8 Total
2 High severity
3 Medium severity
3 Low severity
Summary

This is Zelle's privacy policy for the zelle.com website, explaining what personal data — including your name, email, IP address, browsing history, and any fraud reports you submit — Zelle collects when you visit the site and how it is used. The most important thing to know is that Zelle shares your browsing behavior and online identifiers with advertising partners to show you targeted ads across the internet, even though they state they do not 'sell' your data. You can opt out of behavioral advertising cookies by using the Cookie Preference Center linked in the policy footer, or by enabling the Global Privacy Control (GPC) signal in your browser.

Technical Summary

This document is the Zelle.com Website Privacy Notice, effective September 4, 2025, governing the collection, use, and disclosure of Personal Information from visitors to the zelle.com marketing and informational website (not the Zelle payment service itself), with consent as the stated legal basis established through continued site use. The most significant obligation created is Zelle's (operated by Early Warning Services, LLC) disclosure of visitor data — including browsing history, IP addresses, and fraud reports — to Network Financial Institutions, service providers, and third parties for cross-context behavioral advertising, analytics, and legal compliance. Notably, the policy claims not to 'sell' data but explicitly acknowledges sharing online identifiers and internet activity data with third parties for cross-context behavioral advertising, a distinction that may be legally insufficient under CCPA as amended by CPRA, which treats such sharing as equivalent to a sale. The policy engages CCPA/CPRA (Cal. Civ. Code §1798.100 et seq.), COPPA (15 U.S.C. §6501), California Business & Professions Code §22575(b) (Do Not Track), and the FTC Act Section 5; material compliance considerations include the scope limitation to B2B/California residents for CCPA rights requests — effectively excluding ordinary website visitors — and retention periods extending up to 10 years for B2B data, which may attract scrutiny under data minimization principles.

Institutional Analysis

1) REGULATORY EXPOSURE: This document directly engages the California Consumer Privacy Act as amended by CPRA (Cal. Civ. Code §1798.100–1798.199.100), enforced by the California Privacy Protection Ag…

1) REGULATORY EXPOSURE: This document directly engages the California Consumer Privacy Act as amended by CPRA (Cal. Civ. Code §1798.100–1798.199.100), enforced by the California Privacy Protection Agency (CPPA) and California AG; COPPA (15 U.S.C. §6501–6506), enforced by the FTC; California Busines…

🔒

Compliance intelligence locked

Regulatory exposure, material risk, and due diligence action items.

Evidence Provenance
Captured March 28, 2026 06:07 UTC
Document ID CA-D-000374
Version ID CA-V-000354
Wayback Machine View archived versions →
SHA-256 7b56faf7d35cd557a0ee8235c0a0321bbd261a2ca3b970400f3f5cdef79c2929
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Change Timeline
Analyzed Changes

1 change analyzed since monitoring began.

What changed Zelle updated their Zelle Privacy Policy on March 28, 2026. Change detected: 100 sentence(s) added, 14 sentence(s) modified. Document contained 114 sentences after update.
Consumer impact Zelle's updated privacy notice now states that simply using the zelle.com website constitutes explicit consent to their collection, use, disclosure, and retention of your personal information, including future updates to the policy. This is a significant shift from a marketing-focused homepage to a formal privacy framework that binds users to ongoing data practices without requiring a separate opt-in action. You can email zelleprivacy@earlywarning.com to request a copy of the privacy notice by U.S. mail or review it in the footer of every zelle.com page.
Why it matters The new consent-by-use language means that visiting zelle.com automatically binds users to Zelle's data practices — including changes made in the future — without any separate opt-in. This shifts the burden onto consumers to actively monitor and object to policy changes rather than requiring Zelle to obtain fresh consent.
High Severity — 2 provisions
Medium Severity — 3 provisions
Low Severity — 3 provisions