Donation Privacy Policy

Welcome!

Effective on July 31, 2023

1. Introduction and Scope

These Consumer Terms of Service (“Terms of Service” or “Terms“) are a legal agreement between us ( “us“, “our“, “we“, or “Stripe“) and you, the individual who uses one or more of the products and services we offer for your personal use under these Terms (referred to as “you” or “your“), which are Link, Financial Connections, and Identity (each, a “Consumer Service”). The following Terms are a legally binding agreement between you and us, and it describes the terms and conditions applicable to your use of our Consumer Services. By using our Consumer Services, you agree to be bound by these Terms, and any new features or tools that are added will also be subject to these Terms. The Stripe entity with which you are entering into these Terms depends on your location and can be found here.

These general Terms apply to all of our Consumer Services that reference these Terms. Businesses that are using our products and services for business purposes (“Business Users“) are subject to the Stripe Services Agreement.

2. Additional Terms That Apply to You

The following additional policies and terms also apply when you access or use the Consumer Services, all of which are incorporated by reference into these Terms:

  • Arbitration Agreement. IF YOU ARE LOCATED IN THE UNITED STATES, YOU AGREE TO OUR ARBITRATION AGREEMENT, WHICH REQUIRES YOU TO RESOLVE DISPUTES BETWEEN YOU AND STRIPE ON AN INDIVIDUAL BASIS THROUGH ARBITRATION, PROHIBITS YOU FROM MAINTAINING OR PARTICIPATING IN A CLASS ACTION LAWSUIT, WAIVES YOUR RIGHT TO A  JURY TRIAL, AND LIMITS THE TIME IN WHICH A CLAIM MAY BE BROUGHT.
  • Link E-Sign Disclosure. You agree to the Link E-Sign Disclosure. It provides that we will communicate with you electronically. Your electronic agreement has the same effect as if you sign in ink, and you agree to receive notices through our Consumer Services.
  • Privacy Policy. You acknowledge the Privacy Policy. Stripe and the Business User are independent controllers of personal data collected in conjunction with the Consumer Services and will independently and separately determine the purposes and means of its processing of personal data.  We may transfer your personal data to countries other than your own country, including the United States. Please read the Privacy Policy carefully to understand how your information is collected, used, and shared in connection with these Consumer Services.  Learn more by reviewing Link’s Privacy Center.
  • Product-Specific Terms. A Consumer Service may have specific terms that apply when you use that particular Consumer Service. These product-specific Terms are listed in the left-hand menu.
  • Acceptable Use Policy. Your use of a Consumer Service is subject to Stripe’s Acceptable Use Policy.

We may revise these Terms from time to time. We will use reasonable efforts to notify you of material changes to these Terms in advance of their effectiveness, including by posting notice on the applicable Consumer Services or providing notice via an email address associated with you. The revised Terms will be effective on the date stated in the revised Terms. By using a Consumer Service after any revisions become effective, you agree to those changes. If you do not agree with any changes to these Terms, you must stop using the Consumer Services.

3. Eligibility

You may only enter into these Terms if you are over the age of majority and able to enter into a legally binding contract in the country in which you reside.

You must not use the Consumer Services if you have previously been terminated or suspended from using any of our services, including any Consumer Service. You may not enter into the Terms or use any Consumer Service if you are the target of government sanctions, such as those applied by the U.S. Department of the Treasury Office of Foreign Assets Control, or any other national government.

You must be eligible for the particular Consumer Services to the extent they are available in your country. If we present an incorrect country for you or you move countries, then you must correct the country in your account or contact support before using the Consumer Services again.

4. Stripe’s Role

Any contract of sale made using the Consumer Services is directly between you and the Business User. You, and not Stripe, are responsible for the purchases you make using the Consumer Services. The Business User, and not Stripe, is responsible for the goods or services that you may purchase from them using the Consumer Services, including but not limited to delivery, quality of goods, refunds, fraud, advertising, liability relating to the Business User’s products or services, or non-compliance with applicable law.

Your access to and use of the Consumer Services does not change your relationship with the Business User, third party services or platforms or with your bank or credit or debit card company.

Except as provided otherwise in these Terms, Stripe will not intervene in any dispute between you and a Business User for any transactions using the Consumer Services. If you find yourself in a dispute with a Business User or a third party, we encourage you to contact the other party and try to resolve the dispute. You can submit a complaint regarding a Business User to Stripe, and Stripe may forward your complaint to the Business User with a request that they contact you directly. Except as provided otherwise in these Terms, Stripe will not make judgments regarding factual disputes or legal issues or claims between you and the Business User, and Stripe has no obligation to resolve any disputes. You release Stripe from any claims, demands, and damages arising out of disputes relating to your use of the Consumer Services, including those with other users or parties.

We make no warranties with respect to the products, services or information provided by Business Users, and we are not responsible or liable for: (a) product liability claims in respect of Business User products; (b) claims that the offer or sale of Business User products or services fails to conform to any applicable legal or regulatory requirement; (c) claims respecting Business Users’ products, services, or practices arising under consumer protection or similar legislation; (d) any inaccurate, incomplete or out of date information offered by a Business User; or (e) the acts or omissions of any third party platform where you may interact with or purchase from.

5. Identification and Prevention of Fraud

You agree that:

  • Information you provide about yourself and your use of the Consumer Services must be complete and accurate as of the time provided, and you must keep this information up-to-date;
  • To the extent law allows, we and our service providers may verify your identity.
  • You must notify us immediately if you become aware of any unauthorized use or access to your account. You are responsible for any actions taken through the use of your credentials, except for actions taken after you have told us that your account or credentials have been compromised.

6. Communications via Text, Push Notification, Email, and Phone

To the extent allowable under law, by providing us with a phone number, you consent to receiving text (SMS) messages, push notifications, and phone calls from us. Such communications may include, but are not limited to, requests for secondary authentication, receipts, reminders, notifications regarding updates to your account or account support, requests for product feedback, and marketing or promotional communications. You acknowledge that you are not required to consent to receive promotional texts or calls as a condition of using any Consumer Service. Call and text message communications may be generated by automatic telephone dialing systems. Standard message and data rates your cell phone carrier applies may apply to the text messages we send you.

You may opt-out of receiving promotional email communications we send to you by following the unsubscribe options on such emails or by managing your communications preferences in the app. You may opt-out of text messages from Stripe by replying STOP or by following instructions that you receive in the text message. You may opt-out of phone calls by notifying the caller or by contacting support. You acknowledge that opting out of receiving communications may impact your use of Consumer Services.

7. Our Intellectual Property Rights

We reserve all rights not expressly granted to you in these Terms. The Consumer Services are protected by trademark, copyright, patent and other laws of the United States and other countries. We own all rights, title, interest in and to the Consumer Services and all copies of the Consumer Services, and all Intellectual Property Rights in them. Your use of the Consumer Services is subject to these Terms, and these Terms do not grant you any rights to our Intellectual Property Rights or the Intellectual Property Rights of our licensors, licensees, or partners.

For the purposes of these Terms, “Intellectual Property Rights” means all patent rights, copyright rights, mask work rights, moral rights, rights of publicity, trademark, trade dress and service mark rights, goodwill, trade secret rights, and other intellectual property rights that may exist now or come into existence in the future, and all of their applications, registrations, renewals and extensions, under the laws of any state, country, territory or other jurisdiction.

8. Feedback

You may choose to submit feedback, ideas and suggestions about the Consumer Services, but it is never required. You may provide us with feedback on the Consumer Services by contacting support. You agree that we may use and share all feedback, ideas, and suggestions you submit for any purpose and without compensation or obligation to you.

9. Termination

Termination by Us: We may terminate these Terms, and we may limit, suspend, change, or remove your access to any or all Consumer Services, including any feature or aspect of the Consumer Services, at any time for any reason. If commercially reasonable, we will take reasonable steps to notify you before taking any action that restricts your access to the Consumer Services. If in our sole judgment you fail, or we suspect that you have failed, to comply with any term or provision of these Terms of Service, we may terminate these Terms of Service at any time without notice to you and accordingly we may terminate your access to the Consumer Services.

Termination by You: Subject to any product-specific Terms below, you may terminate any Consumer Service at any time and for any reason by terminating the Consumer Service or closing or deleting your account as described below in the Link Account Terms. Termination will be effective on the date that your account is closed.

Effect of Termination. Upon termination, you will not have any further use of or access to the Consumer Services. Subject to applicable law, you will also not have any use of or access to any information you submitted through the Consumer Services, and all rights granted under these Terms will end. Termination does not relieve you of your obligations to pay amounts owed to Stripe, Business Users, or others. Termination does not revoke any third-party payment authorizations. The following provisions will survive even after these Terms terminate: Arbitration Agreement, Our Intellectual Property, Feedback, Disclaimer of Warranties, Limitation of Liability, Governing Law, Assignment and Third Party Beneficiaries, and Miscellaneous Terms.

10. Disclaimer of Warranties

The Consumer Services are provided “as-is” and without any representation or warranty, whether express or implied. We, our affiliates, and our respective agents, contractors, and Business Users (together, the “Disclaiming Entities”) make no representation or warranty of any kind whatsoever (other than those implied by statute) with respect to the Consumer Services or the content, materials, information and functions we make accessible, and specifically disclaim all implied warranties of merchantability, fitness for a particular purpose, title and non-infringement. We do not promise that the Consumer Services will be uninterrupted, error-free, or secure.

The Disclaiming Entities do not control or make any warranties regarding the products or services others provide in connection with the Consumer Services. In other words, we do not have control over the businesses from which you’re purchasing when using the Consumer Services, and we do not promise or imply that the products or services you buy using the Consumer Services will work as promised or be safe to use.

Some laws limit or prohibit disclaiming the warranties referred to in the previous paragraphs, or impose obligations on us that we can’t eliminate with these Terms. In those cases, this section (Disclaimer of Warranties) does not restrict, exclude or modify any consumer rights under any applicable law.

