AOL Privacy Policy

FIRST SEEN 2026-07-29 · VERSION 20260729_rev01 · COMPARED WITH 20260326_rev01

Full text changes — 20260326_rev01 to 20260729_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1This Privacy Policy ("**Privacy Policy**") applies to the collection, use, and processing of personal data of users ("**user**" or "**you**") by AOL Media LLC ("**we**" or "**us**") in connection with your use of AOL website, available at https://www.aol.com/ ("**Website**"), as well as the app, services and platform ("**Services**"). We provide this Privacy Policy in accordance with the applicable data protection laws, including Regulation (EU) 2016/679 - General Data Protection Regulation ("**GDPR**" and, collectively, "**Applicable Privacy Laws**").
2
3Residents of certain U.S. States may have different privacy rights under their applicable U.S. State Privacy Laws. If you are a U.S. Consumer, in addition to this Privacy Policy, please also refer to the relevant [U.S. State Laws page](https://legal.aol.com/privacy/us-state-laws/index.html) for additional information and a detailed description of your rights and how to exercise them.
4
51. ## Data Controller
6
7 The Data Controller is AOL Media LLC, based in 770 Broadway, New York, NY 10003, United States of America.
8
92. ## Categories of Personal Data that We Collect, Purposes and Legal Bases for Our Processing
10
11 Below is a list of the categories of personal data that we collect and process, along with the purposes and the legal grounds for processing it. Please be aware that not all information listed may be considered as personal data in your jurisdiction under Applicable Privacy Laws.
12
13 | Purpose | Legal Basis | Categories of Processed Data |
14 | --- | --- | --- |
15 |
16 a) To enable you to use our Services ("**Service Delivery**").
17
18 For example, we may process your data to enable you to perform the following activities:
19
20 - Navigating our Website
21 - Using the AOL Mail
22 - Subscribe to any of our plans or bundles
23
24 |
25
26 Our contractual relationship provides the legal basis for processing this data for this purpose.
27
28 |
29
30 Username, password, log-in activity and the unique identifiers we create for your account ("**Account Data**").
31
32 Information about your approximate location (for example, the country or city you are in) ("**Approximate Geolocation Information**"). This does not include precise geolocation information.
33
34 Name, email address, phone number, postal address, IDs ("**Identity and Contact Data**").
35
36 Information about your interaction with our Services, such as your browsing history and search history, and information about your interaction with our ads ("**Online activity information**").
37
38 Comments, photos and videos that you upload to our consumer services and make available to other people ("**User-generated Content**").
39
40 Technical data such as your IP address, your login data, browser type and version, hardware information, time zone setting and location, browser plug-in types and versions, operating system and website, and other technology on the devices you use to access the Services or originating from another platform you use to access the Services ("**Technical Data**").
41
42 Details about the payments made and the products and services purchased ("**Transaction data**"). We do not store card details on our servers.
43
44 |
45 |
46
47 b) To provide you with some specific, smart features, such as the smart email features (e.g., to automatically identify travel-related emails, including those relating to flight and hotel bookings, and allowing one-tap unsubscribing from emails you no longer want to receive) ("**Smart Features**").
48
49 |
50
51 Depending on the applicable jurisdiction, your consent or our legitimate interest is the legal basis to process your data to offer you the Smart Features.
52
53 As for the collection of personal data by means of tracking technologies, please see our [Cookie Policy](https://legal.aol.com/privacy/cookies/index.html).
54
55 |
56
57 Account Data.
58
59 Information about the emails you send and receive, such as the subject line, the content of incoming and outgoing emails and attachments, and metadata about your emails, such as the times they are sent ("**Email Information**").
60
61 |
62 |
63
64 c) To improve and develop our products and services ("**Service Improvement**"). For example, we may process your data by conducting statistical analysis or other research activities to optimize our features and provide you with new ones.
65
66 |
67
68 Our legitimate interest to improve our products and services provides the legal basis for processing this data for this purpose.
69
70 As for the collection of personal data by means of tracking technologies, please see our [Cookie Policy](https://legal.aol.com/privacy/cookies/index.html).
71
72 |
73
74 Account Data.
75
76 Age, gender, marital status and socioeconomic information (for example, your level of education, employment status and income range) ("**Demographic Data**")
77
78 Your comments, suggestions, and answers to our surveys ("**Feedback**").
79
80 Identity and Contact Data.
81
82 Online activity information.
83
84 Information that describes where you are in a precise way (e.g., the co-ordinates-latitude and longitude-of your device, which are precise enough to locate it at a specific place) ("**Precise Geolocation Information**").
