Depending on your location, you may have rights to see, correct, delete, or move your data, and to stop Intuit from selling or sharing it, which you can exercise through the Intuit privacy portal.
This analysis describes what Intuit's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights are most robust for California residents under CPRA and EU or UK residents under GDPR, and exercising them can limit how Intuit uses your sensitive financial data for advertising and third-party sharing.
Interpretive note: The practical adequacy of Intuit's rights fulfillment infrastructure, including whether deletion requests propagate to all third-party partners, cannot be assessed from the document text alone.
The updated terms establish new procedures for handling personal data complaints related to international data transfers under the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks. Users from these jurisdictions now have access to defined complaint and dispute resolution mechanisms, including referral to TRUSTe as an alternative dispute provider at no cost, and binding arbitration under certain conditions. Additionally, the policy now requires that before personal data is used for a materially new purpose or shared with external parties not covered as processors, Mailchimp will offer users the opportunity to opt out through appropriate means or collect opt-in consent.
View change record →Removal of consumer rights provision eliminates explicit commitments to data access, deletion, and opt-out mechanisms, weakening user autonomy disclosures.
View full change record →Added explicit right to 'limit the use of your sensitive personal information' and replaced specific Privacy Portal URL with generic reference allowing multiple contact methods.
View full change record →California, EU, and UK users have meaningful rights to access and delete their data and to opt out of data sharing for advertising, but the statement conditions these rights on jurisdiction, meaning users in states without comprehensive privacy laws may have more limited recourse.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
Not be Discriminated Against by us for exercising your privacy rights.
"Depending on where you live, you may have certain rights regarding your personal information, including the right to access, correct, delete, or port your data, the right to opt out of the sale or sharing of your personal information, and the right to limit the use of your sensitive personal information. You can exercise these rights by visiting our privacy portal or contacting us directly.Excerpt from Intuit's Privacy Statement
REGULATORY LANDSCAPE: The rights described engage GDPR Articles 15 through 22 for EU users, UK GDPR for UK users, CPRA for California residents, and analogous rights under Virginia CDPA, Colorado CPA, and other state privacy …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
These rights are most robust for California residents under CPRA and EU or UK residents under GDPR, and exercising them can limit how Intuit uses your sensitive financial data for advertising and third-party sharing.
California, EU, and UK users have meaningful rights to access and delete their data and to opt out of data sharing for advertising, but the statement conditions these rights on jurisdiction, meaning users in states without comprehensive privacy laws may have more limited recourse.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Intuit.