PayPal

You are agreeing to allow PayPal to track your internet activity, device info, and generate inferences about your habits for targeted advertising and analytics.

“We may use Personal Information... to better understand and cater to your interests... We also use Personal Information to allow you to participate in certain features... such as... targeted advertising... We use Cookies to collect your device information, internet activity information, and generate inferences...”

What that means: Your online activities and preferences are collected and used to show you personalized ads without you necessarily opting into each specific instance.

PayPal tracks your browsing behavior, shopping habits, and device details across its services and partner sites to build detailed profiles for targeted advertising and inference generation.

You are agreeing to let PayPal share your personal information with partners and merchants for personalized shopping experiences unless you actively opt out.

“Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you’ll like.”

What that means: Your shopping preferences and personal details are shared with external businesses to tailor offers and advertisements.

PayPal shares your personal data with partners and merchants for personalized shopping experiences. While there is an opt-out mechanism, the default state involves significant data disclosure for commercial purposes.

You are agreeing to have your personal information retained for at least 10 years after your account closes, potentially longer for legal or compliance reasons.

“Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years... In connection with litigation, investigations, audit and compliance practices, or to protect against legal claims.”

What that means: Your personal data remains with PayPal long after you stop using the service, limiting your ability to fully erase your digital footprint quickly.

Data is kept for a mandatory minimum of 10 years post-account closure, plus any additional time required for legal or compliance reasons, which could be indefinite.

You are agreeing to data practices that apply across PayPal's core services, excluded services like Venmo and Honey, and the Fastlane tool used at partner merchants.

“Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC... Fastlane means the online tool whereby individuals can store their payment methods... at participating Partners and Merchants...”

What that means: Data collected via Venmo, Honey, or Fastlane checkouts at various stores is subject to this same broad privacy framework and sharing practices.

The privacy statement covers interactions with excluded services like Venmo and Honey, as well as the Fastlane tool used across various merchant sites. The policies link these distinct services and external merchant interactions under one umbrella of data usage and sharing.

You are agreeing to the collection of sensitive data including biometrics and precise financial identifiers like SSNs and bank accounts.

“Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you... Sensitive Personal Information: Such as Social Security and tax ID number... bank account and routing numbers...”

What that means: Sensitive biological and financial data is collected and stored by PayPal, requiring trust in their security measures and specific consent for biometrics.

The document explicitly lists the collection of biometric data (face/voice) and highly sensitive financial identifiers like SSNs and bank details.

You are agreeing to accept updates to this Privacy Statement, which may be effective after minimal notice or immediately upon publication.

“We may revise this Privacy Statement from time to time... we will provide you with 30 days' prior notice by posting notice of the change on the Policy Updates... otherwise the revised Privacy Statement will be effective as of the published effective date.”

What that means: You may not receive direct warning before rules change, and continued use constitutes acceptance of new terms.

PayPal can update the privacy policy unilaterally. While they promise 30 days' notice for some changes, others may become effective immediately upon publication without further direct notification.

You are agreeing that deletion requests or account closure will not result in the complete removal of your data due to legal, fraud, and operational retention requirements.

“If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with laws... detect and prevent malicious, fraudulent, or illegal activity... Manage our internal business processes...”

What that means: You cannot fully delete your history because PayPal keeps copies for legal, security, and operational purposes.

Deleting your account or data does not guarantee full erasure. Retention clauses for legal compliance, fraud prevention, and internal processes allow PayPal to keep substantial amounts of data indefinitely.

You are agreeing that PayPal is not responsible for securing information shared with third-party linked accounts.

“We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

What that means: If a linked third party suffers a breach or mishandles data, PayPal states it is not liable for those consequences.

PayPal disclaims responsibility for security breaches or misuse of data once it is shared with third parties linked by your authorization.