PayPal Privacy Statement

This document is PayPal's global Privacy Statement, governing the collection, use, and disclosure of Personal Information by PayPal, Inc. and its subsidiaries and affiliated companies in connection with PayPal accounts, websites, and services, with jurisdiction-specific provisions applying to residents of the EU, UK, California, and other regions. The statement asserts that PayPal collects personal identifiers, financial records, transaction and experience data, geolocation data, biometric data, inferred data (including gender, income, creditworthiness, and shopping behavior), and sensitive personal information, and authorizes use of this data for service delivery, AI model training, automated decision-making, targeted advertising, fraud prevention, credit assessment, and sharing with service providers, financial institutions, payment networks, data brokers, fraud prevention agencies, credit reporting agencies, authorities, and members of the PayPal corporate group. The statement authorizes the use of personal information to train AI models and discloses automated decision-making that may affect users in connection with risk analysis, fraud prevention, and product and service delivery, with limited opt-out mechanisms described primarily for EU and UK residents; the document also discloses collection of biometric data and precise geolocation data with user consent, and inferred data categories without requiring separate consent beyond account use. The statement engages GDPR (EU and UK), CCPA/CPRA (California), and equivalent frameworks across multiple jurisdictions, with PayPal asserting lawful bases under GDPR including legitimate interests for a range of processing activities; compliance obligations vary materially by jurisdiction, and certain asserted processing activities, including sharing with data brokers and use of inferred sensitive categories, may require evaluation under applicable national implementations of GDPR and CCPA. Material compliance considerations include the scope of data broker sourcing disclosed in the categories of sources section, the breadth of AI and automated decision-making disclosures, and the conditions under which biometric data collection and cross-service data association with Venmo, Honey, and Fastlane profiles are carried out.