"Recurly presents a high-risk privacy profile (68/100) comparable to mainstream tech services like Netflix/Spotify, driven by extensive collection of sensitive financial and behavioral data, broad sharing with ad networks and marketing providers, and indefinite retention in archives despite user deletion requests. The combination of credit card data collection, Google Analytics tracking, automatic data transfer in acquisitions, and vague retention standards create significant security and control risks. Users have limited ability to prevent tracking or limit sharing without sacrificing core service functionality."
recurly Privacy Concerns & Scorecard
Recurly shares personal data broadly with ad networks, marketing service providers, and payment processors with minimal transparency about specific recipients or purposes.
Recurly collects extensive financial data including full credit card numbers and CVV codes, creating significant security and fraud risk exposure.
Recurly uses Google Analytics and other cross-site tracking technologies (cookies, web beacons, pixel tags, SDKs) that may constitute data sale under California law.
Vague retention standards based on 'as long as reasonably necessary' and 'legitimate business need' without concrete time periods for most data categories.
Withdrawing consent for data processing may limit or disable core service functionality, creating pressure to accept tracking.
Policy uses broad, ambiguous language like 'legitimate interests' and 'as long as necessary' without concrete definitions or examples.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, billing, customer support, and communications
Payment processing, billing, fraud prevention, and credit risk reduction
Service personalization, analytics, and targeted advertising
Service functionality, analytics, and cross-device tracking
Service improvement, analytics, and targeted marketing
User identification, behavioral tracking, and targeted advertising
Customer support and service improvement
Account linking and user identification
Security, fraud detection, and service operations
Cross-Platform Tracking
Recurly uses Google Analytics and tracking pixels/web beacons to monitor your activity across different websites and platforms. Cookies are placed to identify you as a unique visitor across sites. This cross-site tracking is shared with ad networks and marketing providers for targeted advertising purposes.
Tracking Methods:
Google Analytics
Third-party analytics service that plants cookies to identify users as unique visitors across different websites and tracks online activities
Cookies
First-party and third-party cookies used to track user behavior, preferences, and activity across websites
Web Beacons & Pixel Tags
Small tracking pixels and web beacons embedded in pages and emails to track user activity and conversions across platforms
Software Development Kits (SDKs)
SDKs integrated into applications to collect device data and behavioral information
Device Fingerprinting
Collection of device identifiers, browser information, and hardware characteristics to create unique device fingerprints
Third-Party Chat Service Recording
Third-party chat vendors (Zendesk, Qualified, Google Gemini) collect, monitor, and record all conversations including personal information shared during support interactions
AI & Data Training
recurly does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed recurly
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.