Privacy Policy

Your California Consumer Privacy Act Rights for Pandora

Your California Consumer Privacy Act Rights for Sirius XM

Effective December 18, 2025

This Privacy Policy (this “Policy”) describes the personal data collected and processed by Sirius XM Radio LLC and its subsidiaries, including Pandora Media, LLC (collectively, “Sirius XM,” “we,” “us,” or “our”) through our consumer websites, apps, and services (the “Services”). By accessing and using any of our Services, you agree to this Policy. The Services include:

• SiriusXM satellite audio services delivered under brand names SiriusXM and XM
• SiriusXM streaming audio services
• Pandora streaming audio services
• SiriusXM specialty services such as marine, aviation weather, and traffic plans
• Websites intended for retail consumers of Sirius XM and Pandora content and services, such as siriusxm.com, pandora.com, teamcoco.com, and 99percentinvisible.org, web players, applications, and platforms
• SiriusXM and Pandora live and virtual events

The Services expressly do not include (and this Policy does not apply to):

• Safety and convenience services provided in-vehicle or through a mobile safety companion app, such as OmniSecure, by our affiliate, SiriusXM Connect (also known as Sirius XM Connected Vehicle Services Inc.). Those services operate independently of any SiriusXM audio services subscription, and each has a separate privacy policy offered by your vehicle manufacturer (for connected vehicle services) or for the mobile safety companion application, that applies to the collection and use of personal data related to use of those services. Please refer to your vehicle owner’s manual or website, services or to the website for the respective mobile safety companion app, for more information about data collected and used about users of these safety and convenience services.
• Services provided by Sirius XM Canada Inc. Please refer to the Privacy Policy available on the Siriusxm.ca website for collection and use of personal data by Sirius XM Canada through its subscriptions and other services.
• Audio services licensed by Sirius XM or Pandora to businesses for use by that business for its own customers, such as Pandora for Business.
• Business-to-business advertising technology sales and services provided through Sirius XM affiliated companies and brands, including SiriusXM Media (a dba of Pandora Media LLC), AdsWizz Inc. and its subsidiaries, including Audio Ventures dba Simplecast. Relevant privacy notices for AdsWizz businesses may be found at adswizz.com.

This Policy Also Does Not Apply to:

• Personal data collected by the manufacturer of a connected speaker, TV, or other device through which you access the Services
• Personal data collected or used by anyone to whom you grant access directly
• Personal data you instruct us to provide to a third party

In addition, please note: Sirius XM makes available certain podcast content under license to or ownership by Sirius XM, such as Team Coco and 99% Invisible podcasts (“Sirius XM Podcast Content”). Some Sirius XM Podcast Content is available to listeners, by listener choice, through websites, web players, applications, or platforms not owned or controlled by Sirius XM, (each a “Third Party Service”). This Policy does not apply to the collection, use, or disclosure of your personal data by the third party who provides the Third Party Service when you choose to access Sirius XM Podcast Content through a Third Party Service; any such data collection and use is governed by the privacy notice of that third party. We recommend you familiarize yourself with the privacy notice of any Third Party Service you use to access Sirius XM Podcast Content. For more information on our data practices in connection with Sirius XM Podcast Content, please see Section 10 below, "Supplemental Information For Listeners of Sirius XM Podcast Content."

This Policy is separate from and applies in addition to any terms for subscriptions, websites, or other terms of use that apply to individual Services. Users of our Pandora services please see here and users of SiriusXM branded audio services please see here.

This Policy is made available in Spanish. To the extent that minor differences may appear in translation, the terms of the English language version shall govern.

Table of Contents

1. Territorial Limits
2. Personal Data We Collect

3. Summary of Sirius XM Key Personal Data Practices

   • Table of Our Personal Data Collection And Use Practices

4. Additional Details About Our Personal Data Practices

   • Personal Data We Collect Directly from You
   • Personal Data We Receive or Collect from Third Parties
   • Data We Collect Automatically:
   • Sharing with Third Parties
5. Third Party Advertising and Analytics/Privacy Controls
6. Your Choices and Opt Out Rights
7. Security and Retention
8. Supplemental Information For Users of Sirius XM In-Vehicle Services
9. Supplemental Information For Users of Pandora Services
10. Supplemental Information For Listeners of Sirius XM Podcast Content
11. General Audience Sites
12. Changes to This Policy
13. How to Contact Us

14. State Specific Rights

    • California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Texas, Utah, and Virginia
    • Nevada
    • California (additional rights)
    • Washington (state)
15. Table of Our Personal Data Collection and Use Practices

The Services are controlled and operated from the United States. The Services audio and subscription services under this Policy are intended for use only by residents of the United States, except for (i) certain podcast-only subscriptions and content described below or (ii) any online merchandise store operated by Sirius XM. Please see the terms of service set forth respectively in the SiriusXM Customer Agreement at siriusxm.com and the Pandora Services Terms of Use at pandora.com.

NOTE: If you are a resident of Canada, your SiriusXM audio service is governed by your Customer Agreement with Sirius XM Canada Inc. and your use of the services offered through Sirius XM Canada is governed by the SiriusXM Canada Privacy Policy.

If you are not a resident of the United States, please do not interact with the Services. To enforce our territorial limits, we may collect data associated with a device to determine the country from which the device is accessing the Services. If we receive data from your device’s location indicating that you are outside the United States, we may block your access to the Services from that particular device. If you attempt to access the Services when you are outside the United States, we will use your IP address to determine the territory of access in order to enforce our agreements and terms of use and may deny access to content or other Services.

International Transfer of Personal Data: Sirius XM Podcast Content may be accessible to you through a Third Party Service in any territory that the Third Party Service operates within, including the Sirius XM Podcast + subscription offered through Apple. When you access the Sirius XM Podcast + Subscription on Apple or Sirius XM Podcast Content on another Third Party Service, including from outside of the United States, Sirius XM may collect and use some personal data about the delivery of the podcast as set forth in this Policy, including but not limited to the IP address and device requesting the podcast and how long it was listened to, as described below in Section 10 “Supplemental Information for Listeners of Sirius XM Podcast Content”. If you choose to access the Sirius XM Podcast Content from outside of the United States, or if you provide any personal data directly to us through the Team Coco, 99% Invisible or any other Sirius XM consumer website such as the Sirius XM merchandise store, or any interaction with Team Coco or 99% Invisible directly, you understand that your data will be transferred to and processed in the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world such as the European Union.

In addition, Sirius XM owns and operates online stores for retail purchase of merchandise licensed by Sirius XM (the “Sirius XM Stores”). Access to and use of the Sirius XM Stores is permitted from outside the United States. Sirius XM operates the Sirius XM Stores from the United States and uses service providers in the United States, Canada, and the European Union. If you choose to view products or purchase merchandise from any Sirius XM Store, you consent to have your personal data transferred to and processed by Sirius XM and its Store service providers in any of these locations.

By using any of the above listed Services in this section, you consent to the transfer to and processing of your personal data in the United States. Data collected or used by a Third Party Service is governed by the privacy policy of the Third Party Service.

We collect data that is linked to or can be linked to a specific individual for the purposes described in this Policy. This data, called “personal data” (sometimes also referred to as “personal information”), may be provided directly by you to us, provided to us by third parties, such as automotive manufacturers or dealers, providers of automotive services, retailers, data providers, advertisers or promotional partners, or other advertising entities, or collected from you automatically through your service usage, cookies, and other technologies. We may combine personal data we collect from these sources or through our various Services.

De-identified Data. We may de-identify your personal data using any of a variety of means, such as by removing identifying characteristics or blending your data with data about other individuals. Such de-identified data can no longer be associated to you and is considered non-personal to the full extent allowed by applicable law. We utilize technical and operational processes to maintain and use de-identified data and do not make attempts to re-identify it. We may use and share any non-personal information with third parties for any purpose in our discretion and as permitted by law, including for advertising, research, and marketing purposes, but we require any third party receiving de-identified information from us to maintain the information as de-identified and not reassociate it to any individual. If we combine non-personal data with personal data, we treat the combined information as personal data and subject to this Policy.

This section and the next present a summary of our key personal data practices. For more detail, please see the Sirius XM Data Collection and Use Table at the end of this Policy for the (1) categories of personal data we collect, (2) purposes for which we collect that information, (3) categories of third parties to whom that information may be disclosed for a business purpose, and (4) categories of third parties to whom the information may be “sold” for monetary value or other valuable consideration or “shared” for cross contextual behavioral advertising/targeted advertising. We encourage you to read the Table carefully. Please also review Section 4 “More About our Data Practices” for certain specific types of data collection and use.

