This analysis describes what PayPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated terms establish mandatory arbitration for most disputes, including those arising before or after the agreement, and add explicit class action and jury trial waivers. Under the revised language, disputes must proceed through individual arbitration rather than court litigation, and users waive the right to participate in class actions. The agreement requires a 60-day informal resolution attempt before arbitration begins and imposes detailed Notice of Dispute requirements, including original handwritten signatures and identity verification. You can opt out of arbitration by sending a written notice postmarked within 30 days of first accepting the agreement.
View change record →How other platforms handle this
We will retain your Data for as long as necessary: (i) to achieve the purposes as set out in this Policy; (ii) as required by applicable laws and regulations, including any mandated retention periods...
Where specific retention periods are required by law, we comply with those timeframes; otherwise, we apply the criteria above to determine how long to retain the information.
We retain your personal information in an identifiable form for as long as necessary for the purposes set out in this Notice.
"we will each: implement and maintain all appropriate security measures in relation to the processing of such personal data; maintain a record of all processing activities carried out under this agreement...Excerpt from PayPal's User Agreement
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “we will each: implement and maintain all appropriate security measures in relation to the processing of such personal data; maintain a record of all processing activities carried out under this agreement...”
ConductAtlas has identified this type of provision across 268 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.