101 Total
31 High severity
59 Medium severity
11 Low severity

Key Facts

Will Intuit collect Biometric Information without first providing notice and obtaining consent?
Intuit will not collect Biometric Information without first providing notice and obtaining consent.
What does Intuit allow a business owner or designated administrator to do?
Intuit allows a business owner or designated administrator to control and administer details of a user's account, including deciding access rights and making decisions about the user's personal information.
Can a business owner or designated administrator control and administer details of a user's account?
Intuit allows a business owner or designated administrator to control and administer details of a user's account, including deciding access rights and making decisions about the user's personal information.
How can California residents opt out of the sharing of their Personal Information with Intuit?
Intuit permits California residents to opt out of the sharing of their Personal Information by visiting the 'Your California Privacy Rights' link located at the footer of the Intuit website.
Does Intuit treat a user's choice to interact with a platform partner as consent and direction to share that user's personal information with the platform partner?
Intuit treats a user's choice to interact with a platform partner, apply for their services or offerings, or link or sync their account to a platform partner's product or service as consent and direction to share that user's personal information with the platform partner.
May Intuit retain a user's personal information after a deletion request or the end of the contractual relationship?
Intuit may be required to retain a user's personal information even after a deletion request or the end of the contractual relationship, for as long as necessary to comply with legal or regulatory requirements or to exercise, establish, or defend legal claims.
For how long may Intuit retain a user's personal information after a deletion request or the end of the contractual relationship?
Intuit may be required to retain a user's personal information even after a deletion request or the end of the contractual relationship, for as long as necessary to comply with legal or regulatory requirements or to exercise, establish, or defend legal claims.
Does Intuit use personal data to train its artificial intelligence and machine learning models?
Intuit uses personal data to train its artificial intelligence and machine learning models in order to make more informed predictions, recommendations, and products for customers.
What does Intuit use personal data to train its artificial intelligence and machine learning models in order to do?
Intuit uses personal data to train its artificial intelligence and machine learning models in order to make more informed predictions, recommendations, and products for customers.
Does Intuit use reasonable physical, technical, and organizational safeguards designed to protect personal information?
Intuit uses reasonable physical, technical, and organizational safeguards designed to protect personal information but cannot completely ensure or warrant the security of that information.
Stay ahead of the changes
Track Intuit and get the diff the day its terms change.
Summary

This document explains what personal information Intuit collects, how it uses and shares that information, and what rights you have over it. Key points that affect most users: your interactions with or connections to Intuit's platform partners are treated as consent to share your personal data with those partners; if you use Intuit through an employer or business account, that business's administrator controls your account details and personal information, not you; and Intuit uses your personal data to train its AI systems. California residents can opt out of data sharing by clicking the 'Your California Privacy Rights' link at the bottom of Intuit's website.

Analysis

This document establishes Intuit's data collection, use, sharing, retention, and security practices across its platform and services. It sets out specific protections for Tax Return Information—restricting its use, disclosure, and geographic processing to the United States absent user consent—and imposes a prior-notice-and-consent requirement before any collection of Biometric Information. The document defines the conditions under which user actions toward platform partners constitute consent to personal data sharing, grants business owners and administrators authority over individual users' account data and access rights, and permits Intuit to use personal data to train its AI and machine learning models. Data retention may persist beyond deletion requests or contract termination where legal or regulatory requirements compel it, and Intuit disclaims any warranty of complete security for personal information.

What this means for you

Ordinary users should know that their personal data—including financial, employment, and income information—may be shared with named third parties when they interact with or link accounts to platform partners, and that a business administrator (not the user) holds control over account data in employer-administered accounts. Intuit uses personal data to train its AI and machine learning models, and even a formal deletion request may not result in full erasure if Intuit is required to retain data for legal or regulatory purposes. Session-replay technologies from vendors including FullStory and Medallia may record on-screen interactions with Intuit's services. California residents can take one specific action: opt out of the sharing of their Personal Information by clicking the 'Your California Privacy Rights' link at the footer of the Intuit website.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

4 important changes detected

10 versions captured · Last updated: August 2026

What changed Intuit expanded its privacy policy to add explicit cookie consent management controls and disclosure language. The updated policy describes how cookies and tracking technologies are used for website functionality and advertising, introduces a 'Customize Settings' opt-out option for third-party advertising cookies, and explains that certain cookies cannot be declined because they are necessary for the website to function. Users can now adjust their cookie preferences through a consent preference panel, though any opt-out choice will need to be renewed if they use a different device, browser, or clear their cookies.
Why this matters The updated policy establishes a cookie consent interface allowing users to manage their cookie preferences. The terms clarify that certain cookies are essential for website functionality and cannot be declined, while third-party advertising cookies can be declined through the 'Customize Settings' option. The policy also states that opt-out choices must be renewed if you visit with a different device or browser or if you clear your cookies.
View full change record →
What changed Intuit's privacy statement was revised to clarify that the opt-out mechanism for marketing text messages applies to all marketing SMS messages received from Intuit, not only those sent through Intuit's SMS shortcode program specifically. The updated language states users may opt out of marketing text messages by replying STOP to the message, regardless of which channel the message was sent through.
Why this matters The updated privacy statement clarifies that the opt-out mechanism for marketing text messages applies to all marketing SMS messages you receive from Intuit, not only those sent through Intuit's specific SMS shortcode program. This expands the scope of the opt-out right to cover all channels through which Intuit may send marketing texts. You can opt out of receiving further marketing text messages by replying STOP to any marketing message.
View full change record →

July 30, 2026 low

Intuit updated its Privacy Statement to replace references to its 'short code program' with 'text messaging program.' The operative protection remains the same: personal information collected through this program will …

View change record →
July 17, 2026 medium

Intuit's privacy policy was updated on July 17, 2026 to substantially expand its Data Privacy Framework (DPF) compliance disclosures and procedures. The updated language provides detailed operational procedures for DPF …

View change record →
Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

101 provisions
12 featured
16 clause types
31 high severity
Privacy Rights 26 2 high
Show all 26 privacy rights provisions
Acceptable Use Restrictions 1 1 high
Disclosure and Transparency Requirements 1 1 high
Stay ahead of the changes

Monitoring

Intuit has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Biometric data requires notice and consent before collection and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FCRA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GLBA
United States Federal
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured August 17, 2026 00:53 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000361
Version ID CA-V-005861
SHA-256 5de796da0e756e47ba8993d43d4bd695901b647041981a109c3a80a0630b2b12
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans