This Privacy Statement applies to PayPal and Xoom accounts and aims to provide you with information regarding our use of your Personal Information when you visit our website, apply for, or use our services, like Braintree and Zettle (collectively, the “Services”). We encourage you to read this Privacy Statement and to use it to help you make informed decisions.

Certain capitalized terms that are not otherwise defined in the Statement are explained in the Definitions section below.

We revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days prior notice by posting notice of the change on the “Policy Updates” or “Privacy Statement” page of our website, otherwise the revised Privacy Statement will be effective as of the published effective date.

Our Services may be accessed by individuals without a PayPal or Xoom account. We will collect Personal Information from you even if you are a non-account holder when you use our Services, such as when you use our Pay Without a PayPal account, use Unbranded Payment Services (e.g., Braintree and Zettle), use a Connect profile, or when a non-accountholder receives a payment through the Visa+ service from a PayPal account holder (“Recipient”). If you Pay Without a PayPal account, we may link your transaction information with your PayPal account, if you have one at the time you use the Service without logging in, or if you create a PayPal account later.

With a Connect profile, individuals can store their payment methods and Personal Information with PayPal so that they can complete the checkout process faster at participating Partners and Merchants without having to manually input payment method details and Personal Information each time they checkout (“Connect”). When you create a Connect profile, you are agreeing to let PayPal store your Personal Information, including your name, email, phone number, address information, as well as billing information and payment method details, and pre-populate that information in the checkout flows of participating Partners and Merchants so that you can complete purchases faster by not having to manually input the information. We will also collect transaction data related to your purchases when you use Connect.

The Visa+ Service enables eligible customers with a PayPal account to send and receive money to and from Venmo and third-party Visa+-enabled digital wallets (“Visa+”).

When you shop on Partner and Merchant sites, the partner or merchant may disclose Personal Information with PayPal that we will use in accordance with this Privacy Statement and the relevant PayPal user agreement.

 

Categories of Personal Information collected from you, including from your interactions with us and use of the Services:

• Personal Identifiers: Such as name, Business Name, Address, Phone Number, Email, IP address, Device Information, Information collected from cookies or other tracking technologies, other information necessary to establish an account or profile

• Records and Financial Information: Such as, bank account and routing numbers, credit and debit card information, amount you send or request, other financial information

• Commercial Information: Such as online shopping cart information, shopping activity on merchant sites, purchase history, and order tracking and product information

• Geolocation: We may collect IP-based geolocation data and Global Positioning System (GPS) with your consent during your user experience or based on your mobile application settings.

• Internet or network activity: interactions with our Services, Information about response time for web pages, download errors, date and time when you used the service, Location Information, such as your IP address, statistics regarding how pages are loaded or viewed, the websites you visited before coming to the Sites and other usage and browsing information collected through Cookies (“Technical Usage Data”)

• Biometric: When you consent in the user experience, we collect voice identification, photo identification, or face scans to verify your identity and authenticate you for certain actions related to your account, including, for example, verify your identity and authenticate you to meet regulatory requirements or before you access accounts and Services, recover passwords, update profile info, manage payments and payment methods, lift account limitations, and initiate cryptocurrency transfers.

• Audio, electronic, visual, or similar information: Call recordings when you talk to customer service

• Professional or employment information: including business information, job title, contact emails, phone numbers and taxpayer ID numbers

• Imported Contact Information: including name, address, phone number, images, email address or usernames associated with the contacts

• PayPal Account Profile Information: username, profile picture, gender, or personal description which you add that may include sensitive Personal Information. You can set your profile to “Private” at any time

• Information you provide when you contact us: Your response to surveys, recorded conversations, chat conversations with us, email correspondence with us, account or profile status, repayment history, voice identification, Information about others if you choose to share it with us

• Inferred data: We may infer information about you such as your preferences and shopping behavior, based on your transactions and interactions with our Services

• Characteristics of Protected Classifications: including age or date of birth, national origin, disability, citizenship, military status

• Sensitive Personal Information: Social Security number, government-issued identification, bank account and routing numbers, credit and debit card information, voice identification and Photo IDs or Precise Geolocation

• Information from your device: including, language settings, browser ID, cookie preferences, time zone, operating system, platform, screen resolution and similar information about your device settings, data collected from cookies or other tracking technologies

We may also obtain the above categories of Personal Information from the following categories of sources:

