48 Total
20 High severity
24 Medium severity
4 Low severity

Key Facts

Does Chase knowingly collect personal information from children under 13?
Chase states that its online services, with the exception of the Chase First Banking℠ program, are not intended for children under 13, and that Chase does not knowingly collect personal information from children under 13 without parental consent.
Where may Chase collect information about users from?
Chase may collect information about users from additional online and offline sources, including co-branded partner sites and commercially available third-party sources such as credit reporting agencies.
What may Chase do with information collected from third-party and other sources?
Chase may combine information collected from third-party and other sources with personal and other information it has already collected about users under its Online Privacy Policy.
Does Chase state that information users send electronically may not be secure when transmitted to Chase?
Chase states that information users send electronically may not be secure when transmitted to Chase.
May Chase share information it collects from and about users with others for online advertising purposes where permitted by applicable law?
Chase may share information it collects from and about users with others for online advertising purposes, where permitted by applicable law, as described in its Information We Collect section.
What does Chase describe as the practice of collecting information from a computer or device about a visitor's web-browsing activities across non-affiliated websites over time?
Chase describes online behavioral advertising as the practice of collecting information from a computer or device about a visitor's web-browsing activities across non-affiliated websites over time in order to deliver advertisements.
What personal information may Chase collect?
Chase may collect personal information from or about users including name, email address, mailing address, telephone number(s), account numbers, limited location information, user name, and password.
May Chase change its Online Privacy Policy from time to time?
Chase may change its Online Privacy Policy from time to time, and any changes become effective when posted unless otherwise indicated.
When do changes to Chase's Online Privacy Policy become effective?
Chase may change its Online Privacy Policy from time to time, and any changes become effective when posted unless otherwise indicated.
With whom does Chase share user information?
Chase shares user information with Chase-affiliated websites and businesses to provide improved service across its family of products and services, when permissible under relevant laws and regulations.
Stay ahead of the changes
Track Chase and get the diff the day its terms change.
Summary

This document explains what personal information Chase collects about you — including your account numbers, transaction history, and data from credit reporting agencies — how Chase uses that information to show you targeted ads and improve its products, and who Chase shares it with, including affiliated companies and third-party advertisers. Chase can update this policy at any time, and changes go into effect as soon as they are posted. If you live in California, Chase states you may have rights under the California Consumer Privacy Act, though the exact scope of those rights is not spelled out in this notice.

Analysis

The Chase Online Privacy Notice establishes the scope of personal data collection — including names, contact details, account numbers, credentials, and limited location information drawn from both direct user interaction and external commercial sources such as credit reporting agencies — and the permissible uses of that data, which include tailored content delivery, advertising, and business development. Chase may combine externally sourced data with existing user profiles and may share user information with affiliated entities and third parties for online behavioral advertising purposes where applicable law permits. The notice discloses that electronic transmissions to Chase may not be secure and that Chase does not warrant security of data in transit. Policy changes take effect upon posting without a stated advance-notice requirement, and California residents are acknowledged as potentially holding rights under the CCPA, though those rights are not affirmatively guaranteed or enumerated in the clause. Chase's online services, with the exception of Chase First Banking℠, are not intended for children under 13, and Chase does not knowingly collect personal information from that age group without parental consent.

What this means for you

Chase uses your banking relationship data — including account types and transaction history — alongside information gathered from outside sources like credit bureaus and co-branded partner sites to build a profile that informs both the ads you see and the marketing messages you receive. This data may be shared with third parties and Chase-affiliated businesses for advertising purposes where law permits, without user consent stated as a condition. Chase also discloses that it cannot guarantee the security of information you transmit electronically. If you are a California resident, Chase acknowledges that you may have rights under the California Consumer Privacy Act; contacting Chase to inquire about those rights is the one concrete step the notice points toward for California users.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Featured, High severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

48 provisions
12 featured
9 clause types
20 high severity
Restricted or Prohibited Content/Industries 1 1 high
Targeting and Audience Restrictions 1 1 high
Stay ahead of the changes

Monitoring

Chase has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Advertisements targeted using account relationship data and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FCRA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GLBA
United States Federal
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:03 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000042
Version ID CA-V-000651
SHA-256 0bde20104caa93f89ddbb719e64d38fe9f92ca4f3e9c58cc643d359319fecee5
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans