Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Sep 11, 2026; our capture on Oct 15, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“When you authorize such a connection, Venmo and the third-party will exchange your personal information and other information directly.”
“Biometric Information - when you consent in the user experience, we collect face scans to authenticate your account and manage fraud and risk.”
“The California Consumer Privacy Act (CCPA) permits consumers who are California residents to ask businesses covered under the CCPA about personal information it has collected about the consumer, submit an access or deletion request, and opt-out...”
“Financial Information - bank account online login information, bank account and routing numbers and credit cards linked to your Venmo account.”
“Geolocation Information - information that identifies with reasonable specificity your location by using, for instance, longitude and latitude coordinates obtained through GPS, Wi-Fi, or cell site triangulation. We will collect this data for fraud and risk purposes.”
“we cannot guarantee that personal information may not be accessed, disclosed, altered or destroyed by breach of our administrative, managerial and technical safeguards.”
This document explains what personal information Venmo collects about you—including your bank account credentials, precise location, and optionally your face scan—how long Venmo keeps it (at least ten years after your relationship ends), and who it may be shared with. Venmo will not sell your information or share it with third parties for marketing, but connecting third-party apps or using Siri and iMessage can trigger direct data sharing with those parties. Venmo also cannot guarantee your data will never be exposed in a breach.
Venmo's Privacy Policy establishes the categories of personal information Venmo collects—including biometric face scans (conditioned on in-app consent), precise geolocation data, and sensitive financial credentials such as bank account login information and routing numbers—along with the purposes and limits of their use. The policy defines data-sharing conditions, including direct bilateral exchanges when users authorize third-party connections, disclosure of account data to Apple when Siri or iMessage features are used, and the accessibility of public profile information through Venmo's APIs and integrated third-party services. Venmo expressly prohibits selling or sharing Personal Information (including Sensitive Personal Information) and prohibits disclosure to third parties for their own promotional or marketing purposes. Personal information is retained for the duration of the user relationship plus ten years, with an open-ended exception permitting longer retention at Venmo's discretion. Venmo expressly disclaims any guarantee that personal information will not be accessed, disclosed, altered, or destroyed through a breach of its safeguards.
As a Venmo user, your sensitive financial credentials, precise location, and—if you consent—your biometric face scan are collected and stored for at least ten years after you stop using the service. Authorizing any third-party connection or using Siri and iMessage with Venmo triggers direct sharing of your account data with those parties. Your public profile information, including your username and photo, is accessible and downloadable by any third party using Venmo's APIs. Venmo does not respond to browser Do Not Track signals, so enabling that setting has no effect. If you are a California resident, the CCPA permits you to ask Venmo about the personal information it holds, submit access or deletion requests, and opt out.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“When you authorize such a connection, Venmo and the third-party will exchange your personal information and other information directly.”
“Biometric Information - when you consent in the user experience, we collect face scans to authenticate your account and manage fraud and risk.”
“The California Consumer Privacy Act (CCPA) permits consumers who are California residents to ask businesses covered under the CCPA about personal information it has collected about the consumer, submit an access or deletion request, and opt-out...”
“Financial Information - bank account online login information, bank account and routing numbers and credit cards linked to your Venmo account.”
“Geolocation Information - information that identifies with reasonable specificity your location by using, for instance, longitude and latitude coordinates obtained through GPS, Wi-Fi, or cell site triangulation. We will collect this data for fraud and risk purposes.”
“we cannot guarantee that personal information may not be accessed, disclosed, altered or destroyed by breach of our administrative, managerial and technical safeguards.”
“Venmo does not disclose your personal information with third parties for their promotional or marketing purposes.”
“Personal Information used for the ongoing relationship between you and Venmo is stored for the duration of the relationship plus a period of 10 years, unless we need to keep it longer...”
“Public information may also be seen, accessed, reshared or downloaded through Venmo's APIs or third-party services that integrate with our products. Public information for personal profiles includes your Venmo username, profile photo...”
“By using Siri or iMessage, you authorize us to disclose some of your Venmo account data (including your friends list, list of persons you have transacted with most recently and most frequently, transaction instructions...) with Apple...”
“We do not sell or share your Personal Information, including any Sensitive Personal Information.”
“Do Not Track ("DNT") is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third parties. We do not respond to DNT signals.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Account Connection Enables Bidirectional Data Exchange With Third Party and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.