Stripe · Stripe Privacy Policy · View original document ↗

Use of Transaction Data for Fraud Prevention and Machine Learning

Medium severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Stripe Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Stripe uses your transaction history, device data, and other personal information to train its fraud detection algorithms and other AI/machine learning systems.

This analysis describes what Stripe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause establishes a direct operational basis for processing transaction data beyond real-time fraud prevention, extending to model development and refinement activities that may involve historical data analysis and algorithmic improvement cycles.

Clause Stability Stable

0
Changes
3
Months Monitored
Apr 27, 2026
First Seen
Apr 27, 2026
Last Seen
This clause type exists across 261 other provisions on other platforms.

Change history

removed May 19, 2026

Removal of specific disclosure about using transaction data for machine learning model training, reducing transparency about automated decision-making and model development practices.

View full change record →

Consumer impact (what this means for users)

Your transaction data and device information feed into Stripe's machine learning fraud models, meaning automated systems trained on your behavior may make decisions about whether future transactions — including those of other consumers — are flagged as fraudulent, with limited ability to contest such decisions.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Visit Stripe's Privacy Center and submit a data subject request to object to processing of your personal data for machine learning and profiling purposes. Select the right to object or restrict processing when completing the form.

How other platforms handle this

DocuSign Medium

We may use aggregated, de-identified data derived from your use of our services, including document metadata and usage patterns, to develop, train, and improve our artificial intelligence and machine learning models and product features.

Hulu Medium

engage in any of the foregoing in connection with any use, creation, development, modification, prompting, fine-tuning, training, testing, benchmarking or validation of any artificial intelligence or machine learning tool, model, system, algorithm, product or other technology ("AI Tool").

Roblox Medium

We are simplifying our Terms of Use, including clarifications around the use of AI tools, and their data use. We have moved the terms that describe AI Features, which were previously written for a Creator audience and located under the AI-Based Tools Supplemental Terms and Disclaimer, into the User ...

See all platforms with this clause type →

Monitoring

Stripe has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We use Personal Data to detect and prevent fraud, and to develop and improve our fraud detection models and other machine learning systems. This may include using transaction data, device information, and other Personal Data to train and refine our systems.

— Excerpt from Stripe's Stripe Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY FRAMEWORK: GDPR Art. 22 restricts automated decision-making with legal or similarly significant effects, requiring either explicit consent (Art. 6(1)(a)), contractual necessity (Art. 6(1)(b)), or specific member state law authorization; affected individuals have the right to human review. GDPR Art. 5(1)(b) purpose limitation requires that use of data for ML training be compatible with the original collection purpose. The EU AI Act (Regulation 2024/1689) classifies certain fraud detection systems as high-risk AI, imposing transparency and conformity assessment obligations. FTC Act Section 5 applies to deceptive AI practices.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has enforcement authority over deceptive or unfair AI and automated decision-making practices under FTC Act Section 5.
    File a complaint →

Applicable regulations

GDPR
European Union
UK GDPR
United Kingdom

Provision details

Document information
Document
Stripe Privacy Policy
Entity
Stripe
Document last updated
May 5, 2026
Tracking information
First tracked
April 27, 2026
Last verified
April 27, 2026
Record ID
CA-P-003371
Document ID
CA-D-00106
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
44d69cd19e1ca6f2b31785fb53f7c219f512832c75cd8b17d2cae72b6a1516d6
Analysis generated
April 27, 2026 12:23 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Stripe
Document: Stripe Privacy Policy
Record ID: CA-P-003371
Captured: 2026-04-27 12:23:52 UTC
SHA-256: 44d69cd19e1ca6f2…
URL: https://conductatlas.com/platform/stripe/stripe-privacy-policy/use-of-transaction-data-for-fraud-prevention-and-machine-learning/
Accessed: June 17, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Stripe's Use of Transaction Data for Fraud Prevention and Machine Learning clause do?

The clause establishes a direct operational basis for processing transaction data beyond real-time fraud prevention, extending to model development and refinement activities that may involve historical data analysis and algorithmic improvement cycles.

How does this clause affect you?

Your transaction data and device information feed into Stripe's machine learning fraud models, meaning automated systems trained on your behavior may make decisions about whether future transactions — including those of other consumers — are flagged as fraudulent, with limited ability to contest such decisions.

Is ConductAtlas affiliated with Stripe?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stripe.