Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy provides a toggle-based opt-out that, when activated, directs SoFi to stop selling or sharing personal information with third parties for the purpose of delivering cross-site targeted advertising.
This analysis describes what SoFi's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a specific sell/share opt-out mechanism consistent with CCPA/CPRA requirements for businesses that sell or share personal information for cross-context behavioral advertising. The mechanism is presented as a distinct control separate from the general cookie opt-out, which has operational implications for how the two consent systems interact.
Interpretive note: The full scope of personal information categories subject to the opt-out and the list of third-party recipients are not enumerated in this document text and require review of the full Online Privacy Policy.
The updated terms restructure how SoFi discloses and collects consent for tracking technologies. Previously, SoFi stated that non-selection of preferences constituted acceptance of tracking. The updated version creates distinct cookie categories (Functional, Performance, Targeting, Strictly Necessary) and establishes a Privacy Preference Center allowing you to individually toggle Performance and Targeting cookies on or off. Strictly Necessary Cookies remain non-optional and cannot be disabled, as the updated terms state these are necessary for website functionality. You can manage individual cookie category preferences through the Privacy Preference Center interface before or after initial site visit.
View change record →The updated Privacy Notice explicitly discloses that SoFi collects user information through cookies, pixels, and other tracking technologies and shares this data with social media, advertising, and analytics partners. Previously, the policy described these practices in more general language. Under the revised terms, continued use of SoFi's website constitutes acceptance of these tracking and data-sharing practices unless the user actively makes selections in the Privacy Preference Center. You can use the preference center to opt out of optional tracking technologies, though strictly necessary cookies cannot be disabled.
View change record →The updated privacy notice explicitly discloses that SoFi uses pixels and tracking technologies to collect information about your actions and preferences, and shares this data with social media, advertising, and analytics partners. The revised consent interface distinguishes between strictly necessary cookies (which cannot be disabled) and optional cookies for performance and targeting purposes (which require affirmative consent). The terms state that if you do not make a selection, you agree to use of these technologies; you can opt out by toggling the button that appears to the right of each optional cookie category.
View change record →Under this clause, users who activate the opt-out toggle will have their personal information withheld from third-party sharing for cross-site advertising purposes. The agreement identifies the opt-out as applying to advertising across other websites, platforms, and applications, but does not in this text specify the categories of personal information covered by the opt-out or the list of third parties affected.
Cross-platform context
See how other platforms handle Sell/Share Personal Information Opt-Out and similar clauses.
Compare across platforms →Monitoring
SoFi has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"When you opt out, we will not sell/ share your personal information with third parties to provide you with more relevant advertisements across other websites, platforms, and applications. For more information, visit https://www.sofi.com/online-privacy-policy/Excerpt from SoFi's Privacy Notice
1) REGULATORY LANDSCAPE: This provision directly engages CCPA as amended by CPRA, which requires businesses that sell or share personal information for cross-context behavioral advertising to provide a clear opt-out mechanism. The California Privacy Protection Agency and California Attorney General hold enforcement authority. The explicit acknowledgment of a sell/share opt-out indicates SoFi has assessed itself as meeting the threshold for this CCPA obligation. Other state privacy laws with similar opt-out requirements (Colorado, Connecticut, Virginia, Texas) may also be implicated. 2) GOVERNANCE EXPOSURE: Medium. The provision discloses the existence of the opt-out but does not in this text enumerate the categories of personal information subject to selling or sharing, the identity of third-party recipients, or the operational timeline for honoring opt-out requests. CCPA and CPRA impose specific requirements on these disclosures, which must be assessed against the full Online Privacy Policy text. 3) JURISDICTION FLAGS: California residents have the clearest statutory right to this opt-out under CCPA/CPRA. Residents of other states with enacted comprehensive privacy laws may have similar rights depending on the applicable statute. The mechanism as presented appears designed for U.S. users and does not address EU/EEA data subject rights separately. 4) CONTRACT AND VENDOR IMPLICATIONS: The opt-out mechanism creates downstream obligations to communicate opt-out signals to all third parties with whom personal information is shared for advertising. Compliance teams should confirm that contractual arrangements with advertising and data partners include provisions for honoring opt-out requests and that technical implementation supports signal transmission to downstream recipients within required timeframes. 5) COMPLIANCE CONSIDERATIONS: The full Online Privacy Policy should be reviewed to confirm that the categories of personal information subject to the sell/share opt-out are fully disclosed, that the opt-out mechanism is technically implemented to prevent sharing upon activation, and that the opt-out is honored across all SoFi platforms and products. Global Privacy Control (GPC) signal recognition requirements under CPRA should also be assessed.
This provision establishes a specific sell/share opt-out mechanism consistent with CCPA/CPRA requirements for businesses that sell or share personal information for cross-context behavioral advertising. The mechanism is presented as a distinct control separate from the general cookie opt-out, which has operational implications for how the two consent systems interact.
Under this clause, users who activate the opt-out toggle will have their personal information withheld from third-party sharing for cross-site advertising purposes. The agreement identifies the opt-out as applying to advertising across other websites, platforms, and applications, but does not in this text specify the categories of personal information covered by the opt-out or the list of third parties affected.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by SoFi.