85
86 User-generated Content.
87
88 Information about your preferences that you provide us (e.g., selecting your sport team), or that we infer (e.g., assuming you are interested in sport if you visit the related section of our Website) ("**User Preference Information**").
89
90 Technical Data.
91
92 Transaction Data.
93
94 |
95 |
96
97 d) To provide tailored content to you, including to build a content interest profile ("**Tailored Content**").
98
99 |
100
101 Our legitimate interest to provide you with tailored content and to create content interest profiles based on your interests provides the legal basis for processing this data for this purpose.
102
103 As for the collection of personal data by means of tracking technologies, please see our [Cookie Policy](https://legal.aol.com/privacy/cookies/index.html).
104
105 |
106
107 Account Data.
108
109 Approximate Geolocation Information.
110
111 Information that we may collect from the emails you receive from retailers or other organizations ("**Commercial Emails**").
112
113 Demographic Data.
114
115 Identity and Contact Data.
116
117 Online activity information.
118
119 Precise Geolocation Information.
120
121 User-generated Content.
122
123 User Preference Information.
124
125 Technical Data.
126
127 Transaction Data.
128
129 |
130 |
131
132 e) To ensure the quality and the proper functioning of the Services, by analyzing, preventing or correcting failures and bugs, and to prevent the illicit use or misuse of the Services ("**Troubleshooting**").
133
134 |
135
136 Our legitimate interest to ensure the quality and the smooth functioning of the Services provides the legal basis for processing this data for this purpose.
137
138 |
139
140 Account Data.
141
142 Identity and Contact Data.
143
144 User-generated Content.
145
146 Technical Data.
147
148 |
149 |
150
151 f) To enforce our Terms of Service, and enhance the safety and integrity of our Services and users ("**Service Integrity**").
152
153 |
154
155 Our legitimate interest to enforce our Terms of Service and maintain the safety and integrity of our Services provides the legal basis for processing this data for this purpose.
156
157 Depending on the applicable jurisdiction, your consent is the legal basis for the recording of our phone calls for security, fraud detection, prevention, quality assurance and training purposes.
158
159 |
160
161 Account Data.
162
163 Recordings of phone calls you have with us, for security, fraud detection, prevention, quality assurance and training purposes ("**Call Recordings**").
164
165 Identity and Contact Data.
166
167 User-generated Content.
168
169 Technical Data.
170
171 |
172 |
173
174 g) To carry out marketing activities, and send you information and marketing communications about our products and services-such as tips, offers, and newsletters-to conduct user research activities, or to promote our partners' products, through email or push notifications ("**Marketing**").
175
176 |
177
178 Your consent provides the legal basis for processing this data for this purpose.
179
180 In the jurisdiction where your consent is not required, the legal basis is our legitimate interest.
181
182 |
183
184 Approximate Geolocation Information.
185
186 Demographic Data.
187
188 Identity and Contact Data.
189
190 User-generated Content.
191
192 User Preference Information.
193
194 Technical Data.
195
196 |
197 |
198
199 h) To comply with our legal obligations, including requests from public authorities, and to prove that we have complied with them, such as in the event of a request from a public authority ("**Compliance**").
200
201 |
202
203 When this activity is required by a specific legal obligation, your personal data may be used to the extent required to comply with the legal obligation itself.
204
205 When the applicable law leaves some discretion in assessing the appropriate way to comply with it, your personal data is used based on our legitimate interest to prove our compliance.
206
207 |
208
209 Any information necessary to comply with legal obligations and requests from public authorities.
210
211 |
212 |
213
214 i) To send you administrative or technical updates and to process and respond to customer support communications and any other requests or communications from you ("**Customer Support**").
215
216 |
217
218 Our contractual relationship provides the legal basis for processing this data for this purpose.
219
220 |
221
222 Account Data.
223
224 Call Recordings.
225
226 Identity and Contact Data.
227
228 User-generated Content.
229
230 Technical Data.
231
232 |
233 |
234
235 j) To establish, exercise or defend our rights and those of our employees, and to carry out corporate transactions or operations ("**Defense**"). For example, we may process your data in case of bankruptcy, merger, acquisition, reorganization, sale of assets or assignments, and due diligence related to any such transactions.
236
237 |
238
239 Our legitimate interest or necessity to establish, exercise, or defend our rights and to carry out corporate transactions or operations provide the legal basis for processing this data for this purpose.