11. Limitation of Liability

The Disclaiming Entities will not be liable to you for any failure to perform our obligation under these Terms due to a Force Majeure Event. A “Force Majeure Event” is any event beyond the control of Stripe or its affiliates, including a strike or other labor dispute; labor shortage, stoppage or slowdown; supply chain disruption; embargo or blockade; telecommunication breakdown; power outage or shortage; inadequate transportation service; inability or delay in obtaining adequate supplies; weather; earthquake; fire; flood; act of God; riot; civil disorder; civil or government calamity; epidemic; pandemic; state or national health crisis; war; invasion; hostility (whether war is declared or not); terrorism threat or act; Law; or act of a Governmental Authority.

The Disclaiming Entities will not be liable to you for any failure to perform our obligations under these Terms where performance of that obligation would have put us in violation of applicable law.

The Disclaiming Entities will not be liable to you in any circumstances for:

  • Loss of business, loss of goodwill, loss of opportunity, or loss of profit; or
  • Any loss that we could not have reasonably anticipated.

Subject to the specific product Terms below and applicable consumer laws in your country, in no event will a Disclaiming Entity’s liability arising out of or in connection with these Terms exceed $200 USD.

You and we agree that the other has relied on the disclaimer of warranties and limitation of liability stated above in entering into these Terms, the limitation and disclaimer are essential to the agreement between you and us under these Terms, and they will apply to the fullest extent allowed by law.

Some laws restrict our ability to disclaim or limit our liability. In those cases, this section does not restrict, exclude or modify any consumer rights under any applicable law.

12. Governing Law

If you reside in the United States, California law will govern any claim or dispute between you and us that arises out of these Terms, regardless of conflict of law principles.

If you reside outside of the United States, your governing law is specified here.

13. Assignment and Third-Party Beneficiaries

You must not assign your rights or obligations under these Terms to anyone without our prior written consent. We may delegate performing our obligations, and we may assign our rights and obligations under these Terms to Stripe affiliates, at any time for any reason by providing notice to you.

14. Miscellaneous Terms

These Terms, together with the Arbitration Agreement (if applicable), E-Sign Agreement, Privacy Policy, the Acceptable Use Policy, and the product-specific Terms below are the only agreement between you and us regarding the Consumer Services. In the event of an irreconcilable conflict or inconsistency between a provision in these Terms and any product-specific Terms below, the provision in the product-specific Terms will govern. These Terms do not create any partnership, joint venture, or other agency relationship between you and us. If we do not immediately exercise a right we have under these Terms, we do not waive that right. We retain our ability and right to enforce any part of these Terms at a later time. If any part of these Terms is found unenforceable, that part will be ignored, and all of the remaining terms will remain in effect.

15. Contact

If you have a question about the Consumer Services or how these Terms apply to you, please contact support.

  1. Description of Link
    1. Link is a service that allows you to save and manage your information for an accelerated experience (“Link“). Link powers an accelerated checkout by storing your information upon your authorization and retrieving it for faster checkouts. When you make a purchase at a business that uses Stripe and offers Link as an accelerated checkout option (a “Link Merchant“), you will be asked if you would like to save your information or use your information saved to your Link account for future payments across Link Merchants when you are logged in with us on the same browser, app or device.
    2. When you authorize us to save your information, you are signing up for Link and creating a Link account (“Link Account“), and we will collect and store certain personal information from you, such as:
      1. Your name, email address, and mobile phone number (“Account Information“);
      2. Your credit card, debit card, bank account information, and billing address (“Payment Information“);
      3. Your shipping address (“Shipping Information“); and
      4. Information related to your purchase from a Link Merchant, such as the order date, amount, and product details (such as name, price, photos) (“Order Information“).
    3. Together, your Account Information, Payment Information, Shipping Information and Order Information are your “Saved Information.” All personal information collected from you in connection with your use of Link is governed by the Link Privacy Policy. As provided in more detail in the Link Privacy Policy, we may use your personal information to develop and analyze our services, and we may share with our Link Merchants and our Business Users any of the following: (i) the fact that you have a Link Account, (ii) completed a purchase using Link, or (iii) the payment method type used for a purchase you made using Link. Business Users are businesses that are using our products and services for business purposes, subject to the Stripe Services Agreement.
    4. When you use Link on a Link Merchant’s website, we or the Link Merchant  will use cookies or similar technologies to link your web browser, app or device to your Link Account and to recognize you when you visit that Link Merchant or another Link Merchant on the same browser or device. You can then make purchases using your Account Information, Payment Information, and Shipping Information across Link Merchants when you are logged in with us on the same browser, app or device. In such cases, we will provide the Link Merchant with your Account Information, Payment Information, and/or your Shipping Information to facilitate a faster checkout. If we don’t recognize you (for example, because you’ve cleared your cookies, you’re logged out of Link, or you’re using a device that is different from the one you used to last access Link), you will be able to access your Saved Information by logging into your Link Account, such as by inputting your email address and a verification code sent to you via SMS text message or an email from Link.
  2. Use of Link: Your Rights and Obligations
    1. You may only save Payment Information with us that you are authorized to use.
    2. When you are logged into your Link Account and you input or use a new payment method (such as a different debit or credit card, or a different bank account), you authorize Stripe to save that new payment method information to your Link Account as part of your Payment Information. The last payment method you used to make a successful transaction may become your default payment method the next time you are completing a transaction on a Link Merchant’s site. You may also change your default payment method by logging into your Link Account on app.link.com.
    3. You authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to Stripe or its service provider for the duration of your business relationship, solely to help Stripe identify you or your wireless device and to prevent fraud. See our Link Privacy Policy for how we treat your data.
    4. Message and data rates may apply for any SMS messages that we send to you, or you send to us. If you have any questions about your text plan or data plan, contact your wireless or mobile provider.
    5. We reserve the right to modify or terminate Link or any of the features or tools provided therein for any reason (acting in our reasonable discretion), and at any time. We will try to notify you first unless it is unreasonable to do so.
    6. We reserve the right to refuse service to anyone for any reason at any time.
  3. Updating or terminating your Link Account
    1. These Link Account Terms are effective unless and until they are terminated by either you or us. You may terminate these Link Account Terms at any time by deleting your Link Account.
    2. If you want to delete your Saved Information, your Link Account, or stop storing information using Link, please let us know by visiting https://support.link.com/how-to-delete-your-saved-payment-information and submitting your email address.
    3. You can manage your Saved Information on your Link Account, the next time you checkout on a Link Merchant site, or by visiting https://support.link.com for more instructions. Should you update your Payment Information, you authorize Stripe to validate and store your Payment Information, including your credit card, on file.
    4. If your access to your Link Account is terminated by you or us, we will delete your Saved Information in accordance with our Privacy Policy.
  4. Adding or Removing a Payment Method
    1. You can add or remove certain payment methods to your Link Account such as a credit card, debit card, or a U.S. bank account. Before linking a payment method, you should review and understand the consumer protection rights and remedies available for different payment sources in  your jurisdiction, such as under the Electronic Fund Transfer Act (EFTA) and Fair Credit Billing Act (FCBA) in the United States.
    2. Please keep your Payment Information current (e.g., credit card number and expiration date). If this information changes, we may update it using information and third-party sources available to us without any action on your part. If you do not want us to update your card information, you may remove your Payment Information from your Link Account.
    3. Removing a payment method from your Link Account does not cancel or change any amounts you still owe to a Link Merchant. Specifically, if you remove a payment method from your Saved Information, this will not terminate or cancel any subscriptions you may have purchased with a Link Merchant using your Saved Information. You must cancel your subscriptions with the Link Merchant directly.
    4. We may ask you to connect your bank account to your Link Account to make it easier to pay with your bank account subsequently through your Link Account. Any bank account you choose to save to your Link Account is referred to as a “Saved Bank Account.” Through your Link Account and under the Financial Connections Terms, you may also choose to provide your Saved Bank Account details directly to a Business User regardless of whether Stripe is involved in a subsequent transaction. We will collect data from your Saved Bank Account (and other accounts under the same account credentials) pursuant to the Financial Connections Terms and the Link Privacy Policy. We may use your Saved Bank Account data to, among other things, verify that your Saved Bank Account is valid, check your balance to confirm there are sufficient funds for your purchase, streamline your requested payments and assess your eligibility for and offer you Consumer Services that we or our affiliate provides. You authorize us to credit amounts or otherwise send payments to the bank account you would like to save to your Link Account and your existing Saved Bank Account(s), including to determine whether your bank account is valid and active, as well as for promotions and refunds.
    5. Each time you use your Link Account to pay a Link Merchant using your Saved Bank Account, you are authorizing the Link Merchant to debit your Saved Bank Account for up to the total amount you authorize the merchant to charge (“Total Authorized Amount“) pursuant to the Link Bank Payments Authorization. You authorize us to retry a debit on your Saved Bank Account if your bank rejects the original debit. If the Link Merchant chooses, they may debit your Saved Bank Account, pursuant to your Link Bank Payments Authorization, for amounts less than the Total Authorized Amount, which in the aggregate will not exceed the Total Authorized Amount. Where your Saved Bank Account is a U.S. bank account, you agree that your grant of the authorization in this paragraph complies with the National Automated Clearinghouse Association (NACHA) operating rules and has the same legal effect as if you had signed a paper mandate containing the same terms.
    6. If you do not see an option to pay using a bank account through your Link Account, it may be because the Business User has not allowed those payments or the Business User or bank is not eligible for bank payments via our Consumer Services. If your bank account transaction fails without an actual attempt to debit your Saved Bank Account, it may be because we determined the transaction is at high risk of being returned unsuccessfully (e.g. if your historical account balance is below the transaction amount). This can help prevent you from incurring insufficient funds fees from your bank. We recommend that you use a different bank account or payment method or reach out to us if you have questions. Your use of your bank account as a payment method is also subject to the terms, benefits, and protections associated with your personal bank account. If you use your bank account as a payment method and do not have sufficient funds to make a purchase, you could incur overdraft fees, insufficient funds fees or other fees with your bank.
    7. If at any time you would like to revoke your Link Bank Payments Authorization or you no longer want your Saved Bank Account to be a payment method saved to your Link Account, you must delete your Saved Bank Account as a payment method from your Link Account. If a payment with your Saved Bank Account was not initiated from your Link Account but involved Link or Stripe connecting your financial account with that Business User, please see the Financial Connections Terms or this page for information on how to disconnect your Saved Bank Account.
  5. Backup payment method
    1. If your default or selected payment method is unavailable or the transaction is unsuccessful using that payment method (for example, because your Saved Bank Account has insufficient funds), the Link Merchant may initiate a transaction on any other payment method saved to your Link Account (a “Backup Payment Method“). Generally, transactions on Backup Payment Methods will be attempted in the following order, if applicable: (1) Saved Bank Account, (2) debit card, and (3) credit card. In some cases, a Backup Payment Method of the same type will be used (for example, if your default payment method is a card, the Backup Payment Method may also be a card).
    2. We will identify that a Backup Payment Method applies before you complete the purchase (e.g., whether during a one-time checkout or for any subscription payments, during the initial subscription purchase).
    3. If you do not wish to have a Backup Payment Method used, you may either (i) not consent to the use of the Backup Payment Method or (ii) manage your payment methods on your Link Account.
  6. Security
    1. We take the protection of your Saved Information seriously and have  implemented technical and organizational measures designed to safeguard it from accidental loss and from unauthorized access, use, alteration, or disclosure. These measures include industry-standard practices and technology to help maintain the security, confidentiality, and integrity of your data.
    2. While we strive to provide robust security, no system is completely foolproof. We cannot guarantee that unauthorized third parties will never be able to defeat our security measures or misuse your Saved Information. We encourage you to remain vigilant and take responsibility for securing your personal information, knowing that you provide it at your own risk.
    3. Learn more about our security here. If you have reason to believe that the security of your Link Account has been compromised, please contact us immediately at support.link.com/contact.
  7. Dormant Accounts
    1. If your Link Account remains inactive for a continuous period of two years, we may consider the account dormant and may close your Link Account at our discretion (a “Dormant Account“).
    2. A Link Account is considered a Dormant Account if you have not done any of the following Link Account activities during a continuous two year period:
      1. Making a payment or purchase using Link at a Link Merchant;
      2. Adding, updating or removing any of your Saved Information;
      3. Initiating account settings changes or updating security preferences;
      4. Engaging with customer support related to your Link Account, including inquiries or disputes; and
      5. Logging in to your Link Account and browsing or reviewing transaction history.
    3. Prior to closing the Dormant Account, Stripe will notify you using the email address associated with your Link Account. Starting from the date of our notice to you, we will provide you with a period of 30 days to reactivate your Link Account by logging in and performing any Link Account activity listed above.
    4. If Stripe does not receive a response or the account remains inactive after the 30-day notice period, your Link Account will be closed.
  8. Protection from Unauthorized Transactions (only for U.S. consumers)
    1. You may view your Link Account statement that shows your Link Account transactions and certain Order information by logging into your Link Account (“Link Transaction History“).
    2. To protect yourself from unauthorized activity in your Link Account, you should regularly log into your Link Account and review your Link Transaction History. You should review transaction details to ensure that each transaction was authorized and accurately completed.
    3. Stripe will protect you from unauthorized transactions initiated with your Link Account. When this protection applies, Link will cover you for the full amount of the unauthorized activity as long as you cooperate with us and follow the procedures described below.
    4. What is an Unauthorized Transaction. An “Unauthorized Transaction” occurs when your Link Account is used to make a purchase with a debit card issued by a U.S.-based bank or a U.S. bank account that you did not authorize and that did not benefit you. For example, if someone steals or fraudulently obtains access to your Link Account and makes a purchase using your Link Account with a saved U.S. debit card or a U.S. Saved Bank Account, an Unauthorized Transaction has occurred.
    5. What is not considered an Unauthorized Transaction. The following are NOT considered Unauthorized Transactions:
      1. If you grant authority to someone to use your Link Account (by giving them your login information) and they exceed the authority you gave them. You are responsible for transactions made in this situation unless you have previously notified Stripe that you no longer authorize transactions by that individual.
      2. Other unauthorized purchases using the Saved Bank Account, including via Stripe’s payment processing services, but that are not initiated with your Link Account. For those types of unauthorized purchases, contact your financial institution to report the unauthorized activity.
    6. Reporting an Unauthorized Transaction.
      1. If you believe your Link Account has been compromised, please contact Link consumer support immediately at support.link.com/contact or call 1-888-820-7551.
      2. Tell us IMMEDIATELY if you believe that an electronic fund transfer has been made without your permission using your login information or by other means. If you tell us within the 60 days after we provide you with your Link Transaction History showing transfers you did not make, you may be eligible for a refund of the full amount paid for Unauthorized Transactions.
  9. Error Resolution (only for U.S. consumers)
    1. What is an Error. An “Error” means the following:
      1. An “Unauthorized Transaction”, as it is defined above.
      2. When a transaction is incorrectly recorded in your Link Account.
      3. You send a payment and the incorrect amount is debited from your Link Account.
      4. An incorrect amount is credited to your Link Account.
      5. A transaction is missing from or not properly identified in your Link Transaction History.
      6. We make a computational or mathematical error related to your Link Account.
      7. You request Link Transaction History that Stripe is required to provide to you.
      8. You request information concerning pre-authorized (recurring) transfers from your Link Account that Stripe is required to provide to you.
      9. You request additional information or clarification concerning a transfer from your Link Account, including a request you make to determine whether an error has occurred.
      10. You inquire about the status of a pending transfer from your Link Account.
    2. What is not considered an Error. The following are NOT considered Errors:
      1. If you give someone access to your Link Account (by giving them your login information) and they use your Link Account without your knowledge or permission. You are responsible for transactions made in this situation.
      2. Requests for duplicate documentation or other information for tax or other recordkeeping purposes.
    3. In case of Errors or questions about your electronic transfers
      1. Telephone us at 1-888-820-7551, contact us at support.link.com/contact, or write us at
        Link │Built by Stripe
        Stripe, Inc.
        354 Oyster Point Blvd.
        South San Francisco, CA 94080
      2. Notify us as soon as you can, if you think your statement or receipt is wrong or if you need more information about a transfer listed on the statement or receipt. We must hear from you no later than 60 days after the problem or error appeared on your Link Transaction History.
        1. Tell us your name and account number.
        2. Describe the error or the transfer you are unsure about, and explain as clearly as you can why you believe it is an error or why you need more information.
        3. Tell us the dollar amount of the suspected error.
      3. If you tell us orally, we may require that you send us your complaint or question in writing within 10 business days.
      4. We will determine whether an error occurred within 10 business days after we hear from you and will correct any error promptly.
      5. We will tell you the results after completing our investigation. If we decide that there was no error, we will send you a written explanation. You may ask for copies of the documents that we used in our investigation.

