Data Report Card · PayPal
PayPal Data Report Card
D
5/12 Policy grade · PayPal Holdings, Inc.
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from PayPal's published policy; none has been tested (run by us) yet.
2Accessstated
Self-serve: Settings → Data & Privacy → "Download your data" (web and app) lets active personal-account users request a copy; some categories (IP, web-usage) require contacting support.
PayPal Help — how can I access my personal data? · accessed Jun 2026 ↗1Portabilitystated
PayPal provides a "Data Access Report" download but does not publicly specify a structured machine-readable (JSON/CSV) format in its help docs (scored conservatively as partial).
PayPal Help — access my personal data · accessed Jun 2026 ↗Connects to apps: No. PayPal's REST Transaction Search API is set up through a business-account developer dashboard and oriented to merchant reporting; a personal account holder's documented path to their own transaction history is the in-account "Download your data" request. PayPal — access my personal data · accessed Jun 2026 ↗
1Frictionstated
Active accounts can self-serve, but once an account is closed the self-service download is unavailable and only an offline/contact request works; no stated turnaround.
PayPal Help — access my personal data · accessed Jun 2026 ↗1Deletionstated
Erasure is request-based with eligibility steps (resolve limitations, clear balance); data is retained for the relationship plus a 10-year period and longer for legal/fraud obligations.
PayPal Help — how does data erasure work · accessed Jun 2026 ↗0Sells / sharesstated
PayPal discloses personal information to advertising platforms/third parties for personalized shopping (data collected after Nov 27, 2024) with only an in-account opt-out, and states it does not respond to Do Not Track / GPC-style signals.
PayPal Privacy Statement · accessed Jun 2026 ↗0Trains AIstated
Privacy Statement says PayPal "may use Personal Information to train our artificial intelligence (AI) models that power our Services" with no stated dedicated opt-out.
PayPal Privacy Statement · accessed Jun 2026 ↗PayPal has a strong self-serve in-account download for active accounts, but loses ground on closed-account access friction, a 10-year retention tail, ad-sharing without honoring DNT/GPC signals, and explicit AI-model training on personal data with no clear opt-out. Source-verified Jun 2026; all cells stated (read from published policy/support docs), none yet tested via live export.
Events
Breaches, policy changes, and export-format changes we’ve recorded at PayPal — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →
28 Sep 2026PayPal updated its US Privacy Statement on September 28, 2026. Its sharing table now says PayPal does not share your information with its affiliates so they can market to you; it said yes before. PayPal still shares with non-affiliates for marketing, and you can limit that in Data and Privacy settings. The update also adds PayPal World payments, which use data from third-party wallets and payment networks, and crypto services from PayPal Digital.policy change
On the events page →
Grade history
Every change to this company’s grade since it was first published, and why. All grade changes →
No changes since this grade was first published in Jun 2026.
How to request your data from PayPal
- Go to https://www.paypal.com/myaccount/privacy/privacyhub/data — PayPal's data-request entry point.
- Sign in → Data & Privacy → Download your data → Submit Request.
- Expected wait: not stated; offline request required after account closure — PayPal's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact PayPal — Privacy / Data Protection: https://www.paypal.com/us/privacy-center/home.
These steps reflect PayPal's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.