Affirm Privacy Notice
Last Updated 14 Oct 2026
- 14 Oct 2026 update concerns opting out of data sharing with merchants for marketing Sharing & Disclosure
Affirm Privacy Notice
This Privacy Notice ("Notice") explains how Affirm, Inc. and its affiliates Affirm Loan Services, LLC, Affirm Financial Solutions, LLC and Affirm Payments, LLC (collectively, "Affirm") collect, use and disclose your information when you request and obtain our financial products, interact with Affirm as a representative of another business, use our website, browser extension, and mobile applications, or otherwise interact with us (our "Services"). We also explain your data privacy rights and how you can exercise them.
- Notice covers how Affirm and its affiliates handle information for the Services Data Access & Collection
Please note that certain information we collect and process in connection with your use of Affirm Services is considered "nonpublic personal information" (NPI) under the U.S. Gramm-Leach Bliley Act ("GLBA"). Affirm is considered a "financial institution" under GLBA, and as such, the collection and use of NPI is governed exclusively by federal law, not applicable state privacy laws. Section 9 of this Privacy Policy, titled "Affirm’s Privacy Notice for Consumer Financial Information," applies to this information.
- GLBA financial information is governed by federal law and Section 9, not state privacy law Legal Rights & Agreement Rules
Updates to our last Notice
This Notice updates how customer may opt-out of data sharing with merchants for marketing purpose. (07/29/2026)
- 14 Oct 2026 update concerns opting out of data sharing with merchants for marketing Sharing & Disclosure
Table of Contents
1. How Affirm collects your information
1.1. Information you give Affirm
If you open an account or use the Affirm Services, either directly or through a merchant partner or a third-party platform, we may collect the following types of information:
- Affirm collects identity and profile details when you open an account or use the Services Data Access & Collection
Identity and Profile Information. This includes your full name, date of birth, Social Security number, Individual Taxpayer Identification Number, email address, mailing address, phone number, password and account preferences (if you create an account with us).
- Affirm collects identity and profile details when you open an account or use the Services Data Access & Collection
Financial Information. This includes bank account online login information, bank account numbers, bank account details including transaction history, routing numbers and/or debit card numbers and credit card numbers that you link to your Affirm account or you give us when you use the Services.
- Financial information includes bank login credentials, account numbers and linked card numbers Charges & Financial Obligations
Customer Service Interaction Information. We collect information you provide when you engage with Affirm's customer service personnel and mechanisms, including through recorded phone calls, chat conversations, surveys, and email correspondence. Note that recordings and transcripts of customer service interactions may be stored by us and/or our vendors on our behalf for quality assurance and training purposes.
- Customer service calls, chats and emails may be recorded and kept for quality and training Data Access & Collection
Direct Marketing and Communications Information. This includes your preferences in receiving marketing communications from us and our third parties (marketing and servicing vendors and merchant partners).
- Affirm records your marketing communication preferences, including third-party marketing Data Access & Collection
Geolocation Information. We may collect or infer information about your general or precise location (including the precise location of your device) if you choose to enable that functionality by searching using maps on your device in the App. You can withdraw your consent to this at any time using your device settings.
- Location is collected only if you enable map search, and device settings can withdraw it Data Access & Collection
Photographs. We may collect information about your physical or biological characteristics such as photographs. These photographs may be used by our identity verification vendors for verifying your identity or detecting fraud (including through facial recognition technologies controlled by such vendors).
- Photographs may be used by identity-verification vendors, including facial recognition Data Access & Collection
Browser Extension. If you use our browser extension or in-app browser, we may collect information from merchant webpages you choose to access through those features while they are enabled including website domain, page URL, cart contents, product details, pricing, quantities, and related page information. We use this information to provide and improve extension features, provide more personalized experiences, and support related services.
- The browser extension reads merchant pages you open while it is enabled Data Access & Collection
Usage Details and Device Information. We may collect certain information automatically when you use the Services, including details about your browser, operating system or device, (such as your MAC address, cookie identifiers, Internet protocol (IP) address, mobile advertising, and other unique identifiers, device ID, Internet service provider, mobile carrier, general location information (including inferred location based off of your IP address), actions that you take while using the Services, information about how you interact with the Services, including the frequency and duration of your activities, information about the links you click, and other information about how you use the Services.
- Usage and device data is collected automatically, including identifiers and activity Data Access & Collection
The information described in this "Usage Details and Device Information" section is often collected through cookies, web beacons, and other tracking technologies. For more information, see our Cookie Notice.
- Usage and device data is collected automatically, including identifiers and activity Data Access & Collection
- Online advertising partners may also collect information through tracking technologies Sharing & Disclosure
Our partners may help collect this data for:
- Partners help collect data for site operations, analytics and personalized advertising Use & Processing
Site operations: Enabling features that are necessary for providing you the Services on our site, such as identifying you as being signed in, tracking content views, remembering your preferences, and the number of times you have been shown an advertisement.
- Partners help collect data for site operations, analytics and personalized advertising Use & Processing
Analytics: Allowing us to understand how our Services are being used, track site performance, and make improvements.