We collect personal data from you, about you through your use of the Services, and from third parties. The categories of personal data we collect include: 1. Registration Data, 2. Vehicle Data, 3. Payment Data, 4. Sensitive Personal Data (to the extent permitted by applicable law and in accordance with your privacy rights and choices), 5. Precise Geolocation Data of device (to the extent permitted by applicable law and in accordance with your privacy rights and choices), 6. Other Demographic Data, 7. Transaction Information, 8. Listening Preferences, 9. Account Information and Settings, 10. Device Data, 11. Audio and Visual Data, and 12. Non-Precise/Coarse Geolocation Data. See Section 15 “Table of Our Personal Data Collection and Use Practices” for full descriptions of these categories.

We use personal data to deliver products, the Services and facilitate your access to the Services, to manage your account and subscriptions, to personalize your listening, marketing and advertising experiences, and to send you information from us or on behalf of certain third parties. We also use personal data to troubleshoot and improve the Services, to perform market research and enhance our marketing effectiveness through modeling and optimization, to develop new products and services, and to maintain and protect our systems and your data. If you access the Services using an in-vehicle SiriusXM radio, please also review Section 8 “Supplemental Information for Users of SiriusXM In-Vehicle Services” for in-vehicle specific information. If you use the Pandora Services, please review Section 9 “Supplemental Information for Users of Pandora Services”. If you access Sirius XM Podcast Content through a SiriusXM Podcast+ standalone subscription or through a Third Party Service, please review Section 10 “Supplemental information for Listeners of Sirius XM Podcast Content.”

We share your personal data for business purposes with our subsidiaries, third-party service providers, vendors and licensors, other Sirius XM users when you provide access to your subscription, and unaffiliated third-party businesses with whom we have relationships for business and advertising purposes. For more details, please review Section 4 “Disclosures to Third Parties”. Note that Sirius XM does not sell your personal data for profit but we do engage in certain disclosures of personal data for advertising/marketing-related purposes that could be considered a “sale” under the broad definitions of state privacy laws.

Sirius XM engages third-party businesses for a variety of business and commercial purposes, including service providers of technology, customer care support, marketing, shopping and shipping (such as Shopify), and payment processing (such as but not limited to Apple, Google, and Stripe Inc.). Please note that collection and use of payment information by third-party merchants and payment processors is subject to the privacy policy and terms of the respective third party. For example, Stripe Inc.’s collection and processing of payment information is governed by the Stripe Privacy Policy located at https://stripe.com/privacy and the Cashstar website powering the sale of SiriusXM digital gift cards is governed by the BlackHawk Network Privacy Policy located at https://blackhawknetwork.com/privacy-policy.

Sirius XM works with advertisers, advertising agencies, and providers of ad-related services for targeted advertising-related purposes. Providers of ad-related services such as behavioral ad targeting, attribution/measurement, and analytics may set, read, or otherwise obtain information about you from their own tracking technologies (like cookies, tags, or pixels) on your device. In addition, we may provide your information (e.g., email address, phone number, transaction information, or third-party proprietary IDs such as IDFA/AAID or pseudonymized IDs derived from PI, ZIP, age, gender) to certain ad platforms (e.g., social media networks, ad servers, DSP/SSPs) for such purposes. Some providers of ad-related services may use personal information, such as your email address, to generate their own identifier for you for identification across devices and services. We, and our ad-related partners, use your information to serve and measure performance of ads for the Services placed by us on third-party publishers and channels, to serve and measure performance of third-party advertisers’ ads on or off our Services, to provide us with information regarding the use of the Services and the effectiveness of our or third parties’ ad campaigns. For more information, including your opt-out choices, please review Section 5 “Third Party Advertising and Analytics/Privacy Controls” and the information set forth in the Table at the end of this Privacy Policy. Some of these practices may be considered “targeted advertising” or the ”sale/share” of your personal information under certain US state laws and residents of those states may have additional rights. For more information, please review Section 14 “State Specific Rights”.

Here is additional detail about some specific data practices listed in the Table in Section 15.

A. Personal Data We Collect Directly From or About You. You may provide us with the information described in the Table in Section 15 directly when you engage with the Services, such as signing up for an account online, when you visit our sites, through an application, or interact with a Listener Care agent. We also may collect personal data directly from you when you choose to provide it, such as when you respond to a survey, when you complete a form, or when you conduct a transaction, such as purchasing merchandise from a Sirius XM store.

Inferences. We use proprietary and licensed modeling tools and algorithms to infer additional information about you from your listening history, demographic data, or other data that we collect directly from or indirectly about you to personalize your service, marketing, and advertising. We do not use any of these inferences to make determinations that would have a legally significant impact on you.

Listener Profiles for SiriusXM In-Vehicle Services. SiriusXM-brand subscriptions may allow the creation of profiles for individual in-vehicle listeners in addition to the primary account holder (“Listener Profiles”). Sirius XM collects listening and service usage associated with a Listener Profile and processes such information to support profile features such as favorite stations and recommendations. Listeners with Listener Profiles do not have a separate account and may only access through a primary account holder’s subscription. If you are the primary account holder of a SiriusXM-brand subscription, you are responsible for access by any other individual whose Listener Profile you permit to connect to your SiriusXM Service. The terms of your subscription plan, the Sirius XM Customer Agreement, and this Policy will apply to their use of your subscription, and service usage data collected under their Listener Profile may be compiled indistinguishably with data associated with your account.

Live Real Time Chat. The Services may offer you a Customer Support Chat, which will record, use, and retain your information provided, as well as the communications within the chat, for purposes of assisting you during the conversation, providing related support for your account, subscription, or services, improving our products and services, troubleshooting, security and fraud prevention, marketing, and any other internal business purposes set forth in this Policy. During a Customer Support Chat, you may be interacting with a non-human, artificial intelligence application (the “AI Agent”). The chat session, including any information contained within it, may be retained and used by the AI Agent to learn and improve its ability to support customers of the Services. If you do not consent to such recording, use, and retention, please do not use the chat assistance feature.

Photos and Audio. We may allow you to post photos or audio files to the Services or we may collect photos or audio from another interaction you have with us, such as your call interaction with a Listener Care agent, your call-in to a show or host, or your participation at a Sirius XM or Pandora live event. We do not process your photos or audio to create a record of facial geometry or use as them as a means for facial or voice recognition, facial surveillance, or in any other way as a biometric identifier. We collect your voice command when you make a verbal request to the Services; we process your voice command in order to execute your request and for analysis of the success rate of the request for product improvement. Your voice command is not used to identify you individually and is not retained in association with you or your subscription. Audio that we collect from you may be shared with a third-party service provider for transcription.

Please note that to the extent that you post your photos or audio publicly onto community spaces on the Services, they will be public. In addition, when you post or share photos, videos, or audio on social media or other third-party platforms, we do not control the actions of those third parties and their use of such media will be governed by their own privacy policies.

B. Personal Data We Receive or Collect from Third Parties. We may receive information about you from service providers, third parties with whom we have a business relationship (such as vehicle manufacturers, dealers, vehicle repair companies, sponsors, or licensors), retailers, content distribution platforms, advertising networks and agencies, advertising technology companies and our other ad-related partners (e.g., ad servers, identity resolution platforms, clean rooms, measurement providers, fraud and brand safety providers), marketing companies, data providers, sources of publicly available information, governmental or quasi-governmental agencies or organizations, and other users of the Services (such as community users, when users provide your information to gift you one of our products, share content with you, “refer a friend” or similar programs that we may offer). We may combine and store the supplemental information with other information we may have already received or collected from you, for use as set forth in this Policy.

C. Data We Collect Automatically, Device Data. We, our service providers, or third parties with whom we have a business relationship may automatically collect and store certain data about your device when you visit or interact with the Services (“Device Data”). This Device Data may be stored and/or accessed from your computer, tablet, mobile device, or other device (including streaming media players, gaming consoles, home audio systems, connected speakers, or other smart devices, and wearable devices) whenever you visit or interact with the Services. Device Data may include but is not limited to:

• Your IP address, mobile, or connected device identifier when made available by the device manufacturer
• Information about the device such as model, operating system version, date/time of access, mobile network information
• Non-precise/coarse location of your device using location inferred from IP address or if you choose to provide it (such as country, city, state or zip code)
• Precise geolocation to the extent permitted by applicable law and in accordance with your privacy rights and choices.
• How you use and interact with the Services. This information will depend on the format and subscription through which you access the Services and may include the webpage, link or advertisement that referred you to the Service you are visiting, areas of the Services that you visit or use, access times and time zone, listening behavior (channel preferences, stations and playlists you create or listen to), search terms, downloads, content you listen to, click, views and duration of viewing, or that you otherwise interact with, marine or aviation data, driving patterns and condition.