• PayPal Companies, including Venmo and PayPal Honey

• Third parties: including Service Providers, Partners and Merchants, Payment Partners, such as card networks and payment processors, Credit Reporting Agencies, Government Entities, Data Brokers, and Financial Institutions

• Linked Accounts: Non-financial or financial accounts you agree to link to PayPal, such as social network accounts, mail accounts or for open banking. You may change your mind about use of this feature and unlink your linked accounts at any time. If you choose to link these accounts or share such information with us, we will periodically collect and process it until you unlink the account

• Third Party Applications: Applications that you choose to use for example, the Apple App Store, Google Play Store, or social networking sites

We may process your Personal Information for a variety of reasons, including to provide our Services, for security and fraud prevention and to comply with law. We may also use personal data with your consent to participate in certain features, that while not necessary for use of the Services, may be of interest to you, such as syncing your contact list to your account, personalize content and offers, targeted advertising, or connecting to a third-party platform.

We may collect Personal Information to:

• Provide our Services: such as to help you send, receive or request money, initiate a payment, add monetary value to an account, pay a bill, administer your purchases, show you your Connect profile, account and payment information, send and receive Visa+ transactions, to assess your creditworthiness in connection with our Services, confirm your identity and your contact information, to authenticate your access to your account or Connect profile and to confirm your account or profile and financial information is accurate and up to date. For Visa+, we will receive the recipient’s name and payment information from Visa and third-party Visa+ participating digital wallets for the purpose of processing and matching Visa+ payment transactions between participating digital wallets and PayPal. If you are using Connect, we will also use your Personal Information and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use when you make a purchase using details from your Connect profile.
• Provide receipts in connection with Zettle services: For buyers using our Zettle services, you may choose to provide us your contact details so that we can send you digital receipts.

• Manage and improve our Services: for example, to develop new products and features, for customer analysis, to administer our Services, and for internal operations, for example troubleshooting, data analysis, testing, research, and statistical purposes.

• Manage fraud and risk: We conduct risk analysis, fraud prevention and risk management to protect our customers and business, including fraud that involves our Partners and Merchants and strategic ventures.

• Associate information about you: if you use our Services Without a PayPal account (e.g., Pay without a PayPal account), we may associate such transactions with your PayPal account if you have one or later establish an account. If you use one of the following Services: Connect, Venmo, and PayPal Honey; we may associate information about your transactions and experiences using these Services to personalize content and offers and improve your use of the PayPal services.

• Market our Services: We may use Personal Information to market our Services including where we partner with others to offer similar services to market about our Partners and Merchants. We use Personal Information, including when we Associate information about you, to better understand and cater to your interests.

• Communicate with you: We may contact you when you need us, such as answering a question you sent to our customer service team.

• Comply with Laws: to comply with applicable laws and rules and enforce our agreements with you and other people who use our Services.

• Process information about your contacts: to make it easy for you to find and connect them, improve payment accuracy and suggest connections with people you may know. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement.

• Create an account connection between your account and a third-party account or platform: such as with a social media account or a financial institution in connection with your participation in Open Banking.

• Send you locally relevant options: If you agree to let us track your location, we can enhance your security of our Services and customize our Services by using the right language and personalizing content such as providing location-based options, functionality or offers, ads and search results. Even if you don’t allow us to track your location, we may still use your address to send you location-based options recommended by businesses that are near to your address.

• Remember your preferences: We may remember your preferences for the next time you use the Services, such as whether you choose to receive digital receipts via email or text when you checkout.

• Personalize your experience: When you use Services, as well as other third-party sites and services, we might use tracking technologies like cookies. See our Cookie Statement for more details.

We do not sell Personal Information to third parties for money or share your Personal Information for cross context behavioral advertising, including any Sensitive Personal Information.

However, we will disclose your Personal Information with third parties to help us provide Services, protect our customers from risk and fraud, market our products, and comply with legal obligations.

In addition, we may disclose Personal Information with:

• PayPal Companies, including Venmo to provide you with the Services, personalize your use of the Services, to manage our business; or with PayPal Honey to manage our Rewards program.

• Authorities, when accompanied by a subpoena or other legal documentation that requires PayPal or PayPal Companies to respond. Such authorities include courts, governments, law enforcement, and regulators. We may also be required to provide other third parties information about your use of our Services, for example to comply with card association rules, to investigate or enforce violations of our user agreement or to prevent physical harm or illegal activity.