- Partners help collect data for site operations, analytics and personalized advertising Use & Processing
Personalized advertising: Delivering tailored advertising based on your preferences or interests across services and devices, and measuring the effectiveness of advertisements.
- Partners help collect data for site operations, analytics and personalized advertising Use & Processing
You can learn more about how advertising networks collect and use your information, and how to limit that use, by visiting the Network Advertising Initiative, and the Digital Advertising Alliance. You can also manage tracking by certain mobile advertising networks through your device settings, including by resetting the advertiser ID on your Apple or Android device.
- Opting out of ad networks limits interest-based ads but does not stop all advertising Use & Processing
Please note that opting-out of these advertising networks services does not mean you will stop seeing ads while using our Services or on other websites. It only limits interest-based advertising from participating companies, in accordance with their opt-out tools and policies. Other companies that do not participate in these programs may continue to show you interest-based ads. Note that if you delete your cookies, you may also delete your opt-out preferences
- Opting out of ad networks limits interest-based ads but does not stop all advertising Use & Processing
Information about Businesses and Business Representatives. In addition to the other types of information listed in this section, if you are a business user or sole proprietor, we may collect your business name, industry, business address, business email, business telephone number, tax identification number, and ownership percentages.
- Business users and sole proprietors also have business details collected Data Access & Collection
1.2. Information obtained from third parties
We may also obtain information about you from:
- Affirm obtains information from vendors and service providers such as IT and security firms Data Access & Collection
Vendors/service providers. This includes vendors we rely on to provide our Services, like IT and security service providers.
- Affirm obtains information from vendors and service providers such as IT and security firms Data Access & Collection
Third party sources that we rely on to enrich our loan eligibility determinations. This includes credit reporting agencies, identity verification, fraud prevention, and similar services.
- Credit, identity and fraud-prevention sources are used to enrich loan eligibility decisions Data Access & Collection
Merchant partners. We may obtain information about you, such as your billing and shipping address, from third parties like our merchant partners you interact with, identity verification services, or public sources or that we receive from companies that partner with us to provide products and services.
- Merchant partners and other third parties supply addresses and account information Data Access & Collection
Online advertising companies and other advertising and research partners. This includes third parties who may disclose information about your interests, demographic information, and information about the marketing and advertisements you have seen or clicked on as you browse the internet.
- Advertising and research partners supply interest, demographic and ad-interaction data Data Access & Collection
Social media platforms and other publicly available data sources managed by third parties. Affirm may have access to your information from your accounts managed by third parties. The information we have access to varies by third party site and is controlled by your privacy settings and authorization on that site.
- Information from your third-party accounts is limited by those sites' settings and your authorization Data Access & Collection
Business and Strategic Partners. Affirm may collect information about you from business and strategic partners that collaborate with Affirm. This allows us to link your existing Affirm account to other services or platforms you use, or to pre-populate your information to streamline account creation and enhance your experience with our Services.
- Business partners may supply information to link accounts and pre-populate onboarding Data Access & Collection
2. How Affirm uses your information
We use your information for the following purposes:
- Affirm uses information to run transactions, verify identity, collect payments and prevent fraud Use & Processing
2.1 Provide our Services.
Process transactions, resolve disputes, authenticate and verify identities, collect payments, prevent fraud and other illegal activities, customize the Services, and verify the accuracy of data. It may also be used to facilitate your relationship with our merchant partners you choose to interact with.
- Affirm uses information to run transactions, verify identity, collect payments and prevent fraud Use & Processing
2.2 Improve our Services and grow our business.
Understand our customer base may be used to conduct research and analysis, develop new or improved products and Services, in the utilization of artificial intelligence and/or machine learning tools, and to build relationships with merchant partners. If you are an employee, representative, or agent of a merchant, vendor, or other business entity, it may be used in connection with the business relationship between the entity and Affirm, or to market a prospective relationship to the entity you represent.
- Customer research, product development and AI or machine-learning tools use your information Use & Processing
2.3 Respond to your requests.
Provide customer service and support, respond to your questions, comments, and other requests.
2.4 Communications and marketing.
Service update notices and inform you about products, services, and promotions that may be relevant. We may combine your information with information we collect from other companies and use it to improve and personalize your experience, including advertising. Your information may also be used to operate sweepstakes, contests, referral programs, or other optional promotional offers. Participation is voluntary and you may opt out at any time.
- Marketing uses include service updates, personalized offers and voluntary promotions Use & Processing
2.5 Offer, maintain, and improve our website and other online Services.
Monitor the performance of our Services, improve the user experience, and to ensure the security of our Services.
- Website performance, user experience and security monitoring use your information Security & Safeguards
2.6 Comply with legal and regulatory obligations.
In connection with inquiries from regulators, law enforcement agencies, or parties involved in litigation, in each case anywhere in the world, as necessary for Affirm to comply with obligations or bring claims and exercise defenses, including to enforce the terms of loan agreements and Terms of Service.
