This analysis describes what Stripe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated terms establish new restrictions on how merchants may use Stripe Output Data, prohibiting its use for automated decision-making about customer relationships, credit or employment eligibility determinations, or training AI systems that substitute for Stripe's Services. Merchants using AI Agents to access Stripe Services are now explicitly liable for all actions initiated by those agents, as the terms state such actions are legally binding. Data breach notification obligations have been tightened: users must notify Stripe within 48 hours of becoming aware of a data incident affecting Stripe or its Affiliates, and must provide specific information about the type of data, affected individuals, and remediation status. You can review the specific restrictions on Stripe Output Data use in the updated Service Terms and adjust any automated processes or AI Agent integrations accordingly.
View change record →How other platforms handle this
We may disclose information we collect when we believe disclosure is appropriate to comply with the law; to enforce or apply applicable terms and conditions and other agreements; to facilitate the financing, securitization, insuring, sale...
California's Generative Artificial Intelligence (GenAI) Training Data Transparency Act requires developers of GenAI systems available to California residents to post details on the data used for training their systems on their websites.
If required by applicable laws, we will use reasonable efforts to notify you of any transfer of personal information to an unaffiliated third-party.
"User must disclose to User's Customers in User's Privacy Policy that Personal Data may be transferred, processed, and stored outside of Canada and...may be subject to disclosure as Law requires.Excerpt from Stripe's Terms of Service
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “User must disclose to User's Customers in User's Privacy Policy that Personal Data may be transferred, processed, and stored outside of Canada and...may be subject to disclosure as Law requires.”
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stripe.