to the email address that we have on file for you), and seek your consent where required by applicable privacy laws.

Qualifications & exceptions

• Additional notice for material changes is something Instacart "may" provide.
• Consent is sought where required by applicable privacy laws.

Not stated here

• The policy gives no advance-notice period or definition of a material change.

Account & Service Control · Procedure

Contact the Global Privacy Team by email, phone or mail; Help Center for customer service

Questions or comments about the policy or Instacart's information handling can go to its Global Privacy Team at 50 Beale Street, Suite 600, San Francisco, California 94105, by email at privacy@instacart.com or by phone at 1-888-246-7822. Customer service inquiries are directed to the Help Center.

Supporting quotations

18. Contact Information

Questions or comments about this Privacy Policy or our information handling practices? Contact Instacart’s Global Privacy Team at:

50 Beale Street, Suite 600

San Francisco, California 94105

privacy@instacart.com

1-888-246-7822

For customer service inquiries, visit our

Instacart

Account & Service Control · Procedure

Alternative-format access and accessibility feedback contacts

If you have a disability and would like to access the policy in an alternative format, you can call (888) 317-8968. For comments about the website's accessibility, you can email accessibility-feedback@instacart.com. Instacart says it is committed to making its electronic and information technologies accessible.

Supporting quotations

If you have a disability and would like to access this Privacy Policy in an alternative format, please contact us at (888) 317-8968.

Instacart is committed to making its electronic and information technologies accessible to individuals with disabilities.

If you have comments concerning this website’s accessibility, please contact us at the email address accessibility-feedback@instacart.com.