Qualtrics

Qualtrics Privacy Statement: User-Focused Overview

*Last updated: April 23, 2026.* This summary is informational and does not replace the Privacy Policy or applicable customer agreements.

1. Data Collection and Use

Information collected

Qualtrics may collect:

• Contact and account data: name, organization, address, email, phone number.
• Financial information: payment, billing, bank-account details, transaction history, costs, sales and royalty information.
• Communications: emails, support inquiries, feedback, and telephone calls. Calls may be recorded, transcribed or analyzed for quality assurance, dispute resolution, employee training, follow-up actions, and sentiment or satisfaction analysis.
• Marketing information: communication preferences and engagement with marketing emails.
• Device and usage data: IP address, device identifiers, operating system, browser, screen resolution, language, approximate location, pages viewed, navigation, access times, and interactions with emails.
• Survey respondent IP addresses: potentially collected when responding to a Qualtrics customer’s survey, primarily for fraud prevention and security.
• Session replay data: Qualtrics may record interactions with its website. It states that IP addresses are not captured and text inputs are masked.
• Information from others: social-media platforms, marketing partners, public sources, and data providers.
• Job applicant data: resumes, contact details, education, work history, skills, and voluntarily provided diversity information.

Uses

Qualtrics uses data to provide and support services, process payments, communicate with users, personalize and secure services, prevent fraud, conduct research and development, comply with law, enforce agreements, and market its products. It may create aggregated, de-identified or anonymized information and use or share it for business purposes.

Important scope limitation: This policy generally does not govern personal information collected through the Qualtrics XM Platform on behalf of a Qualtrics customer. In that situation, the customer generally determines the purposes of processing, and Qualtrics acts as a processor/service provider under the customer agreement.

2. User Rights and Choices

Depending on location and circumstances, users may request:

• Information about collection, use and disclosure;
• Access to a copy of their personal information;
• Correction of inaccurate or outdated information;
• Deletion, subject to legal and operational exceptions;
• A portable, machine-readable copy;
• Objection to or restriction of processing;
• Opt-out of targeted advertising or sharing with advertising partners.

Users may unsubscribe from marketing emails, although operational, service, security and administrative messages may continue. Cookie and online-tracking choices are available through the Cookie Statement or “Manage Cookie Preferences.”

Requests generally require identity verification through the Privacy Request Form. California users may have additional options, including a toll-free number and authorized-agent requests. Rights may be limited where compliance would affect others’ rights, service delivery, legal obligations or Qualtrics’ legal claims. Complaints may be sent to privacy@qualtrics.com or, where applicable, a data-protection regulator.

3. Third-Party Sharing

Qualtrics may disclose information to:

• Service providers handling hosting, IT, support, email, analytics and operations;
• Professional advisers, such as lawyers, auditors, insurers and banks;
• Advertising partners, including for targeted advertising;
• Buyers or participants in mergers, acquisitions, reorganizations, asset sales or bankruptcy;
• Government authorities, law enforcement and private parties where legally justified;
• Third parties at the user’s direction.

Qualtrics says it does not “sell” personal information, but it does share certain information with advertising partners for targeted advertising. Third-party websites and services linked to or integrated with Qualtrics are governed by their own privacy policies.

4. AI and Machine-Learning Training

Yes. Qualtrics expressly states that it may process personal information using AI, including generative AI, and use that information to train machine-learning models, natural-language-processing systems, large-language models and other AI applications. The policy does not clearly define which categories of personal information are excluded, whether training data is always de-identified, or how users can opt out specifically from AI training.

5. Key User Responsibilities and Restrictions

• Services are not intended for children under 16.
• Users should consider the sensitivity of information submitted through surveys, support channels or calls.
• Marketing opt-out does not stop essential service communications.
• Cookie restrictions may affect website functionality.
• Users interacting with third-party websites must review those parties’ policies.
• International transfers may expose data to jurisdictions with different protections.

6. Liability, Security and Disputes

Qualtrics promises “reasonable” organizational, technical and administrative safeguards but does not guarantee complete security of internet transmissions. The policy itself does not provide a comprehensive liability cap or general governing-law clause; those terms may appear in separate Terms of Use or customer agreements.

For eligible EU, UK and Swiss data, Qualtrics describes Data Privacy Framework complaint procedures, including free review by ICDR-AAA and, in certain cases, binding arbitration through the DPF Panel. Other users may use the stated privacy-request and regulatory complaint processes.

7. Policy Changes

Qualtrics may change the policy at any time. For material changes, it will notify users and take any additional steps required by applicable law. The policy does not specify a uniform notice period or method, so users should monitor the policy and update notices.