Device Data may be collected through the following technologies:

• Cookies and Local Storage. Cookies and local storage are text files placed within a web browser or application on a device when it is used to visit the Services. Certain web browsers and browser add-ons may provide additional local data storage mechanisms.
  We may use cookies and similar technologies to help keep your use of the Services more secure, to study usage patterns on the Services, to study the effectiveness of our customer communications, to maintain the integrity of the Services, to measure crash analytics and other maintenance related information, to manage and measure the performance of advertisements displayed on or delivered by or through the Services or by Sirius XM on other properties, and to personalize your experience through the Services, such as to recognize you when you return to the Services. Most browsers provide you with the ability to disable, decline, or clear cookies and local storage; please check your browser’s settings for further information. Some cookies are necessary for the functionality of the website (“Essential Cookies”). These cookies may not be disabled.

  
  In addition, third parties may place cookies on our websites to improve and optimize our advertising campaigns or those of third-party advertisers. Some third-party advertisers may embed cookies or tags within the advertising creative that is served through the Services. These cookies or tags send information to the advertiser or its services providers to manage and measure the performance of their campaigns.

  
  You may manage whether or not to accept cookies (other than Essential Cookies) on websites operated by Sirius XM through the Manage Cookies link on each respective website. Note that such cookie preferences do not transfer between browsers and must be reset for each browser or device that you use to access a site. For more information about cookies, please visit https://www.aboutcookies.org.

• Pixel Tags. Small graphic images or other web programming code (also known as web beacons or pixel tags or 1x1 GIFs or clear GIFs) may be included in our web pages and email messages. These technologies are used to understand how end users interact with the Services, including to count visitors to the Services, review the effectiveness of our offers and ad campaigns, track “event data” (e.g., actions taken on our Services, such as purchases, downloads, or clickthroughs, page views, product pages, songs listened to), or count how many of our email messages were opened. The information we collect through this technology may include the first date and time you open our email and whether you click any links included in our email.
• Embedded Scripts. Siriusxm.com may use an embedded script to collect information about your usage of the online Service, such as the links you click on or the time you spend on a part of the page.
• Session Replay Technology. Sirius XM may record through session replay technology details of your interactions with the Services such as what pages you visit on the website, how long you visit those pages, what sections of the page you spend the most time reviewing, and any links you click or information you provide. We use this information, including disclosing to third party service providers, for our internal business purposes, such as for website analytics, to improve the Services and our products and services, and to address functionality issues.

E. Data Collected Through Mobile and Connected Devices:

Software Development Kits (“SDKs”). We and certain third parties with whom we have a relationship to facilitate our Service and advertising operations collect data through the use of embedded scripts and tools provided in SDKs. These SDKs are included in the app itself and may collect information when you install the mobile app or access the Services through mobile devices. Such data may include IP address, hardware model, operating system and version, non-precise/coarse geolocation, precise geolocation to the extent permitted by applicable law and in accordance with your privacy rights and choices, mobile advertising IDs (IDFA, AAID) or other device IDs, mobile network information, and application usage behavior. Some Device Data may be deemed personal data under applicable laws. Device Data is used for the business and commercial purposes disclosed in this Policy, such as to deliver and personalize the Services to you, to understand service usage and improve the Services, to debug, troubleshoot, prevent fraud and other security related purposes, to identify you across devices for service and advertising purposes, and to facilitate your request to log in to the Service through a third party or social media platform, conduct a transaction through a third party or share content with a friend or other third party account. Settings specific to your mobile or connected device manufacturer may allow you to change or block the transmission of your device ID and other Device Data. Please see the privacy policy of your device manufacturer for details.

Connected Devices. The Services may also be accessed through third-party devices such as connected set top boxes or media players, speakers or other smart devices, gaming consoles, or other similar devices. Sirius XM does not control these devices, your underlying subscription with that device, or their collection and use of your personal data, including in relationship to targeted advertising they may deliver through a connected device. Please contact the manufacturer of the connected device or purveyor of the connected services for information on their privacy practices and policies.

F. Sharing with Third Parties

We may share personal data we have collected about you in the circumstances described below or elsewhere in this Policy. Please note that we are not responsible for the privacy practices of any third party with whom you interact or who interacts with you directly. If you decide that you do not want to receive communications from a third party, or have questions about their privacy practices, you will need to contact the third party.

Other SiriusXM Users. Personal data on your account or subscription may be accessible to others that you allow to interact with your account/subscription. It is solely your choice whether or not you allow other individuals to have access to your account or sign-in credentials. This includes individuals whom you allow to use or access any streaming account associated with your SiriusXM brand audio subscription. Please note that if you leave your profile open on an active SiriusXM in-vehicle account, other drivers of the vehicle may be able to view certain profile information. You are responsible for managing your profile, including removing it from a vehicle. You may do so through your Profile Management Portal. Visit https://www.siriusxm.com/help/profiles-2 for more information.

Subsidiaries. Sirius XM may share personal data collected in conjunction with the Services with our subsidiaries for business, analytical, marketing, operational and advertising purposes and to offer, provide, and improve services and products offered both individually and jointly.

Unaffiliated Third-Party Business Relationships. We may share or otherwise make available your email address, Device Data, or other personal information with unaffiliated third parties with whom we have a business relationship for ours or for their own business and advertising/marketing purposes (e.g., “targeted advertising” purposes; see Section 5). These third parties may include companies with whom we have marketing, licensing, sponsorship, product or service distribution, advertising, or similar agreements. Such third party’s use of the personal data is subject to their privacy policy and data practices. You may opt-out of our sharing of your email address for third-party marketing through your Sirius XM Online Account Center (for former or current SiriusXM audio subscribers) or by sending an email request to opt-out of sharing for third-party marketing to [email protected] or [email protected], depending upon your subscription service. These disclosures of personal data may also be considered a “sale” of personal data or use or “sharing” of personal data for “targeted advertising” under applicable state privacy laws and you can effectuate your related opt-out rights pursuant to Section 14 “State Specific Rights”. Opt-out requests received via these channels may take up to 15 business days to process.

Note that when you elect to accept a promotional offer for a service offered by a third party as part of a SiriusXM premium or other subscription service, we will only share information with that third party in order to confirm your eligibility for the associated service or as needed to maintain your access to the promotion, unless you consent to additional sharing or uses by the third party.

Third Parties to Whom You Agree or Direct Us to Share Your Personal Data. We may share your personal data when you expressly consent or otherwise direct us to do so. For example, you may direct us to share your information with a Third Party Service in order to have access to Sirius XM Podcast + subscription content using the third party’s platform.

Social Media and Other Third Party Platforms. We may facilitate interactions with social media or other third-party platforms which may include the ability to “like” or “share” content. You may also have the opportunity to log in through or otherwise connect your third-party platform account to your subscription Service. When you interact with these third-party platforms through the Services, we will receive your personal data from the third-party platform service and you agree to share data, which may be personal, about your interactions with the Service with that social media service. We may also receive personal data identifying you if other users of social media give us access to their profiles and you are one of their connections or “friends.”

Personal data collected and stored by the third party is subject to that third party’s privacy practices, including, without limitation, whether the third party continues to share data with us, the types of data shared, and your choices with regard to what is visible to others on that third-party website or service. The third party may allow you to remove the application or feature; however, we may retain data previously collected.

A third-party platform or service, such as Meta or Google, may place cookies on your device or and/or on the Services that collect information about your use of the Services, including your IP address or other device identifiers, and which pages you visit on the Services. The third party platform may be able to collect personal data about you on your visits to the Services regardless of whether or not you affirmatively interact with the feature and whether or not you are logged into (or have) an account with the third party platform. If you are logged out or do not have an account and visit a page with a social plug-in, your browser sends a more limited set of data, such as the webpage you are visiting, the date and time of your visit, and other browser-related information. Please see Section 5 about how to manage cookies and tags online.

