This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is Kraken's U.S. Privacy Notice covering all personal information collected, used, and shared across its cryptocurrency exchange, securities brokerage, lending, advisory, card, payroll-linked, DeFi, and AI-integrated services for U.S. residents. The notice states that Kraken collects biometric data and requires users to release past and future claims related to that collection by accepting the privacy notice or terms of service. The notice also discloses that recovery material such as seed phrases and private keys submitted to its Kraken Legacy service are temporarily held during the recovery process and then permanently purged, while on-chain attestation data recorded to public blockchains is immutable and cannot be modified or deleted by Kraken.
This document is Kraken's U.S. Privacy Notice, governing the collection, use, and disclosure of personal information for users of services offered by Payward Interactive, Inc., Kraken Securities LLC, Kraken Adviser LLC, Payward Accredited LLC, Kraken Lending LLC, and Payward Wallet LLC, with legal bases including regulatory compliance (Bank Secrecy Act, AML, FINRA, SEC), contractual necessity, and legitimate interests. The agreement states that Kraken collects an extensive range of personal data categories including biometric data, on-chain interaction and attestation data, AI interaction data, recovery material such as seed phrases and private keys, payroll information, and protected classifications, and authorizes disclosure to affiliates, service providers, card-issuing partners, payroll connectivity partners, DeFi partners, regulators, and law enforcement. The biometrics provision asserts that accepting the privacy notice or terms of service constitutes written consent to collection, processing, usage, and storage of biometric data, and includes a prospective and retrospective claims release, a construction that may interact with state biometric privacy statutes such as the Illinois Biometric Information Privacy Act and similar frameworks depending on jurisdiction and applicable law. This document engages GLBA, CCPA as amended by CPRA, COPPA, FINRA regulations, SEC requirements, OFAC compliance obligations, and multi-state privacy laws covering residents of approximately nineteen states including Colorado, Connecticut, Virginia, and Texas; compliance obligations vary materially by state, and GLBA exemptions limit CCPA applicability to certain data categories processed in the financial services context.
The agreement establishes that Kraken collects biometric data, on-chain interaction and attestation data, AI interaction content, payroll information, and protected classifications, and authorizes disclosure to a broad range of third-party categories including affiliates, DeFi partners, card-issuing partners, payroll connectivity partners, and regulators. Under these terms, on-chain data recorded to public blockchains through Kraken's services is publicly accessible and cannot be modified or deleted by Kraken. You can limit certain GLBA-governed sharing, submit data rights requests including access, correction, deletion, and portability via Kraken's contact form or by phone at (888) 871-2573, and opt out of marketing communications.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
1 important change detected
3 versions captured · Latest change detected by ConductAtlas: October 2026
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“By using Kraken's services, accepting our privacy notice, and/or accepting our terms of service, you give your written consent to the collection, processing, usage, and storage of your Biometric Data. You release in favor of Kraken any claims related to …”
“Where you use our payroll-linked services, such as direct deposit switching, we share your Social Security number, date of birth, name, phone number and ZIP code with our payroll-connectivity partners so they can locate your payroll record and to enable …”
“Federal law gives consumers the right to limit some but not all disclosures. Federal law also requires us to tell you how we collect, disclose, and protect your personal information. Please read this notice carefully to understand what we do. …”
“Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with certain rights, which may include some or …”
Cross-platform context
See how other platforms handle Biometric Data Consent and Claims Release and similar clauses.
Compare across platforms →