• Other financial institutions, to jointly offer a product, such as PayPal Credit, PayPal Savings, PayPal Cashback Mastercard and PayPal Extra Mastercard.

• Card networks and payment processors, to facilitate payment processing or to add cards to your electronic wallet. For payment transactions with Connect, your Personal Information will be shared with the provider of the payment services for the participating Partner and Merchant to enable the processing of the payment transaction. The payment provider for the Partner and Merchant may be PayPal or a third party payment provider.
• Fraud prevention and identity verification agencies, for example to assist us in detecting activities suggestive of fraud.
• Credit reporting and debt collection agencies, for example to collect unpaid overdue debts through a third party such as a debt collection agency.

• • Service providers that operate at our direction and on our behalf to perform services we outsource to them, such as processing payments, marketing, research, compliance, audits, corporate governance, communications, IT development, maintenance, hosting and support and customer service operations.
  • Other PayPal Account Holders to complete a transaction. Some Personal Information is disclosed to other PayPal account holders as required to complete a payment transaction. This includes your username, profile photo, first and last name, email, and phone number.
  • Other Users in accordance with your account settings. In accordance with your account settings or PayPal.Me preferences, your Personal Information can be seen by other account holders and non-account holders (“Users”) to help facilitate a transaction. For example, as part of the send money feature, a User may search for your account to initiate a payment. Based on your account settings, the information shown to other Users may include your username, profile photo, first and last name, email, phone number, city and state, month and year of PayPal account creation, and any additional information you include in the details or “about you” section of your account.
  • Other Users if you have a business profile.  If you have a business profile, we will display a payment link and disclose certain information about you to other Users, including your name or business name, profile picture or logo, and the city associated with your PayPal account, as well as total time selling with us, total number of followers, and total number of unique Users that have paid you in the past year.

If you have a business profile, you can choose to display other information to other Users, such as your street address, phone number, email and website, in accordance with your business profile settings.

• Linked accounts, for example any social media accounts you asked us to link or when you link an account with another bank or financial institutions, card account, or aggregator in connection with your participation in Open Banking, so we can check if you have sufficient funds or confirm your ownership of the account.

• Partners and Merchants, their service providers and others involved in a transaction, for example when you use the Services to initiate online purchases, save your payment information with Connect, pay other Users using the Services, pay Recipients using Visa +, or return goods we may disclose information about you and your account or Connect profile with the other parties (or their service providers) involved in processing your transactions. Please note that Personal Information disclosed to Partners and Merchants (or their service providers) involved in a transaction is subject to the Partners’ and Merchants’ own privacy policies and procedures. We may also disclose Personal Information to Partners and Merchants to enable their use of our Services with those Partners and Merchants.

• Other third parties, for example we disclose Personal Information to advertising platforms at your direction, or security service providers to help prevent unauthorized access to our Services. Please be aware that these parties’ privacy notice applies to the Personal Information that you share directly with them. For example, we use Google’s reCAPTCHA to prevent misuse of our Services, when you access our mobile application. We may also use Google Address Autofill to ensure accuracy of your address. Google’s Privacy Policy and Terms of Use apply to the Personal Information you share with them.

• Buyers or in connection with business transfer, for example if we are involved in a merger, a purchase or sale of all or part of our business or assets, including receivables and debts, we may disclose, under appropriate data protection terms, your Personal Information to an interested or actual buyer of those business or assets. If PayPal or a significant portion of PayPal’s assets are acquired by a third party, Personal Information may also be disclosed.

We may disclose your sensitive personal information as appropriate to carry out legitimate business activities allowed by law.

 

We retain Personal Information for as long as needed or permitted in context of the purpose for which it was collected and consistent with applicable law.

The criteria used to determine our retention period is as follows:

• Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years, unless we need to keep it longer, such as:
  • a legal obligation or compliance with laws to which we are subject is retained consistent with the applicable law, such as under applicable bankruptcy laws and AML obligations
  • litigation, investigations, audit and compliance practices, or to protect against legal claims.

We retain biometric data for as long as needed or permitted given the purpose for which it was collected and no more than 3 years after your account closes, unless otherwise required by applicable law.

