PayPal
PayPal's legal terms give the company sweeping control over your money, your data, and your rights as a user, while offering you very little protection in return. Your funds are not bank-insured, can be frozen indefinitely, and earn interest only for PayPal; your account can be closed or restricted by automated systems without human review; and you cannot sue PayPal in court or join a class action to challenge any of this. PayPal collects an extensive amount of personal data — including biometrics, precise location, and inferred financial profiles — retains it for up to 10 years after you leave, shares it with merchants, partners, and authorities, and uses it to train AI systems, all by default. The terms can change with minimal notice and your continued use counts as acceptance, meaning the rules governing your money and privacy can shift without you ever actively agreeing.
Last analyzed
Heads up: this analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original document before you agree — see our Terms.
Clause-by-clause breakdown
Every clause we flagged in PayPal's agreement, with what it means for you.
You cannot sue PayPal in court or join a class action.
“These terms include an agreement to resolve most disputes by arbitration on an individual basis, a class action waiver, and a jury trial waiver. In arbitration, there is less discovery and appellate review than in court.”
Quoted verbatim from the agreement What this means: If you have a dispute with PayPal, you almost certainly cannot sue them in court or join a class-action lawsuit. Instead, you must go through private arbitration, where there is less ability to gather evidence and no meaningful appeal process. This heavily favors PayPal, which has far more experience and resources in arbitration than individual users.
What you can do: You may opt out of the arbitration agreement — the Balance Account terms state you have 30 days from first agreeing to do so. Check the Arbitration Agreement section of the user agreement for the opt-out procedure and act quickly.
PayPal can change terms anytime; continued use means you agree.
“By continuing to use our services after any changes to this user agreement or any of the other applicable terms, agreements, or policies, you agree to abide and be bound by those changes. If you do not agree with any changes to this user agreement, you may close your account.”
Quoted verbatim from the agreement What this means: PayPal can change the rules of your agreement at any time. If you keep using PayPal after the changes take effect, you are legally bound by the new terms — even if you never read them. Your only alternative is to close your account, which may not be practical if you have funds or pending transactions.
What you can do: Monitor PayPal's Policy Updates page regularly. If you disagree with a change, you must close your account before the effective date to avoid being bound by the new terms.
PayPal keeps your data for 10 years after account closure.
“We retain Personal Information for as long as needed or is permitted in context of the purpose for which it was collected and consistent with applicable law. Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end, unless we need to keep it longer to the extent permitted by applicable law, such as: When consistent with a legal obligation to which we are subject, or when permitted under applicable law, such as under applicable bankruptcy laws and AML obligations. In connection with litigation, investigations, audit and compliance practices, or to protect against legal claims.”
Quoted verbatim from the agreement What this means: PayPal keeps your personal data for the entire time you have an account, then for an additional 10 years after you close it. On top of that, they can extend retention further for litigation, compliance, or other permitted purposes — meaning your data could be held indefinitely. This is a very long retention window for a payment service.
What you can do: Closing your account starts the clock, but you cannot force deletion within the 10-year window. Be aware that data submitted to PayPal is effectively retained for over a decade.
PayPal shares your shopping data with merchants by default.
“For our PayPal customers, we may also disclose your Personal Information to Partners and Merchants that you and we interact with to help ourselves and Partners and Merchants personalize services and offers so you can have a better and more relevant experience. Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like. Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. To opt-out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences, log into your PayPal account and edit your preferences in the Data and Privacy setting.”
Quoted verbatim from the agreement What this means: PayPal shares your purchase history, preferences, sizes, and styles with partner retailers and merchants to personalize ads and offers — and this sharing is opt-out, not opt-in, for US users. This means it was already happening unless you actively turned it off. The data shared goes beyond what's needed to complete a transaction.
What you can do: Log into your PayPal account, go to Data and Privacy settings, and opt out of personal information sharing with Partners and Merchants for personalized shopping experiences.
Your personal data is used to train PayPal's AI models.
“We may use Personal Information to train our artificial intelligence (AI) models that power our Services and help us deliver more secure, efficient, and personalized services.”