- Information is used for regulator, law-enforcement and litigation inquiries worldwide Legal Rights & Agreement Rules
2.7 De-Identified Information.
De-identify information so it cannot reasonably identify you or your device. Once information has been de-identified, we commit to keeping it in de-identified form, and if we disclose it to third parties, we will also require them to commit to not re-identify it. Otherwise, our use and disclosure of de-identified information is not subject to any restrictions under this Privacy Notice, and we may use and disclose it to others for any purpose, without limitation.
- De-identified information is not restricted, but Affirm promises not to re-identify it Use & Processing
3. How Affirm discloses your information
We disclose your information for the following purposes:
- Information is disclosed to Affirm's affiliates and subsidiaries, including experience data Sharing & Disclosure
3.1 Affiliates and subsidiaries.
To our affiliates and subsidiaries, including information regarding your experience using our Services.
- Information is disclosed to Affirm's affiliates and subsidiaries, including experience data Sharing & Disclosure
3.2 With Service Providers and Contractors.
To service providers and contractors to perform functions on our behalf, such as processing transactions, marketing, billing and collection, auditing and accounting, professional services, measurement and analytics services, security, maintenance and hosting of our Services, and IT.
- Service providers and contractors process information for Affirm's business functions Sharing & Disclosure
3.3 With third parties to offer our Services.
To certain third parties as necessary to offer and improve our Services, including vendors who assist with identity verification, servicers of loans and lines of credits, business/strategic partners, partner and underwriting financial institutions, credit bureaus, and other financial institutions.
- Vendors, servicers, underwriting banks and credit bureaus receive information to offer the Services Sharing & Disclosure
3.4 With fraud prevention and risk intelligence providers.
To third party fraud prevention, identity verification, and risk intelligence providers that help us detect, prevent, and investigate fraud, security incidents, and other harmful or unlawful activity. These providers may use information we disclose to provide fraud screening, authentication, identity verification, risk scoring, and related services to us. They may also use information we disclose, together with information they receive from other clients, to maintain and improve their fraud detection and risk intelligence products and services, including by generating aggregated, deidentified, or model-based insights that may be used to help us and other clients identify potentially fraudulent or high risk activity, as permitted by applicable law. We do not authorize these providers to use your personal information for their own direct marketing purposes.
- Fraud and risk providers may use shared data to improve their own risk products Sharing & Disclosure
3.5 With our merchant partners.
- Merchants receive information, and accepting the Notice consents to their marketing Sharing & Disclosure
To merchants you interact with while using our Services to effectuate your transactions, for internal analysis, for improvement of the Services, and to maintain and grow our partnerships with such merchants. When you accept this Notice and use our Services, you consent to us disclosing your information to merchants you interact with for those merchants to market to you. We do this to help merchants personalize services and offers, so you can have a better experience.
- Merchants receive information, and accepting the Notice consents to their marketing Sharing & Disclosure
To opt-out of information disclosure to merchants for marketing, log into your Affirm account at www.affirm.com/u/ and update the "Allow Affirm to share your data" toggle in the "Security and privacy" tab in "Settings." If you opt out, we will continue to disclose your information as necessary to complete transactions you initiate, but will not disclose information for marketing purposes.
- Merchant marketing sharing can be switched off without stopping transaction disclosures Sharing & Disclosure
3.6 With our Online Advertising Partners.
To third parties who assist us in serving online advertising regarding the Services. These third parties may use tracking technologies to collect or receive information through the Services and elsewhere on the internet and use that information to provide measurement services and targeted ads. Third parties may allow other companies to access information about you so that they may advertise other products you may be interested in as you browse the internet.
- Online advertising partners may also collect information through tracking technologies Sharing & Disclosure
- Advertising partners use tracking data and may pass access to other companies Sharing & Disclosure
3.7 When required by law.
To comply with applicable law and respond to requests from law enforcement agencies or other government authorities or third parties, as permitted by law. This may be done without your consent when we have a good faith belief that it is necessary to protect our customers, employees, or property, in emergency situations, to enforce our rights under our terms of service and policies, or to combat fraud or criminal activity.
- Affirm discloses information for legal requests and to protect customers, staff or property Legal Rights & Agreement Rules
3.8 As part of a corporate transaction.
In connection with corporate transactions, in the event that Affirm enters into, or intends to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or any portion of our business, assets or stock.
- Information may transfer with a reorganization, merger, sale or change of control Sharing & Disclosure
4. What are your options?
4.1 Notifications
If you no longer wish to receive notifications about our Services such as account alerts, scheduled payment reminders, legal compliance or deals nearby, you may change your notification preferences by contacting us here. Alternatively, you may be able to indicate your preference by logging into your account and adjusting your preferences or by following the directions provided with the communication. Affirm reserves the right to close or limit access to your account should you opt-out of the crucial notices that are required to perform the Affirm Service. You are still responsible for any amounts due to Affirm even if we close or limit access to your account.
- You can change notification preferences, but opting out of crucial notices may limit your account Account & Service Control
4.2 SMS messaging
You can opt out of receiving SMS messages by replying "STOP" or contacting us here. Alternatively, you may be able to indicate your preference by logging into your account and adjusting your preferences or by following the directions provided with the communication. Again, Affirm reserves the right to close or limit access to your account should you opt out of the crucial notices that are required to perform the Affirm Service. You are still responsible for any amounts due to Affirm even if we close or limit access to your account.