Information You Disclose Publicly. Services may offer message boards, chats, forums, and other public areas (“Community Forums”) where you can choose to interact with others and/or to post or submit comments, images, and content. Note that anything you choose to disclose in such a Community Forum is public. Similarly, any information you choose to post to a social media or third-party platform will be publicly available. This Policy does not apply to collection and use of such public information. Think carefully before you post and use caution before disclosing any personal data.

Public Broadcasting/On Air. If you provide us with personal data when making a request such as a birthday announcement, comments or suggestions, or content requests, we may use the personal data you provide in accordance with this Policy, including to announce your name and request on

Sweepstakes, Promotions, and Surveys. We may offer sweepstakes, contests, in-studio events, giveaways, research surveys and other promotions (each, a “Promotion”) that require registration or request additional information. By participating in a Promotion, you are agreeing to the provisions, conditions, or official rules that govern the Promotion, which may contain specific requirements (including, allowing the sponsor(s) of the Promotion to use your name, voice, likeness, or other indicia of persona in advertising or marketing materials where allowed by law). If you choose to enter a Promotion, personal data may be disclosed to third parties, to vendors facilitating the implementation of the Promotion, or to the public in connection with the administration of such Promotion, including in connection with winner selection, prize fulfillment, as required by law, or as permitted by the Promotion’s terms or official rules.

Third Parties in the Course of a Business Transition. In the event one or more entities of Sirius XM goes through a business transition, Sirius XM reserves the right to disclose and transfer all personal data related to the respective Services to the full extent allowed by law (including, without limitation, during the course of any due diligence process): (i) to a subsequent owner, co-owner, or operator of the Services; or (ii) in connection with a corporate merger, consolidation, restructuring, bankruptcy, the sale of certain of Sirius XM’s ownership interests, assets, or both or other company change. By providing your information, you understand and agree that we may transfer such information to the acquiring entity without your further consent except where required by law.

Sirius XM engages in third-party business relationships to support our marketing and advertising efforts, and may share personal information with ad-related partners such as advertising companies, identity resolution platforms, ad agencies, adtech providers, measurement and attribution vendors, and analytics providers to place, display, and measure Sirius XM ads delivered on other properties; place, display, and measure third-party ads on or off the Services; model, create ,or obtain user segments or otherwise better understand users and optimize campaigns; and to provide us with information regarding the use of the Services and ad effectiveness (e.g., purchases, downloads, songs or podcasts listened to, email open rates or clickthroughs, clicks on links, page views). We may share your Device Data and other personal information (e.g., email address or third-party proprietary IDs such as IDFA/AAID or pseudonymized IDs derived from PI, ZIP, age, gender; event data) or allow third parties to access such information for these purposes. Some providers of ad- related services may use personal information, such as your email address, to generate their own identifier for you to facilitate identification across devices and services. In addition, some advertisers, agencies, and ad tech vendors may utilize their own tracking technologies embedded in their ads or on your device, and they may otherwise collect or have access to data about your device and other information about you, some of which may be personal data under certain state laws. Some of these parties may collect personal data over time when you visit the Services or other online websites and services. We may also share data that has been aggregated, de-identified, or pseudonymized Device Data and location information with advertising companies, analytics providers, and attribution and measurement vendors, including for the purpose of serving you more relevant ads on and off the Services.

Some states give their residents the right to opt-out of the “selling/sharing” of personal data or use with respect to “targeted advertising”. Please see Section 14 “State-Specific Rights” for additional information.

There are also a variety of means and tools that allow you to place some limits on the collection and use of your personal data for targeted or cross-device behavioral advertising by third parties, or by Sirius XM on other sites and applications:

Cookie Opt-Out Tools. To disable sharing through cookies set on our site by third parties for advertising and analytics purposes, please adjust your settings by clicking on either Cookie Settings or Manage Cookies from the footer of our webpages.

DAA Opt-Out. Some advertising companies are members of the Digital Advertising Alliance (“DAA”). You can visit the DAA’s website for more about targeted advertising and an opt-out for DAA-participating companies.

Mobile Device/AppChoices. Mobile devices contain settings that may allow you to disable tracking advertising or analytics. If you are using an iOS-based device, you may be able to limit use of certain device data, such as your device ID, from being used to track your behavior across sites and devices not affiliated with Sirius XM from by enabling “Limit Ad Tracking” on your iOS device following the instructions provided by Apple. If you are using an Android-based device, you may be able to limit the use of your AAID by enabling “Opt Out of Ads Personalization” on your Android device. If you want to limit “personalized ads” from Google, you can visit Google’s Ads Settings page and make your choices there.

To opt-out of some interest-based advertising on websites (to the extent the advertising partner or other entity participates in such industry opt-out pages), you may want to visit the Digital Advertising Alliance’s (DAA) resources at https://www.aboutads.info/choices. You may also be able to opt-out of some interest-based advertising served by participating mobile ad networks by visiting https://youradchoices.com/appchoices and downloading the mobile AppChoices app.

When you opt out of receiving interest-based advertisements, this does not mean you will no longer see advertisements in general. It means that the online ads that you do see may not be personalized based on your interests.

Google Analytics/Adobe Analytics. We utilize Google Analytics and Adobe Analytics, which use cookies and similar technologies, to collect and analyze information about the use of the Services and report on activities and trends. These services may also collect information about the use of other websites, apps, and online services. You can learn about Google’s practices, and opt out of them by downloading the Google Analytics opt-out browser add-on. Learn about Adobe’s practices here.

Note that cookie settings and other technological controls are specific to the browser or device on which such control is implemented. When cookies or other such tags are disabled, we are not able to recognize you when you use a different device to access the Services, and therefore cannot apply the settings from the initial device. You will need to manage your cookies and tag settings as well as any global privacy controls individually on each device with which you access the Services.

Please note, it is not possible to opt-out of all advertising on the Services. Advertising allows the Services to be delivered at a generally lower subscription cost to you or, with certain Services such as through the free ad-supported subscription tier of Pandora Services where available, at no additional subscription fee. Using any of the methods described here to opt-out of personalized or individually targeted advertising means only that ads delivered to you in the Services will not be tailored to you as a unique individual. By continuing to access the Services, you understand that even in light of your cookie settings and other opt-out choices, you will continue to receive ads, which may be delivered using non-personalized information about the context or genre of the content to which you are listening or the general demographic or behavioral interest profile of listeners of certain content, types of music, or titles or episodes of podcasts. You may also receive ads that are delivered generally to anyone in a certain geographical region or based on aggregated or non-personal data.

A. Marketing Messages from Us. You can manage how we use your personal data to contact you with regard to SiriusXM services by setting your contact preferences. Please visit here for additional information and instructions on how to do so. We may also provide you with options to manage how we communicate with you for marketing purposes for each of the Sirius XM Services through the contact or notification preferences under your account or profile settings online or in the respective app.

• Email. You may unsubscribe from marketing emails and newsletters we send you through the opt-out link included in the footer of each such email. You may also opt-out of email marketing communications about SiriusXM satellite and streaming services using the SiriusXM Email Communications Preference Center at https://pc2.mypreferences.com/SiriusXMV2/Customer/EmailRequest. Team Coco services users may opt out by sending an email to [email protected]. 99% Invisible users may opt out through the opt-out link included in the footer of each e-mail or by contacting [email protected]. We will continue to send you certain communications relating to your use of the Services, renewal notices, notices of changes to this Privacy Policy or other terms, or similar administrative and transactional messages.
• Text Messages. Sirius XM may use text messaging to send you offers, to facilitate account management or otherwise assist you in your access to the Services or your subscription. To the extent that you choose to stop receiving marketing texts, you may unsubscribe by replying “STOP” to the short code. Your consent to receive text messages will not be given to a third party for purposes related to other goods and services.
• Push Notifications. We may send promotional and non-promotional push notifications or alerts through the Services. You control whether you receive those messages in your device settings at any time.

B. Changing Your Information. You are responsible for maintaining the accuracy of the information you submit to us, such as contact information you have provided for your account. You may be able make changes to your account information using the settings under your account.

• SiriusXM. Former or current subscribers to SiriusXM services may visit SiriusXM Listener Care online at http://www.siriusxm.com/contactus, or log into your Online Account Center to update your information. You may also call SiriusXM Listener Care at 1-888-539-7474 and ask to update your information.
• Pandora. Pandora users may update their account information through their Settings page or contact the User Support team for assistance. You may find further instructions on how to modify your information by visiting help.pandora.com.
• Team Coco. If you joined the Team Coco mailing list or otherwise provided personal data to Team Coco that you would like to update, please contact [email protected].
• 99% Invisible. If you subscribed to the 99% Invisible mailing list or otherwise interacted with 99% Invisible with personal data that you would like to update, please contact [email protected].