Quoted verbatim from the agreement What this means: PayPal uses your personal information — including transaction history, preferences, and behavioral data — to train its AI models. There is no opt-out described for this use, and it is framed as a standard part of service delivery rather than an optional feature.
What you can do: There is no disclosed opt-out for AI training use of your data. If this concerns you, contact PayPal's privacy team to inquire about your rights under applicable law.
Algorithms can restrict or close your account automatically.
“Automated Decision Making. PayPal uses Automated Decision Making technology to make assessments or decisions, including related to risk, fraud and creditworthiness, where permitted and in accordance with applicable law. Our Automated Decision Making technology may use profiling techniques to evaluate personal aspects about you, including to analyze or predict your economic situation, reliability and/or behavior. This enables us to assess, for example, whether you display traits indicating possible credit or financial risk, money laundering or fraudulent activity, that are inconsistent with any submissions you have made to us, or that suggest you have hidden your real identity. In making an Automated Decision, PayPal may process Users' Personal Information. If we determine that you pose a credit, fraud, money laundering or other risk, we may refuse to provide new services to you, stop providing services you currently use, or place limits or restrictions on the services you use.”
Quoted verbatim from the agreement What this means: PayPal's automated systems can freeze, restrict, or terminate your account based on algorithmic profiling — with limited human review. If the system flags you as a risk, you could lose access to your funds or account without a human making that call. US users have no opt-out right for this under current US law.
What you can do: If your account is restricted by an automated decision, contact PayPal to request a human review. Outside the US, you may have a legal right to contest automated decisions.
Business accounts get only 5 days' notice before term changes.
“For business accounts, notice will include posting information about the changes on our Policy Updates page or providing information about the changes by other written means (which may include email). If you accepted this user agreement prior to us providing notice of the changes on the Policy Updates page or by other written means, then such notice will be provided at least 5 days before the applicable effective date.”
Quoted verbatim from the agreement What this means: Business account holders get as little as 5 days' notice before significant changes to the agreement take effect. This is a very short window to review changes, decide whether to accept them, and take action (such as withdrawing funds and closing the account) if you disagree.
What you can do: If you hold a business account, subscribe to PayPal's Policy Updates page notifications and check them frequently so you are not caught off guard by short-notice changes.
PayPal earns interest on your money but pays you none.
“PayPal owns the interest or other earnings on these investments. However, the claim against PayPal represented by funds held in your Balance Account is not secured by these investments and you do not have any ownership interest (either legal or beneficial) in these investments. These pooled amounts are held apart from PayPal's corporate funds, and PayPal will neither use these funds for its operating expenses or any other corporate purposes nor will it voluntarily make these funds available to its creditors in the event of bankruptcy. You will not receive any interest or other return on the funds held with PayPal.”
Quoted verbatim from the agreement What this means: PayPal pools your money with other users' funds and invests it, earning interest — but you receive none of that interest. You also have no ownership stake in those investments. PayPal profits from holding your money while you earn nothing on it.
What you can do: Transfer funds out of PayPal to an interest-bearing bank or savings account as soon as possible to earn a return on your money.
Your PayPal balance is not FDIC-insured and could be lost.
“Any funds you hold in your business account represent unsecured claims against PayPal. PayPal is not a bank, does not take deposits and is not FDIC insured.”
Quoted verbatim from the agreement What this means: Money sitting in a PayPal business account is not protected by FDIC insurance (the government guarantee that covers bank deposits up to $250,000). If PayPal were to fail financially, your balance would be an unsecured claim — meaning you'd be in line with other creditors and might not recover your funds.
What you can do: Avoid keeping large balances in your PayPal account. Transfer funds to an FDIC-insured bank account promptly after receiving them.
PayPal can pull your credit report repeatedly without extra notice.
“You also consent to PayPal obtaining your personal and/or business credit report from a credit reporting agency at account opening and whenever we reasonably believe there may be an increased level of risk associated with your business account.”
Quoted verbatim from the agreement What this means: By opening a business account, you give PayPal ongoing permission to pull your credit report whenever they decide there is elevated risk — not just at sign-up. This can happen repeatedly without additional notice to you, and each hard inquiry may affect your credit score.
