Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This policy explains what data Stripe collects about you, how it uses and shares that data, and what rights you have. Stripe can collect information you type into a checkout form even if you never finish the transaction, and may share that data with the business whose form you used. US users can opt out of targeted advertising and related data sharing, and users can separately consent to — and later revoke — the use of their biometric data.
Stripe's Privacy Policy establishes the terms under which Stripe collects, uses, retains, and shares Personal Data across its roles serving Business Users, End Customers, and End Users. Notably, Stripe may collect data entered into checkout forms even when a transaction is not completed, and shares End Customer Personal Data with Business Users upon initiation of a purchasing process regardless of completion. Personal Data is used to train AI models, to conduct automated fraud-risk evaluation, and to power interest-based advertising through third-party partners — though Stripe commits that it does not transfer Personal Data to third parties in exchange for payment. Stripe retains Personal Data after service cessation for legal, regulatory, and fraud-monitoring purposes, and allocates responsibility for End Customer privacy compliance — including consent and disclosure obligations — to Business Users rather than assuming that responsibility itself.
As an individual user, your Personal Data may be collected the moment you begin entering information into a checkout form, even if you abandon it, and that data may be shared with the relevant Business User. Your data is also used to train Stripe's AI models and to evaluate fraud risk through automated technology. Stripe may retain your Personal Data after you stop using its services for compliance and fraud-monitoring purposes. Two concrete actions are available to you: you can opt out of targeted advertising and related data sales or sharing for behavioral advertising, and if you have separately consented to biometric data use, you can revoke that consent at any time.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
4 important changes detected
7 versions captured · Last updated: May 2026
Stripe updated its privacy policy on April 25, 2026 with minor editorial changes. Three contact email addresses for exercising privacy rights had trailing spaces added after the email addresses. The …
View change record →Stripe updated its privacy policy on April 23, 2026, but the substantive changes detected are minimal. The update date listed in the document was revised from February 23, 2026 to …
View change record →Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Stripe has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle AI model training using Personal Data and similar clauses.
Compare across platforms →Stripe's terms authorize fund reserves, payout withholding, and account termination. Here is what the agreement states and what business ow…
The Kickstarter-Stripe controversy reveals how payment processors, cloud providers, and AI platforms quietly shape downstream policy decisi…
Mastercard, Stripe, and Cloudflare are building payment infrastructure for autonomous AI agents. The governance layer is not keeping pace.
Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.