Note that when you edit your personal data or change your preferences, the previous information will be retained internally as part of the history of your account for analytical, administrative, legal, and security purposes, or within backup media. If you have made any public postings on the Services including community forums or on social media platforms, those communications generally cannot be removed even if you cancel or deactivate your account.

C. For Users of SiriusXM Brand Audio Services

• Telemarketing. You may opt out of telemarketing sales calls by placing your phone number on our “Do Not Call” list using the instructions in our “Do Not Call” Policy available here and via the link from the footer of our home page on siriusxm.com. We may have more than one telephone number on record for you or your household members; you must specify all the phone numbers you are directing us to not call. Although your request will be processed immediately, it may take up to ten (10) days to remove your information from active telemarketing and solicitation lists that are in flight. Please note, even if you opt out of telemarketing sales calls, you may continue to receive calls for service and account-related matters.
• Direct Mail. If you prefer to not receive any marketing offers via direct mail, please visit the communications section in your account to indicate your preference. Please note such requests must be renewed every three (3) years. Please note, even if you tell us that you do not wish to receive marketing direct mail from us, we will continue to send transactional communications relating to your subscription, account, or use of the Services, such as renewals, or administrative and services announcements, or communications that we have a legal obligation to send to you; we may continue to send such transactional communications by direct mail even if you opt-out of marketing mailings.

Sirius XM takes commercially reasonable steps designed to secure your personal data; however, no data transmission over the Internet, wireless transmission, or electronic storage of information can be guaranteed to be 100% secure. Sirius XM cannot ensure or warrant the security of any information we collect. You use the Services and provide us your information at your own risk.

We retain personal data for as long as reasonably necessary for the purposes set out in this Policy, including to provide the Services to you; to send you information related to Sirius XM, our products and services and your account; to conduct internal research, develop and improve new products and services; to exercise the choices and rights you have requested; to comply with our contractual obligations; to protect our legal rights and obligations, resolve disputes and enforce our Customer Agreement and Terms for Use or the terms for any other Service; and to comply with legal and regulatory requirements.

If you access the SiriusXM audio Services using in-vehicle hardware, please know that the following additional data collection and handling may apply:

Special Types of Data and Uses

SiriusXM audio Services may be delivered to your vehicle by satellite, through the wireless connection installed in your vehicle by your vehicle manufacturer, or a combination of these. Your make and model of vehicle determine what type of SiriusXM service delivery your vehicle is capable of. Please see your vehicle manufacturer or dealer for more information about the radio in your vehicle. We may collect information from the automotive manufacturer or from third parties about the vehicle and your ownership, such as your VIN, vehicle make, model, and year. We collect your license plate number only when you choose to provide it to us directly as the means for us to associate your subscription with your vehicle.

Satellite-Only Radios. SiriusXM satellite-only radios can only receive data from the SiriusXM satellite network and cannot transmit service usage, location, or other information from the radio or the vehicle.

Enabled Radios. Certain vehicles use technology that combines content delivery from the SiriusXM satellite network along with a wireless Internet connection by modem. In certain electric vehicles, SiriusXM audio Services employ a direct voice-over-IP wireless connection. Each of these built-in systems is an “Enabled Radio”. When the modem in a vehicle is activated, an Enabled Radio may transmit information such as Device Data, Listener Profiles and history, and other service usage information. Please see below to learn more about how we collect and use information in connection with Enabled Radios.

A. Vehicle Information – We may collect certain information from the vehicle about the vehicle itself (e.g. make, model year or entertainment package) or how you use it, such as when the vehicle ignition starts or stops. We may also collect information about your use of the radio in the vehicle, such as which presets you use or when or how long you listen. The type of vehicle information we receive may vary depending on your vehicle make or model. For further information about our use of Vehicle Information, please see the Table in Section 15 of this Policy.

B. Device Data – An Enabled Radio may transmit Device Data and other service usage data such as your favorites and presets and data about your usage of the radio and our service, to Sirius XM, our service providers, and/or the automotive manufacturer. We use this information to maintain your settings, troubleshoot and improve service delivery and performance, personalize and facilitate the service we provide to you, offer you recommendations and other personalization options, tailor communications to your interests, personalize advertising delivered to you, and other purposes set forth in this Policy.

C. Vehicle Location Data. Sirius XM will not collect the precise geolocation of your vehicle unless we provide you with explicit notice and request your consent in compliance with applicable laws.

D. Privacy Controls for Enabled Radios – You may have privacy settings in your vehicle that can disable or limit the capability of the vehicle to transmit data from the modem in your vehicle including if applicable, geolocation. The presence and nature of such controls in the vehicle and the effect of selecting this setting is determined by your vehicle manufacturer. Depending on the vehicle’s configuration, disabling the capability to transmit data may also result in fully disabling the modem or other IP connectivity for Sirius XM or other features in your vehicle. Sirius XM does not collect the precise geolocation of your vehicle without your consent but does rely on other data transmitted to and from your vehicle to provide the full personalized experience of the Sirius XM audio service. If the modem is disabled and you maintain an active subscription, you may continue to receive Sirius XM satellite radio service without recommendations or other individual or personalized features or may lose access to profiles. For certain manufacturers, you may lose all ability to listen to Sirius XM in the vehicle. You may also lose optimal functionality while driving of any Traffic Plans, TravelLink, and related infotainment services to which you are subscribed. Please see your owner’s manual or contact your vehicle manufacturer or dealer for more information.

If you access and use the Pandora digital streaming audio service, please know that in addition to the collection, use, and sharing of personal data set forth in this Policy, the following apply:

A. Your Choices Related to Your Pandora Profile

a. Profile Visibility - Your profile and listening activity are public. When the visibility of your profile is set to public, your listening activity is automatically published to your profile. For example, if you create a new station or thumb up a song, that activity will be posted in your profile and publicly visible. You may adjust your profile visibility settings by visiting help.pandora.com. Please note that changes to the visibility of your profile do not have any impact on the advertising you may see if you use the ad-supported version of the service.

b. Cached Profiles on Search Engines - Even upon deactivating your account or making your profile private, Internet search engines such as Google and Bing cache publicly available webpages for a period of time beyond our control and may make your deactivated or formerly public profile available to users of their services on their platforms until such time as they refresh their webpage cache. Please consult with the applicable search engine to determine how you may remove webpages from their webpage cache.

Sirius XM Podcast Content consists of podcasts created originally or licensed from other creators by Sirius XM. The Sirius XM Podcast Content may be available to you through the Services, or you may be able to access certain Sirius XM Podcast Content directly or through a Third Party Service that distributes podcast content to you through your account with that third party. You may also purchase a SiriusXM Podcast+ subscription from Sirius XM through a Third Party Service that works with the Podcast+ subscription. Through whichever distribution platform you access Sirius XM Podcast Content, Sirius XM may collect your IP address, coarse location such as country, state or city from which you are listening, information around the podcast usage (such as how long you listened), and certain Device Data, such as operating system and device type. In addition to uses set forth in this Policy for data collected by Sirius XM for the Services, collected information may be shared with creators, service providers, and advertising entities including technology companies, advertisers, and publishers. It may be used to deliver the content, troubleshoot, prevent fraud, provide reporting, perform internal analysis and product improvement, deliver ads, and manage ad reporting and performance. Sirius XM may also use the content of podcast episodes to determine which ad or advertiser to place within the content.

SiriusXM audio services users must be 18 and older to sign up. We do not knowingly collect any personal data from individuals younger than the age of 18.

Pandora users must be 13 or older to sign up for the use of Pandora services. We do not knowingly collect personal information from anyone under the age of 13.

If we become aware that we have collected information from a child under 13 we will take steps to delete that information from our servers.

We reserve the right to change this Privacy Policy at any time. If we make material changes to our privacy policy, we will update the effective date and post a notice on the Services. We may also provide notice to you in other ways, such as through contact information you have provided, and provide you with the ability to opt-in or opt-out of the changes as required by law. Note that when applicable, you may need to consent to a revised policy in order to continue to use the Services. Your continued use of any of the Services after the effective date of the revised Privacy Policy will constitute your consent to those changes to the fullest extent allowed by applicable law.