Financial Connections Terms

Effective on June 23, 2023

We provide a Consumer Service that allows you to connect your U.S. financial accounts to easily share your financial account data with Stripe and our affiliates (and to the extent identified, our Business User with which you are interacting), so that you can receive better product experiences. These Financial Connections Terms, along with the Consumer Terms of Service, apply when you use this Consumer Service.

When you interact with a Business User that has enabled this Consumer Service, we will ask you to connect one or more of your financial accounts. If you agree to connect your financial accounts with us, Stripe will collect data from those financial accounts (associated with the login information you provide) for account selection and as reasonably necessary to provide this Consumer Service. We will only provide the Business User with the data categories (and related insights) requested by the Business User for the specific accounts you choose to share with the Business User.

Your financial account data is either provided directly by your financial institution, or collected by us or our third party partners by collecting, storing and using your login information (such as your username and password). We refer to these financial institutions and partners as “Data Sources.” Finicity Corporation is one of our Data Sources, and their terms are available here and incorporated into these Financial Connections Terms by this reference. Where our Data Sources enable us to control the specific accounts to which Stripe accesses data, Stripe will not collect data except from the specific accounts you select.

When you agree to connect your financial account using this Consumer Service, you consent to the collection, use, and retention of your financial account data (including personal data) for that financial account. Once connected to your financial account(s), we and our Data Sources will regularly collect, use, and store the following types of data from your financial accounts:

  • Account owner information, including contact information (such as your name and address);
  • Account balances, including current and pending balances;
  • Account details, including your account type and bank, and account and routing numbers;
  • Account transactions, including balance, transaction date, payee, location, transaction, description, and amount.

Among other things, we may use your data to:

  • Verify your financial account;
  • Facilitate the processing of your requested payments;
  • Mitigate fraud, financial loss, or other harm to you, our Business Users, and us;
  • Assess your eligibility for and offer you our other products or services;
  • Analyze, develop, and update this Consumer Service and our other products and services;
  • Provide you customer support;
  • Comply with law, and enforce our terms; and
  • For other purposes consistent with your consent and applicable law.

For example, we may use your financial account data to decrease the likelihood that you are charged with insufficient funds fees or experience an ACH return and to assess your eligibility for and offer you Consumer Services that we or our affiliates provide. Please review the Financial Connections FAQs to learn more. We will use your personal data in accordance with our Privacy Policy.

We will only provide the Business User the categories of financial account data (including related insights) that the Business User requests and with your permission. Please remember, however, that our Privacy Policy covers our privacy practices, and not our Business Users’ privacy practices. Business Users may use your financial account data, for example, to verify that your account is valid and to check your account balance.

