Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document explains what information PayPal collects about you, how it uses and shares that information, and how long it keeps it. PayPal shares your data with partners for personalized shopping by default after November 27, 2024—you must actively log in and change your Data and Privacy settings to stop this. PayPal also keeps your information for ten years after your relationship ends, and closing your account or requesting deletion does not guarantee all your data is removed.
PayPal's Privacy Statement establishes the terms under which PayPal collects, uses, retains, and shares Personal Information for both account holders and non-account holders who use its services. The document provides for collection of sensitive data categories including biometric data (conditioned on user consent) and broad financial and behavioral data accessed by Agentic AI tools. PayPal retains Personal Information for the duration of the user relationship plus ten years, or longer as mandated by applicable local law, and retains some data even after account closure or deletion requests. Personal Information collected after November 27, 2024 is shared by default with Partners and Merchants for personalized shopping experiences in the United States unless law requires prior consent, with opt-out available only through an affirmative in-account setting. PayPal deploys Automated Decision Making for risk analysis and fraud prevention, and may refuse, restrict, or terminate services based on those determinations, while also reserving the right to use Personal Information to train its AI models.
As an individual user, your Personal Information—including payment history, purchase history, and potentially biometric data—is collected whether or not you hold a PayPal account, and is retained for ten years after your relationship with PayPal ends. PayPal uses automated systems to assess fraud and credit risk, and those determinations can result in denial or restriction of your access to services. Your data is shared by default with Partners and Merchants for personalized shopping experiences; to stop this sharing, you must log into your PayPal account and update your preferences in the Data and Privacy setting. PayPal commits not to deny services, charge different prices, or otherwise penalize you solely for exercising your privacy rights.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
19 important changes detected
25 versions captured · Last updated: October 2026
PayPal updated their PayPal Privacy Statement on September 29, 2026. Change detected: 4 sentence(s) added, 9 sentence(s) modified. Document contained 561 sentences after update.
View change record →PayPal updated their PayPal Privacy Statement on September 14, 2026. Change detected: 2 sentence(s) modified. Document contained 557 sentences after update.
View change record →PayPal updated their PayPal Privacy Statement on September 11, 2026. Change detected: 2 sentence(s) modified. Document contained 557 sentences after update.
View change record →PayPal updated two email addresses in its Privacy Statement detected on August 18, 2026. The Korea privacy contact email changed from skrprivacy@paypal.com to [email protected], and the Nevada Attorney General …
View change record →PayPal updated its Privacy Statement to add regulatory and corporate disclosure information for PayPal UK Ltd. The updated terms now include specific language stating that PayPal UK Ltd is authorized …
View change record →PayPal updated three contact email addresses in its Privacy Statement, detected on August 5, 2026. The changes replaced generic or regional email addresses with standardized PayPal privacy contact addresses in …
View change record →PayPal restructured the presentation of its privacy statement by adding a detailed table of contents on July 14, 2026. The document was previously introduced with a brief overview paragraph; the …
View change record →PayPal updated its Privacy Statement on July 7, 2026, adding contact information for its Israel-based subsidiary PayPal Israel Payment Services LTD and making minor revisions to the document structure and …
View change record →PayPal's Privacy Statement was updated on June 15, 2026 to add a detailed table of contents and reorganize its structure. The prior version opened directly with an overview statement about …
View change record →PayPal updated its Privacy Statement on June 9, 2026, with 30 sentences modified throughout the document. The change detection indicates structural and content updates to the privacy policy, though the …
View change record →PayPal's privacy policy was reorganized on May 28, 2026, with the table of contents restructured and footer navigation added. The substantive privacy disclosures remain unchanged from the prior version. This …
View change record →PayPal updated its Privacy Statement on May 23, 2026 to reflect changes in its corporate structure. The previous version listed PayPal (Europe) S.a.r.l. et Cie, S.C.A. as the responsible entity …
View change record →PayPal updated its Privacy Statement on May 9, 2026, changing the last-updated date from April 2, 2026 to May 6, 2026, and added footer information including company location, copyright notice, …
View change record →PayPal removed the table of contents from the top of its Privacy Statement and restructured the document layout on May 5, 2026. The navigation menu that previously listed all sections …
View change record →PayPal's Privacy Statement document structure was reorganized on April 21, 2026. The prior version presented a brief introductory overview; the updated version now leads with a detailed table of contents …
View change record →PayPal updated its Privacy Statement on April 18, 2026, making four modifications and removing one sentence. The most substantive changes involve updates to PayPal's Korea contact information, replacing the previous …
View change record →PayPal updated contact information for privacy inquiries in South Korea and Nevada in its Privacy Statement on March 6, 2026. The South Korea domestic agent changed from PayPal Korea Services …
View change record →Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
PayPal has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Agentic AI Access to Personal Information Including Payment Data and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.