When you interact with our Services, open email we send you, or visit a third-party website for which we provide Services, we and our partners use cookies and other tracking technologies such as pixel tags, web beacons, and widgets (collectively, “Cookies”) to recognize you as a user, customize your online experiences and online content, including to serve you interest-based advertising, perform analytics; mitigate risk and prevent potential fraud, and promote trust and safety across our Services.

We use Cookies to collect your device information, internet activity information, and inferences as described above.

You can disable or decline some cookies for our Services. But, since some parts of our service rely on cookies to work, those services could become difficult or impossible to use.

Some web browsers have an optional setting called “Do Not Track” (DNT) that lets you opt-out of being tracked by advertisers and some third parties. Because many of our services won’t function without tracking data, we do not respond to DNT settings.

If you want to know more about how we use cookies, please review our Statement on Cookies and Tracking Technologies to learn more about our use of Cookies. To learn how to opt-out of this kind of tracking technology, visit About Ads.

Your rights to access, correction, deletion, and restriction to use or share your Personal Information.

Under applicable data protection law, you have certain rights to how your Personal Information is collected, stored, used and shared.

We recognize the importance of your ability to control the use of your Personal Information and provide several ways for you to exercise your rights to access (right to know), correction, deletion (erasure), and to restrict certain information (right to opt out of sharing and right to limit use and disclosure of sensitive personal information).

We will not deny you services, charge you different prices, or provide you with a different level of service solely for exercising your privacy rights. If you are a California resident, learn more about how we have handled your Privacy Rights.

How do you exercise your rights?

If you, or an authorized agent, want to exercise any of your rights relating to your Personal Information, contact us or submit your request from your account settings. If you have a PayPal account, you can exercise your privacy rights by accessing “Data and Privacy” from account settings in the PayPal app.

If you, or an authorized agent, want to exercise any of your rights relating to your Personal Information in your Connect profile, contact us or submit your request from your Connect profile management portal.

Even if you do not have a PayPal account (for example, where you use Pay without a PayPal account), you can submit a request for access, correction, or deletion of your Personal Information by contacting us at the number provided in our Contact Information section.

If you or an authorized agent submit a request, we’ll first need to verify who you are before we can respond to your request. We may ask you to provide us with information necessary to reasonably verify your identity before responding to your request. We will compare the information you submit against our internal business records to verify your identity. If we can’t verify your identity, we will not be able to fulfill your request. If we deny your request in whole or in part, you may have the right to appeal the decision. In such circumstances, we will provide you with information regarding the appeals process.

Your right to request a copy of the Personal Information. If you want to make a request to know about the data we’ve collected about you in the past 12 months, you have choices:

• Log in to your PayPal or Xoom account or Connect profile management portal and submit a request
• Call or contact us and request that we provide you with the data we’ve collected.

Your right to correct your Personal Information:

• Log in to your PayPal or Xoom account or Connect profile management portal and correct information you previously added. For example, you can edit your addresses in your settings
• Call or contact us and request that we correct specific information

Your right to delete your Personal Information:

• Log in to your PayPal or Xoom account or Connect profile management portal and delete information you previously added. For example, you may delete your non-primary addresses in your settings
• Call us or contact us and request that we delete specific information
• Close your PayPal or Xoom account or Connect profile

If you close your PayPal or Xoom account or Connect profile or request that we delete Personal Information, we still need to keep some Personal Information as explained in How long does PayPal store your Personal Information section so we can:

• Complete a transaction, provide goods or services you requested, or comply with our promises to you in the user agreement or other contract you have with us
• Detect and prevent malicious, fraudulent, or illegal activity
• Protect your (or another person’s) legal rights, including the right to free speech
• Manage our internal business processes that are reasonably related to your expectations when using our Services
• Comply with laws and other legal or governmental processes

California also offers a right to opt out of “Selling” and “Sharing” Personal Information. Global Privacy Control setting is a browser setting that notifies website owners of users’ privacy preferences regarding selling or sharing their personal information. PayPal does not respond to these settings because we do not sell or share data. Some Personal Information collected, processed, or disclosed by a financial institution are subject to federal laws, such as the Gramm-Leach-Bliley Act. Consumers may read our Consumer Privacy Notice for more information about their rights under US federal law.

Understanding your choices

You can control how Personal Information is collected or disclosed, as well as how we communicate with you. Here are some of the ways you can customize your choices.

Choose how we collect Personal Information

You may choose to limit the Personal Information you provide when our apps or Services request it. To help make choices that are right for you, it’s important to understand that Personal Information helps us provide a richer, more personalized experience for you. Also, some Personal Information is required for our Services to function at all.

