Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes Betterment's data collection, use, and disclosure practices for personal and financial information provided by users. Betterment collects data including Social Security numbers, account balances, investment history, and employment details, and discloses this information to third-party service providers, affiliates, and business partners. California residents are granted rights to access collected information, request deletion, and opt out of the sale or sharing of personal data.
This document is Betterment's Privacy Policy governing how Betterment LLC and its affiliates collect, use, share, and protect personal information from users of its investment, cash management, and workplace retirement services, operating under applicable U.S. federal and state privacy frameworks. The policy states that Betterment collects a broad range of personal and financial data including Social Security numbers, account balances, transaction history, employment information, device identifiers, geolocation, and behavioral data from third-party sources, and the terms authorize sharing this data with service providers, financial partners, affiliates, and in connection with business transfers. Notably, the policy addresses California residents' rights under CCPA and asserts opt-out rights for the sale or sharing of personal information, though the breadth of data collected from third-party data aggregators and behavioral tracking tools such as Google Analytics and Google Tag Manager represents a meaningful surface area that may warrant evaluation under applicable state privacy statutes. As a registered investment adviser and fintech platform handling sensitive financial data including retirement accounts and banking information, Betterment's data practices engage the Gramm-Leach-Bliley Act, CCPA, and potentially SEC Regulation S-P governing the safeguarding of customer records; compliance teams should assess whether third-party analytics integrations and the use of tracking technologies on a financial services domain align with the data minimization and consent requirements under these frameworks.
Institutional analysis available with Compliance
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.
Start Compliance free trial1 important change detected
3 versions captured · Last updated: July 2026
This provision clarifies marketing opt-out mechanisms and specifies that transactional communications remain exempt, replacing the previous 'Joint Marketing Data Sharing' provision with more user-friendly guidance.
New provision explicitly details security implementation measures and provides liability limitation, addressing consumer expectations for financial data protection.
New provision adds compliance with COPPA and demonstrates commitment to child protection, a standard regulatory requirement for services handling personal data.
Removal of this provision eliminates disclosure about joint marketing practices, replaced by more specific 'Marketing Communications and Opt-Out' provision with direct contact information.
Removal of this specific provision eliminates explicit mention of cross-context behavioral advertising opt-out rights, though these protections may be addressed in the expanded tracking technologies disclosure.
Removal of this standalone provision's content is absorbed into more comprehensive 'Sensitive Financial Data Collection' provision that covers both collection and use of financial information.
Previous version had empty excerpt, current version now includes detailed enumeration of CCPA/CPRA rights with specific reference to correction rights and sensitive personal information limitations.
Previous version had empty excerpt; current version now provides detailed disclosure of third-party sharing categories including service providers, financial partners, affiliates, and transaction scenarios.
Severity increased from low to medium, and previous empty excerpt now includes detailed tracking technology disclosure with specific third-party tool names and data categories collected.
Previous version had empty excerpt; current version now includes detailed retention criteria and factors considered when determining retention periods.
Renamed from 'Sensitive Personal Information Collection' (high severity) to 'Sensitive Financial Data Collection' (medium severity), with addition of concrete examples of identifiers and financial data collected.
Monitoring
Betterment has updated this document before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Compliance free trialCross-platform context
See how other platforms handle Sensitive Personal Information Collection and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.