123 Total
38 High severity
70 Medium severity
15 Low severity

Key Facts

May PayPal use Personal Information to train artificial intelligence models?
PayPal may use Personal Information to train its artificial intelligence models that power its Services.
What Personal Information will PayPal's Agentic AI tools have access to?
PayPal's Agentic AI tools will have access to a user's Personal Information, including queries, preferences, interests, purchase history, and payment information, when the user uses those tools.
What are PayPal's Agentic AI Tools not designed to do?
PayPal's Agentic AI Tools are not designed to make decisions with legal or similarly significant effects—such as legal, medical, financial, or employment decisions—and users must not use or attempt to use them for any such purpose.
What does PayPal use Automated Decision Making for?
PayPal uses Automated Decision Making to conduct risk analysis, fraud prevention, and risk management.
When may PayPal collect biometric data?
PayPal may collect biometric data—such as voice identification, photo identification, or face scans—when the user consents in the user experience to authenticate certain account-related actions.
Does PayPal store Personal Information for the duration of the relationship plus a period of 10 years?
PayPal stores Personal Information used for its ongoing relationship with the user for the duration of that relationship plus a period of 10 years, or such period as mandated by applicable local law.
Will PayPal discriminate against, deny services to, charge different prices to, or provide a different level of service to users solely for exercising their privacy rights?
PayPal will not discriminate against, deny services to, charge different prices to, or provide a different level of service to users solely for exercising their privacy rights.
How must users opt out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences?
PayPal requires users to log into their PayPal account and edit preferences in the Data and Privacy setting to opt out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences.
Does PayPal disclose Personal Information collected after November 27, 2024 for personalized shopping experiences in the United States?
PayPal discloses Personal Information collected after November 27, 2024 (or from earlier if the user consents) for personalized shopping experiences in the United States, unless PayPal is required by law to obtain consent.
Does PayPal retain some Personal Information after a user closes their PayPal account or requests deletion?
PayPal retains some Personal Information even after a user closes their PayPal account or profile, or requests deletion of Personal Information.
Stay ahead of the changes
Track PayPal and get the diff the day its terms change.
Summary

This document explains what personal information PayPal collects, how long it keeps it, and who it shares it with. PayPal shares your information for personalized shopping by default after November 27, 2024 unless you actively opt out through your account's Data and Privacy settings, and it may also use your information to train its AI systems. Even if you close your account or ask for your data to be deleted, PayPal may keep some of your information for up to ten years or longer.

Analysis

PayPal's Privacy Statement establishes the terms under which PayPal collects, retains, shares, and processes Personal Information for both account holders and non-account holders who use its Services. It sets out a fixed retention period of the relationship duration plus ten years, subject to applicable local law, and preserves PayPal's right to retain some Personal Information even after account closure or a deletion request. The document authorizes PayPal to use Personal Information to train its AI models, to operate Automated Decision Making for risk analysis and fraud prevention with consequential effects on service access, and to share Personal Information collected after November 27, 2024 for personalized shopping in the United States by default unless law requires consent. Users are granted a non-discrimination guarantee for exercising privacy rights, and an in-account opt-out mechanism in Data and Privacy settings governs disclosure to Partners and Merchants for personalized shopping.

What this means for you

PayPal collects Personal Information from you even if you do not have a PayPal account, and retains it for the duration of the relationship plus ten years. Your Personal Information is shared with Partners and Merchants for personalized shopping experiences by default starting November 27, 2024, and PayPal may also use it to train its AI models. Automated systems make risk, fraud, and money-laundering determinations that can result in denial or restriction of your services. PayPal will not penalize you for exercising your privacy rights. To stop the sharing of your Personal Information with Partners and Merchants for personalized shopping, log into your PayPal account and update your preferences in the Data and Privacy setting.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

