The policy states that Personal Information collected in connection with a PayPal account or relationship is retained for the duration of the relationship plus 10 years after it ends, subject to applicable local law requirements and legal or compliance exceptions that may extend this period.
This analysis describes what PayPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a default 10-year post-relationship retention period for Personal Information, which extends beyond the active customer period and applies across the full range of data categories collected. Biometric data is subject to a separate 3-year post-account-closure cap.
⚠ Personal Information will be retained for 10 years following the end of the customer relationship as described in the policy, subject to applicable legal exceptions
Cross-platform context
See how other platforms handle Personal Information Retention for 10 Years Post-Relationship and similar clauses.
Compare across platforms →"We retain Personal Information for as long as needed or is permitted in context of the purpose for which it was collected and consistent with applicable law. The criteria used to determine our retention period is as follows: Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end, unless we need to keep it longer to the extent permitted by applicable law.Excerpt from PayPal's Privacy Statement
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a default 10-year post-relationship retention period for Personal Information, which extends beyond the active customer period and applies across the full range of data categories collected. Biometric data is subject to a separate 3-year post-account-closure cap.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.