Provision record
SoFi · SoFi Terms of Service · View original document ↗

Privacy and Data Sharing

Medium severity Medium confidence Explicit document language Common · 290 of 352 platforms
Stay ahead of the changes
Track SoFi and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The agreement incorporates SoFi's Privacy Policy by reference and states that users consent to data collection, use, and sharing as described in that separate document by using the services.

This analysis describes what SoFi's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes that data collection, use, and sharing practices are governed by a separately published Privacy Policy that is legally incorporated into the Terms of Use, meaning the full scope of SoFi's data practices requires review of both documents together.

Interpretive note: The full scope of SoFi's data practices requires review of the separately published Privacy Policy, which is incorporated by reference but not reproduced in the Terms of Use document; this analysis is limited to what the Terms of Use itself discloses.

Recent Activity

This document changed recently

Medium Aug 19, 2026

The updated terms establish a new holding structure for the SoFi Plus 1% investment match benefit. Previously, members needed to maintain SoFi Plus membership for one continuous year from each deposit settlement to retain the match; the updated terms now require deposits to remain in the investment account for five years to retain the full match amount. The promotional period for this benefit restarted on August 18, 2026 and now runs through an unspecified termination date set by SoFi. Early withdrawal or account closure within the five-year period will result in loss of the match amount, though SoFi removed the explicit cancellation fee language in favor of forfeiture through the holding requirement. A limited-time 1% Deposit Match Offer available August 18-31, 2026 can now be combined with the main benefit if qualifying deposits and holding periods are independently satisfied for each offer.

View change record →
Medium Aug 5, 2026

The updated terms establish new conditions for SoFi's referral promotion that became effective on August 5, 2026. New account holders must now deposit $500 or more (rather than $50) within 21 days to qualify for the $50 Standard Bonus. For those subscribing to SoFi Plus, the terms now explicitly require that the $10/month payment be processed and validated by SoFi within the same 21-day window. Under the revised promotion period running through September 30, 2026, these higher activation thresholds apply to all new referrals.

View change record →
Medium Aug 1, 2026

The updated terms accelerate the referral promotion deadline to August 4, 2026, and impose tighter timing requirements on eligible recipients: accounts must open before the promotion ends, and deposits must settle within 21 days of both opening the link and registering or logging in as a SoFi user. This creates a more compressed eligibility window than the previous 21-day window measured from clicking the link alone. For SoFi Plus members, the updated terms now state that SoFi will automatically enable Overdraft Protection linking individual checking accounts to individual savings accounts (and joint accounts to joint accounts), allowing available savings to cover checking overdrafts without fees. You can disable Overdraft Protection at any time through the SoFi app or website, and funds applied to overdraft protection are limited to savings deposits not allocated to a Vault.

View change record →

Clause Stability Stable

0
Changes
4
Months Monitored
May 21, 2026
First Seen
May 22, 2026
Last Seen
This clause type exists across 5149 other provisions on other platforms.

Consumer impact (what this means for users)

Under this clause, acceptance of the Terms of Use also constitutes consent to data practices described in the Privacy Policy, including sharing of personal and financial data with affiliates and third-party service providers as disclosed in that document.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Review SoFi's Privacy Policy for information on data access and deletion rights available to consumers, including California residents under CCPA, and submit a data request through the designated privacy request mechanism.

How other platforms handle this

Glassdoor Medium

We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.

Square Medium

to request that your data be transferred to a third party (data portability)

Google Cloud Medium

Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Your use of the Services is also subject to SoFi's Privacy Policy, which is incorporated into these Terms of Use by reference. By using the Services, you consent to the collection, use, and sharing of your information as described in the Privacy Policy.

Excerpt from SoFi's Terms of Service

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

(1) REGULATORY LANDSCAPE: Data collection and sharing for financial services customers is governed by the GLBA Privacy Rule, which requires annual privacy notices and opt-out rights for certain information sharing with non-affiliated third parties.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
TCPA
United States Federal
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
SoFi Terms of Service
Entity
SoFi
Document last updated
March 14, 2026
Tracking information
First tracked
May 21, 2026
Last verified
May 21, 2026
Record ID
CA-P-013210
Document ID
CA-D-00105
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
8fc65f9d5e7034e23e35cedfc1f169a5946da72d2f5b2686989767cc33abd156
Analysis generated
May 21, 2026 06:13 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: SoFi
Document: SoFi Terms of Service
Record ID: CA-P-013210
Captured: 2026-05-21 06:13:51 UTC
SHA-256: 8fc65f9d5e7034e2…
URL: https://conductatlas.com/platform/sofi/sofi-terms-of-service/provision/CA-P-013210/privacy-and-data-sharing/
Accessed: Sept. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does SoFi's Privacy and Data Sharing clause do?

This provision establishes that data collection, use, and sharing practices are governed by a separately published Privacy Policy that is legally incorporated into the Terms of Use, meaning the full scope of SoFi's data practices requires review of both documents together.

How does this clause affect you?

Under this clause, acceptance of the Terms of Use also constitutes consent to data practices described in the Privacy Policy, including sharing of personal and financial data with affiliates and third-party service providers as disclosed in that document.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.

Is ConductAtlas affiliated with SoFi?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by SoFi.