You may contact us by email at privacy @siriusxm.com or privacy @pandora.com, respective to your subscription service. The information you provide is used to respond directly to your questions or comments. We may also file your comments and share them with our consumer care team to improve our service in the future. If you still have questions or concerns about our privacy policy, please write us at:

Sirius XM Radio LLC
Attn: Chief Privacy Officer
8550 Freeport Parkway Irving, Texas 75063

As set forth below, residents of certain U.S. states may have the ability to exercise additional rights and choices regarding their personal data. We will take reasonable steps to accommodate your request but may need to verify your identity before doing so.

A. California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. We set forth in this Policy the categories of personal data we process, the purpose for processing personal data, the categories of personal data shared, and the categories of third parties with whom personal data is shared. Residents of the states referenced in this header have certain privacy rights with respect to this data, as described below.

Your Rights

Depending on your state of residence, and subject to certain legal limitations and exceptions, you may be able to exercise the following rights:

Access Your Information/Obtain Your Information/Data Portability –You have the right to confirm whether we are processing your personal data and request to access such data, obtain a copy of your personal data, and, to the extent feasible, in a readily usable format to allow data portability. If you are a resident of DE, MN, or OR, you also have the right to request a list about certain third parties to which Sirius XM may have disclosed your personal data.

Delete Your Information You have the right to request the deletion of your personal data, subject to certain exemptions and exceptions.

Correct Your Information You have the right to correct the personal data we hold about you.

Sensitive Data. If you are a CO, CT, DE, IN, KY, MN, MT, NE, NH, NJ, OR, RI, TN, TX, or VA resident only, to the extent Sirius XM processes “sensitive personal data” (as such term or similar term, such as “sensitive personal information”, is defined by the applicable state law) , we will obtain your consent to the processing of any Sensitive Data (before any such data is collected where required by applicable state law. If you are a CA, IA, or UT resident only, you have the right to limit or opt out of the processing of Sensitive Data, each as defined by the relevant privacy law, to the extent that Sirius XM processes any such data for purposes that require an opt-out. You may opt out using the methods listed below in this section.

Opt-Out of “Sales” of Personal Data and Use or “Shares” of Personal Data for “Targeted Advertising”. Sirius XM discloses certain personal data for advertising/marketing-related purposes that could be considered a “sale” under the broad definitions of certain state laws.

You have the right to opt-out of the “sale” of personal data and the use or “sharing” of personal data for “targeted advertising” purposes (as such terms or similar terms, such as “cross-context behavioral advertising” instead of “targeted advertising,” are defined under applicable state law). Note that, California’s state privacy law provides the right to opt-out of “sales” of personal data and the “sharing” of personal data for targeted advertising, as opposed to use of personal data for targeted advertising more broadly. You can exercise these opt-out rights using the methods listed below in this section.

Sharing of Device Data, identifiers (e.g., email address, phone number, third-party proprietary IDs), or other applicable categories of personal data set forth in Section 15 (Table of Our Data Collection and Use Practices) with third-party advertising and other business partners for advertising, marketing, analytics, and measurement purposes (e.g., obtaining and targeting user segments, matching audience lists, or obtaining information about users) may constitute a “sale” of personal data or use or “sharing” of personal data for “targeted advertising” in certain cases under applicable state laws. Please note that opting out of “sales” of personal data or use or “share” of personal data for “targeted advertising” in any of these states will not opt you out of all advertising or marketing. For example, you may continue to receive ads delivered through the Services based on listening content, region, or other general categories or other first-party data where permitted in light of such opt-outs.

Right to Opt-Out of Profiling in furtherance of legal or similarly significant effects. Sirius XM does not process personal data for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects.

Right to Appeal (CO, CT, DE, IN, IA, KY, MT, NE, NH, NJ, OR, RI, TX, and VA Residents Only) – You have the right to appeal our decision relating to your request. You may submit an appeal using the Sirius XM appeal form here or the Pandora appeal form here, depending on your subscription service and follow the instructions on the form.

If you wish to appeal a Team Coco decision, please contact [email protected]. If you wish to appeal a 99% Invisible decision, please contact us using the appeal form here. Please include your full name, the basis for your appeal, and any additional information to consider.

Exercise Your Rights

If you are a Consumer residing in CA, CO, CT, DE, IN, IA, KY, MN, MT, NE, NH, NJ, OR, RI, TN, TX, VA, or UT (as defined in each state’s respective law) and would like to exercise your applicable rights as outlined above:

• Right to Correct Only

  • SiriusXM subscribers may exercise this right directly through your Online Account Center (SiriusXM users) or by contacting SiriusXM Listener Care at 1-888-539-7474 during posted hours.
  • Pandora listeners may use the settings in the Pandora app or contact privacy @pandora.com.
  • Team Coco customers, please contact legal @teamcoco.com.
  • 99% Invisible users, please contact [email protected]

• All Other Applicable Rights – Please submit your consumer data rights request (including opt-out of “sales” of personal data or use or “shares” of personal data for “targeted advertising” that occur via non-cookie/similar tracking technologies) through the method associated with your respective subscription or service:

  • SiriusXM listeners – please submit using the online form here or call 1-800-869-5593 to submit a request.
  • Pandora listeners – please use this online form or send a request to [email protected].
  • TeamCoco listeners – please submit your request [email protected].
  • 99% Invisible listeners – please submit your request using the form here or email us at [email protected].

• Right to Opt Out of “Sales” of Personal Data or Use or “Shares” of Personal Data for “Targeted Advertising” Involving Cookies or Similar Tracking Technologies – To opt out of “sales” of personal data or use or “shares” of personal data for “targeted advertising” that occur via cookies or similar tracking technologies, please modify your “cookie settings” using the mechanisms below or use GPC as discussed in the following paragraph. Note that all opt-outs of “sales/shares” or “targeted advertising” via cookies or similar tracking technologies are on a per-website basis and applies at the browser level for the device you use to opt out.

  • On the SiriusXM.com website, click the “Manage Cookies” link on the website footer.
  • On the Pandora.com website, click the “Cookie Settings” link on the website footer.
  • On the 99PercentInvisible.org website, click the “Manage Cookies” link on the website footer.
  • Where we are required to honor the GPC signal under applicable state law, you may also visit sites with the Global Privacy Control (GPC) signal enabled to opt-out of “sales/shares” or “targeted advertising” via such cookies and similar technologies (learn more about GPC at www.globalprivacycontrol.org). Outside of GPC as required under applicable state law, we do not honor Do Not Track (DNT) or similar signals.

Minors. We do not “sell”, or use or “share” for targeted advertising purposes, the personal data of consumers we know to be less than 18 years of age. If you wish to submit a privacy request on behalf of your minor child in accordance with applicable jurisdictional laws, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal information and you are authorized to submit the request on your child’s behalf (i.e., that you are the child’s legal guardian or authorized representative).

Authorized Agents Submitting Opt-Out Requests For “Sales” and “Targeted Advertising” (CO, CT, DE, MN, MT, NE, NH, NJ, OR, RI and TX Residents Only) - If you are an authorized agent submitting a request to opt out of “sales” or “targeted advertising” on behalf of a resident of a state that permits such submissions by authorized agent, please submit the request pursuant to the instructions on the respective form. Where permitted under applicable state law, we may authenticate the consumer’s identity and that you are authorized to submit the request on the consumer’s behalf in order to be able to fulfill your request. Please keep in mind that if we cannot authenticate that you are authorized to act on the consumer’s behalf or we cannot authenticate the consumer’s identity, we may deny the request.

B. Nevada. If you are a Nevada resident, please note that we do not sell your personal data (or “covered information”) as defined in Nevada S.B. 220. However, if you are a Nevada resident, you may still submit an opt-out request, and if our practices were to change in the future, we would honor your request. Your request to opt out of the sale of your covered information must be submitted to [email protected] or [email protected], depending on your subscription service with the subject line “Nevada Do Not Sell Request” along with your full name, street address, city, state, zip code, whether you are a former or a current subscriber/listener and a valid email address so that we can contact you if needed regarding your request. If you previously provided a phone number, including it will assist us in making sure we identify you as someone who wants to opt out. You may be required to take reasonable steps as we determine from time to time to verify your identity and/or the authenticity of your request. Note: in order to process a request from a former or current subscriber/listener, your email address must match the email address on your account.

Nevada residents have the right to know about the collection, sharing, sale, and use of health-related data about them. Sirius XM does not collect, share, sell, or use health-related data about consumers, as defined by Nevada S.B.370.

