PayPal Privacy Statement

PayPal's Privacy Statement governs the collection, use, and disclosure of Personal Information across PayPal's suite of services, including accounts, websites, and affiliated products such as Venmo, Fastlane, Hyperwallet, and Braintree. The document details an exceptionally broad range of data categories collected—including biometric data, precise geolocation, inferred behavioral data, financial records, and Sensitive Personal Information—and discloses sharing with an extensive network of third parties including service providers, credit reporting agencies, debt collectors, law enforcement, financial institutions, partners, and merchants. Key rights provisions address data access, deletion, correction, and opt-out of targeted advertising and data sales, with jurisdiction-specific supplements for California, EU/UK, and other regions. The policy also discloses the use of AI and automated decision-making for fraud prevention, risk management, and personalization, and permits collection from non-account holders. Material compliance obligations arise under GDPR, CCPA/CPRA, and various financial services regulations including AML and KYC requirements.

This policy engages GDPR and UK GDPR (with explicit lawful basis disclosures), CCPA/CPRA (with data sale opt-out and sensitive data provisions), and U.S. financial services regulations including AML, KYC, and Gramm-Leach-Bliley Act obligations. Compliance teams should note the broad scope of automa…