240
241 |
242
243 Any information necessary to ensure the performance of these purposes.
244
245 |
246 |
247
248 k) To show you personalized advertising, including by installing third party tracking technologies, and to measure the effectiveness of these ads ("**Targeted Advertising**").
249
250 |
251
252 Depending on your country of residence, your consent or our legitimate interest provides the legal basis for processing this data for this purpose.
253
254 If you deny or withdraw your consent, we will still show you ads, which will not be tailored on these categories of information. In this case, our legitimate interest will be the legal basis for this processing activity.
255
256 As for the collection of personal data by means of tracking technologies, please see our [Cookie Policy](https://legal.aol.com/privacy/cookies/index.html).
257
258 |
259
260 Account Data.
261
262 Approximate Geolocation Information.
263
264 Commercial Emails.
265
266 Demographic Data.
267
268 Identity and Contact Data.
269
270 Online activity information.
271
272 Precise Geolocation Information.
273
274 User Preference Information.
275
276 Technical Data.
277
278 Transaction Data.
279
280 |
281
2823. ## Data Storage and Protection
283
284 Personal data may be processed by both automated and non-automated means and may be stored at our premises and on our service providers' servers. We adopt appropriate technical and organizational measures designed to prevent the loss, improper use and alteration of your personal data. In some cases, we may also adopt data encryption and pseudonymization measures. However, transmissions over the Internet are never 100% secure.
285
286 Personal data processed for **Service Delivery** will be kept for no more than three (3) years from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction. Upon the expiration of the mentioned retention period, unless specific legal obligations require that the data is retained for longer, your account is deleted, and your data is either deleted or anonymized.
287
288 Personal data processed for the purposes of **Smart Features**, **Service Improvement**, **Service Integrity**, **Tailored Content**, and **Marketing** will be kept for no more than three (3) years from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
289
290 Personal data processed for the purposes of **Troubleshooting** will be kept for no more than one (1) year from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
291
292 Personal data processed for **Customer Support** purposes will be kept for no more than five (5) years from the closure of the request.
293
294 Personal data processed for **Compliance** purposes will be kept for no more than five (5) years from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
295
296 Personal data processed for **Defense** purposes will be kept for no more than ten (10) years from your last interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
297
298 Regarding personal data processed for **Targeted Advertising** purposes, you can find more information visiting our [Cookie Policy](https://legal.aol.com/privacy/cookies/index.html).
299
300 Upon the expiration of the mentioned retention periods, unless specific legal obligations require that the data is retained for longer, the data is either deleted or anonymized.
301
3024. ## Your Choices With Regard to the Use of Your Personal Data
303
304 To access the Services, it is mandatory for you to provide your personal data for the purposes of **Service Delivery**, **Customer Support**, **Compliance**, and **Defense**. If you choose not to provide your personal data, you will not be able to enjoy our Services.
305
306 Where we rely on your consent to process your personal data, providing your personal data is optional, and you have the right to withdraw your consent at any time. If you choose not to provide your personal data, you will still be able to enjoy our Services.
307
308 Where we rely on our legitimate interest as the legal grounds to process your personal data you may, at any time, exercise your right to object to such processing as explained in [Section 7 (Your Rights)]() below.
309
3105. ## Recipients of Your Personal Data
311
312 We may disclose your personal data to the following categories of recipients:
313
314 - Vendors carrying out activities related or instrumental to our business and operations, either as outsourced data processors appointed in writing in accordance with Applicable Privacy Laws (such as IT or storage service providers) or as autonomous data controllers (such as advertising networks and platforms)
315 - If we carry out a corporate transaction or operation (for example, in case of merger, acquisition, reorganization, sale of assets or assignments, and due diligence related to any such transactions), personal data may be transferred to another owner, and disclosed to our advisers and any prospective purchaser's advisers, as part of such transaction or operation
316 - Public, judicial and/or police authorities, within the limits established by applicable laws
317 - Other parties as necessary, in the event we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect our rights, property, and safety or that of our users, the public, or others
318 - Professional advisors where necessary to obtain advice or otherwise protect and manage our business interests
319 - Our corporate affiliates under common control and ownership
320
321 We may transfer your data to Yahoo Inc. as an independent data controller. Yahoo Inc. will process your data for its own autonomous purposes, as described in their [privacy policy](https://legal.yahoo.com/xw/en/yahoo/privacy/intl/index.html). This transfer always happens in respect of the data protection rules applicable in the relevant jurisdictions, and does not affect EEA users.