For example, sharing your contacts helps make it easier for you to find the people you want to send money to. If you choose not to share your contacts with us, you can still use our mobile apps, but some actions may not be as fast or easy as it would be if shared your contacts. Another example is creating an account or Connect profile with us. If you choose not to provide information that is required for an account or Connect profile to function, like your name and email address, we will not be able to create an account or Connect profile for you.

Choose how linked accounts collect and use Personal Information

If you link your account to a third-party service, you may be able to manage how your Personal Information is collected, used, and shared by them. Read the third parties’ privacy policies to see the choices they offer you.

You can control which third-party services you link to your account and what Personal Information they can collect about you. For example, to manage the permissions, go to the Security settings in your PayPal account.

Choose what we disclose with other Users

Some Personal Information may be seen by other Users. You may be able to adjust or turn off this setting in the privacy section in your account settings.

Choose how we communicate with you

Your choices about how we communicate with you differ depending on the purpose of the message and how it is delivered. Some messages are considered optional, and some are necessary for you to manage your accounts or Connect profile with us. We use email, text messages, push notifications on your mobile device, and even phone calls or paper mail depending on the situation and your preferences.

You can click the unsubscribe link in a PayPal or Connect marketing email, opt out of a text message by replying “STOP,” or turn off notifications on your device. You can also change your account’s notification settings or the notification preferences on your device.

You won’t be able to opt out of messages that are considered necessary for the Services, such as digital receipts and emails that alert you to changes in your account or Connect profile’s status. You may be able to decide how we send those messages, such as by email, phone, text message, or a notification on your mobile device.

 

We maintain technical, physical, and administrative security measures designed to provide reasonable protection for your Personal Information against loss, misuse, unauthorized access, disclosure, and alteration. The security measures include firewalls, data encryption, physical access controls to our data centers, and information access authorization controls. While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account/Connect profile registration information and verifying that the Personal Information we maintain about you is accurate and current. We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.

 

We do not knowingly collect information, including Personal Information, from children under the age of 13 or other individuals who are not legally able to use our Services. If we obtain actual knowledge that we have collected Personal Information from someone not allowed to use our Services, we will promptly delete it, unless we are legally obligated to retain such data.

Please contact us if you believe that we have mistakenly or unintentionally collected information from someone not allowed to use our Services.

We do not sell to third parties for money or share Personal Information of anyone under 16 years of age for cross context behavioral advertising.

• Device Information means data that can be automatically collected from any device used to access the Services. Such information may include, but is not limited to, your device type; your device’s network connections; your device’s name; your device IP address; information about your device’s web browser and internet connection you use to access the Services; Geolocation Information; information about apps downloaded to your device.

• Geolocation Information means information that identifies, with precise specificity, your location by using, for instance, longitude and latitude coordinates obtained through your GPS, or your device settings.

• Location Information means information that identifies, with reasonable specificity, your approximate location by using, for instance, longitude and latitude coordinates obtained through GPS or Wi-Fi or cell site triangulation.

• Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.

• Pay Without a PayPal account means our Services may be accessed by individuals without using a PayPal account, a Connect profile, or the Unbranded Payment Services.

• PayPal means PayPal, Inc. which offers PayPal, Braintree, Xoom, Zettle and Connect profile services.

• PayPal Companies means companies or separate brands, affiliates or subsidiaries of PayPal, and who process Personal Information in accordance with their terms of service and privacy statements. PayPal Companies include Honey Science LLC, Chargehound LLC, Happy Returns, LLC, Hyperwallet, Simility, Swift Financial LLC, and Bill Me Later, Inc.

• Personal Information in this Privacy Statement means information about you, including your identity, finances and online behavior.

• Sell under California law is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration.

• Services means any PayPal, Unbranded Payment Services, Pay Without a PayPal account, Connect, Xoom, Zettle, bill pay, Rewards, sending or receiving money, credit products and services, content, features, technologies, or functions, and all related websites, applications and services offered to you by PayPal. Your use of the Services includes use of our Sites.

• Sharing under California law is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across websites.

• Sites means the websites, mobile apps, official social media platforms, or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.

• Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing services that do not carry the PayPal brand or when you use our Braintree or Zettle services.

 

If you have questions about this Privacy Statement or your Personal Information, contact us so we can help.

