Affirm Privacy Policy

Affirm's Privacy Policy describes what personal information Affirm collects about you — including your Social Security number, bank login credentials, and payment card numbers — how it uses that information, and who it shares it with, including merchants, fraud prevention services, and credit bureaus. You can opt out of Affirm sharing your information with merchants for marketing purposes by updating your Data Sharing setting in your Affirm account, but if you opt out of certain notices Affirm considers essential to its service, Affirm may close or restrict your account. Affirm uses your information for AI and machine learning tools and its behavioral advertising practices may count as selling or sharing your personal information under California law.

Affirm's Privacy Policy establishes the scope of personal information Affirm collects, the purposes for which it uses that information, the parties with whom it shares it, and the rights users hold over their data. Affirm collects highly sensitive identity and financial account information — including Social Security numbers, bank login credentials, account numbers, routing numbers, and payment card numbers — and uses this information for transaction processing, account maintenance, lending, research, product development, and AI and machine learning applications. Affirm shares user information broadly across everyday business purposes, including credit bureau reporting, legal compliance, fraud prevention via third-party providers, and merchant marketing, with user consent to merchant marketing sharing treated as given upon acceptance of the Notice and use of the Services. Users hold an opt-out right for nonaffiliate marketing sharing, exercisable through account Data Sharing settings, but Affirm reserves the right to close or limit account access if a user opts out of notices Affirm considers required to perform its service. Affirm's behavioral advertising activities involving collection of internet browsing data may constitute a sale or sharing of Personal Information under the CCPA, and Affirm honors legally required browser-based opt-out signals such as GPC while not recognizing Do Not Track signals.

This document means that Affirm holds some of the most sensitive personal and financial information a user can share — including Social Security numbers, bank login credentials, full account numbers, and payment card details — and flows that information to a wide range of third parties including merchants, fraud prevention providers, credit bureaus, and nonaffiliated marketing companies as a routine part of its operations. Accepting Affirm's Notice and using its Services is treated as consent to Affirm sharing your information with merchants you interact with for their marketing purposes. To limit this, you can log into your Affirm account and update your Data Sharing setting to opt out of merchant marketing data sharing. Be aware that opting out of notices Affirm considers required to perform its service may result in Affirm closing or restricting your account access.