In some cases, we and our Data Sources collect and store your financial institution login information, depending on the type of connection that we have with your financial institution. You authorize, and represent that you have the lawful right to authorize, us and our Data Sources to log into and access the data in your connected financial account(s) for the purposes described above. In order to provide you a better experience, you also authorize Stripe or our Data Sources to save, to remember, to trust or to take a similar action for account logins solely by Stripe or our Data Sources. We or our Data Sources may also be notified that account login is pending your action (such as your entry of a multifactor authentication code).  We may prompt you to complete that action directly in your financial institution’s application. This Consumer Service is not endorsed or sponsored by any financial institution whose account(s) are accessible through this Consumer Service, and we are not an agent of those financial institutions.

We will only provide the Business User with the data categories (and related insights) requested by the Business User for the specific accounts you select to share with the Business User. Otherwise, we disclose your financial account data and login information only to our trusted service providers and to the Data Sources only as necessary to provide this Consumer Service. We have implemented security controls that are designed to safeguard your data. To learn more, please visit https://stripe.com/docs/security/stripe.

If you want to disconnect your financial account from access by the Business User, you may do so through our disconnection form. Once your financial account has been disconnected, the Business User cannot access any subsequently refreshed financial account data from Stripe. Disconnecting your account or deleting your personal data from Stripe may not cancel or stop payments (including recurring payments) that you have already authorized. If you would like to request our Business User to cease debiting your account or to delete any copies of your data they obtained through this Consumer Service, please contact the Business User directly.

Stripe typically does not collect additional information from your disconnected financial account. In some cases, however, our Data Sources (or your financial institution) do not enable us to cease collecting your financial account data until all accounts associated with the applicable login information have been disconnected. You can also use our disconnection form to request that we disconnect all accounts and to delete the financial account data we obtained (and associated login information, if we have collected them).

You may choose for us to save your financial account for future use across our eligible Business Users, including when you check out on their websites and applications.  When you authorize us to save your financial account to Link, you are signing up for Link and creating a Link Account, and we will collect and store certain personal information from you, such as your name, email address, and mobile phone number. Please see the Link Account Terms for more information about Link Accounts.

Identity Terms

Effective on June 23, 2023

If you agree to save your identity information to your Link Account or verify your identity using your Link Account, you may choose to use your Link Account to share your identity verification data in the future with other eligible businesses (i.e., our Business Users).  This identity verification data may include the personal data you provided (such as a photo of your driver’s license or passport) and our verification results (including insights).

We generate verification results by comparing the information you provide with information about you that we collect from our Business Users, partners, identity verification service providers, and publicly available sources. If you agree for us to verify your identity using your identity document and your photo, your verification results are based on the biometric identifiers we generate and store from your images. Learn More. Stripe will use this information as a controller to verify your identity, including to comply with our own legal obligations, and for loss and fraud prevention and security purposes.

Business Users may ask you to verify your identity for a number of reasons, including to confirm that you do not already have an account or that you are authorized to use a payment method. An advantage of saving your identity information to, or verifying your identity with, your Link Account is that you may not need to go through the trouble of re-submitting your identity information for other Business Users in the future.  Rather, you may be able to verify your identity more quickly and easily by providing consent to share the verification data you saved to your Link Account with specific Business Users. Before you agree to verify your identity through your Link Account with a Business User, we will inform you whether verification data will be shared with that Business User. If you agree to share your verification data with a Business User, please note that Business User is an independent controller of your verification data, and the Business User’s use of your data is subject to the Business User’s privacy policy.

If you want to delete your identity information from your Link Account, there are instructions for how to do so here.  If you choose to delete your identity information from your Link Account, please note the Business User may still have your verification data. If you would like to request the Business User to delete any copies of your personal data they obtained through this End User Service, please contact the Business User directly.

Donation Privacy Policy

Welcome

We provide financial infrastructure for the internet. Individuals and businesses of all sizes use our technology and services to facilitate purchases, accept payments, send payouts, and manage online businesses. This Privacy Policy (“Policy”) describes the Personal Data we collect, how we use and share it, along with details on how you can reach out to us with privacy-related inquiries. Additionally, the Policy outlines your rights as a data subject and choices you have, including the right to object to certain usages of your Personal Data by us. For further information about our privacy practices, including our Supplemental U.S. Notice, please refer to our Link Privacy Center. In this Policy, “Stripe”, “we”, “our”, or “us” refers to the Stripe entity responsible for the collection, use, and handling of Personal Data as described in this document. Depending on your jurisdiction, the specific Stripe entity accountable for your Personal Data might vary. Learn More. “Personal Data” refers to any information associated with an identified or identifiable individual, which can include data that you provide to us, and we collect about you during your interaction with our Services (such as device information, IP address, etc.). “Services” refer to the products and services provided by Stripe under the Stripe Services Agreement and the Stripe Consumer Terms of Service. This may include devices and applications provided by Stripe. Our “Business Services” are services that we provide to entities (“Business Users”) that directly and indirectly provide us with “End Customer” Personal Data in connection with their own business operations and activities. Our “End User Services” are those that Stripe provides directly to individuals for their personal use. “Sites” refer to Stripe.com, Link.com, and other Stripe websites, apps, and online services. Collectively, we refer to Sites, Business Services, and End User Services as “Services”. “Financial Partners” are financial institutions, banks, and other partners such as payment method acquirers, payout providers, and card networks that we partner with to provide the Services. Depending on the context, “you” might be an End Customer, End User, Representative, or Visitor:

  • When you use an End User Service for personal use, such as signing up for Link, we refer to you as an “End User”.
  • When you do business with, or otherwise engage in a transaction with a Business User, such as buying a pair of shoes from a Business User using Stripe Checkout for payment processing, but are not directly transacting with Stripe, we refer to you as an “End Customer”.
  • When you are acting on behalf of an existing or potential Business User—perhaps as a company founder, account administrator for a Business User, or a recipient of an employee credit card from a Business User via Stripe Issuing—we categorize you as a “Representative”.
  • When you interact with Stripe by visiting a Site without being logged into a Stripe account, or when your interaction with Stripe does not involve you being an End User, End Customer, or Representative, you are considered a “Visitor”. For example, you are a Visitor when you send a message to Stripe asking for more information about our Services.

In this Policy, “Transaction Data” refers to data collected and used by Stripe to facilitate transactions you request. Some Transaction Data is Personal Data and may include: your name, email address, contact number, billing and shipping address, payment method information (like credit or debit card number, bank account details, or payment card image chosen by you), merchant and location details, amount and date of purchase, and in some instances, information about what was purchased. Depending on the activity, Stripe assumes the role of a “data controller” and/or “data processor” (or “service provider”) based on the activity. For more details about our role, the specific Stripe entity responsible under this Policy, and our legal bases for processing your Personal Data, please visit our Link Privacy Center.

1. Personal Data we collect and how we use and share it

Our collection and use of Personal Data differs based on whether you are an End User, End Customer, Representative, or Visitor, and the specific Service being utilized. For example, if you’re a sole proprietor who wants to use our Business Services, we may collect your Personal Data to onboard your business; at the same time, you might also be an End Customer if you’ve bought goods from another Business User utilizing our Services for payment processing. You could be an End User if you used our End User Service, such as Link, for those transactions.

1.1 End Users

We provide End User Services when we provide the Services directly to you for your personal use (e.g., Link). Additional details regarding our collection, usage, and sharing of End User Personal Data, including the legal bases we rely on for processing such data, can be found in our Link Privacy Center.

a. Personal Data we collect about End Users

  • Using Link or Connecting your bank account. Stripe offers a service called “Link,” which allows you to store your payment methods with Stripe to conveniently use them across our Business Users. When you sign up for Link, you agree to store your Personal Data (such as name, contact information, payment method details) with Stripe. This will allow for a more streamlined purchasing experience when using Link in the future. If you choose to pay with Link, we will also collect Transaction Data associated with your transactions. Learn More.
  • Should you decide to share your bank account information (including to make payments using your bank account via Link) with us, Stripe will periodically collect and process your account information (such as bank account owner information, account balances, account number and details, account transactions, and, in some cases, log-in credentials). You can ask us to cease the collection of such data at any time. Learn More.
  • You may also choose to store your identity documents (such as your driver’s license) using Link and share the saved document with other Business Users in the future.
  • Paying Stripe. When you purchase goods or services directly from Stripe, we receive your Transaction Data. For instance, when you make a payment to Stripe Climate, we collect information about the transaction, as well as your contact and payment method details.
  • Identity/Verification Services. We offer an identity verification service that automates the comparison of your identity document (such as a driver’s license) with your image (such as a selfie). You can separately consent to us using your biometric data to enhance our verification technology, with the option to revoke your consent at any time. Learn More.
  • More. For further information about other types of Personal Data that we may collect about End Users, including about your online activity and your engagement with our End User Services, please see the More ways we collect, use, and share Personal Data section below.

b. How we use and share Personal Data of End Users

  • Services. We use and share your Personal Data to provide the End User Services to you, which includes support, personalization (such as language preferences and setting choices), and communication about our End User Services (such as communicating Policy updates and information about our Services). For example, Stripe may use cookies and similar technologies or the data you provide to our Business Users (such as when you input your email address on a Business User’s website) to recognize you and help you use Link when visiting our Business User’s website. Learn more about how we use cookies and similar technologies in Stripe’s Cookie Policy.
  • Our Business Users. When you use Link to make payments, we share your Transaction Data with the Business Users you choose to do business with. Learn More. Furthermore, when you opt to connect your bank account with Stripe, you can also direct Stripe to share your account information with Business Users you do business with. Please note that these Business Users have their own privacy policies, which should describe how they use the information shared with them.
  • Transactions. When you use Link to make payments, we use your Personal Data (such as name, contact information, payment method details) saved with us to complete transactions with Stripe Business Users. We provide such data to Business Users and others you do business with and process it as a Data Processor for those Business Users, as detailed in Section 1.2 of this Policy.
  • Fraud Detection and Loss Prevention. We use your Personal Data collected across our Services (such as Stripe Radar) to detect fraud and prevent financial losses for you, us, and our Business Users and Financial Partners, including detecting unauthorized purchases. We may provide Business Users and Financial Partners that utilize our fraud prevention-related Business Services with Personal Data about you (including your attempted transactions) so that they can assess the fraud or loss risk associated with the transaction. Learn more about how we may use technology to assess the fraud risk associated with an attempted transaction and what information we share with Business Users and Financial Partners here and here.
  • Advertising. We may use your Personal Data to assess your eligibility for, and offer you, other End User Services or promote existing End User Services. Where allowed by law (including with your opt-in consent where required), we use and share End User Personal Data with others so that we may market our End User Services to you, including through interest-based advertising. We do not transfer your Personal Data to third parties in exchange for payment, but we may provide your data to third party partners, such as advertising partners, analytics providers, and social networks, who assist us in advertising our Services to you. Learn more.
  • More. For further information about additional ways by which we may use and share End Users’ Personal Data, please see the More ways we collect, use, and share Personal Data section below.

