California residents have specific legal rights under CCPA and CPRA to access, delete, correct, and limit use of their personal data held by Affirm, and to opt out of having their data sold or shared with third parties.
This analysis describes what Affirm's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights give California residents meaningful control over their financial and behavioral data at Affirm, including the ability to stop data sharing for marketing purposes.
Interpretive note: The interaction between GLBA's partial CCPA exemption and CPRA's expanded rights means the practical scope of available rights for specific data categories depends on legal mapping that the policy does not fully resolve.
The updated Privacy Policy establishes that Affirm qualifies as a financial institution under the Gramm-Leach-Bliley Act, meaning personal information collected in connection with Affirm services is governed by federal banking law rather than applicable state privacy laws. The policy now explicitly discloses collection of identity and profile information including full name, date of birth, Social Security number, email, mailing address, phone number, and password. The updated terms also disclose new data sharing arrangements with fraud prevention, identity verification, and risk intelligence providers, which were not previously detailed. You can contact Affirm's privacy team using the phone number provided in the updated policy to exercise data privacy rights.
View change record →California residents can request access to or deletion of their personal information and opt out of data sharing for advertising purposes by using Affirm's privacy request portal, providing concrete control over how their data is used.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
Not be Discriminated Against by us for exercising your privacy rights.
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
"If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell; the right to delete personal information we have collected from you; the right to opt-out of the sale or sharing of your personal information; the right to correct inaccurate personal information; and the right to limit the use and disclosure of sensitive personal information.Excerpt from Affirm's Privacy Policy
REGULATORY LANDSCAPE: This provision reflects obligations under the California Consumer Privacy Act as amended by CPRA, enforced by the California Privacy Protection Agency and the California AG.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
These rights give California residents meaningful control over their financial and behavioral data at Affirm, including the ability to stop data sharing for marketing purposes.
California residents can request access to or deletion of their personal information and opt out of data sharing for advertising purposes by using Affirm's privacy request portal, providing concrete control over how their data is used.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Affirm.