- Replying STOP opts out of SMS messages, with the same account-closure reservation Account & Service Control
4.3 Browser extension
You can stop all collection of information by our browser extension by disabling it in the browser settings, uninstalling the browser extension, or hiding the extension. You can limit collection through the in-app browser by choosing not to use the in-app browser for merchant browsing where an alternative is available.
- Disabling, uninstalling or hiding the extension stops its collection Data Access & Collection
4.4 Access your information
You can review and edit your Personal Information at any time by logging in to your account or by contacting us through the My account section here. You can also request to close your account if you do not have an active loan by contacting us here. If you close your Affirm account, we will mark your account in our database as "Closed," but will keep your account information in our database to comply with our legal obligations. This is necessary in order to deter fraud, by ensuring that persons who try to commit fraud will not be able to avoid detection simply by closing their account and opening a new account. If you close your account, your personally identifiable information will not be used by us for any further purposes, nor sold or disclosed to third parties, except as necessary to prevent fraud and assist law enforcement, as required by law or in accordance with this Privacy Notice.
- You can review, edit or close your account, but closed-account data is kept for legal and fraud reasons Account & Service Control
Some states extend specific privacy rights to their residents. Section 8 discusses these rights in more detail below.
5. How we protect your information
Affirm maintains physical, electronic and procedural security measures to guard against unauthorized access to systems and uses safeguards such as firewalls and data encryption. We enforce physical access controls to our buildings and we authorize access to your information only for those employees or agents who require it to fulfill the responsibilities of their jobs. However, please note that no security measures are perfect or impenetrable. As such, we cannot guarantee the security of your information.
- Affirm uses physical, electronic and procedural safeguards but cannot guarantee security Security & Safeguards
6. Retention of your information
Affirm will retain your Personal Information for as long as is necessary to complete the purposes for which it was collected, or as may be required by law.
- Personal information is kept as long as necessary or as law requires, with no fixed period Retention & Deletion
We utilize the following criteria to determine the length of time for which we retain information:
- Retention length weighs business purpose, legal duties, privacy impact and system design Retention & Deletion
The business purposes for which the information is used, and the length of time for which the information is required to achieve those purposes;
- Retention length weighs business purpose, legal duties, privacy impact and system design Retention & Deletion
Whether we are required to retain the information type in order to comply with legal obligations or contractual commitments, to defend against potential legal claims, or as otherwise necessary to investigate theft or other activities potentially in violation of Affirm's policies and procedures applicable to you or against the law, to ensure a secure online environment, or to protect health and safety;
- Retention length weighs business purpose, legal duties, privacy impact and system design Retention & Deletion
The privacy impact of ongoing retention on the consumer; and
- Retention length weighs business purpose, legal duties, privacy impact and system design Retention & Deletion
The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle of information in light of the volume and complexity of the systems in our infrastructure.
- Retention length weighs business purpose, legal duties, privacy impact and system design Retention & Deletion
Individual pieces of information such as those listed above may exist in different systems that are used for different business or legal purposes. A different maximum retention period may apply to each use case of the information. Certain individual pieces of information may also be stored in combination with other individual pieces of information, and the maximum retention period may be determined by the purpose for which that information set is used.
- Personal information is kept as long as necessary or as law requires, with no fixed period Retention & Deletion
7. Contact Affirm
If you have questions or concerns regarding this Privacy Notice, you should contact us at privacy@affirm.com.
- Privacy questions go to privacy@affirm.com; merchant processing questions go to the merchant Legal Rights & Agreement Rules
If you have questions about how a merchant processes your information, you should contact the merchant or visit the merchant’s privacy notice.
- Privacy questions go to privacy@affirm.com; merchant processing questions go to the merchant Legal Rights & Agreement Rules
8. State Consumer Privacy Rights
Certain U.S. states provide consumers with rights regarding their Personal Information. However, as explained above, Affirm, in connection with financial services we offer, is governed by GLBA, which exempts NPI collected from most state privacy laws. When applicable, we provide the rights outlined below for information collected outside the scope of GLBA, for example, information collected from you when you browse our website in a logged-out state.
- State privacy rights apply to information outside GLBA's financial scope Legal Rights & Agreement Rules
- GLBA financial information is governed by federal law and Section 9, not state privacy law Legal Rights & Agreement Rules
You can find out more information about the website data we collect in our Cookie Notice, including how to opt out of certain cookies and web-tracking technologies.
- State privacy rights apply to information outside GLBA's financial scope Legal Rights & Agreement Rules
8.1 California residents - Notice at Collection
Under California law, you have certain rights regarding how your personal information is collected and used. This section serves as our "Notice at Collection" under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and includes additional disclosures under California’s Shine the Light law. This section applies only to personal information collected outside the scope of the GLBA.
