Welcome to Stripe!
Stripe, Inc. and its associates (collectively “Stripe”, “we” and “us”) respect your privateness. We provide providers that allow platforms and retailers to run companies, and to soundly conduct on-line fee transactions.
This World Privateness Coverage describes the forms of Private Information we acquire by means of our funds services and products (“Companies”) and through our on-line presence, which embody our principal web site at stripe.com, in addition to providers and web sites that we allow Web customers to entry, comparable to Stripe Checkout and the Stripe Store (collectively, our “Websites”). This coverage additionally describes how we use Private Information, with whom we share it, your rights and decisions, and how one can contact us about our privateness practices. This coverage doesn’t apply to third-party web sites, merchandise, or providers, even when they hyperlink to our Companies or Websites, and you need to take into account the privateness practices of these third-parties rigorously.
This Privateness Coverage is supplied in a layered format. Click on by means of to leap to a particular part.
1. Overview
Stripe obtains Private Information about you from numerous sources to supply our Companies and to handle our Websites. “You” could also be a customer to one in every of our web sites, a person of a number of of our Companies (“Person” or “Stripe Person”), or a buyer of a Person (“Buyer”). If you’re a Buyer, Stripe will usually not acquire your Private Information instantly from you. Your settlement with the related Stripe Person ought to clarify how the Stripe Person shares your Private Information with Stripe, and when you’ve got questions on this sharing, then you need to direct these inquiries to the Stripe Person.
- Study extra
-
a. Web site guests.
In the event you go to or use our Websites, we could acquire Private Information. For instance, we acquire Private Information that you simply undergo us through on-line kinds and surveys, and while you contact us by e-mail.
b. Cost processing providers (Stripe as a knowledge processor).
As a processor of fee transactions and supplier of associated providers, we could acquire, use and disclose Private Information about Clients once we act as a Stripe Person’s service supplier. Stripe Customers are liable for ensuring that the Buyer’s privateness rights are revered, together with making certain applicable disclosures about third social gathering knowledge assortment and use. To the extent that we’re performing as a Stripe Person’s knowledge processor, we are going to course of Private Information in accordance with the phrases of our settlement with the Stripe Person and the Stripe Person’s lawful directions. If you’re a Buyer and wish to receive extra details about how a Stripe Person makes use of third social gathering providers like Stripe to course of your Private Information within the context of fee transactions, please contact the Stripe Person instantly or go to the Stripe Person’s privateness coverage.
c. Fraud prevention actions and actions for providing a compliant and safe platform.
The gathering and use of Private Information is essential in serving to us to make sure that our platform and providers are secure, safe and compliant. Within the context of fraud monitoring, prevention and detection providers, we could monitor insights and patterns of fee transactions and different on-line indicators to scale back the chance of fraud, cash laundering and different dangerous exercise for ourselves, our Customers and their Clients. The Stripe entities liable for the gathering and use of Private Information for fraud monitoring, detection and prevention actions are indicated beneath.
2. Private Information We Accumulate
a. Private Information that we acquire about you.
Private Information is any data that pertains to an recognized or identifiable particular person. The Private Information that you simply present on to us by means of our Websites will likely be obvious from the context during which you present the information. Particularly:
- Once you register for a Stripe account we acquire your full identify, e-mail handle, and account log-in credentials.
- Once you fill-in our on-line type to contact our gross sales crew, we acquire your full identify, work e-mail, nation, and anything you inform us about your undertaking, wants and timeline.
- Once you use the “Keep in mind Me” characteristic of Stripe Checkout, we acquire your e-mail handle, fee card quantity, CVC code and expiration date.
Once you reply to Stripe emails or surveys we acquire your e-mail handle, identify and some other data you select to incorporate within the physique of your e-mail or responses. In the event you contact us by cellphone, we are going to acquire the cellphone quantity you utilize to name Stripe. In the event you contact us by cellphone as a Stripe Person, we could acquire further data to be able to confirm your identification.
If you’re a Stripe Person, you’ll present your contact particulars, comparable to identify, postal handle, phone quantity, and e-mail handle. As a part of your enterprise relationship with us, we may additionally obtain monetary and private details about you, comparable to your date of delivery and authorities identifiers related to you and your group (comparable to your social safety quantity, tax quantity, or Employer Identification Quantity).
If you’re a Buyer, while you make funds or conduct transactions by means of a Stripe Person’s web site or utility, we are going to obtain your transaction data. Relying on how the Stripe Person implements our Companies, we could obtain this data instantly from you, or from the Stripe Person or third events. The data that we acquire will embody fee technique data (comparable to credit score or debit card quantity, or checking account data), buy quantity, date of buy, and fee technique. Completely different fee strategies could require the gathering of various classes of knowledge. The Stripe Person will decide the fee strategies that it lets you use, and the fee technique data that we acquire will rely upon the fee technique that you simply select to make use of from the record of accessible fee strategies which are provided to you by the Stripe Person. Once you make a transaction, we may additionally obtain your identify, e-mail, billing or delivery handle and in some instances your transaction historical past to authenticate you.
After we conduct fraud monitoring, prevention, detection, and monetary compliance actions, we are going to obtain Private Information from you and about you from our enterprise companions, monetary service suppliers, identification verification providers, and publicly obtainable sources (e.g., identify, handle, cellphone quantity, nation), as vital to verify your identification and forestall fraud. Our fraud monitoring, detection and prevention providers could use expertise that helps us assess the chance related to an tried transaction that’s enabled on the Stripe Person’s web site or the applying that collects data.
You might also select to submit data to us through different strategies, together with: (i) in response to advertising and marketing or different communications, (ii) by means of social media or on-line boards, (iii) by means of participation in a suggestion, program or promotion, (iv) in reference to an precise or potential enterprise relationship with us, or (v) by giving us your enterprise card or contact particulars at commerce exhibits or different occasions.
b. Data that we acquire routinely on our Websites.
Our Websites use cookies and different applied sciences to perform successfully. These applied sciences file details about your use of our Websites, together with:
- Browser and gadget knowledge, comparable to IP handle, gadget sort, working system and Web browser sort, display decision, working system identify and model, gadget producer and mannequin, language, plug-ins, add-ons and the language model of the Websites you’re visiting;
- Utilization knowledge, comparable to time spent on the Websites, pages visited, hyperlinks clicked, language preferences, and the pages that led or referred you to our Websites.
We additionally could acquire details about your on-line actions on web sites and related units over time and throughout third-party web sites, units, apps and different on-line options and providers. We use Google Analytics on our Websites to assist us analyze Your use of our Websites and diagnose technical points.
To be taught extra concerning the cookies which may be served by means of our Websites and the way You may management our use of cookies and third-party analytics, please see our Cookie Coverage.
3. How We Use Private Information
a. Our services and products.
We depend upon a variety of authorized grounds to make sure that our use of your Private Information is compliant with relevant legislation. We use Private Information to facilitate the enterprise relationships we’ve got with our Customers, to adjust to our monetary regulatory and different authorized obligations, and to pursue our reputable enterprise pursuits. We additionally use Private Information to finish fee transactions and to supply payment-related providers to our Customers.
- Study extra
-
Contractual and pre-contractual enterprise relationships. We use Private Information for the aim of getting into into enterprise relationships with potential Stripe Customers, and to carry out the contractual obligations beneath the contracts that we’ve got with Stripe Customers. Actions that we conduct on this context embody:
- Creation and administration of Stripe accounts and Stripe account credentials, together with the analysis of functions to start or develop using our Companies;
- Creation and administration of Stripe Checkout accounts;
- Accounting, auditing, and billing actions; and
- Processing of funds with Stripe Checkout, communications concerning such funds, and associated customer support.
Authorized and regulatory compliance. We use Private Information to confirm the identification of our Customers to be able to adjust to fraud monitoring, prevention and detection obligations, legal guidelines related to the identification and reporting of unlawful and illicit exercise, comparable to AML (Anti-Cash Laundering) and KYC (Know-Your-Buyer) obligations, and monetary reporting obligations. For instance, we could also be required to file and confirm a Person’s identification for the aim of compliance with laws supposed to forestall cash laundering and monetary crimes. These obligations are imposed on us by the operation of legislation, business requirements, and by our monetary companions, and will require us to report our compliance to 3rd events, and to submit to 3rd social gathering verification audits.
