Spotify Privacy Policy

Spotify · Official agreement

Read the agreement

4 of 98 cards in Security & Safeguards

Security & Safeguards · Company practice

Partners for user account protection

Spotify works with technical service partners to help protect user accounts.

Supporting quotations

We also work with technical service partners who help us protect user accounts.

purpose: security

Security & Safeguards · Company practice

Keeping the service secure and preventing fraud

Spotify uses personal data, including Usage Data, to keep its service secure and to detect and prevent fraud, such as analyzing usage patterns for fraudulent activity.

Supporting quotations

To keep the Spotify Service secure and to detect and prevent fraud.
For example, when we analyze Usage Data to check for fraudulent use of the Spotify Service.

data: device · data: location · data: messages · data: payment · purpose: security

Security & Safeguards · Company commitment

Measures for international data transfer compliance

Spotify uses tools and additional protections, such as encryption, pseudonymization, and policies to challenge government requests, to ensure international personal data transfers comply with applicable law.

Supporting quotations

Whenever we transfer personal data internationally, we use tools to make sure the data transfer complies with applicable law.
We also identify and use additional protections as appropriate for each data transfer. For example, we use:
technical protections, such as encryption and pseudonymization
policies and processes to challenge disproportionate or unlawful government authority requests

purpose: security · purpose: legal_compliance

Cross-references

  • supports (model-proposed): International data transfers — Measures for international data transfer compliance support international data transfers

Security & Safeguards · Company commitment

Commitment to data security

Spotify is committed to protecting user personal data and implements appropriate technical and organizational measures, including pseudonymization, encryption, access, and retention policies, to help secure it.

Supporting quotations

We’re committed to protecting our users’ personal data. We put in place appropriate technical and organizational measures to help protect the security of your personal data. However, be aware that no system is ever completely secure.
We have put various safeguards in place to guard against unauthorized access and unnecessary retention of personal data in our systems. These include pseudonymization, encryption, access, and retention policies.

Qualifications & exceptions

  • no system is ever completely secure

purpose: security