Plaid - Privacy Policy
EU · 2026-07-06 · V1privacy
What actually changed
Needs verificationTwo public snapshots of the same policy are required to establish what changed. The available record is insufficient.
Change impact: not assessed. The risk score describes the assessed policy and does not measure the effect of this revision.
Summary
Two public snapshots of the same policy are required to establish what changed. The available record is insufficient.
Original AI screening
Automated analysis retained with the record; it may not accurately describe this revision. Use the change verification and version comparison to determine what changed.
Plaid collects extensive financial data, uses it for AI training, and shares it broadly, but offers a portal for user control and data deletion.
- Extensive financial and personal data, including potential biometrics, is collected from various sources.
- Your data may be used to develop, train, test, and deploy artificial intelligence (AI) systems.
- Data is shared broadly with app developers, financial institutions, and service providers.
- Plaid Portal provides tools to view, manage, and delete your data connections and associated data.
- International data transfers occur, primarily to the US, with safeguards like SCCs and TIAs.
What changed
Regional impact
Extensive financial data collection and AI training raise GDPR concerns, especially regarding consent and legitimate interests. International transfers to the US are managed with SCCs and TIAs, but still require careful
The collection of sensitive financial data and potential biometric data (Illinois/Texas) triggers strong privacy rights under CCPA/CPRA. Users have rights to access, delete, and opt-out of sales/sharing, which Plaid Port
Individuals globally face risks due to extensive data collection, AI training, and broad sharing, despite Plaid's user controls. Understanding local data protection rights and exercising them is crucial for privacy.