12 important changes detected

20 versions captured · Last updated: August 2026

What changed PayPal updated two email addresses in its Privacy Statement detected on August 18, 2026. The Korea privacy contact email changed from skrprivacy@paypal.com to [email protected], and the Nevada Attorney General contact email changed from Aginfo@ag.nv.gov to [email protected]. These are contact routing updates for privacy inquiries and regulatory correspondence.
Why this matters This change updates contact email addresses for privacy inquiries in South Korea and Nevada. The updated addresses direct privacy queries and regulatory correspondence to current email endpoints. This is an administrative update with no change to PayPal's data collection, processing, or disclosure practices.
View full change record →
What changed PayPal updated its Privacy Statement to add regulatory and corporate disclosure information for PayPal UK Ltd. The updated terms now include specific language stating that PayPal UK Ltd is authorized and regulated by the Financial Conduct Authority (FCA) as an electronic money institution and for cryptocurrency services, noting that some products like PayPal Working Capital are not FCA-regulated and may offer lower protection. The change also corrects contact information for Nevada privacy inquiries and adds PayPal UK Ltd's company registration number and registered office address.
Why this matters The updated terms add explicit regulatory disclosures for PayPal UK Ltd, stating it is authorized and regulated by the Financial Conduct Authority as an electronic money institution and for cryptocurrency services. The revised language also states that some products and services, such as PayPal Working Capital, are not regulated by the FCA and may offer a lower level of protection. The change establishes clearer transparency around which services carry FCA regulatory oversight and which do not.
View full change record →

August 5, 2026 low

PayPal updated three contact email addresses in its Privacy Statement, detected on August 5, 2026. The changes replaced generic or regional email addresses with standardized PayPal privacy contact addresses in …

View change record →
July 14, 2026 low

PayPal restructured the presentation of its privacy statement by adding a detailed table of contents on July 14, 2026. The document was previously introduced with a brief overview paragraph; the …

View change record →
July 7, 2026 low

PayPal updated its Privacy Statement on July 7, 2026, adding contact information for its Israel-based subsidiary PayPal Israel Payment Services LTD and making minor revisions to the document structure and …

View change record →
June 15, 2026 low

PayPal's Privacy Statement was updated on June 15, 2026 to add a detailed table of contents and reorganize its structure. The prior version opened directly with an overview statement about …

View change record →
June 9, 2026 low

PayPal updated its Privacy Statement on June 9, 2026, with 30 sentences modified throughout the document. The change detection indicates structural and content updates to the privacy policy, though the …

View change record →
May 28, 2026 low

PayPal's privacy policy was reorganized on May 28, 2026, with the table of contents restructured and footer navigation added. The substantive privacy disclosures remain unchanged from the prior version. This …

View change record →
May 23, 2026 low

PayPal updated its Privacy Statement on May 23, 2026 to reflect changes in its corporate structure. The previous version listed PayPal (Europe) S.a.r.l. et Cie, S.C.A. as the responsible entity …

View change record →
May 5, 2026 low

PayPal removed the table of contents from the top of its Privacy Statement and restructured the document layout on May 5, 2026. The navigation menu that previously listed all sections …

View change record →
April 21, 2026 low

PayPal's Privacy Statement document structure was reorganized on April 21, 2026. The prior version presented a brief introductory overview; the updated version now leads with a detailed table of contents …

View change record →
March 6, 2026 low

PayPal updated contact information for privacy inquiries in South Korea and Nevada in its Privacy Statement on March 6, 2026. The South Korea domestic agent changed from PayPal Korea Services …

View change record →
Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

123 provisions
12 featured
13 clause types
38 high severity
Data Sharing 35 13 high
Show all 35 data sharing provisions
Privacy Rights 33 6 high
Show all 33 privacy rights provisions
Targeting and Audience Restrictions 1 1 high
Acceptable Use Restrictions 1
Stay ahead of the changes

Monitoring

PayPal has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Agentic AI Access to Personal Information Including Payment Data and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FCRA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
GLBA
United States Federal
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured August 18, 2026 00:11 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000045
Version ID CA-V-005864
SHA-256 da2df0dc3ab2129437bb73c48e5455eb2fb6cf82583d876654b5160c72938f23
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans