The agreement reserves Gumroad's right to request identity verification information from both Buyers and Suppliers, including Social Security Numbers, bank account details, government-issued identification, and taxpayer identification numbers, for anti-fraud, anti-money laundering, and trade sanctions compliance purposes.
This analysis describes what Gumroad's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes collection of highly sensitive personal and financial data categories, including Social Security Numbers and bank account information, from both Suppliers and Buyers. The data collection is positioned as discretionary rather than universal, but the categories listed represent the most sensitive class of personal identifiers under US and international privacy frameworks.
The updated terms establish a forfeiture mechanism for unpaid earnings held in third-party payment accounts when creators change payout countries or payout methods. Under the revised language, amounts that cannot be transferred to a new connected account in a different country or a different payout method will be forfeited when the change takes effect. The agreement requires Gumroad to notify creators of the amount before processing the change and to obtain confirmation before proceeding; amounts held in Gumroad's own accounts are not subject to forfeiture. You can avoid forfeiture by ensuring you withdraw or transfer unpaid amounts before changing your payout country or method.
View change record →The updated terms establish a more permissive multi-account structure: users may now hold multiple accounts for genuinely separate brands or businesses, provided registration data is true and accurate for each account. However, the revised policy strengthens enforcement against account evasion by explicitly prohibiting multiple accounts created to evade suspension, termination, or enforcement action, or to misrepresent identity or conceal that controlled accounts are related. Users with existing multiple accounts are required to identify them to Gumroad on reasonable request; Gumroad also requires that any additional accounts created through Gumroad's account-creation feature be used to maintain account association in its records.
View change record →The updated terms authorize Gumroad to place holds on supplier earnings indefinitely based on suspected violations, elevated chargeback risk, misleading marketing, incomplete identity verification, or payment partner requirements—without specifying a maximum hold period or guaranteed release timeline. Held funds remain in account balances but do not accrue interest and are not applied to Gumroad's benefit. The company will notify suppliers where practicable, but may withhold notice if it would compromise investigations or risk controls. Suppliers retain the ability to continue selling even while funds are held, but cannot access those earnings until Gumroad determines the basis for the hold has been resolved to its reasonable satisfaction.
View change record →Under this clause, Gumroad may request that Buyers or Suppliers provide Social Security Numbers, bank account information, government-issued identification, and other sensitive personal data as a condition of continued platform access or transaction processing, for anti-fraud and regulatory compliance purposes.
How other platforms handle this
To protect your privacy, we will take steps to verify your identity before fulfilling your request, such as by requiring you to submit your request via your account.
we may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.
to request that your data be transferred to a third party (data portability)
"Gumroad reserves the right, but has no obligation, to request additional information from Buyers or Suppliers to verify identity in order to safeguard the integrity of the Platform and reduce the risk of fraud, money laundering, terrorist financing, and the violation of trade sanctions. Information that Gumroad may request, or seek to confirm, may include full legal name, mailing address, phone number, date of birth, taxpayer identification number (e.g. Social Security Number), bank account information, and a form of government-issued identification.Excerpt from Gumroad's Terms of Service
(1) REGULATORY LANDSCAPE: Collection of taxpayer identification numbers, Social Security Numbers, and bank account information engages the Bank Secrecy Act and FinCEN's Customer Due Diligence (CDD) and Know Your Customer (KYC) requirements applicable to financial …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes collection of highly sensitive personal and financial data categories, including Social Security Numbers and bank account information, from both Suppliers and Buyers. The data collection is positioned as discretionary rather than universal, but the categories listed represent the most sensitive class of personal identifiers under US and international privacy frameworks.
Under this clause, Gumroad may request that Buyers or Suppliers provide Social Security Numbers, bank account information, government-issued identification, and other sensitive personal data as a condition of continued platform access or transaction processing, for anti-fraud and regulatory compliance purposes.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Gumroad.