This is an unusual contractual attestation that shifts cybersecurity compliance liability directly onto the business user — if PayPal's account is compromised via SSO and the business was not MFA-compliant, the business may bear full liability.
PayPal's User Agreement significantly affects your financial rights and access to funds — PayPal can place holds on your money for up to 180 days and limit or suspend your account at its discretion. You waive the right to participate in class action lawsuits and must resolve all disputes through individual binding arbitration, which is generally more costly and less accessible for small-dollar claims. You can opt out of the arbitration agreement by sending a written notice to PayPal's Legal Department at 2211 North First Street, San Jose, CA 95131 within 30 days of first accepting the User Agreement.
How other platforms handle this
If the Nintendo Parties are subject to any actual or threatened claims, costs, damages, losses, or other liabilities (collectively, "Covered Losses") as a result of your use of any of the Services, or any data, information, or other item you make available through the Services including User Content...
YOU AGREE TO DEFEND, INDEMNIFY, AND HOLD US AND EACH RELEASED ENTITY HARMLESS FROM AND AGAINST ANY DAMAGES, LOSSES, OR EXPENSES (INCLUDING, WITHOUT LIMITATION, REASONABLE ATTORNEYS' FEES AND COSTS) INCURRED IN CONNECTION WITH ANY CLAIMS, SUITS, JUDGMENTS, AND CAUSES OF ACTION ARISING OUT OF (a) YOUR...
You agree to indemnify, defend and hold harmless Shopify and our parent, subsidiaries, affiliates, partners, officers, directors, agents, contractors, licensors, service providers, subcontractors, suppliers, interns and employees, harmless from any claim or demand, including reasonable attorneys' fe...
This clause could change without notice.
Get alerted when PayPal updates this policy — with plain-language summaries and severity ratings.
Don't miss changes to this clause.
PayPal has updated this policy before. Get alerted on the next change.
Watch PayPalThis is an unusual contractual attestation that shifts cybersecurity compliance liability directly onto the business user — if PayPal's account is compromised via SSO and the business was not MFA-compliant, the business may bear full liability.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.