This analysis describes what Stripe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated policy expands the categories of transaction data Stripe collects and uses. Transaction Data now explicitly includes payment status, order fulfillment status, subscription status, applicable tax amounts, refund or chargeback information, and support interactions—in addition to previously listed items like name, contact information, and payment method details. The policy also clarifies that Link accounts can be used to access partner services such as Buy Now, Pay Later and crypto wallet services, and that Stripe will collect and share additional personal data with those partners to facilitate such services. You can withdraw your consent for bank account data collection by disconnecting your bank account from Link.
View change record →How other platforms handle this
GDPR...requires organizations to maintain appropriate security of personal data.
We have implemented administrative, technical, physical, electronic, and managerial procedures to safeguard and secure the information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction.
Pinecone has implemented and will maintain the Security Measures. The Security Measures are subject to technical progress and development and Pinecone may modify the Security Measures from time to time, provided that any modifications do not materially diminish the overall security of Services
"We maintain organizational, technical, and administrative measures designed to protect the Personal Data covered by this Policy from unauthorized access, destruction, loss, alteration, or misuse.Excerpt from Stripe's Privacy Policy
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “We maintain organizational, technical, and administrative measures designed to protect the Personal Data covered by this Policy from unauthorized access, destruction, loss, alteration, or misuse.”
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stripe.