Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Oct 13, 2026; our capture on Oct 21, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
PayPal's Privacy Statement explains what personal information PayPal collects, how it uses and shares that information, and how long it keeps it. PayPal shares your data with shopping partners by default after November 27, 2024—you must log in and change your privacy settings to stop this. PayPal also keeps your personal information for ten years after your relationship ends, and some data may be retained even if you close your account or request deletion.
This Privacy Statement establishes how PayPal collects, uses, retains, and shares Personal Information for both account holders and non-account holders who use its services. PayPal collects a broad range of Personal Information—including biometric data upon user consent—and retains it for the duration of the relationship plus ten years, or longer as local law requires, with some data retained even after account closure or deletion requests. Personal Information collected after November 27, 2024 is shared by default with Partners and Merchants for personalized shopping experiences in the United States, absent a legal requirement for consent, and users must affirmatively opt out through in-account Data and Privacy settings. PayPal uses Automated Decision Making and Agentic AI tools—which access payment history, preferences, and other sensitive data—for risk analysis, fraud prevention, and service delivery, and may also use Personal Information to train its AI models; automated risk determinations can result in denial, restriction, or termination of services.
As a PayPal user, your Personal Information—including payment history, purchase history, and, when you consent, biometric data—is collected whether or not you hold an account, and is retained for ten years after your relationship with PayPal ends, with some data kept even after account closure or a deletion request. PayPal's Automated Decision Making can restrict, deny, or terminate your access to services based on risk determinations, and its Agentic AI tools access your financial and personal data when you use them; those tools must not be used for legal, medical, financial, or employment decisions. If you want to stop PayPal from sharing your Personal Information with Partners and Merchants for personalized shopping, you must log into your PayPal account and update your preferences in the Data and Privacy setting.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
3 important changes detected
28 versions captured · Latest change detected by ConductAtlas: September 2026
PayPal gave Israel its own entry among the privacy contacts in its Privacy Statement, which now gives July 6, 2026 as its last-updated date. Privacy queries from Israel were previously …
View change record →We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
PayPal has updated this document before. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Agentic AI Access to Personal Information Including Payment Data and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.