To talk about your PayPal account or Unbranded Payment Services:

• Call PayPal Customer Service at 1-888-221-1161
• or visit our Customer Service web portal

To talk about your Connect profile:

• Call PayPal Customer Service at 1-844-705-3555
• Or visit your Connect profile management portal

• Call Xoom Customer Service at 1-877-815-1531
• or visit our Help Center web portal

Under the laws of California and certain other US states (i.e., Virginia), we are required to provide you with the following additional information about: (1) the purpose for which we use each category of “personal information” we collect; and (2) the categories of third parties to which we (a) disclose such personal information for a business purpose, (b) “share” personal information for “cross-context behavioral advertising,” and/or (c) “sell” such personal information.

Under California law, “sharing” is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across websites, and “selling” is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration. We do not sell or share your Personal Information, including any Sensitive Personal Information. We also do not sell or share and have no actual knowledge that we have sold or shared any Personal Information of anyone under 16 years of age.

For more information about each category, purpose of use, and the third parties to which we disclose information, please see the “Categories of Personal Information We Collect”, “How is Personal Information used,” and “Do We Disclose Personal Information” sections.

Categories of Personal Information	Purpose of Collection	Categories of 3rd Parties to which PayPal discloses this Personal Information for Business Purpose
Identifiers	Provide Services Communicate with you Link an account Manage and improve our Services Manage fraud and risk Market our Services Comply with laws Process information about your contacts Communicate with you Provide receipts in connection with Zettle services Remember your preferences Associate information about you	PayPal and PayPal Companies Authorities Other financial institutions Card Networks and Payment Processors Fraud prevention and identity verification agencies Credit Reporting Agencies Service providers Other Users in accordance with account settings Linked Accounts Partners and Merchants Other third parties Buyers in connection with a business transfer
Records and Financial Information	Provide Services Communicate with you Link an account Keep your account and Connect profile and financial information up to date Manage and improve our Services Manage fraud and risk Market our Services Personalize your experience Provide personalized Services Comply with Laws Process information about your contacts Communicate with you	PayPal and PayPal Companies Authorities Other financial institutions Card Networks and Payment Processors Fraud prevention and identity verification agencies Credit Reporting Agencies Service Providers, other Other Users in accordance with account settings Linked Accounts Partners and Merchants Other third parties for business purposes Buyers in connection with a business transfer
Commercial information	Provide Services Communicate with you Manage and improve our Services Manage fraud and risk Market our Services Comply with Laws Remember your preferences Associate information about you	PayPal and PayPal Companies Service Providers Authorities Other financial institutions Partners and Merchants Other third parties Buyers or in connection with business transfer Other Users if you have a business profile
Geolocation Data	Send you location-based options Manage fraud and risk	Authorities PayPal and PayPal Companies Service Providers Other financial institutions Partners and Merchants
Internet or network activity	Operate and provide Services, Communicate with you Manage and improve Services Market our Services Send you locally relevant options Comply with law	PayPal and PayPal Companies Service Providers Other financial institutions Partners and Merchants Authorities
Biometric	Authenticate you for certain actions related to your account, including to: meet regulatory requirements or before you access accounts and services recover passwords update profile info manage payments and payment methods lift account limitations initiate third-party crypto currency transfers	Service Providers
Audio, electronic, visual, or similar information	Provide Services Authenticate your access to an account or Connect profile Manage and improve Services Manage fraud and risk	Service Providers PayPal and PayPal Companies Merchants and Partners Authorities
Professional or employment information	Provide Services Manage fraud and risk	Service Providers PayPal and PayPal Companies Merchants and Partners Authorities Other financial institutions
Information about your imported contacts	Provide Services	Service Providers
Information in your PayPal or Xoom account or Connect profile	Provide Services	Service Providers PayPal and PayPal Companies Merchants and Partners Authorities Other financial institutions
Information you provide when you contact us	Provide Services Authenticate your access to an account or Connect profile Manage and improve Services Manage fraud and risk	Service Providers PayPal and PayPal Companies Merchants and Partners Authorities
Inferred data	Provide Services Manage fraud and risk Market our Services Display content based on your interest Better respond to your requests or inquiries or for similar customer service issues Verify your identity Conduct risk assessment	PayPal and PayPal Companies Service Providers Other financial institutions Merchants and Partners Authorities
Sensitive Personal Information	Provide Services Manage fraud and risk	PayPal and PayPal Companies Service Providers Other financial institutions Merchants and Partners Authorities Buyers or in connection with business transfer
Characteristics of Protected Classifications	Provide our Services Manage risk	PayPal and PayPal Companies Service Providers Authorities
Information from your device	Provide Services Manage and improve our Services Manage fraud and risk Communicate with you Link an account Market our Services Personalize your experience Comply with laws	PayPal and PayPal Companies Service Providers Other financial institutions Merchants and Partners Authorities

