Welcome to the Stripe Privacy Center
Stripe respects the privacy of everyone that engages with our platform, and we are committed to being transparent about our privacy processes and policies. We are a platform that enables millions of businesses, and in order to provide our services to our Business Users and End Users, we collect and process personal data.
The Stripe Privacy Center contains the answers to frequently asked questions about how we collect and use personal data, the rights that individuals have in relation to personal data held by Stripe, and how Stripe complies with international data protection laws.
All materials have been prepared for general information purposes only. The information presented is not legal advice, is not to be acted on as such, may not be current and is subject to change without notice.
Below is a list of terms that will help “you” navigate the Privacy Center:
“YOU”
MEANING
STRIPE EXAMPLES
Business User
Stripe provides services to entities (“Business Users”) who directly and indirectly provide us with “End Customer” Personal Data in connection with those Business Users’ own business and activities.
Stripe user or merchant
Platform User
Connect Accounts
End Customer
When you do business with, or otherwise transact with, a Business User (typically a merchant using Stripe Checkout, e.g. when you buy a pair of shoes from a merchant that uses Stripe for payment processing) but are not directly doing business with Stripe, we refer to you as an “End Customer.”
Individual using Identity
Cardholder using Checkout
End User
When you directly use an End User Service (such as when you sign up for Link, or make a payment to Stripe Climate in your personal capacity), for your personal use, we refer to you as an “End User.”
User of Link
Personal contributor to Stripe Climate
Representative
When you are acting on behalf of an existing or potential Business User (e.g. you are a founder of a company, or administering an account for a merchant who is a Business User), we refer to you as a “Representative.”
Beneficial owner
Shareholder, officer, director
Account representative
Visitor
When you visit a Site without being logged into a Stripe account or otherwise communicate with Stripe, we refer to you as a “Visitor.” (e.g. you send Stripe a message asking for more information because you are considering being a user of our products).
Stripe Sessions attendee
Stripe Site visitor
Contents
How We Collect, Disclose, and Use Personal Data
Stripe's Role in Managing Data
- Is Stripe acting as a data controller or a data processor?
- Which Stripe entities are involved?
How We Use Data
- What are Stripe’s data controller activities?
- How does Stripe use Personal Data to improve its products and Services?
- How does Stripe use Personal Data to prevent fraud?
- How does Stripe use personal data to train artificial intelligence models?
- How does Stripe use and share data to authenticate my transactions?
- Does Stripe collect precise location data?
- How does Stripe use Representative contact information to provide its Services?
- As a Stripe Business User and as a data controller, what does GDPR mean for me?
- As a Business User, what notice do I provide to my End Customers about Stripe?
Third Parties
- Who are Stripe’s sub-processors and how are they vetted?
- In addition to its sub-processors, what other third parties does Stripe share information with?
- Are there any jurisdictional nuances to Stripe’s use of service providers in verifying the identity of Stripe’s Business Users?