Respectable enterprise pursuits. We depend on our reputable enterprise pursuits to course of Private Information about you. The next record units out the enterprise functions that we’ve got recognized as reputable. In figuring out the content material of this record, we balanced our pursuits towards the reputable pursuits and rights of the people whose Private Information we course of. We:
- Monitor, stop and detect fraud and unauthorized fee transactions;
- Mitigate monetary loss, claims, liabilities or different hurt to Customers and Stripe;
- Reply to inquiries, ship service notices and supply buyer assist;
- Promote, analyze, modify and enhance our merchandise, programs, and instruments, and develop new services and products;
- Handle, function and enhance the efficiency of our Websites and Companies by understanding their effectiveness and optimizing our digital belongings;
- Analyze and promote our services and products;
- Conduct mixture evaluation and develop enterprise intelligence that allow us to function, shield, make knowledgeable selections, and report on the efficiency of, our enterprise;
- Share Private Information with third social gathering service suppliers that present providers on our behalf and enterprise companions which assist us function and enhance our enterprise;
- Guarantee community and knowledge safety all through Stripe and our Companies; and
- Transmit Private Information inside our associates for inside administrative functions.
Cost transactions and associated providers (Stripe as a knowledge processor). As a processor of fee transactions, we use Private Information of our Person’s Clients to course of on-line fee transactions and authenticate Clients on behalf of our Customers. All such use is pursuant to the phrases of our enterprise relationships with our Customers. As well as, we could supply payment-related providers to Customers who’ve requested such providers, and our supply of such associated providers to our Customers could contain using Private Information. For instance, a Stripe Person could specify parameters for transactions submitted by its Clients that decide whether or not the transactions are blocked or allowed by our platform. The entity liable for the gathering and use of Buyer’s Private Information within the context of fee transactions and payment-related providers is the Person.
If we have to use your Private Information in different methods, we are going to present particular discover on the time of assortment and acquire your consent the place required by relevant legislation.
b. Advertising and marketing and events-related communications.
We could ship you e-mail advertising and marketing communications about Stripe services and products, invite you to take part in our occasions or surveys, or in any other case talk with you for advertising and marketing functions, supplied that we accomplish that in accordance with the consent necessities which are imposed by relevant legislation. After we acquire your enterprise contact particulars by means of our participation at commerce exhibits or different occasions, we could use the data to follow-up with you concerning an occasion, ship you data that you’ve requested on our services and products and, along with your permission, embody you on our advertising and marketing data campaigns.
c. Curiosity-based promoting.
Once you go to our Websites or on-line providers, each we and sure third events acquire details about your on-line actions over time and throughout totally different websites to give you promoting about services and products tailor-made to your particular person pursuits (this sort of promoting is named “interest-based promoting”). These third events could place or acknowledge a singular cookie or different expertise in your browser (together with using pixel tags). The place required by relevant legislation, we are going to receive your consent previous to processing of your data for the aim of interest-based promoting.
You may even see our adverts on different web sites or cell apps as a result of we take part in promoting networks. Advert networks enable us to focus on our messaging to customers primarily based on a variety of things, together with demographic knowledge, customers’ inferred pursuits and looking context (for instance, the time and date of your go to to our Websites, the pages that you simply seen, and the hyperlinks that you simply clicked on). This expertise additionally helps us observe the effectiveness of our advertising and marketing efforts and perceive when you’ve got seen one in every of our commercials.
We work with Google AdWords, Doubleclick, AdRoll and different promoting networks. To learn to decide out of behavioral promoting delivered by Community Promoting Initiative member firms, please go to the Community Promoting Initiative and Digital Promoting Alliance. Chances are you’ll obtain the AppChoices app to decide out in cell apps. In the event you decide out from interest-based promoting, you might even see promoting that isn’t related to you. At current, there isn’t any business commonplace for recognizing Do Not Monitor browser indicators, so we don’t reply to them.
4. How We Disclose Private Information.
Stripe doesn’t promote or lease Private Information to entrepreneurs or unaffiliated third events. We share your Private Information with trusted entities, as outlined beneath.
a. Stripe. We share Private Information with different Stripe entities to be able to present our Companies and for inside administration functions.
b. Service suppliers. We share Private Information with a restricted variety of our service suppliers. We’ve got service suppliers that present providers on our behalf, comparable to identification verification providers, web site internet hosting, knowledge evaluation, data expertise and associated infrastructure, customer support, e-mail supply, and auditing providers. These service suppliers could must entry Private Information to carry out their providers. We authorize such service suppliers to make use of or disclose the Private Information solely as essential to carry out providers on our behalf or adjust to authorized necessities. We require such service suppliers to contractually commit to guard the safety and confidentiality of Private Information they course of on our behalf. Our service suppliers are predominantly positioned within the European Union and the US of America.
c. Enterprise companions. We share Private Information with third social gathering enterprise companions when that is vital to supply our Companies to our Customers. Examples of third events to whom we could disclose Private Information for this goal are banks and fee technique suppliers (comparable to bank card networks) once we present fee processing providers, and the skilled providers corporations that we companion with to ship Stripe Atlas.
d. Our Customers and third events approved by our Customers. We share Private Information with Customers as vital to take care of a Person account and supply the Companies. We share knowledge with events instantly approved by a Person to obtain Private Information, comparable to when a Person authorizes a 3rd social gathering utility supplier to entry the Person’s Stripe account utilizing Stripe Join. The usage of Private Information by a licensed third social gathering is topic to the third social gathering’s privateness coverage.
e. Company transactions. Within the occasion that we enter into, or intend to enter into, a transaction that alters the construction of our enterprise, comparable to a reorganization, merger, sale, three way partnership, project, switch, change of management, or different disposition of all or any portion of our enterprise, belongings or inventory, we could share Private Information with third events for the aim of facilitating and finishing the transaction.
f. Compliance and hurt prevention. We share Private Information as we imagine vital: (i) to adjust to relevant legislation, or fee technique guidelines; (ii) to implement our contractual rights; (iii) to guard the rights, privateness, security and property of Stripe, you or others; and (iv) to reply to requests from courts, legislation enforcement businesses, regulatory businesses, and different public and authorities authorities, which can embody authorities outdoors your nation of residence.
5. Your Rights and Decisions.
You’ve gotten decisions concerning our use and disclosure of your Private Information:
a. Opting out of receiving digital communications from us. In the event you now not wish to obtain marketing-related emails from us, you could opt-out through the unsubscribe hyperlink included in such emails. We are going to attempt to comply along with your request(s) as quickly as fairly practicable. Please be aware that in case you opt-out of receiving marketing-related emails from us, we should still ship you vital administrative messages which are required to give you our Companies.
b. How one can see or change your account Private Information. If You wish to overview, right, or replace Private Information that You’ve gotten beforehand disclosed to us, Chances are you’ll accomplish that by signing in to your Stripe account or by contacting us.
c. Your knowledge safety rights. Relying in your location and topic to relevant legislation, you might have the next rights with regard to the Private Information we management about you:
- The suitable to request affirmation of whether or not Stripe processes Private Information regarding you, and if that’s the case, to request a replica of that Private Information;
- The suitable to request that Stripe rectifies or updates your Private Information that’s inaccurate, incomplete or outdated;
- The suitable to request that Stripe erase your Private Information in sure circumstances supplied by legislation;
- The suitable to request that Stripe prohibit using your Private Information in sure circumstances, comparable to whereas Stripe considers one other request that you’ve submitted (together with a request that Stripe make an replace to your Private Information); and
- The suitable to request that we export to a different firm, the place technically possible, your Private Information that we maintain to be able to present Companies to you.
The place the processing of your Private Information is predicated in your beforehand given consent, you’ve the suitable to withdraw your consent at any time. You might also have the suitable to object to the processing of your Private Information on grounds regarding your specific state of affairs.
d. Course of for exercising knowledge safety rights. In an effort to train your knowledge safety rights, you could contact Stripe as described within the Contact Us part beneath. We take every request critically. We are going to comply along with your request to the extent required by relevant legislation. We won’t be able to reply to a request if we now not maintain your Private Information. In the event you really feel that you haven’t acquired a passable response from us, you could seek the advice of with the information safety authority in your nation.
To your safety, we could must confirm your identification earlier than responding to your request, comparable to verifying that the e-mail handle from which you ship the request matches your e-mail handle that we’ve got on file. If we now not must course of Private Information about you to be able to present our Companies or our Websites, we is not going to preserve, purchase or course of further data to be able to determine you for the aim of responding to your request.
If you’re a Buyer of a Stripe Person, please direct your requests on to the Person. For instance, if you’re making, or have made, a purchase order from a service provider utilizing Stripe as a fee processor, and you’ve got a request that’s associated to the fee data that you simply supplied as a part of the acquisition transaction, then you need to handle your request on to the service provider.
6. Safety and Retention.
We make cheap efforts to make sure a degree of safety applicable to the chance related to the processing of Private Information. We preserve organizational, technical and administrative measures designed to guard Private Information inside our group towards unauthorized entry, destruction, loss, alteration or misuse. Your Private Information is simply accessible to a restricted variety of personnel who want entry to the data to carry out their duties. Sadly, no knowledge transmission or storage system will be assured to be 100{5667a53774e7bc9e4190cccc01624aae270829869c681dac1da167613dca7d05} safe. When you have purpose to imagine that your interplay with us is now not safe (for instance, in case you really feel that the safety of your account has been compromised), please contact us instantly.
If you’re a Stripe Person, we retain your Private Information so long as we’re offering the Companies to you. We retain Private Information after we stop offering Companies to you, even in case you shut your Stripe account, to the extent essential to adjust to our authorized and regulatory obligations, and for the aim of fraud monitoring, detection and prevention. We additionally retain Private Information to adjust to our tax, accounting, and monetary reporting obligations, the place we’re required to retain the information by our contractual commitments to our monetary companions, and the place knowledge retention is remitted by the fee strategies that we assist. The place we retain knowledge, we accomplish that in accordance with any limitation durations and data retention obligations which are imposed by relevant legislation.
7. Worldwide Information Transfers.
We’re a world enterprise. Private Information could also be saved and processed in any nation the place we’ve got operations or the place we interact service suppliers. We could switch Private Information that we preserve about you to recipients in nations aside from the nation during which the Private Information was initially collected, together with to the US. These nations could have knowledge safety guidelines which are totally different from these of your nation. Nevertheless, we are going to take measures to make sure that any such transfers adjust to relevant knowledge safety legal guidelines and that your Private Information stays protected to the requirements described on this Privateness Coverage. In sure circumstances, courts, legislation enforcement businesses, regulatory businesses or safety authorities in these different nations could also be entitled to entry your Private Information.
If you’re positioned within the European Financial Space (“EEA”), the UK or Switzerland, we adjust to relevant legal guidelines to supply an enough degree of knowledge safety for the switch of your Private Information to the US. Stripe Inc. is licensed beneath the EU-U.S. and the Swiss-U.S. Privateness Protect Framework and adheres to the Privateness Protect Rules in reference to private knowledge transfers from the EEA, the UK and Switzerland. For extra, see Stripe’s Privateness Protect Coverage. As well as, we’ve got carried out intra-group knowledge switch agreements which you will view upon request.
The place relevant legislation requires us to make sure that a global knowledge switch is ruled by a knowledge switch mechanism, we use a number of of the next mechanisms: EU Commonplace Contractual Clauses with a knowledge recipient outdoors the EEA or the UK, verification that the recipient has carried out Binding Company Guidelines, or verification that the recipient adheres to the EU-US and Swiss-US Privateness Protect Framework.
8. Use by Minors.
The Companies are usually not directed to people beneath the age of 13 (13), and we request that they not present Private Information by means of the Companies.
9. Updates To this Privateness Coverage and Notifications.
We could change this Privateness Coverage every so often to mirror new providers, modifications in our Private Information practices or related legal guidelines. The “Final up to date” legend on the prime of this Privateness Coverage signifies when this Privateness Coverage was final revised. Any modifications are efficient once we submit the revised Privateness Coverage on the Companies. We could give you disclosures and alerts concerning the Privateness Coverage or Private Information collected by posting them on our web site and, if you’re a Person, by contacting you thru your Stripe Dashboard, e-mail handle and/or the bodily handle listed in your Stripe account.