 

The following Consumer Privacy Notice applies to you if you are an individual who resides in the United States and uses PayPal Services for your own personal, family, or household purposes.

This Consumer Privacy Notice does not apply to Unbranded Payment Services.

Rev. January 2023

FACTS	WHAT DOES PAYPAL DO WITH YOUR PERSONAL INFORMATION?
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and account balances Payment history or transaction history Credit history or credit scores When you are no longer our customer, we continue to share your information as described in this notice.
How?	All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons PayPal chooses to share; and whether you can limit this sharing.

 

Reasons we can share your personal information	Does PayPal share?	Can you limit this sharing?
For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes – to offer our products and services to you	Yes	No
For joint marketing with other financial companies	Yes	No
For our affiliates’ everyday business purposes – information about your transactions and experiences	Yes	No
For our affiliates’ everyday business purposes – information about your creditworthiness	No	We don’t share
For our affiliates to market to you	No	We don’t share
For nonaffiliates to market to you	No	We don’t share

 

Questions?

Call our customer service at 1-888-221-1161or visit us at /smarthelp/contact-us/privacy.

 

Who we are
Who is providing this Privacy Statement?	This privacy notice is provided by PayPal, Inc. and is applicable to your personal U.S. PayPal and Xoom accounts, and Connect profile.
What we do
How does PayPal protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
How does PayPal collect my personal information?	We collect your personal information, for example, when you open an account or provide account information use your credit or debit card or give us your contact information use your PayPal and/or Xoom account to send or receive funds We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Why can’t I limit all sharing?	Federal law gives you the right to limit only sharing for affiliates’ everyday business purposes — information about your creditworthiness affiliates from using your information to market to you sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. See below for more information on your rights under state law.
Definitions
Affiliates	Companies related by common ownership or control. They can be financial and nonfinancial companies. Our affiliates include Bill Me Later, Inc.
Nonaffiliates	Companies not related by common ownership or control. They can be financial and nonfinancial companies. Nonaffiliates with which we share personal information include service providers that perform services or functions on our behalf.
Joint Marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Our joint marketing partners include financial companies and banks.
Other important information
We may transfer personal information to other countries, for example, for customer service or to process transactions. California: The California Consumer Privacy Act of 2018 (CCPA) permits consumers who are California residents to ask businesses covered under the CCPA about personal information it has collected about the consumer, submit an access or deletion request, and opt-out of the sale of personal information, if applicable. These provisions do not apply to personal information collected, processed, shared, or disclosed by financial institutions pursuant to federal law such as the Gramm-Leach-Bliley Act. Contact us if you have questions about our privacy statement, this consumer notice, or your personal information. If your PayPal or Xoom account or Connect profile has a California mailing address, we will not share personal information we collect about you except to the extent permitted under California law. To talk about your PayPal account, call PayPal Customer Service at 1-888-221-1161 or visit our Customer Service web portal. To talk about your Xoom account, call Xoom Customer Service at 1-877-815-1531 or visit our Help Center web portal. To talk about your Connect profile, call PayPal Customer Service at 1-844-705-3555 or visit your Connect profile management portal. Vermont: If your PayPal or Xoom account or Connect profile has a Vermont mailing address, We will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures. Additional information concerning our privacy policies can be found at Customer Service web portal or call 1-888-221-1161 Nevada: If your PayPal or Xoom account or Connect profile has a Nevada mailing address, we are providing this notice pursuant to Nevada law. If you prefer not to receive marketing calls from PayPal, you may be placed on our internal Do Not Call List by calling 1-888-221-1161 or going to /smarthelp/home. For more information, you can contact PayPal at 12312 Port Grace Blvd, La Vista, NE 68128 or you can contact the Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Suite 3900, Las Vegas, NV 89101; telephone number: 1-702-486-3132; email: [email protected]