Cash App · Cash App Privacy Policy · View original document ↗

Data Broker and Third-Party Marketing Partner Enrichment

High severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Cash App recorded 7 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Cash App Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Cash App states it receives inferred characteristics, advertising segments, and interest data about you from data brokers and advertising platforms, and uses this information to supplement the profiles it maintains about you.

This analysis describes what Cash App's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The policy states that profiles maintained about Cash App users may be enriched with externally sourced inferred characteristics and advertising segments from data brokers, which goes beyond transactional data collection and engages CCPA/CPRA rights to know about third-party data sources and opt out of their use.

Recent Activity

This document changed recently

Medium Apr 19, 2026

The updated policy establishes that children under 13 may use Cash App services if a parent or guardian signs up for or authorizes the account on their behalf. Previously, the policy explicitly prohi…

Medium Apr 10, 2026

The revised policy shifts from prohibiting all children under 13 from using Cash App to permitting use when a parent or guardian explicitly authorizes or signs up for the service on the child's behal…

Consumer impact (what this means for users)

Cash App states it receives inferred characteristics, advertising segments, and interest and preference data from data brokers and advertising platforms to supplement user profiles; California residents have the right to know about these third-party data sources and the right to opt out of the sale or sharing of personal information under the CCPA/CPRA.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Navigate to the 'Your Rights and Choices' section of the Cash App Privacy Notice and submit a request to opt out of the sale or sharing of personal information, or to request disclosure of the specific third-party sources of your data.

Cross-platform context

See how other platforms handle Data Broker and Third-Party Marketing Partner Enrichment and similar clauses.

Compare across platforms →

Monitoring

Cash App has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Third-Party Marketing and Advertising partners. Information about you may be collected from third party partners such as advertisers, data brokers, or advertising platforms. The information we receive from these sources may include inferred characteristics, advertising segments, interests, preferences, or other data used to enhance or supplement the profiles we maintain about our customers.

— Excerpt from Cash App's Cash App Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

1) REGULATORY LANDSCAPE: The CCPA/CPRA requires disclosure of categories of third-party sources from which personal information is collected, including data brokers, and grants California residents the right to opt out of the sale or sharing of personal information. The FTC Act applies to data broker practices and may apply to the use of third-party inferred data in ways that are materially inconsistent with user expectations in a financial services context. Several states including Texas, Montana, and others have enacted or proposed data broker registration and consumer opt-out requirements. 2) GOVERNANCE EXPOSURE: High. The explicit disclosure that data broker-sourced inferred characteristics and advertising segments are used to supplement user profiles in a financial services context creates CCPA/CPRA exposure regarding the adequacy of opt-out mechanisms and the completeness of the list of third-party sources disclosed. The combination of financial transaction data with data broker enrichment also raises potential questions under GLBA regarding secondary use of nonpublic personal information. 3) JURISDICTION FLAGS: California residents have existing CPRA rights to opt out of data broker-sourced sharing and to request disclosure of specific third-party sources. Colorado, Connecticut, and Virginia residents may have similar rights under applicable state comprehensive privacy laws. Data broker registration laws in California and Vermont may require that entities receiving data broker information meet specific compliance requirements. 4) CONTRACT AND VENDOR IMPLICATIONS: Data broker and advertising platform vendor contracts should be reviewed to confirm that inferred data received is covered by appropriate data processing agreements and that data broker sources are sufficiently identified to meet CCPA/CPRA 'categories of sources' disclosure requirements. The notice identifies the category of sources broadly but does not name specific data broker vendors, which may require supplemental disclosure upon consumer rights requests. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should maintain a registry of data broker and advertising platform sources from which user profile enrichment data is received. The opt-out mechanism for sale or sharing of personal information should be tested to confirm it applies to data broker-sourced enrichment data as well as Cash App-originated data. GLBA analysis should assess whether data broker enrichment falls within or outside permitted secondary use of nonpublic personal information.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over data broker practices and the use of third-party inferred data in consumer profiling under the FTC Act
    File a complaint →
  • State AG
    California and other state attorneys general have enforcement authority over CCPA/CPRA data broker disclosure and opt-out requirements applicable to this provision
    File a complaint →

Provision details

Document information
Document
Cash App Privacy Policy
Entity
Cash App
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 12, 2026
Record ID
CA-P-011244
Document ID
CA-D-00076
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
4059d89cdc63408c5adcd690e82cb0b567a1b312f1966010d4ced9f9938b69c3
Analysis generated
May 7, 2026 06:31 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Cash App
Document: Cash App Privacy Policy
Record ID: CA-P-011244
Captured: 2026-05-07 06:31:37 UTC
SHA-256: 4059d89cdc63408c…
URL: https://conductatlas.com/platform/cash-app/cash-app-privacy-policy/data-broker-and-third-party-marketing-partner-enrichment/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Cash App's Data Broker and Third-Party Marketing Partner Enrichment clause do?

The policy states that profiles maintained about Cash App users may be enriched with externally sourced inferred characteristics and advertising segments from data brokers, which goes beyond transactional data collection and engages CCPA/CPRA rights to know about third-party data sources and opt out of their use.

How does this clause affect you?

Cash App states it receives inferred characteristics, advertising segments, and interest and preference data from data brokers and advertising platforms to supplement user profiles; California residents have the right to know about these third-party data sources and the right to opt out of the sale or sharing of personal information under the CCPA/CPRA.

Is ConductAtlas affiliated with Cash App?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cash App.