- California section is the CCPA Notice at Collection for data outside GLBA Legal Rights & Agreement Rules
California Shine the Light Law: California residents may request information regarding whether we have disclosed certain categories of personal information to third parties for their direct marketing purposes during the preceding year. Companies subject to this law may either provide this information upon request or offer a way for consumers to opt out of such disclosures.
- California Shine the Light requests are answered by an opt-out of merchant marketing sharing Sharing & Disclosure
Affirm provides a mechanism to opt out of such disclosures. As explained above, we disclose certain personal information to our merchant partners about customers that have created an Affirm account so that our merchant partners can provide more relevant advertising to such individuals. To opt-out of this sharing, log into your Affirm account at www.affirm.com/u/ and update your "Allow Affirm to share your data" toggle in the "Security and privacy" tab under "Settings."
- California Shine the Light requests are answered by an opt-out of merchant marketing sharing Sharing & Disclosure
If you opt out, we will continue to disclose your personal information as necessary to complete transactions you initiate, but will not disclose personal information for the merchants' own direct marketing purposes.
- California Shine the Light requests are answered by an opt-out of merchant marketing sharing Sharing & Disclosure
To opt out of disclosures that are considered "sales" or "sharing" under the CCPA, see the "Your Choices regarding 'sharing' and 'selling'" section below.
California Consumer Privacy Act: California residents may have the right to receive certain disclosures regarding the collection, use, and sharing of Personal Information. These disclosures apply only to information not subject to GLBA or another applicable exemption.
- CCPA disclosures apply only to information not subject to GLBA or another exemption Legal Rights & Agreement Rules
We may collect the following categories of personal information:
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Categories of Personal Information we may collect
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Category of Personal Information Required Information
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Internet or other similar network activity
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
We collect information about your browsing history, search history, interaction with websites, and applications or advertisements automatically when you utilize our Services.
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Source: Collected automatically when you use our Services.
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Purpose of collection and use: Used for purposes listed under Section 2 above, including to gauge online activity on our website, measure the effectiveness of online services, applications, and tools, and to serve targeted advertisements based on your online activities.
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Categories of Parties to Whom PI is "Disclosed":
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Service providers
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Merchant partners
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Advertising partners
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Other third parties listed under Section 3.
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Retention Considerations: See Section 6
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Learn more about tracking technologies and cookie settings in our Cookie Notice.
- California table lists network activity as the category collected, with its sources and recipients Data Access & Collection
Your choices regarding "sharing" and "selling." Affirm does not disclose Personal Information to third parties in exchange for monetary compensation. However, as discussed in this Privacy Notice, Affirm does work with advertising partners to collect information about user internet browsing activities to provide those users with more relevant advertising as they browse. This may be considered the "sale" or "sharing" of Personal Information for cross-context behavioral advertising under the CCPA.
- Advertising data may count as a CCPA sale or sharing, with a cookie-based opt-out Sharing & Disclosure
- Advertising-related sharing can be opted out through the footer privacy choices link Sharing & Disclosure
You may opt out of this activity based on our use of cookies/pixels. To opt out of these activities, follow the instructions in 8.2.1 under Right to opt out of Sale and Sharing. We also honor any legally-required browser opt out signals (e.g., Global Privacy Control).
- Advertising data may count as a CCPA sale or sharing, with a cookie-based opt-out Sharing & Disclosure
Notice concerning Do Not Track. Do Not Track ("DNT ") is a browser setting that allows users to signal that they do not want their online activity tracked across websites. While we are committed to providing meaningful privacy choices through the mechanisms described in our Cookies Notice, we do not currently recognize or respond to DNT signals. However, as mentioned above, we do honor legally required browser-based signals such as GPC.
- Affirm does not respond to Do Not Track signals but honors required signals like GPC Use & Processing
Retention of your personal information. Please see Section 6 of our Privacy Notice for details about our data retention practices.
Other CCPA rights. Please see Section 8.2 immediately below for information about the additional rights you may have with respect to your Personal Information under the CCPA.
8.2 State Consumer Privacy Rights
As mentioned above, Affirm is a financial institution subject to GLBA, and much of the personal information we collect and process is considered NPI under that law. As a result, many state privacy laws do not apply to that information.
- Section 8.2 rights cover information outside GLBA, such as logged-out browsing Legal Rights & Agreement Rules
- GLBA financial information is governed by federal law and Section 9, not state privacy law Legal Rights & Agreement Rules
This section describes the rights that may apply to personal information collected outside the scope of the GLBA, including when you use Affirm’s website in a logged-out state or interact with us outside of a financial product or service.
- State privacy rights apply to information outside GLBA's financial scope Legal Rights & Agreement Rules
- Section 8.2 rights cover information outside GLBA, such as logged-out browsing Legal Rights & Agreement Rules
8.2.1 Residents of California, Oregon, Minnesota, Montana and Connecticut have the following privacy rights:
Right to know/access information: request access to Personal Information collected about you and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it.
- Consumers in five states may request access to the information Affirm holds Account & Service Control
Right to correct/rectify inaccurate information: request correction of inaccurate Personal Information that we hold about you under certain circumstances. Affirm account holders may generally modify certain Personal Information by logging into your account or contacting us through the My Account section here.
