Visa can share your personal information, including transaction data, with banks, merchants, and other business partners for a range of purposes including improving their products and services.
This analysis describes what Visa's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Sharing personal data with merchants and financial institutions for product improvement purposes goes beyond operational necessity and means your information may inform commercial decisions at third parties you interact with.
Interpretive note: The policy describes categories of recipients and purposes at a general level; the specific contractual and technical controls governing onward use by receiving parties are not detailed in the policy text, creating uncertainty about the practical scope of this sharing.
Severity downgraded from high to medium, removal of explicit mention of analytics providers and advertising networks, and clarification that sharing is specifically for fraud/risk management rather than general business operations and marketing.
View full change record →Your personal and transaction data may be shared with banks and merchants beyond what is needed to process your payment, including for those third parties' own product development and marketing purposes.
How other platforms handle this
Protect us, our business, our users, and others, for example to enforce our terms of service, prevent spam or other unwanted communications, and investigate or protect against fraud
we may use, retain or share information with law enforcement or others in circumstances where a person's vital interests require protection, such as in the case of emergencies.
Third-party apps use data from Gemini consistent with their own privacy policies and terms.
"We may share your personal information with our clients (which include financial institutions and merchants), service providers, affiliates, and other third parties as described in this Privacy Notice. We may share personal information with our clients such as financial institutions and merchants so they can provide you with products and services, for fraud and risk management purposes, and to improve their products and services.Excerpt from Visa's Privacy Notice
REGULATORY LANDSCAPE: GLBA imposes limitations on financial institutions sharing nonpublic personal information with nonaffiliated third parties and requires notice and opt-out mechanisms.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Sharing personal data with merchants and financial institutions for product improvement purposes goes beyond operational necessity and means your information may inform commercial decisions at third parties you interact with.
Your personal and transaction data may be shared with banks and merchants beyond what is needed to process your payment, including for those third parties' own product development and marketing purposes.
ConductAtlas has identified this type of provision across 287 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Visa.