Back to Home
Stripe Privacy Summary
Finance
high Risk
Stripe provides payment processing and internet financial infrastructure for businesses and individuals, including payments, payouts, identity verification, and bank connectivity services.
Quick Summary
- What They Collect: Identity, financial (cards, bank accounts, SSN), transaction and device/cookie data (25 words max)
- How They Use & Share It: To process payments, KYC/AML, fraud prevention, analytics and marketing; shared with affiliates, processors, Financial Partners (25 words max)
- Your Rights: Access, rectify, erase, restrict, object, portability, withdraw consent and opt-out of targeted ads where applicable (25 words max)
Why You Should Care About Stripe's Privacy Practices
- Stripe collects high-risk financial data (credit/debit numbers, bank accounts, Social Security Numbers), increasing identity-theft and fraud risk if breached.
- Broad profiling and targeted marketing use payment and usage signals, enabling behavioral advertising and business profiling that affects your privacy and ads.
- Global transfers and extensive third-party sharing mean your data may be stored and processed in multiple countries under different laws, increasing exposure.
- Retention for fraud prevention and legal compliance means sensitive transaction and identity records can persist long-term; exercise data subject rights promptly.
Privacy Highlights
What They Collect
- Account information (name, email, login credentials)
- User content and files (identity documents, uploaded verification images)
- Demographic information (age when provided)
- Feedback data (support communications, recorded calls)
- Payment information (credit/debit card, bank account details, transaction history)
How They Share Data
- Business affiliates (Stripe group entities)
- Service providers / processors (cloud, analytics, identity verification vendors)
- Third-party partners (Financial Partners, payment networks, lenders)
- Advertising partners and analytics providers
Data Retention
Personal Data is retained while Stripe provides services to you or your Business User, or for a period Stripe reasonably expects to continue providing services; additionally retained as required for legal, tax, accounting, fraud prevention, and regulatory obligations (see Privacy Policy) .
Your Rights
- Access data
- Rectify data
- Erase or limit processing
- Object to processing
Detailed Analysis
Concerning Practices
- Shares data with many third parties including advertising & analytics partners
- Collects sensitive financial identifiers (SSN), payment card and bank account data, and optional biometric data
- Uses data for profiling, fraud scoring and targeted marketing/advertising
- Transfers data internationally (including to US data centers) and relies on cross-border mechanisms
- Retains data as long as services are provided or as required for legal, fraud-prevention, tax, and accounting reasons
- Some sharing cannot be fully limited (federal/state law or service function exceptions)
Personal Data Types
Account information (name, email, login credentials)User content and files (identity documents, uploaded verification images)Demographic information (age when provided)Feedback data (support communications, recorded calls)Payment information (credit/debit card, bank account details, transaction history)Profile information (Link account, saved payment methods)Sales and marketing data (marketing preferences, promotional interactions)Support data (customer service logs, recorded calls)Browser information (device info, IP address, user agent)Geolocation information (location inferred from IP or device signals)Service usage information (transaction data, product usage, Link/Financial Connections activity)Website usage data (cookies, site analytics)Information from other users (data received from Business Users, Financial Partners)Publicly available information (data gathered from public sources for fraud/prevention)
Tracking Methods
Essential cookiesAnalytics cookiesAdvertising cookiesSocial media cookies (via social networks / social integrations)Pixel tags / web beacons (via advertising and analytics partners)Local storage
Third Parties
Business affiliates (Stripe group entities)Service providers / processors (cloud, analytics, identity verification vendors)Third-party partners (Financial Partners, payment networks, lenders)Advertising partners and analytics providersSocial networks (for marketing integrations)Government authorities and law enforcement (for compliance/legal requests)
User Controls
Access dataRectify dataErase or limit processingObject to processingData portability (export data)Withdraw consentOpt-out of marketingDelete account (request erasure where law permits)
Frequently Asked Questions About Stripe
Want updates when Stripe's privacy policy changes?
We'll notify you when there are significant changes to their data practices.
Legal Disclaimer
This analysis is provided for informational purposes only and should not be used as legal advice. Consult with legal professionals for matters requiring legal guidance.