C. California. Your Rights Under the California Consumer Privacy Act of 2018 (CCPA) and as amended by the California Privacy Rights Act of 2020 (CPRA): If you are a California resident, please see YOUR CALIFORNIA CONSUMER PRIVACY ACT RIGHTS for additional information about your privacy rights and how to exercise them.

Your Rights under California’s “Shine the Light” law (Civil Code Section 1798.83, also known as S.B. 27). California residents have the right to request from companies conducting business in California certain information relating to third parties to which the company has disclosed certain categories of personal information during the preceding year for the third parties’ direct marketing purposes. Alternatively, the law provides that a company may comply, as Sirius XM does, by disclosing in its privacy policy that it provides consumers choice (opt in or opt out) regarding sharing personal information with third parties for those third parties’ direct marking purposes, and information on how to exercise that choice. As stated in this Privacy Policy, Sirius XM provides you choice prior to sharing your personal information with third parties for their direct marketing purposes. If you do not opt-in or if you opt-out at the time we offer that choice, we do not share your information with that identified third party for its direct marketing purposes.

If you are a California resident and you have questions about our practices with respect to sharing information with third parties for their direct marketing purposes and your ability to exercise choice, please write to us at: Sirius XM Radio LLC, 1221 Avenue of the Americas, 35th Floor, New York, NY 10104, Attn: Legal Department – Shine the Light Privacy Request. Shine the Light requests that come to us by other means may result in a delayed response. You must include your name, street address, city, state, and zip code. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.

D. Washington. Under Washington state law, consumers have the right to know about the collection, sharing, sale, and use of health-related data about them. Sirius XM does not collect, share, sell, or use health-related data about consumers, as defined under the Washington My Health My Data Act.

The following Table sets out by category of personal data collected:

A. The purposes for which personal data is collected;
B. Categories of third parties to whom personal data may be disclosed for a business purpose; and
C. Categories of third parties to whom the information may be sold for monetary value or other valuable consideration or shared for cross contextual behavioral or targeted advertising, each term as defined by applicable state law.

Please Note All Categories of Personal Data Below May be Used for the Following Purposes:

• Legal (to resolve disputes; enforce our agreements and policies; protect our or others’ rights/assets; comply with our contractual obligations; cooperate in governmental or other legal inquiries; fulfill regulatory reporting obligations),
• Business Transitions (in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence),
• Security (to protect the Services; investigate, detect, prevent, and protect against issues of our systems, fraud, crime, or other activities that violate our policies or applicable laws; to protect the health and safety of our users or the general public), and
• Other purposes as disclosed at the time of collection or with your consent.

Please Note All Categories of Personal Data Below May be Disclosed To the Following:

• Law Enforcement and Government Agencies/Where Required By Law (including third parties in connection with court or other legal actions including valid subpoenas)
• Third parties in the course of a Business Transition
• Third parties to whom you agree or direct us to share your information
• Other service providers who use your personal data to provide services to us or to you.

