PayPal

You are agreeing that your data will be kept for at least 10 years after you stop using the service.

“Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

What that means: Your personal and financial history remains in their system long after you leave, limiting your ability to fully erase your digital footprint.

Even after you close your account, PayPal keeps your data for at least 10 years to comply with banking laws, handle disputes, or prevent fraud.

You are agreeing to let PayPal share your detailed shopping preferences and habits with the businesses you interact with.

“We may disclose Personal Information with Partners and Merchants to enable their use of our Services to facilitate your transactions... including, for example, products, sizes, preferences, and styles we think you'll like.”

What that means: Merchants and partners receive your private shopping behavior profile to influence what you buy and show you relevant ads.

PayPal shares detailed shopping habits, preferences, and inferred data with merchants and partners to help them target ads and recommendations to you.

You are agreeing that your use of excluded services like Venmo and Honey is subject to their own separate privacy terms.

“Excluded Services, including Venmo and PayPal Honey. ... Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... who process Personal Information in accordance with their own terms of service and separate privacy statements.”

What that means: Your activity on Venmo or Honey is governed by different privacy policies, and data sharing between these entities may occur.

Using PayPal connects you to distinct brands like Venmo and Honey that operate under their own separate privacy rules, potentially expanding data collection beyond this document's scope.

You are agreeing to let PayPal change these privacy rules without needing your explicit permission for most updates.

“We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

What that means: Users must check the website regularly to see if the rules have changed, as silence on their part means acceptance of new terms.

PayPal can change the privacy terms at any time. While some changes get 30 days' notice, most take effect immediately upon posting, meaning users are bound by new rules without active consent.

You are agreeing to provide sensitive biometric data like face scans or voice prints if you use those authentication features.

“Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you...”

What that means: If you choose to use facial recognition or voice ID, that sensitive biological data is stored by PayPal for security checks.

The company collects sensitive biometric identifiers like face scans and voice IDs for authentication purposes, which is data beyond standard financial details.

You are agreeing that deleting your account or requesting data removal will not erase everything, especially what is needed for legal compliance.

“If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained in How Long Do We Store Your Personal Information so we can... comply with laws...”

What that means: You cannot force PayPal to permanently wipe all your data immediately; significant portions remain retained for over a decade.

Requesting deletion or closing your account does not result in immediate or total erasure. Data is kept for legal, tax, and fraud prevention reasons for extended periods.

You are agreeing to let PayPal share your personal information with partners and merchants to create personalized shopping ads and experiences.

“In the United States, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States.”

What that means: Companies you transact with can receive your personal data to target you with specific ads and product recommendations.

PayPal discloses personal info to partners and merchants specifically for 'personalized shopping experiences,' which functions similarly to sharing or selling data for commercial targeting under many state laws.

You are agreeing that you are solely responsible for your passwords and any data leaks resulting from authorized linked accounts.

“While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

What that means: If you lose your password or authorize a risky link, you bear the risk rather than holding PayPal liable for the loss.

PayPal shifts the responsibility for password security and risks associated with linked third-party accounts onto the user.

You are agreeing that you must accept cookies to use the full features of the website and app.

“Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

What that means: You cannot use the full service without accepting cookies, making rejection effectively impossible for regular users.

Declining cookies restricts core functionality, forcing users to accept tracking technologies to access the full service.

You are agreeing that you must be at least 18 years old to legally use this service.

“The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18...”

What that means: Users under 18 are explicitly barred from using the service, removing potential access for teenagers.

The service sets a high age limit of 18 for use, which is stricter than COPPA's 13-year threshold but limits accessibility for minors.