Change record
CA-C-005440
Stripe Privacy Policy
Reissued 2026-10-07. This change was captured April 18, 2026. Our first record of it, CA-X-001294, compared this capture against a later one and so described the change in reverse; it was withdrawn (correction 215). This record describes the change in the order it happened. It is appearing now because it is a correction, not a late detection.
Entity
Date detected
April 18, 2026
Severity
Direction
Negative
Taxonomy
Data collection expansion
Changes
+39 sentences added · 73 sentences modified

Impact Summary

Medium Negative for users
Affected users
All users Link account holders End customers Subscription businesses Ecommerce merchants

Reissued 2026-10-07: this change was first recorded in reverse as CA-X-001294, which was withdrawn; this record describes it in the order it happened. Stripe updated its Privacy Policy (last updated February 23, 2026, replacing the version of January 16, 2025). The definition of Transaction Data now includes payment status, order fulfillment status, subscription status, tax amounts, refund or chargeback information, and support interactions. The policy says a Link account can be used to access services from Stripe's partner businesses, such as Buy Now, Pay Later or crypto wallet services, and that you can withdraw consent to the collection of bank account data by disconnecting your bank account.

1 obligation expanded

Consumers: Stripe collects more detailed information about your transactions and shares it with partner businesses when you use Link to access their services.

Stay ahead of the changes
Track Stripe and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

What this means for you

The updated policy expands the categories of transaction data Stripe collects and uses. Transaction Data now explicitly includes payment status, order fulfillment status, subscription status, applicable tax amounts, refund or chargeback information, and support interactions—in addition to previously listed items like name, contact information, and payment method details. The policy also clarifies that Link accounts can be used to access partner services such as Buy Now, Pay Later and crypto wallet services, and that Stripe will collect and share additional personal data with those partners to facilitate such services. You can withdraw your consent for bank account data collection by disconnecting your bank account from Link.

What you can do

→ Review Stripe's updated privacy policy to understand what transaction data is now collected.

→ If you use Link, review what partner services you have enabled and what data is shared with those partners.

→ If you do not want Stripe to collect bank account data, disconnect your bank account from Link.

Key Clauses Affected

Transaction Data definition expansion

Now explicitly includes payment status, fulfillment status, subscription status, tax amounts, refund/chargeback information, and support interactions.

Link account partner services

Clarifies that Link can access third-party services (BNPL, crypto wallets) with additional personal data collection and sharing to partners.

Bank account consent withdrawal

Users can now withdraw consent for bank account data collection by disconnecting the account from Link.

Full clause-by-clause analysis available with Insight.
ⓘ

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
a1b7279eacf26876aa47a3b0beefd5312b9689dbd47bec60c09d3e75e46eb2ce
March 16, 2026 06:04 UTC
✓ Verified
Current Version
2b975ac237f81cc01bb83827febbe9ac6c310ec1f4cdd46aba7c6f0968637268
April 18, 2026 07:39 UTC
✓ Verified
Change Detected
April 18, 2026 07:39 UTC
✓
Analysis Methodology
✓ Verified
Source Document
https://stripe.com/privacy
Record history

Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.

2026-10-07 · Change line edited · change line rewritten to the 2026-10-07 template: no detection date, no sentence counts
Previous text
Stripe updated their Stripe Privacy Policy on April 18, 2026. Change detected: 39 sentence(s) added, 73 sentence(s) modified. Document contained 517 sentences after update.
Citation Record
Entity: Stripe
Document: Stripe Privacy Policy
Record ID: CA-C-005440
Version: CA-V-001832
Captured: 2026-04-18 07:39:36 UTC
URL: https://conductatlas.com/change/2026-04-18-stripe-stripe-privacy-policy-5440/
Accessed: Oct. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
For legal and compliance teams

Institutional Analysis

Assessment

Stripe's privacy policy expands the definition of Transaction Data to include payment status, fulfillment status, subscription status, tax amounts, refund/chargeback information, and support interactions. The policy also clarifies that Link accounts can access third-party partner …

🔒 Full institutional analysis

Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.

Unlock the full institutional analysis — Insight

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-005440.

Full Changes

View complete diff →

Document Context

Version history → Policy drift analysis → Document page →
Document
Stripe Privacy Policy
Entity
Stripe
Captured
April 18, 2026
Source URL
https://stripe.com/privacy
Other changes to Stripe Privacy Policy
Next change Apr 23, 2026
Stripe updated its privacy policy on April 23, 2026, but the substantive changes detected are minimal. The update date listed …
Low Neutral
View full version history →
More from Stripe
Sep 30, 2026 Unknown
Stripe Terms of Service
Sep 29, 2026 Unknown
Stripe Terms of Service
Jul 1, 2026 Low
Stripe Connect Platform Agreement

Stripe removed two hyperlinks from the Stripe Connect Platform Agreement on July 1, 2026. The updated language previously read 'here' …

Related Analysis
Dependency Governance · June 11, 2026
When AI Agents Start Paying for Things: Who Governs Machine-to-Machine Commerce?

Mastercard, Stripe, and Cloudflare are building payment infrastructure for autonomous AI agents. The governance layer is not keeping pace.

Dependency Governance · May 27, 2026
When Infrastructure Providers Govern Platforms

The Kickstarter-Stripe controversy reveals how payment processors, cloud providers, and AI platforms quietly shape downstream policy decisi…

Consumer Rights · April 21, 2026
Stripe's Reserve and Hold Authority: What the Terms Authorize

Stripe's terms authorize fund reserves, payout withholding, and account termination. Here is what the agreement states and what business ow…

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Stay ahead of the changes

Track Stripe policy changes

Get alerted when this policy changes again, including what changed and why it matters.

All Stripe changes →