Category of Personal Data – Note: Not all categories of Personal Data are collected from all users. Some data categories may be collected only in connection with your use of a particular service or feature, with your consent, and/or depending on your state of residence.	A. Purpose for Collection
	B. Categories of Third Parties Personal Data is Disclosed To
	C. Third Parties to whom Personal Data is Sold or Shared for Targeted Advertising
Registration Data - This may include your name, email address, mailing address, phone number, birth year, zip code.	A. Purposes for Collection: 1. Provide You Services (process transactions and orders ;facilitate access to Sirius XM services, create and manage your account on Services; identify and recognize you across services and devices; send service and account related communications; respond to your inquiries; provide customer service; send you information that you requested or agreed to receive such as newsletters; facilitate your participation in activities you sign up for such as sweepstakes, contests, research); 2.Internal Business Purposes (provide and improve our services; develop new products and services; market research, auditing and publication; understand how you use our services, including analyzing trends and usage patterns; analyze the effectiveness of our marketing efforts); 3.Marketing (to send you special deals, offers, invites to events, and similar information from us or third parties); 4.Advertising (to identify your preferences, tailor content, including advertising and listening recommendations, to you on the Services and on other websites and services; to monitor and control the ad delivery, performance and frequency); 5.Administrative (investigate and prevent fraud and other illegal activities; detect and troubleshoot technical issues). 6.Compliance (ensure compliance with age related laws)
	B. Categories of Third Parties the Data Is Disclosed to: 1. Technology Systems Service Providers (including web hosts, database hosts, software-as-a-service providers, cloud computing providers, technology maintenance, repair), 2. Customer Service Providers (call centers, live chat agents, automated and artificial intelligence chat providers, email delivery and text messaging vendors), 3. Order Fulfillment Service Providers (payment processors, order fulfillment centers, delivery services, order tracking vendors), 4. Third-Party Business Relationships (unaffiliated parties that are joint marketing and licensing relationships), 5. Sweepstakes/Promotions Vendors, 6. Third-Party Advertising Entities and Analytics Providers (analytics companies, advertising agencies), 7. Subsidiaries, 8. Other Sirius XM Users (including those on your account/subscription)
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: Third-Party Advertising Entities and Analytics Providers, Third-Party Business Relationships
Vehicle Data - This may include vehicle identification number (VIN), vehicle make, model, and year, and vehicle metrics (such as date and time stamp of ignition on, odometer reading, and data usage amount).	A. Purposes for Collection: 1. Provide You Services (process transactions and orders; facilitate access to SiriusXM services, create and manage your account on Services; provide customer service); 2. Administrative (investigate and prevent fraud and other illegal activities; detect and troubleshoot technical issues).
	B. Categories of Third Parties Personal Data Is Disclosed to: 1. Other Sirius XM Users (including those on your account/subscription), 2.Technology Systems Service Providers (including webhosts, database hosts, cloud computing providers, technology maintenance, software-as-a-service providers, repair), 3. Customer Service Providers (call centers, live chat agents), , automated chat providers).
	C. Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising: This category of data is not sold or shared for targeted advertising.
Payment Data (if you purchase a product or service from Sirius XM directly) – This may include, credit or debit card number, expiration date, billing zip code, secure payment token associated with your payment card.	A. Purposes for Collection: 1. Provide You Services (process transactions, orders, and refunds); 2. Administrative (to conduct sales audits, manage chargebacks, investigate and prevent fraud and other illegal activities).
	B. Categories of Third Parties the Data Is Disclosed to: 1. Customer Service Providers (call centers, live chat agents), 2. Order Fulfillment Service Providers (payment processors, order fulfillment centers, delivery services, order tracking vendors), 3. Security Vendors
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: This category of data is not sold or shared for targeted advertising.
Sensitive Personal Data (data revealing ethnic origin/race, mental or physical health condition or diagnosis, sex life or sexual orientation, or citizenship or citizenship status). – Sensitive Personal Data is collected and used only to the extent permitted by applicable privacy laws in your state of residence.	A. Purposes for Collection: 1. Internal Business Purposes (market research; understand how you use our services, including analyzing trends and usage patterns); 2. Advertising (to tailor content, including advertising and listening recommendations, to you on the Services and on other websites and services); 3. Marketing (to send you special deals, offers, invites to events, and similar information from us or third parties).
	B. Categories of Third Parties the Data Is Disclosed to: 1.Technology Systems Service Providers (including webhosts, database hosts, software-as-a-service providers, cloud computing providers, technology maintenance, repair), 2. Subsidiaries
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: Third-Party Advertising Entities and Analytics Providers (to the extent permitted by applicable law and consistent with your privacy rights and choices)
Precise Geolocation Data of Device (may be considered Sensitive Personal Data under applicable state law) – means location derived by technological means within 1750 feet. - Precise Geolocation is collected and used only to the extent permitted by applicable privacy laws in your state of residence.	A. Purposes for Collection: 1. Advertising (to tailor content, including advertising and listening recommendations, based on your location; to manage advertising campaigns and report on and understand performance); 2. Administrative (troubleshooting service problems; investigate and prevent security incidents and threats, fraud and other illegal activities).
	B. Categories of Third Parties the Data Is Disclosed to: 1. Technology Systems Service Providers (including webhosts, database hosts, software-as-a-service providers, cloud computing providers, technology maintenance, repair, security vendors), 2. Third Party Advertising Entities and Analytics Providers (analytics companies, marketing agencies), 3. Security Vendors, 4. Subsidiaries
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: 1. Subsidiaries, 2. Third-Party Advertising Entities and Analytics Providers (to the extent permitted by applicable law and consistent with your privacy rights and choices)
Other Demographic Data– This may include gender, marital status, age, number of drivers in your household, name of your university and military affiliation (active duty, veteran), consumer interest segments.	A. Purposes for Collection: 1. Provide You Services (facilitate access to Sirius XM services, create and manage your account on Services; determine and verify eligibility for student and military discounts; facilitate your participation in activities you sign up for such as sweepstakes, contests, research); 2. Internal Business Purposes (market research; understand how you use our services, including analyzing trends and usage patterns); 3. Marketing (to send you special deals, offers, invites to events, and similar information from us or third parties); 4. Advertising (to tailor content, including advertising and listening recommendations, to you on the Services and on other websites and services).
	B. Categories of Third Parties the Data Is Disclosed to: 1. Technology Systems Service Providers (including webhosts, database hosts, software-as-a-service providers, cloud computing providers, technology maintenance, repair), 2. Customer Service Providers, 3. Third-Party Business Relationships (parties that are joint marketing and licensing relationships), 4. Security Vendors, 5. Sweepstakes/Promotions Vendors, 6. Third-Party Advertising Entities and Analytics Providers (analytics companies, advertising agencies), 7. Subsidiaries
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: Third-Party Advertising Entities and Analytics Providers, Third-Party Business Relationships
Transaction Data – (This may include subscription status, services and products purchased or considered, purchase and cancellation history, amount of purchase, date of purchase)	A. Purposes for Collection: 1.Provide You Services (facilitate access to SiriusXM services, create and manage your account on Services; send transactional messages regarding your use of the services, purchases, and other service and account related communications; provide customer service); 2.Internal Business Purposes (provide and improve our services; market research, auditing and publication; understand how you use our services, including analyzing trends and usage patterns); 3. Marketing (to send you special deals, offers, invites to events, and similar information from us or third parties); 4.Advertising (to identify your preferences; tailor content, including advertising and listening recommendations, to you on the Services and on other websites and services); 5.Administrative (conduct sales audits, manage charge backs, investigate and prevent fraud and other illegal activities; detect and troubleshoot technical issues).
	B. Categories of Third Parties the Data Is Disclosed to: 1. Other Sirius XM Users (including those on your account/ subscription), 2. Technology Systems Service Providers (including webhosts, database hosts, cloud computing providers, software-as-a-service providers, technology maintenance, repair), 3. Customer Service Providers (call centers, live chat agents, automated and artificial intelligence chat agents, email delivery and text messaging vendors), 4. Order Fulfillment Service Providers (payment processors, order fulfillment centers, delivery services, order tracking vendors), 5. Third-Party Business Relationships (unaffiliated parties that are joint marketing and licensing relationships), 6. Third-Party Advertising Entities and Analytics Providers (analytics companies, marketing agencies), 7. Security Vendors, 8. Subsidiaries
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: 1. Subsidiaries, 2. Third-Party Advertising Entities and Analytics Providers, 3. Social Media and Other Third-Party Platforms, 4. Third-Party Business Relationships
Listening Preferences– This may include music and content preferences including favorites channels and shows, episodes you listen to, stations and playlists you create or listen to, tune starts, songs you skip.	A. Purposes for Collection: 1. Internal Business Purposes (provide and improve our services; develop new products and services; market research, auditing and publication; understand how you use our services, including analyzing trends and usage patterns); 2. Marketing (to send you special deals, offers, invites to events, and similar information from us or third parties); 3. Advertising (to identify your preferences; tailor content, including advertising and listening recommendations, to you on the Services and on other websites and services).
	B. Categories of Third Parties the Data Is Disclosed to: 1. Other Sirius XM Users (when you make your information public), 2. Technology Systems Service Providers (including webhosts, database hosts, software-as-a-service providers, cloud computing providers, technology maintenance, repair), 3. Third-Party Business Relationships (unaffiliated parties that are joint marketing and licensing relationships), 4. Third-Party Advertising Entities and Analytics Providers (analytics companies, marketing agencies), 5. Security Vendors, 6. Subsidiaries
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: 1.Subsidiaries, 2.Third-Party Advertising Entities and Analytics Providers, 3. Third-Party Business Relationships
Account Information and Settings – This may include username, password, communication preferences, content settings (i.e., allowing explicit content or artist audio messages).	A. Purposes for Collection: 1.Provide You Services (process transactions and orders; facilitate access to SiriusXM services, create and manage your account on Services; identify and recognize you across services and devices; send service and account related communications; respond to your inquiries;); 2.Internal Business Purposes (provide and improve our services); 3.Marketing (to send you special deals, offers, invites to events, and similar information from us or third parties in accordance with your preferred communication channel); 4.Administrative (verify your identity; investigate and prevent fraud and other illegal activities; detect and troubleshoot technical issues).
	B. Categories of Third Parties the Data Is Disclosed to: 1. Technology Systems Service Providers (including webhosts, database hosts, software-as-a-service providers, cloud computing providers, technology maintenance, repair), 2. Customer Service Providers (email delivery and text messaging vendors), 3. Security Vendors, 4. Subsidiaries
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: This category of data is not sold or shared for targeted advertising.
Device Data –This may include IP address, mobile device ID, other unique ID, device information (device model, operating system version, date and time of access, mobile network information, cookie settings).	A. Purposes for Collection: 1. Provide You Services (facilitate access to Sirius XM services, create and manage your account on Services; identify and recognize you across services and devices); 2. Internal Business Purposes (provide and improve our services; market research and auditing; understand how you use our services, including analyzing trends and usage patterns); 3. Marketing (to send you special deals, offers, invites to events, and similar information from us or third parties); 4. Advertising (to tailor content, including advertising and listening recommendations, to you on the Services and on other websites and services; to monitor and control the ad delivery, performance and frequency); 5. Administrative (investigate and prevent fraud and other illegal activities; detect and troubleshoot technical issues).
	B. Categories of Third Parties the Data Is Disclosed to: 1. Other Sirius XM Users (including those on your account/subscription), 2. Technology Systems Service Providers (including webhosts, database hosts, software-as-a-service providers, cloud computing providers, technology maintenance, repair), 3. Customer Service Providers (email delivery and text messaging vendors), 4. Third-Party Business Relationships (unaffiliated parties that are joint marketing and licensing relationships), 5. Third-Party Advertising Entities and Analytics Providers (analytics companies, marketing agencies), 6. Security Vendors, 7. Subsidiaries
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: 1. Subsidiaries, 2. Third-Party Advertising Entities and Analytics Providers, 3. Third-Party Business Relationships
Audio and Visual Data – This may include images, video, audio recordings, voice data when you use certain features of Sirius XM services.	A. Purposes for Collection: 1.Provide You Services (facilitate access to Sirius XM services, including to understand and respond to voice commands; respond to your inquiries and provide customer service); 2. Internal Business Purposes (provide and improve our services; market research and auditing); 3. Administrative (detect and troubleshoot technical issues).
	B. Categories of Third Parties the Data Is Disclosed to: 1. Technology Systems Service Providers (including webhosts, database hosts, software-as-a-service providers, cloud computing providers, technology maintenance, repair), 2. Security Vendors
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: This category of data is not sold or shared for targeted advertising.
Non-Precise/Coarse Geolocation Data – This may include rough or approximate location at hometown, city, state, region/country level and may be derived from IP address. Does not include precise geolocation (see above).	A. Purposes for Collection: 1. Provide You Services (facilitate access to Sirius XM services, create and manage your account on Services; personalize your service; exercise territorial limits where required); 2. Internal Business Purposes (provide and improve our services; market research and auditing; understand how you use our services, including analyzing trends and usage patterns); 3. Marketing (to send you offers, invitations to events, and similar information from us or third parties); 4. Advertising (to tailor content, including advertising and listening recommendations, based on your location on the Services and on other websites and services); 5. Administrative (investigate and prevent fraud and other illegal activities).
	B. Categories of Third Parties the Data Is Disclosed to: 1. Technology Systems Service Providers (including webhosts, database hosts, software-as-a-service providers, cloud computing providers, technology maintenance, repair, security vendors), 2. Customer Service Providers (email delivery and text messaging vendors), 3. Third-Party Advertising Entities and Analytics Providers (analytics companies, marketing agencies), 5. Security Vendors, 6. Subsidiaries
	C. Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising: 1. Subsidiaries, 2. Third-Party Advertising Entities and Analytics Providers