1.2 End Customers

Stripe provides various Business Services to our Business Users, which include in-person or online checkout payment processing or processing payouts for those Business Users. When acting as a service provider—also referred to as a data processor—for a Business User, we process End Customer Personal Data in accordance with our agreement with the Business User and the Business User’s lawful instructions. This happens, for example, when we process a payment for a Business User because you purchased a product from them, or when the Business User asks us to send you funds. Business Users are responsible for ensuring that the privacy rights of their End Customers are respected, including obtaining appropriate consents and making disclosures about their own data collection and use associated with their products and services. If you’re an End Customer, please refer to the privacy policy of the Business User you’re doing business with for its privacy practices, choices, and controls. We provide more comprehensive information about our collection, use, and sharing of End Customer Personal Data in our Link Privacy Center, including the legal bases we rely on for processing your Personal Data.

a. Personal Data we collect about End Customers

  • Transaction Data. If you’re an End Customer making payments to, receiving refunds from, initiating a purchase or donation, or otherwise transacting with our Business User, whether in-person or online, we receive your Transaction Data. We may also receive your transaction history with the Business User. Learn More. Additionally, we may collect information entered into a checkout form even if you opt not to complete the form or transact with the Business User. Learn More. A Business User who utilizes Stripe’s Terminal Service to provide its goods or services to End Customers may use the Terminal Service to collect End Customer Personal Data (like your name, email, phone number, address, signature, or age) in accordance with its own privacy policy.
  • Identity/Verification Information. Stripe provides a verification and fraud prevention Service that our Business Users can use to verify Personal Data about you, such as your authorization to use a particular payment method. During the process, you’d be asked to share with us certain Personal Data (like your government ID and selfie for biometric verification, Personal Data you input, or Personal Data that is apparent from the physical payment method like a credit card image). To protect against fraud and determine if somebody is trying to impersonate you, we may cross-verify this data with information about you that we’ve collected from Business Users, Financial Partners, business affiliates, identity verification services, publicly available sources, and other third party service providers and sources. Learn More.
  • More. For further information about other types of Personal Data that we may collect about End Customers, including about your online activity, please see the More ways we collect, use, and share Personal Data section below.

b. How we use and share Personal Data of End Customers

To provide our Business Services to our Business Users, we use and share End Customers’ Personal Data with them. Where allowed, we also use End Customers’ Personal Data for Stripe’s own purposes such as enhancing security, improving and offering our Business Services, and preventing fraud, loss, and other damages, as described further below.

  • Payment processing and accounting. We use your Transaction Data to deliver Payment-related Business Services to Business Users, including online payment transactions processing, sales tax calculation, invoice and bill handling, and helping them determine their revenue, settle their bills, and execute accounting tasks. Learn More. We may also use your Personal Data to provide and improve our Business Services.
  • During payment transactions, your Personal Data is shared with various entities in connection to your transaction. As a service provider or data processor, we share Personal Data to enable transactions as directed by Business Users. For instance, when you choose a payment method for your transaction, be it a credit card, debit card, Buy Now Pay Later, or direct debit, your payment method provider may receive your Transaction Data from transactions facilitated by Stripe. The Business User you choose to do business with also receives Transaction Data and might share the data with others. Please review their privacy policies for more information about how they use and share your Personal Data.
  • Financial services. Certain Business Users leverage our Services to offer financial services to you via Stripe or our Financial Partners. For example, a Business User may issue a card product with which you can purchase goods and services. Such cards could carry the brand of Stripe, the bank partner, and/or the Business User. In addition to any Transaction Data we may generate or receive when these cards are used for purchases, we also collect and utilize your Personal Data to provide and manage these products, including assisting our Business Users in preventing misuse of the cards. Please review the privacy policies of the Business User and, if applicable, our bank partners associated with the financial service (the brands of which may be shown on the card) for more information.
  • Identity/Verification services. We utilize Personal Data about your identity, including information provided by you and our service providers, to perform verification services for Stripe or for the Business Users that you are transacting with, to prevent fraud and enhance security. If you provide a selfie along with an image of your identity document, we may employ biometric technology to compare and calculate whether they match and verify your identity. Learn More.
  • Fraud detection and loss prevention. We use your Personal Data collected across our Services to detect and prevent losses for you, us, our Business Users, and Financial Partners. We may provide Business Users and Financial Partners using our fraud prevention-related Business Services with your Personal Data (including your attempted transactions) to help them assess the fraud or loss risk associated with the transaction. Learn more about how we may use technology to assess the fraud risk associated with an attempted transaction and what information we share with Business Users and Financial Partners here and here.
  • Our Business Users (and their authorized third parties). We share End Customers’ Personal Data with their respective Business Users and parties directly authorized by those Business Users to receive such data. Here are common examples of such sharing:
    • When a Business User instructs Stripe to provide another Business User with access to its Stripe account, including data related to its End Customers, via Stripe Connect.
    • Sharing information that you have provided to us with a Business User so that we can send payments to you on behalf of that Business User.
    • Sharing information, documents, or images provided by an End Customer with a Business User when the latter uses Stripe Identity, our identity verification Service, to verify the identity of the End Customer.
  • The Business Users you choose to do business with may further share your Personal Data with third parties (like additional third party service providers other than Stripe). Please review the Business User’s privacy policy for more information.
  • Advertising by Business Users. If you initiate a purchasing process with a Business User, the Business User receives your Personal Data from us in connection with our provision of Services even if you don’t finish your purchase. The Business User may use your Personal Data to market and advertise their products or services, subject to the terms of their privacy policy. Please review the Business User’s privacy policy for more information, including your rights to stop their usage of your Personal Data for marketing purposes.
  • More. For further information about additional ways by which we may use and share End Customers’ Personal Data, please see the More ways we collect, use, and share Personal Data section below.

1.3 Representatives

We collect, use, and share Personal Data from Representatives of Business Users (for example, business owners) to provide our Business Services. For more information about how we collect, use, and share Personal Data from Representatives, as well as the legal bases we rely on for processing such Personal Data, please visit our Link Privacy Center.

a. Personal Data we collect about Representatives

  • Registration and contact information. When you register for a Stripe account for a Business User (including incorporation of a Business), we collect your name and login credentials. If you register for or attend an event organized by Stripe or sign up to receive Stripe communications, we collect your registration and profile data. As a Representative, we may collect your Personal Data from third parties, including data providers, to advertise, market, and communicate with you as detailed further in the More ways we collect, use, and share Personal Data section below. We may also link a location with you to tailor the Services or information effectively to your needs. Learn More.
  • Identification Information. As a current or potential Business User, an owner of a Business User, or a shareholder, officer, or director of a Business User, we need your contact details, such as name, postal address, telephone number, and email address, to fulfill our Financial Partner and regulatory requirements, verify your identity, and prevent fraudulent activities and harm to the Stripe platform. We collect your Personal Data, such as ownership interest in the Business User, date of birth, government-issued identity documents, and associated identifiers, as well as any history of fraud or misuse, directly from you and/or from third parties such as credit bureaus and via the Services we provide. Learn More. You may also choose to provide us with bank account information.
  • More. For further information about other types of Personal Data that we may collect about Representatives, including your online activity, please see the More ways we collect, use, and share Personal Data section below.

b. How we use and share Personal Data of Representatives

We typically use the Personal Data of Representatives to provide the Business Services to the corresponding Business Users. The ways we use and share this data are further described below.

  • Business Services. We use and share Representatives’ Personal Data with Business Users to provide the Services requested by you or the Business User you represent.
  • In some instances, we may have to submit your Personal Data to a government entity to provide our Business Services, for purposes such as the incorporation of a business, or calculating and paying applicable sales tax. For our tax-related Business Services, we may use your Personal Data to file taxes on behalf of the Business User you represent. For our Atlas business incorporation Services, we may use your Personal Data to submit forms to the IRS on your behalf and file documents with other government authorities, such as articles of incorporation in your state of incorporation.
  • We share Representatives’ Personal Data with parties specifically authorized by the corresponding Business User, such as Financial Partners servicing a financial product, or third party apps or services the Business User chooses to use alongside our Business Services. Here are common examples of such sharing:
    • Payment method providers, like Visa or WeChat Pay, require information about Business Users and their Representatives who accept their payment methods. This information is typically required during the onboarding process or for processing transactions for these Business Users. Learn More.
    • A Business User may authorize Stripe to share your Personal Data with other Business Users to facilitate the provision of Services through Stripe Connect.
  • The use of Personal Data by a third party authorized by a Business User is subject to the third party’s privacy policy.
  • If you are a Business User who has chosen a name that includes Personal Data (for example, a sole proprietorship or family name in a company name), we will use and share such information for the provision of our Services in the same way we do with any company name. This may include, for example, displaying it on receipts and other transaction-identifying descriptions.
  • Fraud detection and loss prevention. We use Representatives’ Personal Data to identify and manage risks that our Business Services might be used for fraudulent activities causing losses to Stripe, End Users, End Customers, Business Users, Financial Partners, and others. We also use information about you obtained from third parties like credit bureaus and from our Services to address such risks, including to identify patterns of misuse and monitor for terms of service violations. Stripe may share Representatives’ Personal Data with Business Users, our Financial Partners, and third party service providers to verify the information provided by you and identify risk indicators. Learn More. We also use and share Representatives’ Personal Data to conduct due diligence, including conducting anti-money laundering and sanctions screening in accordance with applicable law.
  • Advertising. Where allowed by applicable law, we use and share Representatives’ Personal Data with third parties so we can advertise and market our Services. Subject to applicable law, including any consent requirements, we may advertise through interest-based advertising and track the efficacy of such ads. See our Cookie Policy. We do not transfer your Personal Data to third parties in exchange for payment. However, we may provide your data to third party partners, like advertising partners, analytics providers, and social networks, who assist us in advertising our Services. Learn more. We may also use your Personal Data, including your Stripe account activity, to evaluate your eligibility for and offer you Business Services or promote existing Business Services. Learn more.
  • More. For further information about additional ways by which we may use and share Representatives’ Personal Data, please see the More ways we collect, use, and share Personal Data section below.