- Consumers may request correction of inaccurate personal information in certain circumstances Account & Service Control
Right to request deletion of information: request deletion of any Personal Information that we have collected from you, subject to legal exceptions.
- Consumers may request deletion of collected personal information, subject to legal exceptions Account & Service Control
Right to opt out of Sale and Sharing: Affirm does not disclose Personal Information to third parties in exchange for monetary compensation. However, as discussed in this Privacy Notice, Affirm does work with advertising partners to collect information about user internet browsing activities to provide those users with more relevant advertising. This may be considered the "sale" or "sharing" of Personal Information or processing of Personal Information for online targeted advertising under applicable U.S. state laws. You have the right to opt out of this activity based on our use of cookies/pixels by managing your preferences through the "Your Privacy Choices" link located in the footer of our website.
- Advertising-related sharing can be opted out through the footer privacy choices link Sharing & Disclosure
Right to non-discrimination: Exercise any of the rights listed here without being treated unfairly or denied services.
- Exercising these rights should not lead to unfair treatment or denied services Account & Service Control
8.2.2. Additional Rights for Residents of California and Oregon.
Residents of California and Oregon may request that we limit the use or disclosure of certain sensitive personal information. This includes information about your race, ethnicity, religion, and philosophical beliefs, financial information to the extent such would enable access to your account, biometric information, and health information including your status as transgender or non-binary, your status as a victim of a crime, past and present geolocation information within 1,750 feet of your location. However, please note that Affirm does not collect or process sensitive personal information at this time, with the exception of geolocation information if you choose to allow this within the App.
- Sensitive-data limits exist for California and Oregon, but Affirm says it collects little Account & Service Control
8.2.3 Additional Rights for Residents of Minnesota, Oregon, and Connecticut.
Residents of Minnesota, Oregon, and Connecticut may request a list of the "third parties" (as defined under applicable law) with whom we have disclosed their personal information. To request this list, please email us at privacy@affirm.com with the subject line "third parties."
- Minnesota, Oregon and Connecticut residents may request a list of third-party recipients Sharing & Disclosure
8.2.4 Appeal Rights for Residents of Oregon and Minnesota and Montana.
You may submit an appeal if we deny a privacy-related request. For instructions on how to file an appeal, please email us at privacy@affirm.com, with the subject line "Oregon resident appeal," "Minnesota resident appeal," or "Montana resident appeal" as applicable.
- Oregon, Minnesota and Montana residents may appeal a denied privacy request Account & Service Control
8.2.5 How to submit a request
You can exercise your privacy rights in two ways:
- Privacy requests go through the account portal or Customer Care, or by email Account & Service Control
- If you have an Affirm account, you may submit a request by visiting here or by contacting Customer Care at (855) 423-3729. By signing in to your account to submit the request, you will be able to automatically verify your identity, which will result in faster processing of your request.
- Privacy requests go through the account portal or Customer Care, or by email Account & Service Control
- If you do not have an Affirm account, or are having trouble submitting a request through your account, you may submit a request by emailing us at privacy@affirm.com with the subject line "non-account holder."
- Privacy requests go through the account portal or Customer Care, or by email Account & Service Control
8.2.6 Verification procedures
In order to process your request, we must verify your request. Depending on the type of request and how you submit your request (e.g., through your account or via email) we do this by:
- Affirm verifies requests by matching identifiers or confirming contact details Account & Service Control
- Asking you to provide personal identifiers we can match against information we may have collected from you previously
- Affirm verifies requests by matching identifiers or confirming contact details Account & Service Control
- Asking you to confirm your request using the email address or telephone number stated in the request.
- Affirm verifies requests by matching identifiers or confirming contact details Account & Service Control
If you have authorized someone else to make requests on your behalf (e.g., an authorized agent), we will require that you provide a signed letter confirming the identity and authority of that person. Such signed letters can be submitted by emailing privacy@affirm.com with the subject line "authorized third party."
- Affirm verifies requests by matching identifiers or confirming contact details Account & Service Control
9. Affirm’s Privacy Notice for Consumer Financial Information
- GLBA financial information is governed by federal law and Section 9, not state privacy law Legal Rights & Agreement Rules
- Section 9 is Affirm, Inc.'s separate GLBA privacy notice, revised 08/2025 Legal Rights & Agreement Rules
[Rev. 08/2025]
- GLBA financial information is governed by federal law and Section 9, not state privacy law Legal Rights & Agreement Rules
- Section 9 is Affirm, Inc.'s separate GLBA privacy notice, revised 08/2025 Legal Rights & Agreement Rules
Facts about how Affirm, Inc. uses your personal information
- Section 9 is Affirm, Inc.'s separate GLBA privacy notice, revised 08/2025 Legal Rights & Agreement Rules
Facts What does Affirm, Inc. do with your personal information?
