Chase Privacy Notice

This document is Chase's Online Privacy Policy governing the collection, use, and sharing of personal information obtained through Chase's websites, mobile applications, and digital platforms operated by JPMorgan Chase & Co. The policy states that Chase collects information users provide directly, information collected automatically through cookies and tracking technologies, and information from third parties, and the terms authorize use of this data for product delivery, marketing, fraud prevention, and analytics. Notably, the policy describes sharing of personal information with affiliates across the JPMorgan Chase enterprise and with third-party service providers, and it reserves the right to use location data, device identifiers, and browsing behavior for targeted advertising, which is operationally distinct from minimalist data practices but consistent with large financial institution norms. As a U.S. financial institution, Chase's data practices engage the Gramm-Leach-Bliley Act, the California Consumer Privacy Act as amended by the California Privacy Rights Act for California residents, and FTC Act Section 5 unfair or deceptive practices standards, with the CFPB holding supervisory authority over data practices tied to consumer financial products. California residents have specific opt-out and deletion rights under CCPA/CPRA that may materially differ from protections available to users in other states, creating jurisdiction-dependent compliance considerations.