Stripe purchases or receives your personal data from data brokers, public databases, and social media companies, then combines it with data it already has about you.
Stripe's use of data brokers and public databases to enrich user profiles means your personal data is processed well beyond what you directly provided, creating a more comprehensive profile of you than you may realize.
Cross-platform context
See how other platforms handle Collection from Third-Party Data Sources and similar clauses.
Compare across platforms →Even if you have never created a Stripe account, Stripe may hold a profile on you assembled from third-party data sources, which is then enriched with your transaction behavior.
REGULATORY FRAMEWORK: GDPR Art. 14 requires data controllers to provide transparency notices to individuals whose data was obtained from third parties, including data brokers — failure to do so is a material compliance gap. CCPA §1798.100 grants California residents the right to know about all sources of personal information including third-party sources. The FTC Act Section 5 and FTC's 2014 Data Broker Report establish expectations around third-party data acquisition. GDPR Art. 5(1)(b) purpose limitation principles apply to combination of third-party data with first-party data.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.