data report card

Data Report Card · PayPal

PayPal Data Report Card

PayPal Holdings, Inc.
Data
Practices
2Access1Portability1Friction1Deletion0Sells0Trains AI
=
D
5/12
Agent
Readiness
2Access 1Portability 0API access
=
C
3/6

Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?

Help me make a request →
Reviewed Jun 2026 · policies are checked weekly for changes  ·  stated — every cell is read from PayPal's published policy; none has been tested (run by us) yet.
2Accessstated
Self-serve: Settings → Data & Privacy → "Download your data" (web and app) lets active personal-account users request a copy; some categories (IP, web-usage) require contacting support.
PayPal Help — how can I access my personal data? · accessed Jun 2026 ↗
1Portabilitystated
PayPal provides a "Data Access Report" download but does not publicly specify a structured machine-readable (JSON/CSV) format in its help docs (scored conservatively as partial).
PayPal Help — access my personal data · accessed Jun 2026 ↗
1Frictionstated
Active accounts can self-serve, but once an account is closed the self-service download is unavailable and only an offline/contact request works; no stated turnaround.
PayPal Help — access my personal data · accessed Jun 2026 ↗
1Deletionstated
Erasure is request-based with eligibility steps (resolve limitations, clear balance); data is retained for the relationship plus a 10-year period and longer for legal/fraud obligations.
PayPal Help — how does data erasure work · accessed Jun 2026 ↗
0Sells / sharesstated
PayPal discloses personal information to advertising platforms/third parties for personalized shopping (data collected after Nov 27, 2024) with only an in-account opt-out, and states it does not respond to Do Not Track / GPC-style signals.
PayPal Privacy Statement · accessed Jun 2026 ↗
0Trains AIstated
Privacy Statement says PayPal "may use Personal Information to train our artificial intelligence (AI) models that power our Services" with no stated dedicated opt-out.
PayPal Privacy Statement · accessed Jun 2026 ↗
0API access — feeds Agent Readiness, not the /12stated
PayPal's REST Transaction Search API is set up through a business-account developer dashboard and oriented to merchant reporting; a personal account holder's documented path to their own transaction history is the in-account "Download your data" request.
PayPal — access my personal data · accessed Jun 2026 ↗
PayPal has a strong self-serve in-account download for active accounts, but loses ground on closed-account access friction, a 10-year retention tail, ad-sharing without honoring DNT/GPC signals, and explicit AI-model training on personal data with no clear opt-out. Source-verified Jun 2026; all cells stated (read from published policy/support docs), none yet tested via live export.

Events

Breaches, policy changes, and export-format changes we’ve recorded at PayPal — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →

No events on record for PayPal.

Grade history

Every change to this company’s grade since it was first published, and why. All grade changes →

No changes since this grade was first published in Jun 2026.

How to request your data from PayPal

  1. Go to https://www.paypal.com/myaccount/privacy/privacyhub/data — PayPal's data-request entry point.
  2. Sign in → Data & Privacy → Download your data → Submit Request.
  3. Expected wait: not stated; offline request required after account closure — PayPal's stated turnaround (we haven't independently timed a request yet).
  4. No self-serve option, or want a formal request? Contact PayPal — Privacy / Data Protection: https://www.paypal.com/us/privacy-center/home.

These steps reflect PayPal's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.

Help me make a request →