Third-party API use binds user to third-party privacy policy

The updated privacy statement removed explicit disclosures about how Intuit uses cookies and tracking technologies to deliver targeted advertising, and removed step-by-step instructions for opting out of these practices. Previously, the statement detailed that users could opt out by clicking 'Decline' and explained that opt-outs would need renewal across devices or browsers. The revised language replaces these disclosures with a simplified 'Manage cookies' link and no longer explicitly describes the advertising sharing practices or renewal requirements. Under applicable privacy laws like CCPA, disclosure of targeted advertising practices may remain required; the practical implication is that users now have less explicit guidance about where and how to exercise opt-out choices related to advertising cookies.

The updated terms establish new procedures for handling personal data complaints related to international data transfers under the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks. Users from these jurisdictions now have access to defined complaint and dispute resolution mechanisms, including referral to TRUSTe as an alternative dispute provider at no cost, and binding arbitration under certain conditions. Additionally, the policy now requires that before personal data is used for a materially new purpose or shared with external parties not covered as processors, Mailchimp will offer users the opportunity to opt out through appropriate means or collect opt-in consent.