TurboTax Privacy Statement

This document is Intuit's global privacy policy governing data collection, use, and sharing across its suite of products including TurboTax, Credit Karma, QuickBooks, and Mailchimp, operating under a consent and legitimate interest framework that varies by jurisdiction. The policy states that Intuit collects highly sensitive financial and tax data including income, Social Security numbers, bank account details, and credit information, and the terms authorize use of this data for product improvement, personalized advertising, and cross-product profiling within the Intuit family of companies. The policy's cross-product data sharing framework is operationally notable: information submitted through TurboTax for tax preparation purposes may be used across Credit Karma and other Intuit products for marketing and financial product recommendations, which raises questions about whether users' reasonable expectations for data use purpose are met, though the agreement asserts this is disclosed and consented to. This policy engages the California Consumer Privacy Act and California Privacy Rights Act, the EU General Data Protection Regulation, the Gramm-Leach-Bliley Act given TurboTax's handling of financial data, and FTC jurisdiction over unfair or deceptive data practices; applicable law in each of these frameworks may constrain how broadly asserted data sharing and profiling rights apply in practice. Compliance teams should note that the combination of sensitive financial data, cross-product behavioral profiling, and advertising use creates layered regulatory exposure across federal financial privacy law, state privacy statutes, and international data protection regimes.