If you like this, see what else we're creating.

Privacy policy

PayPal

PayPal Privacy Statement

F

Risk score

100of 100

In short

  • You are agreeing to a privacy policy that covers PayPal, its subsidiaries like Venmo and Honey, and third-party merchants you transact with.
  • The document allows them to collect detailed financial, location, and biometric data, and retain it for years after your account closes.
  • You consent to sharing this information with partners for personalized shopping experiences and allow automated decisions that may limit your access to services.

What you accept

If you use this site

Everyday words for the material promises and rights you give up. Each line includes a quote from the document.

Fineprint cannot see whether you agreed. This page is posted on their site. Open the original if you need to know how they say it applies.

  1. 01

    You are agreeing that your Personal Information can be transferred to countries with different data protection rules.

    Other products, stores, or brands

    “By using our Sites and Services, where permitted under applicable privacy laws, you agree to your Personal Information being transferred to other countries, including countries that have different data protection rules than your country.”
  2. 02

    You are agreeing that we and our partners use Cookies to serve you interest-based advertising across the internet.

    Other companies

    “We use Cookies to collect your device information, internet activity information, and generate inferences as described above... help us to serve you relevant ads on our Services and other places on the internet.”
  3. 03

    You are agreeing to share your profile information with other users and merchants when you make payments or interact with offers.

    Other companies

    “We may disclose your Personal Information with other PayPal account holders to complete a payment transaction... This also applies when you interact with ads or offers we provide relating to one of our Partners and Merchants.”

What it can cost you

Downsides we could quote

Quoted clauses that can affect your privacy, money, or right to go to court — including terms that follow you to other products.

Highest-cost clauses first

High cost

Tracking you across apps

You are agreeing to share your personal shopping habits and preferences with third-party merchants for targeted marketing.

“We also disclose Personal Information to partners and Merchants to enable their use of our Services to facilitate your transactions... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.”

What that means: Merchants and advertisers get a detailed picture of your shopping behavior and preferences.

The company shares your shopping habits, preferences, and inferred data with external merchants and partners so those businesses can target you with personalized offers and ads.

High cost

Location or sensitive-data over-collection

You are agreeing to the collection of biometric and precise location data for authentication and security.

“Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you... We collect precise geolocation data from Users while they are logged into their financial account.”

What that means: Your unique physical identity markers and exact whereabouts are stored by the company.

PayPal collects highly sensitive biometric data (face scans, voice) and precise GPS location data to authenticate users and enhance security.

High cost

Indefinite retention

You are agreeing to have your data retained for up to 10 years after your account closure.

“Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end.”

What that means: Your personal information remains on file for over a decade even after you leave the service.

Data is kept for at least 10 years after your account closes to comply with laws and protect against claims, far beyond the active life of your account.

High cost

Terms follow you to parks, stores, and other products

You are agreeing to a unified privacy framework that spans PayPal, Venmo, Honey, and partner merchant services.

“Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC... Fastlane means the online tool whereby individuals can store their payment methods... at participating Partners and Merchants.”

What that means: Activity in sister apps like Venmo or Honey impacts your central PayPal data profile.

This privacy statement governs a wide ecosystem including Venmo, Honey, Xoom, and Fastlane profiles used at external merchant sites. Your data flows through these interconnected platforms.

High cost

Children’s data

You are agreeing that no one under the age of 18 may use these services.

“The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information, including Personal Information, from children under the age of 18... we will promptly delete it, unless we are legally obligated to retain such data.”

What that means: Users under 18 are strictly prohibited from using the service alone.

The strict bar is set at 18, not the federal standard of 13. This restricts younger teens from using the service directly, but the broad definition affects family usage norms.

Medium cost

Unilateral changes with little or no notice

You are agreeing to updates that may change your privacy rights without meaningful notice.

“We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

What that means: You might accept new, less privacy-friendly terms without real warning.

PayPal can update their privacy terms whenever they want. They only promise to give you 30 days' notice if the law specifically demands it; otherwise, the new terms take effect immediately upon publishing.

Medium cost

Difficult or incomplete deletion

You are agreeing that deleting your account will not remove all of your personal information.

“If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with laws and other legal or governmental processes; and Other exempt purposes under applicable law.”

What that means: You cannot fully purge your history from their systems.

Deleting your account does not erase everything. PayPal keeps data to satisfy legal requirements, prevent fraud, and manage internal business processes, meaning deletion is incomplete.

Medium cost

Data sold or shared with third parties

You are agreeing to share your personal data with partners and merchants for personalized shopping experiences.

“Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, sizes, preferences, sizes, and styles we think you’ll like.”

What that means: Your browsing and purchase history are shared with commercial entities for targeting.

Under US privacy laws, sharing data for 'personalized shopping experiences' often constitutes a 'sale' or 'sharing.' PayPal discloses your behavioral data to partners and merchants to tailor ads.

Medium cost

Cookie consent that favors Accept

You are agreeing to potential service limitations if you choose to reject cookies.

“Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

What that means: You may be forced to accept tracking to use basic site functions.

The company discourages cookie rejection by stating that essential features may stop working if you try to block tracking technologies.

Medium cost

Tracking you across apps

You are agreeing to the creation of inferred data profiles about your financial habits and creditworthiness.

“Inferred data: Such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment, your preferences and shopping behavior, which we may infer based on your transactions...”

What that means: A hidden profile is built about your financial status and habits.

PayPal builds profiles about you by calculating inferred data points like income and creditworthiness based on how you behave online.

Lower cost

Liability shifted onto the user

You are agreeing to accept responsibility for your own password security and linked account data.

“While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

What that means: You hold the risk for losses related to your password management or linked third-party accounts.

You bear the responsibility for your password security, and PayPal denies liability for data breaches or issues arising from accounts you voluntarily link to their platform.

If these terms already apply to you

Keep this list. Fineprint cannot undo or cancel something you already agreed to at the company.

We cannot see Agree on their site. With Premium, tap “I accepted these terms” if you already agreed to what PayPal asks.