Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that it applies to personal information collected from non-Venmo users who receive payments through the Visa+ service, with Venmo receiving recipient name and payment information from Visa and third-party digital wallets for payment processing and matching purposes.
This analysis describes what Venmo's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision extends Venmo's data collection and policy scope to individuals who are not Venmo customers but receive payments through Visa+, creating a data controller relationship with non-users who have not directly agreed to Venmo's terms. The legal basis for processing non-user personal data and the notice mechanism provided to those individuals are not specified in the policy.
Interpretive note: The policy does not specify the legal basis for processing non-user recipient data or the notice and rights mechanisms available to those individuals, creating uncertainty about compliance with applicable state and federal privacy frameworks.
Under this clause, individuals who receive Visa+ payments from Venmo users but are not themselves Venmo customers have their name and payment information collected and processed by Venmo under this privacy policy. The policy does not specify how non-user recipients are informed of this data collection or what rights they have to access, correct, or delete their information.
Cross-platform context
See how other platforms handle Visa+ Non-User Data Collection and similar clauses.
Compare across platforms →Monitoring
Venmo has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"This Privacy Statement also applies to all information we collect from non-Venmo users who receive payment from Venmo users through the Visa+ Service (the 'Recipient'). The Visa+ Service enables customers, with an eligible Venmo account, to send and receive money to and from PayPal and third-party Visa+ enabled digital wallets ('Visa+'). In particular, for Visa+ we will receive the Recipient's name and payment information from Visa and third-party Visa+ participating digital wallets for the purpose of processing and matching Visa+ payment transactions between participating digital wallets and Venmo.Excerpt from Venmo's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages FTC authority over data collection practices affecting consumers who have not established a direct relationship with the collecting entity. CCPA may apply to California-resident non-users whose data is collected through Visa+. GLBA requirements for financial data processing may also apply to the payment information collected from non-user recipients. 2) GOVERNANCE EXPOSURE: Medium. The collection of personal information from non-users who have not agreed to Venmo's privacy policy creates a data controller relationship without direct consent, which may require evaluation under applicable state privacy laws. The policy does not specify the legal basis for processing non-user data or the notice mechanism provided to those individuals. 3) JURISDICTION FLAGS: California non-user recipients may have CCPA rights with respect to data Venmo collects about them through Visa+ transactions. The absence of a direct contractual relationship raises questions about how Venmo would fulfill CCPA access and deletion requests from non-user recipients. 4) CONTRACT AND VENDOR IMPLICATIONS: The policy states that Venmo receives non-user recipient data from Visa and third-party digital wallets; the terms governing that data transfer and the responsibilities of each party are not described in this policy. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess the legal basis for processing personal information of non-user Visa+ recipients, confirm that notice is provided to non-user recipients in compliance with applicable state and federal requirements, evaluate whether CCPA access and deletion rights are operationally available to non-user recipients, and review the data sharing agreements with Visa and participating digital wallets governing non-user data transfers.
This provision extends Venmo's data collection and policy scope to individuals who are not Venmo customers but receive payments through Visa+, creating a data controller relationship with non-users who have not directly agreed to Venmo's terms. The legal basis for processing non-user personal data and the notice mechanism provided to those individuals are not specified in the policy.
Under this clause, individuals who receive Visa+ payments from Venmo users but are not themselves Venmo customers have their name and payment information collected and processed by Venmo under this privacy policy. The policy does not specify how non-user recipients are informed of this data collection or what rights they have to access, correct, or delete their information.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Venmo.