What you can do: Be aware that opening a PayPal business account grants this ongoing consent. Monitor your credit report for PayPal inquiries via annualcreditreport.com.
PayPal can prevent you from closing your account in many situations.
“In certain cases, you may not close your PayPal account, including: If you have a pending transaction or an open dispute or claim. If your PayPal account has a negative balance. If your PayPal account is subject to a hold, limitation or reserve.”
Quoted verbatim from the agreement What this means: PayPal can block you from closing your account if there is any pending transaction, dispute, negative balance, or account limitation. Since PayPal can place holds and limitations at its discretion, this means your ability to exit the service can be delayed indefinitely in some circumstances.
What you can do: Resolve all disputes and clear any negative balance before attempting to close your account. If a hold is placed, contact PayPal support to understand the timeline for its removal.
PayPal can freeze your funds for an unspecified period of time.
“To protect us and our users from loss, we may delay a withdrawal, in certain situations, including if we need to confirm that you have authorized the withdrawal or if other payments to your PayPal account have been subject to a reversal (for example, as a result of a chargeback, bank reversal, or dispute by a buyer). If we place a limitation on your PayPal account, a payment is subject to a hold, or your account or an associated account has a negative balance in any currency while a withdrawal from your PayPal account is pending, you will have to reinitiate the withdrawal once the limitation or hold has been lifted, or negative balance is fully paid off.”
Quoted verbatim from the agreement What this means: PayPal can delay or block your access to your own money for an unspecified period of time. If a hold or limitation is placed on your account, you cannot withdraw funds until it is lifted — and the terms do not specify a maximum hold duration. This can leave you without access to your money when you need it.
What you can do: Avoid keeping large balances in PayPal. If a hold is placed, contact PayPal support immediately and escalate through their Resolution Center or, if necessary, file a complaint with the CFPB.
A single payment choice silently becomes your default for all future purchases.
“If you have not chosen a preferred payment method for online transactions, when you choose a credit card (other than PayPal Credit), debit card, bank account, or balance with PayPal during a one-time online purchase, you are also providing your express consent to make that your preferred payment method for future one-time online purchases.”
Quoted verbatim from the agreement What this means: If you haven't set a preferred payment method, simply choosing a payment method for a single purchase automatically sets it as your default for all future purchases. You may not realize this is happening, which could lead to unexpected charges to a card or account you didn't intend to use regularly.
What you can do: Explicitly set your preferred payment method in your PayPal account settings to avoid having it set automatically by a one-time transaction choice.
PayPal infers your income and creditworthiness from your activity.
“Inferred data: Such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment, your preferences and shopping behavior, which we may infer based on your transactions and interactions with our Services, ads and offers or with our Partners and Merchants.”
Quoted verbatim from the agreement What this means: PayPal builds inferred profiles about you — including estimated income, creditworthiness, and shopping behavior — derived from your activity. These inferences can then be used for automated decisions (like account restrictions) or shared with partners. You don't directly provide this data; PayPal creates it about you.
What you can do: You can request a copy of your data (including inferences) through your account's Data and Privacy settings or by contacting PayPal customer service.
PayPal collects face scans and voice prints, kept 3 years post-closure.
“Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account, including, for example, to verify your identity before you access accounts and Services, recover passwords, update profile information, manage payments and payment methods, lift account limitations, and initiate cryptocurrency transfers. We retain biometric data for as long as needed or permitted given the purpose for which it was collected and no more than 3 years after your account closes, unless otherwise required by applicable law.”
Quoted verbatim from the agreement What this means: PayPal can collect face scans, voice prints, and photo ID for identity verification. This biometric data is retained for up to 3 years after your account closes. Biometric data is among the most sensitive personal data because it cannot be changed if compromised.
What you can do: Only consent to biometric collection when strictly necessary. After closing your account, you can request deletion of biometric data, though PayPal may retain it for up to 3 years.
AI tools can autonomously act on your behalf using payment data.
