Data Report Card · PayPal
PayPal Data Report Card
PayPal Holdings, Inc.
Data
Practices
Practices
2Access1Portability1Friction1Deletion0Sells0Trains AI
=
D
5/12
Agent
Readiness
Readiness
2Access
1Portability
0API access
=
C
3/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from PayPal's published policy; none has been tested (run by us) yet.
2Accessstated
Self-serve: Settings → Data & Privacy → "Download your data" (web and app) lets active personal-account users request a copy; some categories (IP, web-usage) require contacting support.
PayPal Help — how can I access my personal data? · accessed Jun 2026 ↗1Portabilitystated
PayPal provides a "Data Access Report" download but does not publicly specify a structured machine-readable (JSON/CSV) format in its help docs (scored conservatively as partial).
PayPal Help — access my personal data · accessed Jun 2026 ↗1Frictionstated
Active accounts can self-serve, but once an account is closed the self-service download is unavailable and only an offline/contact request works; no stated turnaround.
PayPal Help — access my personal data · accessed Jun 2026 ↗1Deletionstated
Erasure is request-based with eligibility steps (resolve limitations, clear balance); data is retained for the relationship plus a 10-year period and longer for legal/fraud obligations.
PayPal Help — how does data erasure work · accessed Jun 2026 ↗0Sells / sharesstated
PayPal discloses personal information to advertising platforms/third parties for personalized shopping (data collected after Nov 27, 2024) with only an in-account opt-out, and states it does not respond to Do Not Track / GPC-style signals.
PayPal Privacy Statement · accessed Jun 2026 ↗0Trains AIstated
Privacy Statement says PayPal "may use Personal Information to train our artificial intelligence (AI) models that power our Services" with no stated dedicated opt-out.
PayPal Privacy Statement · accessed Jun 2026 ↗0API access — feeds Agent Readiness, not the /12stated
PayPal's REST Transaction Search API is set up through a business-account developer dashboard and oriented to merchant reporting; a personal account holder's documented path to their own transaction history is the in-account "Download your data" request.
PayPal — access my personal data · accessed Jun 2026 ↗PayPal has a strong self-serve in-account download for active accounts, but loses ground on closed-account access friction, a 10-year retention tail, ad-sharing without honoring DNT/GPC signals, and explicit AI-model training on personal data with no clear opt-out. Source-verified Jun 2026; all cells stated (read from published policy/support docs), none yet tested via live export.
How to request your data from PayPal
- Go to https://www.paypal.com/myaccount/privacy/privacyhub/data — PayPal's data-request entry point.
- Sign in → Data & Privacy → Download your data → Submit Request.
- Expected wait: not stated; offline request required after account closure — PayPal's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact PayPal — Privacy / Data Protection: https://www.paypal.com/us/privacy-center/home.
These steps reflect PayPal's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.