- The GLBA notice explains why federal law requires it and what data it covers Charges & Financial Obligations
Why? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
- The GLBA notice explains why federal law requires it and what data it covers Charges & Financial Obligations
What? The types of personal information we collect and share depend on the product or service you have with us. This information can include:
- The GLBA notice explains why federal law requires it and what data it covers Charges & Financial Obligations
- Social security number and payment history
- The GLBA notice explains why federal law requires it and what data it covers Charges & Financial Obligations
- Transaction history and account transactions
- The GLBA notice explains why federal law requires it and what data it covers Charges & Financial Obligations
- Credit scores and checking account information
- The GLBA notice explains why federal law requires it and what data it covers Charges & Financial Obligations
When you are no longer our customer, we continue to share your information as described in this notice.
- The GLBA notice explains why federal law requires it and what data it covers Charges & Financial Obligations
How? All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Affirm, Inc. chooses to share; and whether you can limit this sharing.
- GLBA notice shares for everyday business, marketing and joint marketing without a limit option Sharing & Disclosure
Reasons Affirm, Inc. can share your personal information
- GLBA notice shares for everyday business, marketing and joint marketing without a limit option Sharing & Disclosure
Reasons we can share your personal information Does Affirm, Inc. share? Can you limit this sharing?
- GLBA notice shares for everyday business, marketing and joint marketing without a limit option Sharing & Disclosure
For our everyday business purposes-- such as to process your transactions, maintain your account(s), offer or service loans or lines of credit, offer other financial services, respond to court orders and legal investigations, or report to credit bureaus Yes No
- GLBA notice shares for everyday business, marketing and joint marketing without a limit option Sharing & Disclosure
For our marketing purposes-- to offer our products and services to you Yes No
- GLBA notice shares for everyday business, marketing and joint marketing without a limit option Sharing & Disclosure
For joint marketing with other financial companies Yes No
- GLBA notice shares for everyday business, marketing and joint marketing without a limit option Sharing & Disclosure
For our affiliates' everyday business purposes-- information about your transactions and experiences Yes No
- GLBA table: affiliates' credit and marketing data is not shared; nonaffiliate marketing can be limited Sharing & Disclosure
For our affiliates' everyday business purposes-- information about your creditworthiness No We don't share
- GLBA table: affiliates' credit and marketing data is not shared; nonaffiliate marketing can be limited Sharing & Disclosure
For our affiliates to market to you No We don't share
- GLBA table: affiliates' credit and marketing data is not shared; nonaffiliate marketing can be limited Sharing & Disclosure
For nonaffiliates to market to you Yes Yes
- GLBA table: affiliates' credit and marketing data is not shared; nonaffiliate marketing can be limited Sharing & Disclosure
Explanation of your rights to limit the sharing of your personal information
- The GLBA notice lets customers limit sharing through the account toggle at any time Sharing & Disclosure
To Limit Our Sharing You may limit our sharing by logging into your Affirm account at www.affirm.com/u/ and update your "Allow Affirm to share your data" toggle in the "Security and privacy" tab under "Settings."
- The GLBA notice lets customers limit sharing through the account toggle at any time Sharing & Disclosure
Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice, or earlier if you consent or as permitted by law. When you are no longer our customer, we continue to share your information as described in this notice.
- The GLBA notice lets customers limit sharing through the account toggle at any time Sharing & Disclosure
However, you can contact us at any time to limit our sharing.
- The GLBA notice lets customers limit sharing through the account toggle at any time Sharing & Disclosure
Questions? Call (855) 423-3729 or email customercare@affirm.com
- The GLBA notice lets customers limit sharing through the account toggle at any time Sharing & Disclosure
Who is Affirm, Inc. and how we interact with your personal information
- Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card Charges & Financial Obligations
Who we are
- Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card Charges & Financial Obligations
Who is providing this notice? Affirm, Inc.
- Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card Charges & Financial Obligations
What we do
- Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card Charges & Financial Obligations
How does Affirm, Inc. protect my personal information? To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
- Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card Charges & Financial Obligations
How does Affirm, Inc. collect my personal information? We collect your personal information, for example, when you
- Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card Charges & Financial Obligations
- Apply for a loan or open an account
- Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card Charges & Financial Obligations
- Provide account information or pay your bills
- Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card Charges & Financial Obligations
- Use your credit or debit card
- Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card Charges & Financial Obligations
We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
- Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card Charges & Financial Obligations
Why can't I limit all sharing? Federal law gives you the right to limit only
- Federal law limits only three kinds of sharing; state law may add rights Legal Rights & Agreement Rules
- sharing for affiliates' everyday business purposes--information about your creditworthiness
- Federal law limits only three kinds of sharing; state law may add rights Legal Rights & Agreement Rules
- affiliates from using your information to market to you
- Federal law limits only three kinds of sharing; state law may add rights Legal Rights & Agreement Rules
- sharing for nonaffiliates to market to you
- Federal law limits only three kinds of sharing; state law may add rights Legal Rights & Agreement Rules
State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law.
- Federal law limits only three kinds of sharing; state law may add rights Legal Rights & Agreement Rules
Definitions
- The GLBA notice defines affiliates, nonaffiliates and joint marketing Legal Rights & Agreement Rules
Affiliates Companies related by common ownership or control. They can be financial and nonfinancial companies.