1.4 Visitors

We collect, use, and share the Personal Data of Visitors. More details about how we collect, use, and share Visitors’ Personal Data, along with the legal bases we rely on for processing such Personal Data, can be found in our Link Privacy Center.

a. Personal Data we collect about Visitors

When you browse our Sites, we receive your Personal Data, either provided directly by you or collected through our use of cookies and similar technologies. See our Cookie Policy for more information. If you opt to complete a form on the Site or third party websites where our advertisements are displayed (like LinkedIn or Facebook), we collect the information you included in the form. This may include your contact information and other information pertaining to your questions about our Services. We may also associate a location with your visit. Learn More.

b. How we use and share Personal Data of Visitors

  • Personalization. We use the data we collect from cookies and similar technologies about you to measure user engagement with the content on the Sites, improve relevancy and navigation, customize your user experience (such as language preference and region-specific content), and curate content about Stripe and our Services that’s tailored to you. For instance, as not all of our Services are available globally, we may customize our responses based on your region.
  • Advertising. Where allowed by applicable law, we use and share Visitors’ Personal Data with third parties so we can advertise and market our Services. Subject to applicable law, including any consent requirements, we may advertise through interest-based advertising and track the efficacy of such ads. See our Cookie Policy. We do not transfer your Personal Data to third parties in exchange for payment. However, we may provide your data to third party partners, like advertising partners, analytics providers, and social networks, who assist us in advertising our Services. Learn more.
  • Engagement. As you interact with our Sites, we use the information we collect about and through your devices to provide opportunities for further interactions, such as discussions about Services or interactions with chatbots, to address your questions.
  • More. For further information about additional ways by which we may use and share Visitors’ Personal Data, please see the More ways we collect, use, and share Personal Data section below.

2. More ways we collect, use, and share Personal Data

In addition to the ways described above, we also process your Personal Data as follows:

a. Collection of Personal Data

  • Online Activity. Depending on the Service used and how our Business Services are implemented by the Business Users, we may collect information related to:
    • The devices and browsers you use across our Sites and third party websites, apps, and other online services (“Third Party Sites”).
    • Usage data associated with those devices and browsers and your engagement with our Services, including data elements like IP address, plug-ins, language preference, time spent on Sites and Third Party Sites, pages visited, links clicked, payment methods used, and the pages that led you to our Sites and Third Party Sites. We also collect activity indicators, such as mouse activity indicators, to help us detect fraud. Learn More. See also our Cookie Policy.
  • Communication and Engagement Information. We also collect information you choose to share with us through various channels, such as support tickets, emails, or social media. If you respond to emails or surveys from Stripe, we collect your email address, name, and any other data you opt to include in your email or responses. If you engage with us over the phone, we collect your phone number and any other information you might provide during the call. Additionally, we collect your engagement data, like your registration for, attendance at, or viewing of Stripe events and any other interactions with Stripe personnel.
  • Forums and Discussion Groups. If our Sites allow posting of content, we collect Personal Data that you provide in connection with the post.

b. Use of Personal Data.

Besides the use of Personal Data described above, we use Personal Data in the ways listed below:

  • Improving and Developing our Services. We use analytics on our Sites to help us understand your use of our Sites and Services and diagnose technical issues. Please review our Cookie Policy to learn more about how you can control our use of cookies and third party analytics. We also collect and process Personal Data throughout our various Services, whether you are an End User, End Customer, Representative, or Visitor, to improve our Services, develop new Services, and support our efforts to make our Services more relevant and useful to you. Learn More.
  • Communications. We use the contact information we have about you to deliver our Services, which may involve sending codes via SMS for your authentication. Learn More. If you are an End User, Representative, or Visitor, we may communicate with you using the contact information we have about you to provide information about our Services and our affiliates’ services, invite you to participate in our events, surveys, or user research, or otherwise communicate with you for marketing purposes, in compliance with applicable law, including any consent or opt-out requirements. For example, when you provide your contact information to us or when we collect your business contact details through participation at trade shows or other events, we may use this data to follow up with you regarding an event, provide information requested about our Services, and include you in our marketing information campaigns. Where permitted under applicable law, we may record our calls with you to provide our Services, comply with our legal obligations, perform research and quality assurance, as well as for training purposes.
  • Social Media and Promotions. If you opt to submit Personal Data to engage in an offer, program, or promotion, we use the Personal Data you provide to manage the offer, program, or promotion. We also use the Personal Data you provide, along with the Personal Data you make available on social media platforms, for marketing purposes, unless we are not permitted to do so.
  • Fraud Prevention and Security. We collect and use Personal Data to help us identify and manage activities that could be fraudulent or harmful across our Services, enable our fraud detection Business Services, and secure our Services and transactions against unauthorized access, use, alteration or misappropriation of Personal Data, information, and funds. As part of the fraud prevention, detection, security monitoring, and compliance efforts for Stripe and its Business Users, we collect information from third parties (such as credit bureaus) and via the Services we offer. In some instances, we may also collect information about you directly from you, or from our Business Users, Financial Partners, and other third parties for the same purposes. Furthermore, to protect our Services, we may receive details such as IP addresses and other identifying data about potential security threats from third parties. Learn More. Such information helps us verify identities, conduct credit checks where lawfully permitted, and prevent fraud. Additionally, we might use technology to evaluate the potential risk of fraud associated with individuals seeking to procure our Business Services or arising from attempted transactions by an End Customer or End User with our Business Users or Financial Partners.
  • Compliance with Legal Obligations. We use Personal Data to meet our contractual and legal obligations related to anti-money laundering, Know-Your-Customer (“KYC”) laws, anti-terrorism activities, safeguarding vulnerable customers, export control, and prohibition of doing business with restricted persons or in certain business fields, among other legal obligations. For example, we may monitor transaction patterns and other online signals and use those insights to identify fraud, money laundering, and other harmful activity that could affect Stripe, our Financial Partners, End Users, our Business Users and others. Learn More. Ensuring safety, security, and compliance for our Services is a key priority for us, and collecting and utilizing Personal Data is crucial to this effort.
  • Minors. Our Services are not directed to children under the age of 13, and we request that they do not provide Personal Data to seek Services directly from Stripe. In certain countries, we may impose higher age limits as required by applicable law.

c. Sharing of Personal Data.

Besides the sharing of Personal Data described above, we share Personal Data in the ways listed below:

  • Stripe Affiliates. We share Personal Data with other Stripe-affiliated entities for purposes identified in this Policy.
  • Service Providers or Processors. In order to provide, communicate, market, and advertise our Services, we depend on service providers. These providers offer critical services spanning from providing cloud infrastructure, conducting analytics for the assessment of speed, accuracy, and/or security of our Services, verifying identities, to providing customer service and audit functions. We authorize these service providers to use or disclose the Personal Data we make available to them to perform services on our behalf and comply with relevant legal obligations. We mandate these service providers to contractually commit to ensuring the security and confidentiality of the Personal Data they process on our behalf. The majority of our service providers are based in the European Union, the United States of America, and India. Learn More.
  • Financial Partners. We share Personal Data with certain Financial Partners to provide Services to Business Users seeking such Services as well as offer certain Services in conjunction with these Financial Partners. For instance, we share certain Personal Data about Representatives, such as loan repayment data and contact information, with institutional investors who purchase or provide credit that’s secured through the Capital loans we’ve extended to the Business Users they are associated with.
  • Others with Consent. In some situations, we may not offer a service, but instead refer you to others (like professional service firms that we partner with to deliver the Atlas Service). In these instances, we will disclose the identity of the third party and the information to be shared with them, and seek your consent to share the information.
  • Corporate Transactions. If we enter or intend to enter a transaction that modifies the structure of our business, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or part of our business, assets, or stock, we may share Personal Data with third parties in connection with such transaction. Any other entity that buys us or part of our business will have the right to continue to use your Personal Data, but subject to the terms of this Policy.
  • Compliance and Harm Prevention. We share Personal Data when we believe it is necessary to comply with applicable law; to abide by rules imposed by Financial Partners in connection with the use of their payment method; enforce our contractual rights; secure and protect the Services, rights, privacy, safety, and property of Stripe, you, and others, including against malicious or fraudulent activity; and to respond to valid legal requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include authorities outside your country of residence.

For purposes of the General Data Protection Regulation and other applicable data protection laws, we rely on a number of legal bases to process your Personal Data. Learn More. For some jurisdictions, there may be additional legal bases, which are outlined in the Jurisdiction-Specific Provisions section below.

