Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Revolut states it will not sell your personal information to other companies, which is a baseline protection against your data being traded as a commercial asset.
This analysis describes what Revolut's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
A commitment not to sell personal data is meaningful for consumers concerned about their financial and identity data being monetized by third-party data brokers, though the policy separately permits broad sharing with service providers and affiliates.
Interpretive note: The practical boundary between 'selling' and 'sharing' personal data may vary under different state law definitions and enforcement interpretations, particularly under CPRA.
This provision means your personal and financial data will not be sold outright, but the policy does permit sharing your data with a wide range of third parties for operational, fraud, legal, and marketing purposes, which consumers should distinguish from an outright prohibition on all external data flows.
How other platforms handle this
If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data.
Right to the portability of your personal data
The right to rectify or update inaccurate or incomplete Personal Data under certain circumstances
Monitoring
Revolut has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"never sell your personal dataExcerpt from Revolut's Privacy Policy
REGULATORY LANDSCAPE: The commitment not to sell personal data directly engages the CCPA and CPRA, which define 'sale' in ways that may include certain data sharing arrangements that generate value. The FTC has also scrutinized the distinction between data sales and data sharing in enforcement contexts. Compliance teams should assess whether any affiliate data sharing or third-party arrangements could be characterized as a 'sale' or 'share for cross-context behavioral advertising' under CPRA definitions. GOVERNANCE EXPOSURE: Medium. The commitment is stated categorically in plain language, which creates a clear compliance standard, but the breadth of permitted sharing arrangements means this commitment must be operationally defined and enforced against all commercial arrangements involving consumer data. Any revenue-generating data arrangement involving personal data could attract regulatory or litigation risk if characterized as a sale. JURISDICTION FLAGS: California creates the highest exposure given CPRA's expansive definition of 'sale' and 'sharing.' Other states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Texas) have adopted similar definitions. Compliance teams should map all data sharing arrangements against each applicable state law definition. CONTRACT AND VENDOR IMPLICATIONS: Vendor and partner agreements should include contractual prohibitions on onward sale of Revolut customer data, consistent with this stated commitment. Service provider agreements under CCPA should include required contractual terms limiting use of customer data to specified purposes. COMPLIANCE CONSIDERATIONS: A documented data inventory and classification should be maintained to support ongoing verification that no sharing arrangement qualifies as a sale under applicable law. Legal review of any new commercial data arrangement should assess sale characterization risk before execution.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
A commitment not to sell personal data is meaningful for consumers concerned about their financial and identity data being monetized by third-party data brokers, though the policy separately permits broad sharing with service providers and affiliates.
This provision means your personal and financial data will not be sold outright, but the policy does permit sharing your data with a wide range of third parties for operational, fraud, legal, and marketing purposes, which consumers should distinguish from an outright prohibition on all external data flows.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Revolut.