The policy discloses that California residents have CCPA rights to request disclosure of collected personal information categories and specific pieces, to request deletion of their personal information, to opt out of the sale or sharing of personal information, and to be free from discrimination for exercising those rights.
This analysis describes what Acorns's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes operative consumer rights under CCPA and CPRA for California residents, creating enforceable obligations for Acorns to respond to rights requests and to provide a functional opt-out-of-sale-and-sharing mechanism.
Interpretive note: The specific submission mechanism, identity verification procedures, and response timelines for CCPA rights requests are not fully described in the document excerpt reviewed, creating some ambiguity about operational compliance.
The updated policy removes explicit language describing how data flows when users sign in via Apple or Google, including what information those services share with Acorns and how it is used. Previously, the policy stated that Acorns receives information such as name and email address through third-party sign-in services solely to manage accounts and provide services. The revised language also shifts the AI chatbot from an optional feature users 'may access' to a stated service Acorns 'uses' to direct users to internal articles. Users no longer have a published explanation of third-party sign-in data practices in the privacy notice, though the terms suggest data shared through third-party services remains subject to those providers' terms.
View change record →This provision establishes that California residents may submit requests to know, delete, or opt out of the sale or sharing of their personal information, and that Acorns is obligated under CCPA not to discriminate against users for exercising those rights. The agreement acknowledges these rights in a dedicated section, though the specific submission mechanism, response timelines, and verification procedures are not fully captured in the excerpt reviewed.
How other platforms handle this
We may also collect your personal data from other people or companies.
If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, sell, or share. Correct inaccurate personal information. Delete your personal information. Opt out of the sale or sharing of your personal information. Limit the use and disclosure ...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Monitoring
Acorns has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, you have certain rights with respect to your personal information, including: the right to know what personal information we have collected, used, disclosed, or sold about you; the right to request that we delete personal information we have collected from you; the right to opt out of the sale or sharing of your personal information; and the right to non-discrimination for exercising your privacy rights.— Excerpt from Acorns's Acorns Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly implements CCPA as amended by CPRA, enforced by the California Privacy Protection Agency and California Attorney General. The right to opt out of sharing for cross-context behavioral advertising is a CPRA-specific addition beyond the original CCPA sale opt-out, and its operational implementation must comply with CPPA regulatory guidance including Global Privacy Control signal requirements. The non-discrimination obligation is codified in CCPA and prohibits denial of goods or services, different pricing, or different quality of service as retaliation for rights exercise. 2) GOVERNANCE EXPOSURE: Medium. The operational mechanisms for rights request intake, verification, and response must comply with CCPA's 45-day response deadline and verification standards. If advertising partner data sharing is not properly structured as service provider processing, opt-out-of-sharing requests may require proactive downstream notification to those partners. 3) JURISDICTION FLAGS: This provision applies exclusively to California residents. Other states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Texas, and others) may have analogous rights that are not addressed in this provision, creating potential compliance gaps for users in those states. 4) CONTRACT AND VENDOR IMPLICATIONS: Deletion requests may require contractual mechanisms to cascade deletion obligations to service providers and processors. If advertising partners have received personal information and a deletion request is submitted, contractual frameworks should address whether and how deletion is communicated to those partners. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the opt-out mechanism is technically functional, that GPC signals are recognized and acted upon automatically, that rights request response timelines are tracked and met, and that the non-discrimination policy is operationally implemented across pricing, service quality, and account management systems.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes operative consumer rights under CCPA and CPRA for California residents, creating enforceable obligations for Acorns to respond to rights requests and to provide a functional opt-out-of-sale-and-sharing mechanism.
This provision establishes that California residents may submit requests to know, delete, or opt out of the sale or sharing of their personal information, and that Acorns is obligated under CCPA not to discriminate against users for exercising those rights. The agreement acknowledges these rights in a dedicated section, though the specific submission mechanism, response timelines, and verification procedures are …
ConductAtlas has identified this type of provision across 5 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Acorns.