10. Hyperlinks To Different Web sites.
The Companies could present the power to hook up with different web sites. These web sites could function independently from us and will have their very own privateness notices or insurance policies, which we strongly recommend you overview. If any linked web site will not be owned or managed by us, we’re not liable for its content material, any use of the web site or the privateness practices of the operator of the web site.
11. Jurisdiction-specific Provisions.
Australian residents. The Stripe entity that gives Companies in Australia is Stripe Funds Australia Pty. Ltd. If you’re an Australian resident, and you’re dissatisfied with our dealing with of any criticism you elevate beneath this Privateness Coverage, you could want to contact the Workplace of the Australian Data Commissioner.
Residents of the European Financial Space (EEA), the UK and Switzerland. The entity liable for the gathering and processing of Private Information for residents of the EEA, the UK and Switzerland is Stripe Funds Europe, Ltd., an organization included in Eire and with places of work at 1 Grand Canal Avenue Decrease, Grand Canal Dock, Dublin. To train your rights, the Information Safety Officer could also be contacted through [email protected].
If you’re a resident of the EEA and imagine we course of your data in scope of the Common Information Safety Regulation (GDPR), you could direct your questions or complaints to the Workplace of the Information Safety Commissioner. If you’re a resident of the UK and the UK is now not a Member State of the EU, you could direct your questions or issues to the UK Data Commissioner’s Workplace.
Mexican residents. Mexican residents could train knowledge safety rights to entry, correction, deletion, opposition or revocation beneath relevant legislation. Chances are you’ll be supplied with additional details about the steps to train your privateness rights, together with identification verification, timing, the best way to get in contact with the group responding to your request for additional communications about your request, and the way your request could also be honored. If you’re a Mexican resident and a Buyer of a Stripe Person, please direct your requests on to the Stripe Person with whom you shared your private data.
United States – California residents.
This part supplies further particulars concerning the private data we acquire about California customers in addition to the rights of California customers beneath the California Shopper Privateness Act (CCPA).
a. How We Accumulate, Use, and Disclose your Private Data. The Private Information We Accumulate part describes the non-public data we could have collected over the past 12 months, together with the classes of sources of that data. We acquire this data for the needs described within the How We Use Private Information part. We share this data as described within the How We Disclose Private Information part. Stripe makes use of cookies, together with promoting cookies, as described in our Cookies Coverage.
b. Your CCPA Rights and Decisions. As a California client and topic to sure limitations beneath the CCPA, you’ve decisions concerning our use and disclosure of your private data:
- Exercising the suitable to know. Chances are you’ll request, as much as twice in a 12-month interval, the next details about the non-public data we’ve got collected about you throughout the previous 12 months:
- the classes and particular items of private data we’ve got collected about you;
- the classes of sources from which we collected the non-public data;
- the enterprise or industrial goal for which we collected the non-public data;
- the classes of third events with whom we shared the non-public data; and
- the classes of private details about you that we disclosed for a enterprise goal, and the classes of third events to whom we disclosed that data for a enterprise goal.
- Exercising the suitable to delete. Chances are you’ll request that we delete the non-public data we’ve got collected from you, topic to sure limitations beneath relevant legislation.
- Exercising the suitable to opt-out from a sale. Chances are you’ll request to decide out of any “sale” of your private data that will happen.
- Non-discrimination. The CCPA supplies that you could be not be discriminated towards for exercising these rights.
To submit a request to train any of the rights described above, you could contact Stripe at [email protected]. We could must confirm your identification earlier than responding to your request, comparable to verifying that the e-mail handle from which you ship the request matches your e-mail handle that we’ve got on file. Authentication primarily based on a government-issued and legitimate identification doc could also be required. If you’re a Buyer of a Stripe Person, please direct your requests on to the Stripe Person with whom you shared your private data.
12. Contact Us
If You’ve gotten any questions or complaints about this Privateness Coverage, please contact us electronically or ship bodily mail to:
Stripe
510 Townsend Avenue
San Francisco, CA 94103, USA
Consideration: Stripe Authorized