PayPal · PayPal Privacy Statement · View original document ↗

Inferred Data and Creditworthiness Profiling

High severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity PayPal recorded 16 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for PayPal Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

PayPal infers sensitive personal characteristics about you — including your income and creditworthiness — based on your transaction history and browsing behavior, even if you never provided this information directly.

This analysis describes what PayPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause establishes PayPal's operational authority to develop predictive user profiles beyond explicitly provided information. These inferred attributes become part of the user data PayPal processes and may be used for account management, underwriting, risk assessment, and advertising targeting decisions.

Clause Stability Stable

0
Changes
3
Months Monitored
Apr 10, 2026
First Seen
Apr 10, 2026
Last Seen
This clause type exists across 1153 other provisions on other platforms.

Consumer impact (what this means for users)

PayPal may infer your income and creditworthiness from your transaction and shopping behavior and use these inferences in automated decisions — creating a shadow credit profile that operates outside traditional FCRA credit reporting frameworks.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Log into PayPal, navigate to Settings > Privacy, and submit a data access or correction request to review inferred data held about you, including any creditworthiness or income inferences. California residents have explicit CPRA rights to access and correct inferred data.

How other platforms handle this

MetaMask Medium

We may share your personal information with our affiliates, meaning entities that control, are controlled by, or are under common control with Consensys. We also share information with service providers who assist in operating our services, subject to confidentiality obligations.

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Target Medium

RedCard. We share information with our financial partners to operate the Target RedCard program.

See all platforms with this clause type →

Monitoring

PayPal has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Inferred data: Such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment, your preferences and shopping behavior, which we may infer based on your transactions and interactions with our Services, ads and offers or with our Partners and Merchants.

— Excerpt from PayPal's PayPal Privacy Statement

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY FRAMEWORK: FCRA 15 U.S.C. §1681 governs consumer reports used for credit, employment, or insurance decisions — inferred creditworthiness data used in lending decisions may constitute a consumer report triggering FCRA obligations including dispute rights and adverse action notices. CCPA/CPRA §1798.140(o) includes inferences drawn from personal information as personal information subject to consumer rights. GDPR Art. 22 applies where inferred data is used in automated decisions with significant effects. ECOA 15 U.S.C. §1691 and Regulation B prohibit discriminatory credit decisions including those based on AI-derived characteristics like inferred gender or national origin.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • CFPB
    The CFPB enforces FCRA and ECOA, both of which are implicated by inferred creditworthiness profiling used in automated financial decisions.
    File a complaint →
  • FTC
    The FTC has authority over deceptive and unfair data practices including inference-based profiling under FTC Act Section 5 and related rulemaking.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
PayPal Privacy Statement
Entity
PayPal
Document last updated
May 5, 2026
Tracking information
First tracked
March 6, 2026
Last verified
April 10, 2026
Record ID
CA-P-002673
Document ID
CA-D-00045
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
a5efa287f0b43a6a87f7dfc939ccb3c8edfb0ea67f476b2afeddf66fffa27690
Analysis generated
March 6, 2026 20:34 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: PayPal
Document: PayPal Privacy Statement
Record ID: CA-P-002673
Captured: 2026-03-06 20:34:43 UTC
SHA-256: a5efa287f0b43a6a…
URL: https://conductatlas.com/platform/paypal/paypal-privacy-statement/inferred-data-and-creditworthiness-profiling/
Accessed: June 10, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does PayPal's Inferred Data and Creditworthiness Profiling clause do?

The clause establishes PayPal's operational authority to develop predictive user profiles beyond explicitly provided information. These inferred attributes become part of the user data PayPal processes and may be used for account management, underwriting, risk assessment, and advertising targeting decisions.

How does this clause affect you?

PayPal may infer your income and creditworthiness from your transaction and shopping behavior and use these inferences in automated decisions — creating a shadow credit profile that operates outside traditional FCRA credit reporting frameworks.

Is ConductAtlas affiliated with PayPal?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.