Vague retention language means Chase may hold your personal financial data for extended and undefined periods, which increases the risk of exposure in the event of a data breach.
Consumer impact
Chase collects extensive personal and financial data from users of its website and mobile apps, including browsing behavior, device identifiers, and location data, which may be shared with affiliates and third-party marketing partners. Consumers should be aware that their data is used for targeted advertising, and that opting out of interest-based ads does not stop all data collection. You can opt out of targeted advertising and certain data sharing by visiting Chase's privacy preferences page at chase.com/privacy-preferences.
Applicable agencies
Consumer Financial Protection Bureau (cfpb)
Regulates consumer financial products and services. Can investigate companies for unfair, deceptive, or abusive financial practices including improper fees, billing errors, and data misuse.
Who can file: Anyone who has used a consumer financial product or service in the US
What you need: Account number or details, dates of transactions or events, description of the issue, and any supporting documents
What to expect: The company must respond within 15 days. The CFPB forwards your complaint and may use it in enforcement actions. Individual compensation is possible in some cases.