"Stripe's privacy practices present a high risk due to extensive data collection, including sensitive information, and broad sharing with third parties for advertising and transaction processing. The vague data retention policies further exacerbate these risks."
stripe Privacy Concerns & Scorecard
Stripe employs interest-based advertising and tracks user behavior across platforms, which can lead to privacy concerns.
Stripe collects a wide range of personal and financial information, including sensitive data such as biometric data and government IDs.
Data is shared extensively with third parties, including advertising partners and financial institutions, which increases the risk of misuse.
Data retention policies are vague, and certain data types are retained indefinitely or for extended periods.
Users have limited options for controlling their data, particularly regarding advertising and sharing.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Terms of Service Updates
Stripe Unacceptable Risk Policy moved and European terms reorganized
The 'Stripe Unacceptable Risk Policy (Europe)' has been moved from a Europe-specific subsection to a top-level regional policy without geographic qualifier. Additionally, a new 'User Notice—API Key Security' policy has been added to the Regional Regulatory Disclosures section. The removal of region-specific parentheticals suggests broader applicability of these policies.
Effective: November 18, 2025
New API Key Security Notice added
A new document 'User Notice—API Key Security' has been added to the Regional Regulatory Disclosures & Policies section. This appears to be a new user-facing notice regarding API key security practices, though the full content is not provided in this excerpt.
Effective: November 18, 2025
Why We Analyzed stripe
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.