- The GLBA notice defines affiliates, nonaffiliates and joint marketing Legal Rights & Agreement Rules
Our affiliates include companies with an Affirm name, such as Affirm Loan Services, LLC, Affirm Financial Solutions, LLC and Affirm Payments, LLC.
- The GLBA notice defines affiliates, nonaffiliates and joint marketing Legal Rights & Agreement Rules
Nonaffiliates Companies not related by common ownership or control. They can be financial and nonfinancial companies.
- The GLBA notice defines affiliates, nonaffiliates and joint marketing Legal Rights & Agreement Rules
- Nonaffiliates we can share with include our merchant partners, third-party platforms, and marketing service providers.
- The GLBA notice defines affiliates, nonaffiliates and joint marketing Legal Rights & Agreement Rules
Joint marketing A formal agreement between nonaffiliated financial companies that together market financial products or services to you.
- The GLBA notice defines affiliates, nonaffiliates and joint marketing Legal Rights & Agreement Rules
Our joint marketing partners include bank and merchant partners.
- The GLBA notice defines affiliates, nonaffiliates and joint marketing Legal Rights & Agreement Rules
Other important information
- The GLBA notice limits California sharing to what California law permits Legal Rights & Agreement Rules
Special Notice For State Residents
- The GLBA notice limits California sharing to what California law permits Legal Rights & Agreement Rules
For California Residents. We will not share personal information with affiliates or nonaffiliates except as permitted by California law, such as to process your transaction or with your consent.
- The GLBA notice limits California sharing to what California law permits Legal Rights & Agreement Rules
For Vermont Residents. We will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law.
- The GLBA notice gives Vermont residents stricter limits on affiliate and nonaffiliate sharing Legal Rights & Agreement Rules
Additional information concerning our privacy policies can be found in this Privacy Notice or by contacting us at privacy@affirm.com
10. Privacy Notices of Affirm's Bank Partners
We may partner with banks ("Bank Partners") to offer certain products and services. If you are approved for a product offered through Affirm by one of our Bank Partners, or through other partnerships with Bank Partners, your non-public personal information will be subject to the following privacy notices:
- Bank-partner products are governed by the partner bank's own privacy notice Legal Rights & Agreement Rules
- Cross River Bank Privacy Notice
- Bank-partner products are governed by the partner bank's own privacy notice Legal Rights & Agreement Rules
- Celtic Bank Privacy Notice
- Bank-partner products are governed by the partner bank's own privacy notice Legal Rights & Agreement Rules
- Lead Bank Privacy Notice
- Bank-partner products are governed by the partner bank's own privacy notice Legal Rights & Agreement Rules
- Evolve Bank and Trust Privacy Notice
- Bank-partner products are governed by the partner bank's own privacy notice Legal Rights & Agreement Rules
- Stride Bank Privacy Notice
- Bank-partner products are governed by the partner bank's own privacy notice Legal Rights & Agreement Rules
Payment options through Affirm are provided by these lending partners: affirm.com/lenders. Your rate will be 0–36% APR based on credit, and is subject to an eligibility check. Affirm Pay in 4 payment option is 0% APR.
- Payment options carry 0–36% APR and vary with purchase amount and merchant Charges & Financial Obligations
Options depend on your purchase amount and may vary by merchant. A down payment may be required. For example, at a purchase price of $400 you could pay a down payment of $80, followed by 12 monthly payments of $28.88 at 15% APR or 4 interest-free payments of $100 every 2 weeks. Affirm availability and eligibility may vary. Restrictions apply. See affirm.com/terms#use.
- Payment options carry 0–36% APR and vary with purchase amount and merchant Charges & Financial Obligations
The Affirm Money™ Account is held with Cross River Bank (CRB), Member FDIC. Affirm is not a bank. FDIC insurance covers accounts held with CRB in the event CRB fails. California residents: Affirm Loan Services, LLC is licensed by the Department of Financial Protection and Innovation. Loans are made or arranged pursuant to California Financing Law license 60DBO-111681.
- The Affirm Money Account is held at Cross River Bank, not by Affirm Charges & Financial Obligations
The Affirm Card is a Visa® debit card issued by Evolve Bank & Trust (Evolve) or Stride Bank, N.A. (Stride), Members FDIC, pursuant to licenses from Visa U.S.A. Inc. Affirm is not a bank. FDIC insurance will only cover the failure of Evolve and/or Stride. Learn more. The Affirm Card is not available to residents of U.S. territories.
- The Affirm Card is issued by Evolve or Stride and is unavailable in U.S. territories Charges & Financial Obligations
The one-time-use Affirm virtual card is issued by CRB, Sutton Bank, or Celtic Bank, Members FDIC, pursuant to a license from Visa U.S.A. Inc. Affirm, Inc., NMLS ID 1883087. Affirm Loan Services, LLC, NMLS ID 1479506. For licenses and disclosures, see affirm.com/licenses.
- The one-time virtual card is issued by Cross River, Sutton or Celtic Bank Charges & Financial Obligations