322
323 If you give your consent to install tracking technologies, you will allow third parties to collect personal data about you in order to show you customized and personalized advertising. If you want more information, please see our [Cookie Policy](https://legal.aol.com/privacy/cookies/index.html).
324
325 Personal data will not be disclosed for any reason other than those stated above, unless such disclosure is deemed necessary for the fulfillment of a legal obligation or if we request your consent.
326
3276. ## International Transfers
328
329 Personal data we collect from and about you through the Services may be transferred to countries other than the one in which you reside, such as when we select a provider outside your country of residence. We will make such transfer of personal data pursuant to Applicable Privacy Laws.
330
331 With respect to transfer of personal data from the EEA/UK, we ensure an appropriate degree of protection to EEA/UK's users as those afforded in those areas, implementing at least one of the following safeguards:
332
333 - Transferring personal data to third parties residing in countries that have been deemed to provide an adequate level of protection for personal data by the European Commission or UK Information Commissioner's Office
334 - Requiring third parties to sign a Data Processing Agreement which incorporates the appropriate Standard Contractual Clauses, or another legally applicable data transfer mechanism, which requires them to provide protection to EEA/UK data to the standard expected within the EEA/UK
335
336 Please contact us to receive more information on the appropriate safeguards.
337
3387. ## Your Rights
339
340 Depending on where you are located, you may have certain rights under Applicable Privacy Laws in relation to your personal data. At any time and free of charge, you may exercise those rights, as specified and subject to certain limitations and exceptions under Applicable Privacy Laws. These may include the following:
341
342 - **Right of access.** You have the right to obtain information about the processing of your personal data and to access it.
343 - **Right to rectification.** You have the right to ask for the update, rectification or integration of your personal data.
344 - **Right to erasure.** You have the right to request the deletion of your personal data.
345 - **Right to restriction of processing.** You have the right to request the restriction of the processing of your personal data.
346 - **Right to data portability.** You have the right to obtain a portable electronic copy of your personal data.
347 - **Right to object.** Where we rely on our legitimate interest to process your personal data, you have the right to object to such processing, wholly or partly, on grounds related to your particular situation. In particular, you are entitled to object to the processing of your personal data for direct marketing purposes, including profiling.
348 - **Right to withdraw your consent.** Where we rely on your consent to process your personal data, you have the right to withdraw your consent, although the processing carried out before your withdrawal of consent will remain valid.
349
350 You also have the right to lodge a complaint before the competent national Data Protection Authority, or other applicable regulator in the jurisdiction where you reside.
351
352 To contact us and exercise your rights, please visit your privacy dashboard, which you can access [here](https://aol.mydashboard.oath.com/).
353
354 We may take reasonable steps to verify your identity prior to responding to your request, such as by asking you for information that matches information we have on file about you. If you are submitting a rights request as an authorized agent, we may ask you to provide proof of your authorization to make the request, or we may contact the individual who is the subject of the request for confirmation, in accordance with Applicable Privacy Laws.
355
356 If you are a U.S. Consumer, please also refer to the relevant U.S. State Laws page for a detailed description of your rights and how to exercise them.
357
358 If you used products and services offered under the AOL brand by Yahoo prior to January 1st, 2026, Yahoo Inc. remained an independent data controller for your personal data in accordance with Applicable Privacy Laws. If you wish to receive additional information on the processing of personal data by Yahoo, or exercise your rights in relation to the personal data retained by Yahoo, please refer to [Yahoo's privacy policy](https://legal.yahoo.com/xw/en/yahoo/privacy/intl/index.html) or contact Yahoo directly via [this form](https://help.yahoo.com/kb/account) (or [this form](https://uk.help.yahoo.com/kb/account) for European users).
359
3608. ### Links to Third Party Websites
361
362 We may provide links to websites and other third-party content (e.g., social media platforms) that are not owned or operated by us. The websites and third-party content to which we link may have separate privacy notices or policies. If you provide any personal data to or through one of these third-party sites, your interaction and your personal data will be collected by and controlled by the privacy policy of that third party site. We recommend that you familiarize yourself with the privacy policies and practices of any such third parties, which are not governed by this Privacy Policy. We are not responsible for the privacy practices of these websites.
363
3649. ### Changes to this Privacy Policy
365
366 We may modify, integrate or update, in whole or in part, this Privacy Policy, and we will notify users of any modification, integration or update in accordance with Applicable Privacy Laws. If we make modifications, we will notify you by revising the date at the bottom of this Privacy Policy and, under certain circumstances, we may also notify you by additional means such as pop-up or push notifications within our Website or email.