  • a. Contractual and Pre-Contractual Business Relationships. We process Personal Data to enter into business relationships with prospective Business Users and End Users and fulfill our respective contractual obligations with them. These processing activities include:
    • Creation and management of Stripe accounts and Stripe account credentials, including the assessment of applications to initiate or expand the use of our Services;
    • Creation and management of Stripe Checkout accounts;
    • Accounting, auditing, and billing activities; and
    • Processing of payments and related activities, which include fraud detection, loss prevention, transaction optimization, communications about such payments, and related customer service activities.
  • b. Legal Compliance. We process Personal Data to verify the identities of individuals and entities to comply with obligations related to fraud monitoring, prevention, and detection, laws associated with identifying and reporting illicit and illegal activities, such as those under the Anti-Money Laundering (“AML”) and Know-Your-Customer (“KYC”) regulations, and financial reporting obligations. For example, we may be required to record and verify a Business User’s identity to comply with regulations designed to prevent money laundering, fraud, and financial crimes. These legal obligations may require us to report our compliance to third parties and subject ourselves to third party verification audits.
  • c. Legitimate Interests. Where allowed under applicable law, we rely on our legitimate business interests to process your Personal Data. The following list provides an example of the business purposes for which we have a legitimate interest in processing your data:
    • Detection, monitoring, and prevention of fraud and unauthorized payment transactions;
    • Mitigation of financial loss, claims, liabilities or other harm to End Customers, End Users, Business Users, Financial Partners, and Stripe;
    • Determination of eligibility for and offering new Stripe Services (Learn More);
    • Response to inquiries, delivery of Service notices, and provision of customer support;
    • Promotion, analysis, modification, and improvement of our Services, systems, and tools, as well as the development of new products and services, including enhancing the reliability of the Services;
    • Management, operation, and improvement of the performance of our Sites and Services, through understanding their effectiveness and optimizing our digital assets;
    • Analysis and advertisement of our Services, and related improvements;
    • Aggregate analysis and development of business intelligence that enable us to operate, protect, make informed decisions about, and report on the performance of our business;
    • Sharing of Personal Data with third party service providers that offer services on our behalf and business partners that help us in operating and improving our business (Learn More);
    • Enabling network and information security throughout Stripe and our Services; and
    • Sharing of Personal Data among our affiliates.
  • d. Consent. We may rely on consent or explicit consent to collect and process Personal Data regarding our interactions with you and the provision of our Services such as Link, Financial Connections, Atlas, and Identity. When we process your Personal Data based on your consent, you have the right to withdraw your consent at any time, and such a withdrawal will not impact the legality of processing performed based on the consent prior to its withdrawal.
  • e. Substantial Public Interest. We may process special categories of Personal Data, as defined by the GDPR, when such processing is necessary for reasons of substantial public interest and consistent with applicable law, such as when we conduct politically-exposed person checks. We may also process Personal Data related to criminal convictions and offenses when such processing is authorized by applicable law, such as when we conduct sanctions screening to comply with AML and KYC obligations.

4. Your rights and choices

Depending on your location and subject to applicable law, you may have choices regarding our collection, use, and disclosure of your Personal Data:

a. Opting out of receiving electronic communications from us

If you wish to stop receiving marketing-related emails from us, you can opt-out by clicking the unsubscribe link included in such emails or as described here. We’ll try to process your request(s) as quickly as reasonably practicable. However, it’s important to note that even if you opt out of receiving marketing-related emails from us, we retain the right to communicate with you about the Services you receive (like support and important legal notices) and our Business Users might still send you messages or instruct us to send you messages on their behalf.

b. Your data protection rights

Depending on your location and subject to applicable law, you may have the following rights regarding the Personal Data we control about you:

  • The right to request confirmation of whether Stripe is processing Personal Data associated with you, and if so, request access to that Personal Data (Learn More);
  • The right to request that Stripe rectify or update your Personal Data if it’s inaccurate, incomplete, or outdated;
  • The right to request that Stripe erase your Personal Data in certain circumstances as provided by law (Learn More);
  • The right to request that Stripe restrict the use of your Personal Data in certain circumstances, such as while Stripe is considering another request you’ve submitted (for instance, a request that Stripe update your Personal Data);
  • The right to request that we export the Personal Data we hold about you to another company, provided it’s technically feasible;
  • The right to withdraw your consent if your Personal Data is being processed based on your previous consent;
  • The right to object to the processing of your Personal Data if we are processing your data based on our legitimate interests; unless there are compelling legitimate grounds or the processing is necessary for legal reasons, we will cease processing your Personal Data upon receiving your objection (Learn More);
  • The right not to be discriminated against for exercising these rights; and
  • The right to appeal any decision by Stripe relating to these rights by contacting Stripe’s Data Protection Officer (“DPO”) at dpo@stripe.com.

You may have additional rights, depending on applicable law, over your Personal Data. For example, see the Jurisdiction-specific provisions section under United States below.

c. Process for exercising your data protection rights

To exercise your data protection rights, visit our Link Privacy Center or contact us as outlined below.

5. Security and Retention

We make reasonable efforts to provide a level of security appropriate to the risk associated with the processing of your Personal Data. We maintain organizational, technical, and administrative measures designed to protect the Personal Data covered by this Policy from unauthorized access, destruction, loss, alteration, or misuse. Learn More. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. We encourage you to assist us in protecting your Personal Data. If you hold a Stripe account, you can do so by using a strong password, safeguarding your password against unauthorized use, and avoiding using identical login credentials you use for other services or accounts for your Stripe account. If you suspect that your interaction with us is no longer secure (for instance, you believe that your Stripe account’s security has been compromised), please contact us immediately. We retain your Personal Data for as long as we continue to provide the Services to you or our Business Users, or for a period in which we reasonably foresee continuing to provide the Services. Even after we stop providing Services directly to you or to a Business User that you’re doing business with, and even after you close your Stripe account or complete a transaction with a Business User, we may continue to retain your Personal Data to:

  • Comply with our legal and regulatory obligations;
  • Enable fraud monitoring, detection, and prevention activities; and
  • Comply with our tax, accounting, and financial reporting obligations, including when such retention is required by our contractual agreements with our Financial Partners (and where data retention is mandated by the payment methods you’ve used).

In cases where we keep your Personal Data, we do so in accordance with any limitation periods and record retention obligations imposed by applicable law. Learn More.

6. International Data Transfers

As a global business, it’s sometimes necessary for us to transfer your Personal Data to countries other than your own, including the United States. These countries might have data protection regulations that are different from those in your country. When transferring data across borders, we take measures to comply with applicable data protection laws related to such transfer. In certain situations, we may be required to disclose Personal Data in response to lawful requests from officials, such as law enforcement or security authorities. Learn More. If you are located in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, please refer to our Link Privacy Center for additional details. When a data transfer mechanism is mandated by applicable law, we employ one or more of the following:

  • Transfers to certain countries or recipients that are recognized as having an adequate level of protection for Personal Data under applicable law.
  • EU Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Addendum issued by the Information Commissioner’s Office. You can obtain a copy of the relevant Standard Contractual Clauses. Learn More.
  • Other lawful methods available to us under applicable law.

Stripe, Inc. complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce and as applicable. Learn More.

7. Updates and notifications

We may change this Policy from time to time to reflect new services, changes in our privacy practices or relevant laws. The “Last updated” legend at the top of this Policy indicates when this Policy was last revised. Any changes are effective the latter of when we post the revised Policy on the Services or otherwise provide notice of the update as required by law. We may provide you with disclosures and alerts regarding the Policy or Personal Data collected by posting them on our website and, if you are an End User or Representative, by contacting you through your Stripe Dashboard, email address and/or the physical address listed in your Stripe account.

