Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
This single privacy policy covers three separate Revolut companies, meaning your data may be handled by different legal entities depending on which products you use, each potentially subject to different regulatory frameworks.
This analysis describes what Revolut's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Understanding which legal entity controls your data matters because different entities are subject to different regulators and regulatory obligations, and your rights may vary depending on which Revolut company holds your information.
Your personal data may be held or processed by Revolut Technologies Inc., Revolut Securities Inc., or Revolut Wealth Inc. depending on which services you use, and knowing which entity is responsible for your data helps you direct data rights requests and regulatory complaints correctly.
How other platforms handle this
In certain circumstances, the right to data portability, which means that you can request that we provide certain Personal Data we hold about you in a machine-readable format
If you want to see what information we have collected about you, you can request a copy of your data in the Data & Privacy section of your User Settings. You should receive your data packet within 30 days.
For data portability requests, We will select a format to provide Your personal information that is readily useable and should allow You to transmit the information from one entity to another entity without hindrance.
Monitoring
Revolut has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"This Privacy Policy covers Revolut Technologies Inc., Revolut Securities Inc., and Revolut Wealth Inc.'s services in the United States.Excerpt from Revolut's Privacy Policy
REGULATORY LANDSCAPE: The three-entity structure creates a multi-regulator exposure landscape. Revolut Securities Inc. as a broker-dealer is subject to SEC and FINRA customer data protection rules. Revolut Wealth Inc. as an investment adviser is subject to SEC investment adviser regulations. Revolut Technologies Inc. as the technology and platform entity is subject to FTC oversight and state consumer protection laws. Each entity's data handling obligations are shaped by its regulatory classification, and a single privacy policy covering all three must accurately reflect each entity's distinct obligations. GOVERNANCE EXPOSURE: Medium. A single privacy policy covering multiple regulated entities is common in financial services groups but requires careful drafting to ensure that entity-specific obligations are accurately disclosed and that consumers can identify which entity is the relevant data controller for their products. Inaccurate or ambiguous attribution of data controller status could create disclosure compliance issues under GLBA Regulation P and CCPA. JURISDICTION FLAGS: SEC and FINRA regulation applies to Revolut Securities Inc. at the federal level. SEC investment adviser regulations apply to Revolut Wealth Inc. State money transmission and financial services laws apply to the broader group depending on product and state. California CCPA and CPRA obligations apply to all three entities with respect to California residents. CONTRACT AND VENDOR IMPLICATIONS: Inter-entity data sharing arrangements within the Revolut group should be documented with appropriate data processing agreements or intragroup data transfer agreements that accurately reflect the controller-processor or joint controller relationships. This is particularly important for compliance with GLBA affiliate sharing rules and CCPA affiliate disclosure requirements. COMPLIANCE CONSIDERATIONS: Each entity should have a clear data map documenting what data it holds, under what regulatory framework, and under which sections of the shared privacy policy. Consumer-facing disclosures should clearly identify which entity is responsible for which product and data set. Legal teams should review whether the single-policy approach adequately satisfies entity-specific regulatory disclosure requirements for the broker-dealer and investment adviser entities.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Understanding which legal entity controls your data matters because different entities are subject to different regulators and regulatory obligations, and your rights may vary depending on which Revolut company holds your information.
Your personal data may be held or processed by Revolut Technologies Inc., Revolut Securities Inc., or Revolut Wealth Inc. depending on which services you use, and knowing which entity is responsible for your data helps you direct data rights requests and regulatory complaints correctly.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Revolut.