They make it mandatory to accept tracking for targeted advertising (or pay, which itself requires providing personal information). This is not compliant with the GDPR.

Palantir’s entire business model is a GDPR violation, isn’t it?