PayPal's policy states that Personal Information may be used to train AI models that power PayPal's services.
This analysis describes what PayPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Personal Information is not used solely for delivering services to the individual; it may also be used as training data to develop PayPal's AI systems.
Interpretive note: The excerpt states additional purposes for AI model training (more secure, efficient, and personalized services) that were not included in the canonical claim as the primary proposition is the permission to use Personal Information for AI training.
Under this provision, Personal Information collected during use of PayPal services may be used by PayPal to train AI models, in addition to being used to deliver the services themselves. The policy does not specify which categories of Personal Information are excluded from AI training use.
How other platforms handle this
We use personal information in connection with certain automated processes to operate the Lyft Platform, for example, to match Riders and Drivers, detect and prevent fraud, and enforce our Terms of Service.
we may use de-identified information for the purpose of training our AI models and AI-supported services.
Microsoft also emphasizes the importance of validating AI models responsibly to enhance fairness and alignment with reality.
Monitoring
PayPal has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may use Personal Information to train our artificial intelligence (AI) models that power our Services and help us deliver more secure, efficient, and personalized services.— Excerpt from PayPal's PayPal Privacy Statement
1) REGULATORY LANDSCAPE: The use of personal information for AI model training is a distinct processing purpose that requires evaluation under GDPR purpose limitation and lawful basis requirements for EU and UK users. Under GDPR, AI training as a separate purpose from service delivery may require a separate lawful basis or compatibility assessment. The EU AI Act may also impose documentation and transparency obligations on AI systems trained on personal data. In the United States, the FTC has addressed AI training data practices in guidance and enforcement contexts. 2) GOVERNANCE EXPOSURE: Medium. The provision is broadly stated and does not specify the categories of personal information used for AI training, the types of AI models trained, or whether any data minimization or anonymization is applied prior to training. This ambiguity creates a documentation and mapping gap for GDPR compliance teams. 3) JURISDICTION FLAGS: EU and UK users have the most directly applicable data protection rights regarding purpose limitation for AI training. California residents may have applicable rights under CPRA regarding automated processing of personal information. Jurisdictions with sector-specific AI governance frameworks may impose additional requirements. 4) CONTRACT AND VENDOR IMPLICATIONS: If AI model training is performed by third-party AI service providers listed as service providers in the policy, data processing agreements should address the specific use of personal information for training purposes and confirm that training use is restricted to PayPal's purposes. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should document the lawful basis for AI training as a distinct processing purpose in all applicable jurisdictions, assess whether privacy notices adequately disclose the categories of personal information used for training, and confirm that data processing agreements with AI service providers restrict training data use appropriately.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 3 platforms + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
How Meta, TikTok, and Supabase restructured governance language across documents, jurisdictions, and consent frameworks through incremental document updates.
How 10 AI platforms describe the use of user data for model training, improvement, and development, based on archived governance provisions.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Personal Information is not used solely for delivering services to the individual; it may also be used as training data to develop PayPal's AI systems.
Under this provision, Personal Information collected during use of PayPal services may be used by PayPal to train AI models, in addition to being used to deliver the services themselves. The policy does not specify which categories of Personal Information are excluded from AI training use.
ConductAtlas has identified this type of provision across 214 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.