8. Jurisdiction-specific provisions

  • Australia. If you are an Australian resident and dissatisfied with our handling of any complaint you raise under this Policy, you may consider contacting the Office of the Australian Information Commissioner.
  • Brazil. You may exercise your rights by contacting our DPO at dpo@stripe.com. Brazilian residents, for whom the Lei Geral de Proteção de Dados Pessoais (“LGPD”) applies, have rights set forth in Article 18 of the LGPD.
  • Canada. As used in this Policy, “applicable law” includes the Federal Personal Information Protection and Electronic Documents Act (PIPEDA), the Personal Information Protection Act, SBC 2003 c 63, in British Columbia, the Personal Information Protection Act, SA 2003 c P-6.5, in Alberta, and the Act Respecting the Protection of Personal Information in the Private Sector, CQLR c P-39-1 (Quebec Private Sector Act), in Quebec. Learn more. “Personal Data” includes “personal information” as defined under those laws.
    • Stripe’s Chief Privacy Officer is the person in charge of personal information, including under the Quebec Private Sector Act. You may contact them via email at privacy@stripe.com. When Stripe collects Personal Data belonging to Canadian (including Quebec) residents, it transfers that data to data centers in the United States. When Stripe relies on service providers to process Personal Data as described herein, those service providers may also be located outside of Canada or Quebec.
    • You have the right to request access or rectification of the Personal Data Stripe holds related to you or to withdraw any consent given to the processing of such personal data. You may exercise those rights by contacting Stripe’s Chief Privacy Officer at privacy@stripe.com. If you are an End Customer, you should contact the Business User with which you transacted to exercise your rights.
  • EEA and UK. You may exercise your rights by contacting our DPO at dpo@stripe.com. If you are a resident of the EEA or if Stripe Payments Europe Limited is identified as your data controller, and you believe our processing of your information contradicts the General Data Protection Regulation (GDPR), you may direct your questions or complaints to the Irish Data Protection Commission. If you are a resident of the UK, direct your questions or concerns to the UK Information Commissioner’s Office. Where Personal Data is used for regulated financial activities in Europe, Stripe Payments Europe Limited and Stripe’s local regulated entities are considered joint controllers. Learn More. You also have additional rights under the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Learn More.
  • India. In this Policy, “applicable law” includes the Digital Personal Data Protection Act (DPDPA) once the DPDPA is enacted. Further, the term “data controller” includes “data fiduciaries,” and the term “data subject” includes “data principal,” both as defined in the DPDPA. In some cases, and as permitted under the DPDPA, we may rely on “legitimate use” as a legal basis. For example, we do so when you voluntarily provide your Personal Data to us. “Consent Managers” as defined under the DPDPA may submit a request to revoke or provide consent using the methods described in the Contact Us section below, or as set out in the following paragraph, or via other means made available by Stripe in the future. We may ask for proof of authorization and identity before processing such a request. In certain cases, you may be asked to consent to the collection and processing of your Aadhaar number by Stripe India Private Limited and/or its third party verification partner(s). The purpose of this collection is to facilitate the identification verification process as required under applicable laws. Your provision of Aadhaar details is purely voluntary, and you may provide other identification documents as may be accepted by us from time to time. You will not be denied service merely for not submitting Aadhaar details. If you have any questions or complaints regarding the processing of your Personal Data in India, or if you want to receive this Policy or communicate with us about privacy in one of India’s official languages, please contact our Nodal and Grievance OfficerLearn More. Alternatively, you may contact our DPO at dpo@stripe.com. If we are unable to address your complaint or grievance, you have the right to escalate the matter to the Data Protection Board of India.
  • Indonesia. In this Policy, “applicable law” includes Law No. 11 of 2008 as amended by Law No. 19 of 2016 on Electronic Information and Transactions, Government Regulation No. 71 of 2019 on the Implementation of Electronic Systems and Transactions, and Minister of Communication and Informatics Regulation No. 20 of 2016 on Personal Data Protection in Electronic Systems, and from September 2024, Law No. 27 of 2022 concerning Personal Data Protection (PDP Law). If you have any questions or complaints about this Policy, please contact our DPO at dpo@stripe.com.
  • Japan. In this Policy, “applicable law” includes the Act on the Protection of Personal Information (APPI). When we transfer Personal Data of data subjects in Japan to jurisdictions not recognized as ‘adequate’ by the Personal Information Protection Commission, we enter into written agreements with any third parties located outside of Japan. These written agreements provide rights and obligations equivalent to those provided under the Japanese Act on the Protection of Personal Information. For more information on how we ensure that third parties protect your data and where your data is located, please see above or contact us as described below. For a description of foreign systems and frameworks that may affect the implementation of equivalent measures by the third party, see here. In some cases, and as permitted under the APPI, we may rely on “public interest” as a legal basis, such as fraud detection and loss prevention.
  • Malaysia. If you have any questions or complaints about this Policy, please contact our DPO at dpo@stripe.com.
  • Singapore. In this Policy, “applicable law” includes the Personal Data Protection Act 2012 (PDPA) (No. 26 of 2012) as amended from time to time. In some cases, and as permitted under the PDPA, we may rely on “deemed consent” as a legal basis. For example, we do so when you voluntarily provide your personal data to us. If you have any questions or complaints about this Policy, please contact our DPO at dpo@stripe.com.
  • Switzerland. In this Policy, “applicable law” includes the Swiss Federal Act on Data Protection (FADP), as revised. To exercise your rights under the FADP, please contact our DPO at dpo@stripe.com. You may also have additional rights under the Swiss-U.S. Data Privacy Framework when it comes into force. Learn More.
  • Thailand. In this Policy, “applicable law” includes the Personal Data Protection Act 2019 (PDPA). If we rely on certain legal bases (such as “legal obligation” or “contractual necessity” and you do not provide us with your Personal Data, we may not be able to lawfully provide you services. If you have any questions or complaints about this Policy, please contact our DPO at dpo@stripe.com.
  • United States. If you are a consumer located in the United States (“US”), we process your personal information in accordance with US privacy laws, including the California Consumer Privacy Act ( “CCPA”), Colorado Privacy Act, Connecticut Act Concerning Personal Data Privacy and Online Monitoring, Florida Digital Bill of Rights, Montana Consumer Data Privacy Act, Oregon Consumer Privacy Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act. For specific details, please see here. Stripe uses cookies, including advertising cookies, as described in our Cookie Policy.
  • Your Rights and Choices. As a US consumer and subject to certain limitations under US privacy laws, you may have choices regarding our use and disclosure of your Personal Data (learn more about data subject rights metrics). In addition to the above rights, other rights include:
    • Exercising the right to know: You have a right to request additional information about the categories of personal information collected, sold, disclosed, or shared; purposes for which this personal information was collected, sold, or shared; categories of sources of personal information; and categories of third parties with whom we disclosed or shared this personal information.
    • Exercising the right to opt-out from a sale or sharing: We do not transfer your personal data to third parties in exchange for payment. However, as noted above, we may provide the data to third party partners, such as advertising partners, analytics providers, and social networks, who assist us in advertising our products and Services to you. Because these third parties may use the data Stripe provides for their own purposes, Stripe’s provision of data to these parties may be considered a data “sale” or “sharing” as those terms are defined under the CCPA and other applicable US privacy laws. You can opt out of targeted advertising and any related data “sales” or “sharing” here.
    • Exercising the right to limit the use or sharing of Sensitive Personal Information: We do not sell or share Sensitive Personal Information as defined by US privacy laws and have not done so in the past 12 months. Learn more about our collection and use of Sensitive Personal Information over the last 12 months here.
    To submit a request to exercise any of the rights described above, please contact us using the methods described in the Contact Us section below. Please note that rights under some U.S. state laws do not apply to Personal Data we collect, process, and disclose when you act as a consumer to obtain financial products or services from Stripe for individual or household purposes. The federal Gramm-Leach Bliley Act may govern how Stripe shares and protects that data instead. See our US Consumer Privacy Notice below for more information. We will verify your request by asking you to send it from the email address associated with your account or requiring you to provide information necessary to verify your identity, including name, address, transaction history, photo identification, and other information associated with your account. You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Your agent may submit a request on your behalf by contacting us using the methods described in the Contact Us section below. We may still require you to directly verify your identity and confirm that you gave the authorized agent permission to submit the request.
  • Global Privacy Control signals. Stripe honors the Global Privacy Control (GPC) opt-out preference signals. Learn More.

9. Contact us

If you have any questions or complaints about this Policy, please contact us. If you are an End Customer (i.e., an individual doing business or transacting with a Business User), please refer to the privacy policy or notice of the Business User for information regarding the Business User’s privacy practices, choices and controls, or contact the Business User directly.

10. US Consumer Privacy Notice

The following Consumer Privacy Notice applies to you if you are an individual who resides in the United States and obtains financial services from Stripe primarily for your own personal family or household purposes. Last updated: January 16, 2024

FACTSWHAT DOES STRIPE DO WITH YOUR PERSONAL INFORMATION?
Why?Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?The types of personal information we collect and share depend on the product or service you have with us. This information can include:Social Security NumberContact detailsAccount balances and transaction historyPayment, transaction, and purchase information and historyWhen you are no longer our customer, we continue to share your information as described in this notice.
How?All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Stripe chooses to share; and whether you can limit this sharing.
Reasons we can share your personal informationDoes Stripe Share?Can you limit this sharing
For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureausYesNo
For our marketing purposes – to offer our products and Services to youYesNo
For joint marketing with other financial companiesYesNo
For our affiliates’ everyday business purposes – information about your transactions and experiencesYesNo
For our affiliates’ everyday business purposes – information about your creditworthinessNoWe don’t share
For our affiliates to market to youNoWe don’t share
For nonaffiliates to market to you if you are a Link userYesYes
For nonaffiliates to market to you if you are a Financial Connections userNoWe don’t share
To limit our sharingLogin to your Link account at app.link.com/account and toggle off data sharing from the Account menu. Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we continue to share your information as described in this notice. However, you can contact us at any time to limit our sharing.
Questions?Contact us at privacy@stripe.com or visit us at https://support.link.com
Who we are
Who is providing this notice?Stripe, Inc., Stripe Payments Company, and their affiliates that provide consumers services in the U.S.
What we do
How does Stripe protect my personal information?To protect your personal information from unauthorized access, destruction, loss, alteration, or misuse we use security measures to comply with federal law. These measures include computer safeguards and secured files and buildings. We impose access controls along with ongoing monitoring to prevent data misuse, and we require our service providers to take similar steps to protect your information.
How does Stripe collect my personal information?We collect your personal information, for example, when youopen a Link account;ask Stripe to process a payment for goods or services;provide bank account information to Stripe using Financial ConnectionsWe also collect your personal information from others, such as affiliates or other companies.
Why can’t I limit all sharing?Federal law gives you the right to limit onlysharing for affiliates’ everyday business purposes — information about your creditworthinessaffiliates from using your information to market to yousharing for nonaffiliates to market to you.State laws and individual companies may give you additional rights to limit sharing. See the Other Important Information section below for more information on your rights under state law.
What happens when I limit sharing for an account I hold jointly with someone else?Your choices will apply to everyone on your account.
Definitions
AffiliatesCompanies related by common ownership or control. They can be financial and nonfinancial companies.Our affiliates include companies operating under the Stripe name, such as Stripe Payments Europe, Limited and Stripe Payments UK Ltd.
NonaffiliatesCompanies not related by common ownership or control. They can be financial and nonfinancial companies.Nonaffiliates with which we share personal information include service providers that perform services or functions on our behalf, Business Users with which you choose to transact, partners with which we share data to provide you with services, and advertising partners, analytics providers, and social networks, who assist us in advertising our Services to you.
Joint MarketingA formal agreement between non-affiliated financial companies that together market financial products or services to you.Our joint marketing partners include financial companies we partner with to provide you with financial services.
Other important information
Vermont: If your account with us is associated with a Vermont billing address, we will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures. For joint marketing, we will only disclose your name, contact information, and information about your transactions. Additional information concerning our privacy policies can be found in our Privacy Policy and Link Privacy CenterCalifornia: If your account with us is associated with a California billing address, we will not disclose Personal Data we collect about you except to the extent permitted under California law. For instance, we may disclose your Personal Data as necessary to process transactions or provide products and services you request, at your instruction, as required for institution risk control, and to safeguard against fraud, identity theft, and unauthorized transactions.