“Agentic AI Tools require access to certain information to function effectively. When you use these tools, they will have access to your Personal Information, including queries, preferences, interests, purchase history, and payment information. PayPal is committed to offering innovative and personalized experiences, and we may, directly or through our trusted partners, provide you with access to Agentic AI tools ("Agentic AI Tools"). These AI tools are designed to operate with a degree of autonomy, enabling them to perform tasks, make recommendations, and even initiate actions on your behalf, all while learning from your interactions.”
Quoted verbatim from the agreement What this means: PayPal's 'Agentic AI' tools can autonomously take actions on your behalf — including initiating transactions — using your payment information and purchase history. These tools learn from your interactions over time. The policy warns users not to rely on them for significant financial decisions, but they still have access to sensitive payment data.
What you can do: Avoid enabling Agentic AI features unless you fully understand what actions they can take. Review your account settings to see if these tools are active.
PayPal may share your data with authorities without telling you.
“We may disclose Personal Information with authorities if compelled by a subpoena, court order, or similar legal procedure, when necessary to comply with law, or where the disclosure of Personal Information is reasonably necessary to prevent physical harm or financial loss, report suspected illegal activity, or investigate violations of the relevant agreement, or as otherwise required by law. Such authorities include courts, governments, law enforcement, and regulators. We may also be required to provide other third parties information about your use of our Services, for example, to comply with card association rules, to investigate or enforce violations of our user agreement, or to prevent physical harm or illegal activity. In some cases, PayPal may not be permitted to provide you with information about such disclosures.”
Quoted verbatim from the agreement What this means: PayPal shares your data with law enforcement and government agencies when legally required, but also proactively when it believes disclosure is 'reasonably necessary' to prevent harm or report suspected illegal activity — without necessarily waiting for a court order. Critically, PayPal may not tell you when this happens.
What you can do: There is no opt-out for law enforcement disclosures. Be aware that PayPal may share your financial transaction data with authorities without notifying you.
PayPal tracks your precise GPS location while you're logged in.
“We collect precise geolocation data from Users while they are logged into their financial account. If you agree to let us track your precise geolocation, we can customize our Services by personalizing language and content such as providing location-based options, functionality or offers, ads and search results. Even if you don't allow us to track your precise location, we may still use your address to send you location-based options recommended by businesses that are near your address. In addition, we will use precise geolocation to enhance the security of the Sites and Services.”
Quoted verbatim from the agreement What this means: PayPal collects your precise GPS location whenever you are logged into your financial account — this is not just IP-based location. Even if you deny location permission, PayPal still uses your address for location-based targeting. Precise geolocation is classified as sensitive personal information under many privacy laws.
What you can do: Revoke location permissions for the PayPal app in your device settings. Note that PayPal will still use your registered address for location-based features even without GPS access.
Using PayPal counts as consent to international data transfers.
“By using our Sites and Services, where permitted under applicable privacy laws, you agree to your Personal Information being transferred to other countries, including countries that have different data protection rules than your country.”
Quoted verbatim from the agreement What this means: Simply using PayPal's services counts as consent to having your data transferred internationally, including to countries with weaker privacy protections. This is a consent-by-use clause that doesn't require you to affirmatively agree to cross-border data transfers.
What you can do: If you are in the EU or UK, you have stronger protections under GDPR for international transfers. You can contact PayPal to ask about the specific safeguards (e.g., standard contractual clauses) applied to your data.
PayPal ignores your browser's Do Not Track setting.
“Do Not Track Some web browsers have an optional setting called "Do Not Track" ("DNT") that lets you opt-out of being tracked by advertisers and some third parties. Because many of our services won't function without tracking data, we do not respond to DNT settings.”
Quoted verbatim from the agreement What this means: PayPal explicitly ignores your browser's Do Not Track signal. Even if you've configured your browser to request no tracking, PayPal will continue to track you across the web. This removes a basic privacy control that users expect to be honored.
What you can do: Use browser extensions like uBlock Origin or Privacy Badger to block third-party trackers, as PayPal will not honor DNT signals on its own.
Your transaction data is aggregated and shared with partner businesses.
