Depending on where you live, you may have rights to access, correct, delete, or export your personal data held by Stripe, and you can exercise these rights through Stripe's Privacy Center.
This analysis describes what Stripe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause conditions data subject rights on jurisdictional applicability, meaning the availability and scope of these rights depends on the user's location and governing legal framework. The operational mechanism requires users to initiate rights requests through designated channels rather than rights being automatically applied.
Removal of comprehensive enumeration of GDPR-based data subject rights (access, correction, deletion, objection, restriction, portability, supervisory complaint), replaced with vague references.
View full change record →EU/UK users have stronger and more comprehensive data rights (access, deletion, portability, objection) under GDPR; US users outside California have more limited rights, and in all cases some deletion requests may be refused on legal obligation or fraud prevention grounds.
How other platforms handle this
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...
Monitoring
Stripe has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Depending on your location and applicable law, you may have certain rights related to your Personal Data, including: the right to access your Personal Data; the right to correct inaccurate data; the right to request deletion of your Personal Data; the right to data portability; the right to object to or restrict certain processing; and the right to withdraw consent. To exercise your rights, please visit our Privacy Center at stripe.com/privacy-center or contact us using the details in the 'Contact Us' section below.— Excerpt from Stripe's Stripe Privacy Policy
REGULATORY FRAMEWORK: Data subject rights are governed by GDPR Arts. 15–22 (access, rectification, erasure, restriction, portability, objection, automated decision-making) with one-month response deadline under Art. 12; UK GDPR equivalent provisions; CCPA §§1798.100–1798.125 (access, deletion, portability, opt-out); CPRA §1798.106 (correction right). Brazil LGPD Arts. 17–22 provide equivalent rights for Brazilian users.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The clause conditions data subject rights on jurisdictional applicability, meaning the availability and scope of these rights depends on the user's location and governing legal framework. The operational mechanism requires users to initiate rights requests through designated channels rather than rights being automatically applied.
EU/UK users have stronger and more comprehensive data rights (access, deletion, portability, objection) under GDPR; US users outside California have more limited rights, and in all cases some deletion requests may be refused on legal obligation or fraud prevention grounds.
ConductAtlas has identified this type of provision across 3 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stripe.