Plaid - Privacy Policy
US · 2026-07-06 · V1privacy
What actually changed
Needs verificationTwo public snapshots of the same policy are required to establish what changed. The available record is insufficient.
Change impact: not assessed. The risk score describes the assessed policy and does not measure the effect of this revision.
Summary
Two public snapshots of the same policy are required to establish what changed. The available record is insufficient.
Original AI screening
Automated analysis retained with the record; it may not accurately describe this revision. Use the change verification and version comparison to determine what changed.
Plaid collects extensive personal and financial data, uses it for AI training, and shares it broadly, but offers a portal for some user control.
- Extensive collection of personal, financial, and device data.
- User data is explicitly used to train Plaid's AI systems.
- Data is shared with app developers, financial institutions, and many service providers.
- Plaid Portal offers tools to view connections and delete data.
- Data is transferred internationally, including to the US, with safeguards.
What changed
Regional impact
Extensive data collection, AI training, and US data transfers raise significant GDPR concerns. Users face high risk regarding their financial privacy and control.
Broad data collection, sharing, and AI training raise concerns under state privacy laws like CCPA/CPRA. The biometric data notice is a positive step.
The extensive data collection, AI training, and international transfers pose significant privacy challenges across diverse global jurisdictions.