PayPal states it may combine data from your use of Venmo, PayPal Honey, and Fastlane with your PayPal account data to personalize content, offers, and service improvements.
This analysis describes what PayPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses that transaction and experience data from three distinct PayPal-affiliated services is combined into a unified profile for personalization purposes, which may aggregate data from contexts in which users had different expectations about data use.
Interpretive note: The extent to which cross-service data association for personalization constitutes cross-context behavioral advertising under CCPA, and therefore triggers opt-out obligations, depends on regulatory guidance and enforcement interpretation that is not fully settled.
Under this provision, your transaction history from Venmo, shopping behavior from PayPal Honey, and payment details from Fastlane may be combined with your core PayPal account data to build a cross-service profile used for content personalization and offers; users who wish to limit this cross-service association should review the privacy settings for each service separately.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...
Monitoring
PayPal has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Associate information about you. If you use our Services without a PayPal Account, we may associate such transactions with your PayPal account if you later establish an account. If you use one of the following—Fastlane, Venmo, and PayPal Honey—we may associate information about your transactions and experiences using these Services to personalize content and offers and improve your use of the PayPal Services.— Excerpt from PayPal's PayPal Privacy Statement
REGULATORY LANDSCAPE: This provision engages CCPA/CPRA, which requires disclosure of the purposes for which personal information is used including cross-context behavioral advertising and profiling. The California Privacy Protection Agency is the relevant enforcement authority. Under GDPR, combining data from multiple services to build user profiles may require a separate lawful basis assessment for each combination, particularly where users' reasonable expectations differ across services. The FTC has addressed cross-context data combination in consent order contexts. GOVERNANCE EXPOSURE: Medium. The association of data from services with distinct brand identities and user bases (Venmo as a peer-to-peer payment app, Honey as a shopping browser extension, Fastlane as a guest checkout service) into a unified PayPal profile creates a data minimization and purpose limitation question under GDPR. Users of Honey or Venmo may not have understood at enrollment that their data would be combined with PayPal financial account data for personalization. JURISDICTION FLAGS: California (CCPA/CPRA cross-context behavioral advertising opt-out) and EU/EEA and UK (GDPR purpose limitation and data minimization principles under Articles 5 and 6) create heightened exposure. Compliance obligations may also arise where Venmo users are minors, as COPPA restricts cross-context data combination involving children's information. CONTRACT AND VENDOR IMPLICATIONS: Internal data sharing agreements between PayPal Inc. and its Excluded Services (Venmo, Honey) should specify the permissible purposes for cross-service data combination and confirm alignment with the lawful bases asserted in this statement. These agreements function as intra-group data transfer instruments under GDPR and should reflect the specific data categories and purposes described in this provision. COMPLIANCE CONSIDERATIONS: Compliance teams should (1) assess whether the purposes of cross-service data association are adequately disclosed in the privacy notices of each individual service (Venmo, Honey, Fastlane); (2) evaluate whether cross-service profiling for personalization constitutes cross-context behavioral advertising under CCPA and implement appropriate opt-out mechanisms; (3) review intra-group data transfer agreements to confirm they address cross-service data combination; and (4) assess COPPA implications where Venmo accounts are held by or include data about minors.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision discloses that transaction and experience data from three distinct PayPal-affiliated services is combined into a unified profile for personalization purposes, which may aggregate data from contexts in which users had different expectations about data use.
Under this provision, your transaction history from Venmo, shopping behavior from PayPal Honey, and payment details from Fastlane may be combined with your core PayPal account data to build a cross-service profile used for content personalization and offers; users who wish to limit this cross-service association should review the privacy settings for each service separately.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.