Pandora - Music & Podcasts

"We may share or otherwise make available your email address, Device Data, or other personal information with unaffiliated third parties with whom we have a business relationship for ours or for their own business and advertising/marketing purposes. These third parties may include companies with whom we have marketing, licensing, sponsorship, product or service distribution, advertising, or similar agreements. We and certain third parties with whom we have a relationship collect data through the use of embedded scripts and tools provided in SDKs."

SiriusXM shares personal data broadly with unaffiliated third parties for their own marketing purposes, and embeds third-party SDKs in their apps that directly collect user data including device IDs, geolocation, and usage behavior.

"We may provide your information (e.g., email address, phone number, transaction information, or third-party proprietary IDs such as IDFA/AAID or pseudonymized IDs derived from PI, ZIP, age, gender) to certain ad platforms for such purposes. Some providers of ad-related services may use personal information, such as your email address, to generate their own identifier for you for identification across devices and services."

SiriusXM enables cross-device tracking by sharing personal identifiers with ad platforms and identity resolution services that create persistent identifiers to track users across devices and services.

"Precise Geolocation Data of Device means location derived by technological means within 1750 feet. Purposes for Collection: Advertising (to tailor content, including advertising and listening recommendations, based on your location; to manage advertising campaigns and report on and understand performance). Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: Subsidiaries, Third-Party Advertising Entities and Analytics Providers."

SiriusXM collects precise geolocation (within 1750 feet) and shares it with third-party advertising entities and analytics providers for targeted advertising purposes.

"Device Data may include but is not limited to: Your IP address, mobile, or connected device identifier, information about the device such as model, operating system version, mobile network information. SDKs may collect information when you install the mobile app including IP address, hardware model, operating system and version, precise geolocation, mobile advertising IDs (IDFA, AAID), mobile network information, and application usage behavior."

SiriusXM and third-party SDKs embedded in their apps collect extensive device data including hardware identifiers, advertising IDs, network information, and application usage behavior, much of which goes beyond core service functionality.

"We reserve the right to change this Privacy Policy at any time. If we make material changes to our privacy policy, we will update the effective date and post a notice on the Services. Your continued use of any of the Services after the effective date of the revised Privacy Policy will constitute your consent to those changes to the fullest extent allowed by applicable law."

SiriusXM can change the privacy policy unilaterally at any time, and treats continued use of services as consent to the new terms.

"We retain personal data for as long as reasonably necessary for the purposes set out in this Policy, including to provide the Services to you; to send you information related to Sirius XM; to conduct internal research, develop and improve new products and services; to comply with our contractual obligations; to protect our legal rights and obligations, resolve disputes and enforce our Customer Agreement. When you edit your personal data or change your preferences, the previous information will be retained internally as part of the history of your account for analytical, administrative, legal, and security purposes, or within backup media."

SiriusXM provides no specific deletion timelines and retains data indefinitely for broad purposes. Even when users update their information, old data is retained internally, and previous account history persists in backups.

"If you have made any public postings on the Services including community forums or on social media platforms, those communications generally cannot be removed even if you cancel or deactivate your account. Even upon deactivating your account or making your profile private, Internet search engines such as Google and Bing cache publicly available webpages for a period of time beyond our control and may make your deactivated or formerly public profile available to users."

Public postings cannot be removed even after account cancellation, and deactivated Pandora profiles may remain visible in search engine caches indefinitely, with SiriusXM disclaiming responsibility for removal.