“We may share those insights with third parties such as our Partners and Merchants to help improve their products and services. We may use your transaction and experience data on an aggregated basis to generate business insights.”
Quoted verbatim from the agreement What this means: PayPal aggregates your transaction data to generate business insights and then shares those insights with partner companies and merchants. While described as 'aggregated,' this still involves your behavioral and transaction data being used to benefit third parties commercially.
What you can do: There is no specific opt-out described for aggregated insight sharing. You can limit data collection generally through your Data and Privacy settings.
Balance Account users also lose class-action rights, with a 30-day opt-out.
“These terms and conditions include Dispute Resolution provisions that include an agreement to resolve certain disputes in arbitration on an individual basis (Arbitration Agreement), a class action waiver, and jury trial waiver. In arbitration, cases are decided by arbitrators, who apply the same law a court would apply, but there is less discovery than in court, class or representative proceedings or relief aren't allowed, there is no appellate review, and review of the arbitrator's decision by a court is limited. If a case is part of a mass arbitration, special procedures will apply. You can opt out of the Arbitration Agreement by following the Opt-Out Procedure in the Arbitration Agreement within 30 days of your first agreeing to an Arbitration Agreement with us.”
Quoted verbatim from the agreement What this means: The Balance Account terms confirm the arbitration and class-action waiver, and add that if many users file similar claims simultaneously (a 'mass arbitration'), special procedures apply that could further limit your options. There is a 30-day opt-out window from when you first agree.
What you can do: If you open a Balance Account, opt out of the Arbitration Agreement within 30 days by following the Opt-Out Procedure described in the agreement.
You must cancel recurring payments 3 business days before the next charge.
“If you have a personal account, you may cancel a recurring automatic payment 3 Business Days or more before the date of the next scheduled payment from your account settings or by contacting us through the PayPal Help Center, or by calling PayPal at (888) 221-1161. If you order us to stop one of these payments 3 Business Days or more before the transfer is scheduled, and we do not do so, we will be liable for your losses or damages.”
Quoted verbatim from the agreement What this means: You can cancel recurring payments, but you must do so at least 3 business days before the next scheduled payment. If you cancel too close to the payment date, the payment may still go through. PayPal does commit to liability if they fail to stop a payment after a valid cancellation request.
What you can do: Cancel recurring payments well in advance — at least 3 business days before the next scheduled date — through your account settings or by calling PayPal at (888) 221-1161.
You can download a copy of your PayPal data anytime.
“Data and privacy settings Keep track of your privacy settings and permissions, update your personal and financial information, download a copy of your data from the app or online, and more in your data and privacy settings.”
Quoted verbatim from the agreement What this means: PayPal provides a self-service Data and Privacy settings panel where you can download a copy of your data directly from the app or website. This is a meaningful user-protective feature that goes beyond the minimum required by most privacy laws.
What you can do: Log into your PayPal account and visit Data and Privacy settings to download your data, review permissions, and manage your privacy choices.
Frequently asked questions
Is PayPal's Terms & Conditions agreement fair?
- BeforeYouClick grades PayPal E on an A–E scale, where A is the fairest. Its agreement contains 6 critical clauses, 15 warnings and 3 good practices.
What are the biggest problems with PayPal's terms?
- The most serious clauses we flagged are: Forced Arbitration and Class Action Waiver, Policy Changes Bind You Without New Consent and Data Kept 10 Years After You Leave.
How long does it take to read PayPal's terms?
- PayPal's agreement takes about 52 minutes to read in full, across 24 clauses we reviewed. The summary on this page covers the same ground in under a minute.
When was PayPal's agreement last analyzed?
- We last read PayPal's Terms & Conditions on October 1, 2026. Companies change their terms without notice, so check the original document for the current version.
Is this analysis legal advice?
- No. This analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original agreement before you agree to it.
More agreements to read
- PosteoProductivityGrade A
- Mullvad VPNSecurityGrade A
- MurenaSecurityGrade B
- TutaProductivityGrade B
- NordVPNSecurityGrade B
- TelegramMessagingGrade C