PayPal · PayPal Privacy Statement

Retroactive Linking of Guest Transactions to Accounts

Medium severity
Share 𝕏 Share in Share

Consumer impact (what this means for users)

PayPal collects an exceptionally broad range of personal data — including biometrics, precise geolocation, inferred creditworthiness, and full financial histories — and shares it with partners, merchants, credit reporting agencies, data brokers, and members of the PayPal corporate group. Automated decision-making, including AI-driven risk and fraud assessments, can directly affect your account status, credit access, and transaction approvals without transparent human review. You can review and limit certain data uses by visiting your PayPal account privacy settings at paypal.com/us/myaccount/privacy.

How other platforms handle this

Lyft Medium

We collect the payment information you provide us, including your bank routing numbers and tax information.

Stability AI Medium

We collect personal information that you voluntarily provide us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or when you contact us. The personal information we collect may include the following: appl...

GitHub Medium

Our Services are not intended for individuals under the age of 13. We do not intentionally gather Personal Data from such individuals. If you become aware that a minor has provided us with Personal Data, please notify us.

See all platforms with this clause type →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Users who chose not to create an account during guest checkout had no notice at the time of their transaction that their data would be permanently associated with a future account, raising a retroactive consent concern.

View original clause language
If you Pay without a PayPal account, we may link your transaction information with your PayPal account if you create a PayPal account later.

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CAN-SPAM
United States Federal
DMA
European Union
FCRA
United States Federal
GDPR
European Union
GLBA
United States Federal
HIPAA
United States Federal
TCPA
United States Federal
UK GDPR
United Kingdom

Provision details

Document information
Document
PayPal Privacy Statement
Entity
PayPal
Document last updated
March 24, 2026
Tracking information
First tracked
March 6, 2026
Last verified
April 10, 2026
Record ID
CA-P-002265
Document ID
CA-D-00045
Evidence Provenance
Source URL
Wayback Machine
SHA-256
a5efa287f0b43a6a87f7dfc939ccb3c8edfb0ea67f476b2afeddf66fffa27690
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: PayPal | Document: PayPal Privacy Statement | Record: CA-P-002265
Captured: 2026-03-06 20:34:43 UTC | SHA-256: a5efa287f0b43a6a…
URL: https://conductatlas.com/platform/paypal/paypal-privacy-statement/retroactive-linking-of-guest-transactions-to-accounts/
Accessed: April 29, 2026
Classification
Severity
Medium
Categories

Other provisions in this document

Related Analysis