Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Intuit states it uses personal information, including financial, tax, and behavioral data, to train its AI and machine learning models, with a specific carve-out excluding Google Workspace API data from generalized AI or ML model training.
This analysis describes what Intuit's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that personal information processed across Intuit's platform, including financial transactions, tax return data, and behavioral interactions, may be used as training data for Intuit's AI systems and shared with generative AI providers designated as service providers. Legal teams should assess whether this use falls within the lawful basis asserted at the time of collection and whether adequate disclosures and controls exist for EU, UK, and California users.
The updated terms establish new procedures for handling personal data complaints related to international data transfers under the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks. Users from these jurisdictions now have access to defined complaint and dispute resolution mechanisms, including referral to TRUSTe as an alternative dispute provider at no cost, and binding arbitration under certain conditions. Additionally, the policy now requires that before personal data is used for a materially new purpose or shared with external parties not covered as processors, Mailchimp will offer users the opportunity to opt out through appropriate means or collect opt-in consent.
View change record →Under this provision, personal financial, tax, payroll, and behavioral data collected through Intuit products may be used to train AI and machine learning models. The agreement identifies generative AI providers as among the service providers with whom personal information may be shared for these purposes.
Cross-platform context
See how other platforms handle AI and Machine Learning Model Training and similar clauses.
Compare across platforms →Monitoring
Intuit has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may use your personal information to: Improve and develop our products and services by analyzing how they are used and interacted with, by training our artificial intelligence models and other machine learning models, as well as by assessing the use of and interactions with our Platform and certain content our customers send or display through the Platform, including by conducting data analytics to develop insights about you, your needs, and your preferences, so we can make more informed predictions, recommendations, and products for our customers. Please note any data obtained through Google Workspace APIs is not used to develop, improve, or train any generalized AI and/or ML models.Excerpt from Intuit's Privacy Statement
(1) REGULATORY LANDSCAPE: This provision implicates GDPR Articles 5, 6, 13, and 22 regarding lawful basis for processing, transparency, and automated decision-making for EU and UK users. CCPA and emerging U.S. state AI transparency laws are also relevant. The FTC has issued guidance on AI and data practices, and the EU AI Act may impose additional requirements depending on how Intuit's AI systems are classified. Relevant enforcement authorities include EU supervisory authorities, the UK ICO, the FTC, and State AGs. (2) GOVERNANCE EXPOSURE: High. The use of sensitive financial, tax, and credit data to train AI models creates significant GDPR Article 5 data minimization and purpose limitation exposure. The inclusion of generative AI providers as service providers receiving personal information for model training requires robust data processing agreements under GDPR Article 28 and CCPA service provider restrictions. Without explicit disclosure of which generative AI providers receive data, compliance teams face audit challenges. (3) JURISDICTION FLAGS: EU and UK users have heightened exposure given GDPR requirements for explicit lawful basis for AI training uses and potential Article 22 rights regarding automated processing. California residents may have CCPA rights to opt out of certain uses. The document's acknowledgment that certain laws provide the right to object to automated processing suggests Intuit has identified jurisdiction-specific obligations but does not enumerate all applicable jurisdictions. (4) CONTRACT AND VENDOR IMPLICATIONS: The designation of generative AI providers as service providers requires verification that those providers do not use Intuit customer data for their own model training, as CCPA service provider restrictions and GDPR processor obligations prohibit such secondary use. Procurement teams should request data processing agreements with named or identifiable generative AI vendors and confirm contractual prohibitions on secondary use. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit whether consent mechanisms or legitimate interest assessments adequately cover AI model training as a purpose at the time of data collection. For EU and UK users, a data protection impact assessment for AI model training on financial and tax data may be required. The Google Workspace API carve-out should be confirmed against current API terms to verify ongoing compliance with Google's API policies.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes that personal information processed across Intuit's platform, including financial transactions, tax return data, and behavioral interactions, may be used as training data for Intuit's AI systems and shared with generative AI providers designated as service providers. Legal teams should assess whether this use falls within the lawful basis asserted at the time of collection and whether adequate …
Under this provision, personal financial, tax, payroll, and behavioral data collected through Intuit products may be used to train AI and machine learning models. The agreement identifies generative AI providers as among the service providers with whom personal information may be shared for these purposes.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Intuit.