PayPal

You are agreeing to allow PayPal to track your online behavior and preferences to create detailed profiles for advertising and targeted content.

“We may use Personal Information... to provide you with information... market our Services... show ads or otherwise personalize your experience”

What that means: Your spending habits, location, and identity are analyzed and used to influence what offers you see and who sees your public profile.

PayPal tracks your activity across its sites and potentially partners' sites to build profiles on your habits, preferences, and creditworthiness, which they then use to target ads or share with merchants.

You are agreeing to the collection of your biometric identifiers (like face scans) and precise geographic location data for identity verification and security.

“Biometric data: Such as voice identification, photo identification, or face scans... government-issued identification... precise geolocation data”

What that means: Sensitive biometric markers and precise physical location data are collected, creating a permanent record of your body and movements.

The company collects high-risk sensitive data including facial scans, voice prints, and exact GPS locations to verify identity and enhance security features.

You are agreeing that your personal information will be kept on file for up to ten years or longer after you stop using the service.

“Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end”

What that means: Even after you leave, your financial records remain accessible to the company and authorities for a decade.

Data is retained for at least ten years after account closure, extending far beyond the active user relationship, often due to legal compliance requirements.

You are agreeing that your usage may involve multiple distinct services like Venmo and Honey, which operate under separate brand-specific frameworks.

“Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

What that means: Engaging with the main PayPal product often intersects with other branded financial services that have their own specific data handling rules.

Using PayPal's core services involves interactions with distinct sister brands like Venmo and Honey, each operating under separate but related policies.

You are agreeing that PayPal can change its privacy practices at any time, and you accept those changes by continuing to use the service.

“We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

What that means: The rules governing your data privacy can change immediately upon publication without requiring you to actively agree again.

PayPal can update the privacy policy at any time without obtaining explicit renewed consent. Continued use of the service serves as acceptance of the new terms once published.

You are agreeing that deleting your account or requesting data deletion will not result in the total erasure of your personal information.

“If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with our promises to you... detect and prevent malicious... activity”

What that means: Requests to remove your data are frequently denied or only partially fulfilled because the company keeps copies for legal and security reasons.

Deleting your account does not erase all data; exceptions for legal compliance, fraud prevention, and internal business processes allow significant data retention.

You are agreeing that you are responsible for keeping your passwords secret and that PayPal is not liable for data exposed via third-party links you authorize.

“While we are dedicated to securing our systems... you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection”

What that means: If your password is compromised or you link insecure third-party accounts, the company may not hold itself liable for resulting data breaches.

The user bears responsibility for password security, and PayPal disclaims liability for data leaks occurring through third-party linked accounts or connections authorized by the user.

You are agreeing that you must be at least 18 years old to use the service, and that the company will not knowingly collect data from minors.

“The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18”

What that means: Users under 18 are prohibited from using the service, limiting accessibility for younger adults rather than just small children.

The service restricts use to individuals aged 18 and older. While this limits child data collection more strictly than COPPA, it sets a higher barrier than typical 'under 13' definitions.