Affirm obtains information about you not just from your direct interactions with its app or website, but also from credit bureaus, data brokers, and its retail merchant partners.
This analysis describes what Affirm's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This means your profile at Affirm is built from sources you may not be aware of or have directly consented to, which can affect credit decisions and how you are targeted for marketing.
Interpretive note: The exact categories of data obtained from data brokers and the specific purposes for which they are used are not fully enumerated, creating some uncertainty about the scope of this collection.
The updated Privacy Policy establishes that Affirm qualifies as a financial institution under the Gramm-Leach-Bliley Act, meaning personal information collected in connection with Affirm services is governed by federal banking law rather than applicable state privacy laws. The policy now explicitly discloses collection of identity and profile information including full name, date of birth, Social Security number, email, mailing address, phone number, and password. The updated terms also disclose new data sharing arrangements with fraud prevention, identity verification, and risk intelligence providers, which were not previously detailed. You can contact Affirm's privacy team using the phone number provided in the updated policy to exercise data privacy rights.
View change record →Your data profile at Affirm may include information from data brokers and credit bureaus combined with merchant transaction data, creating a more comprehensive record than you may expect from a loan provider.
How other platforms handle this
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"We may collect information about you from third parties, such as credit bureaus, identity verification services, data brokers, and our merchant and business partners. This information may include your credit history, identity verification information, and other information about you.Excerpt from Affirm's Privacy Policy
REGULATORY LANDSCAPE: Collection of credit bureau data triggers Fair Credit Reporting Act permissible purpose requirements enforced by the CFPB and FTC; any use of consumer report data for eligibility, marketing, or profiling purposes must satisfy …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This means your profile at Affirm is built from sources you may not be aware of or have directly consented to, which can affect credit decisions and how you are targeted for marketing.
Your data profile at Affirm may include information from data brokers and credit bureaus combined with merchant transaction data, creating a more comprehensive record than you may expect from a loan provider.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Affirm.