Intuit voluntarily supplies this notice for U.S.-based consumers. It describes information that certain state privacy laws entitle consumers to know, including categories collected in the preceding 12 months and categories of business-purpose and sale/sharing recipients. It directs readers to the separate Global Privacy Statement for collection sources and purposes; those details are not supplied here.
Details not recorded for this card
Supporting quotations
Intuit is voluntarily providing this supplemental privacy notice to give U.S.-based consumers additional information required by certain state privacy laws, such as the CCPA.
Under certain state privacy laws, consumers have the right to know the categories of Personal Information or Personal Data collected during the preceding 12 months, the categories of sources from which Personal Information or Personal Data is collected, the purpose for collecting and disclosing Personal Information or Personal Data, the categories of third parties to whom each category of Personal Information or Personal Data is disclosed for a “business purpose,” and the categories of third parties to whom each category of Personal Information or Personal Data is “sold” or “shared.”
Please refer to our Global Privacy Statement for information about the categories of sources from which Personal Information or Personal Data is collected and the purposes for collecting and disclosing your Personal Information or Personal Data.
Legal Rights & Agreement Rules · Context
California classifications and sensitive-data markers
The table’s CCPA statutory-category column applies only to California residents. An asterisk marks a category the notice identifies as sensitive personal information under the cited California provision. These are classifications, not a statement that every example is collected from every consumer.
Details not recorded for this card
Supporting quotations
* Denotes a category of “sensitive personal information,” as defined in Cal. Civ. Code § 1798.140(ae).
CCPA statutory category** **This entire column applies to California residents only.
Contact details can be disclosed for business purposes
Intuit lists names (including previous names and nicknames), forms of address, mailing and email addresses, and telephone numbers as collected contact information. Its business-purpose recipients are Intuit group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law. This row says it does not sell or share this information. California classifications are Identifiers and California Customer Records.
Details not recorded for this card
Supporting quotations
Contact information, including: ● Full name, nicknames, and previous names (such as maiden names) ● Honorifics, titles, and preferred form of address ● Mailing address ● Email address ● Telephone number | ● Identifiers ● California Customer Records | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
Sharing & Disclosure · Company practice
Government identifiers are marked sensitive
The collected government-ID category includes Social Security, driver’s license and passport numbers, plus other government identifiers as required; each example is marked sensitive. Intuit lists group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law as business-purpose recipients. The row says no sale or sharing. The California classifications are Identifiers and California Customer Records.
Details not recorded for this card
Supporting quotations
Government-issued identification information numbers, including: ● Social security number* ● Driver’s license number* ● Passport number* ● Other government-issued identifiers as may be required* | ● Identifiers ● California Customer Records | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
* Denotes a category of “sensitive personal information,” as defined in Cal. Civ. Code § 1798.140(ae).
Account profile data has business-purpose recipients
Intuit lists usernames and encrypted passwords, professional titles and company names, education, profile photos, and demographic information and preferences as collected profile data. It lists disclosure to group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law, and says no sale or sharing of this category. For California residents it classifies the data as Identifiers, Professional Information, Commercial Information and California Customer Records.
Details not recorded for this card
Supporting quotations
Account profile data, including: ● Username and encrypted password ● Professional title and company name ● Education information ● Profile photo ● Demographic information and preferences | ● Identifiers ● Professional Information ● Commercial Information ● California Customer Records | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
Sharing & Disclosure · Company practice
Support, surveys and tax-advice interactions are covered
The communications and survey category includes contact details and information you choose to share through support, feedback, optional surveys, events, product research, tax trainings and other interactions. Its continuation includes questions to accountants or tax preparers and their guidance. Business-purpose recipients are group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law; the row says no sale or sharing. California classifications are Identifiers, Commercial Information, California Customer Records and Internet or Network Information.
Details not recorded for this card
Supporting quotations
Communications and survey data, including: ● Your name, email address, telephone number and any other personal information you choose to share when you reach out to us for support, give us feedback, participate in optional surveys, attend our events, participate in product research or tax trainings, | ● Identifiers ● Commercial Information ● California Customer Records ● Internet or Network Information | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
or otherwise interact or communicate with us ● Information related to your interactions with accountants or tax preparers, including information about the questions you ask and the guidance provided to you
Sharing & Disclosure · Company practice
Marketing preferences are included in the disclosures
Intuit lists contact information and preferences for receiving its marketing communications as collected marketing data. Business-purpose recipients are group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law. The row says no sale or sharing. California classifications are Identifiers, Commercial Information, California Customer Records and Internet or Network Information.
Details not recorded for this card
Supporting quotations
Marketing data, including: ● Contact information and preferences for receiving our marketing communications | ● Identifiers ● Commercial Information ● California Customer Records ● Internet or Network Information | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
Cross-references
contrast (model-proposed): Email and message interactions are shared for ads — Contact details and marketing preferences carry a no-sale-or-sharing statement, while interactions with email and other messages are shared for personalized ads with opt-outs. The protection for marketing preferences should not be read as covering all communication tracking.
Sharing & Disclosure · Company practice
Social and community content is collected
For U.S. consumers, Intuit lists data from social profiles and posts on its social media and community pages as collected user-generated content. Business-purpose recipients are group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law. This row says no sale or sharing. The California-only classifications are Identifiers, Audio, Visual, and Similar Sensory Information, and California Customer Records.
Details not recorded for this card
Supporting quotations
Important Information for U.S.-based Consumers
User-generated content, including: ● Data from social media profiles and content you post on our social media pages and our community pages | ● Identifiers ● Audio, Visual, and Similar Sensory Information ● California Customer Records | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
CCPA statutory category** **This entire column applies to California residents only.
Sharing & Disclosure · Company practice
Demographics and preferences are shared for personalized ads
Intuit’s demographic and preference category includes personal characteristics, household data from real-estate and census records, shopping preferences and scores predicting interest in Platform benefits. Its business-purpose recipients include group companies, service providers and agents, financial service providers, joint-marketing or similar partners, and other third parties including government agencies as required by law. The row says this data is shared for personalized ads through cookies and tracking. You can opt out through “Your California Privacy Rights” in the Intuit website footer; depending on your state, an enabled recognized opt-out signal also opts you out when you interact with its Services. It identifies Global Privacy Control as one such signal. California classifications are Identifiers, Professional Information, California Customer Records and Protected Classifications.
Details not recorded for this card
Supporting quotations
Demographic and preferences information, including: ● Personal characteristics such as age, marital and family status, languages spoken, and hobbies and interests | ● Identifiers ● Professional Information ● California Customer Records ● Protected Classifications | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Third parties with whom we have joint marketing and similar arrangements | This data is “shared” to provide personalized ads through cookies and other tracking technologies. You may opt-out of such “sharing” by visiting the “Your California Privacy Rights” link in the footer of the Intuit website. In addition, depending on your state of residence,if you have
● Household demographic data, including from real estate records and census data ● Personal preferences such as shopping preferences ● Propensity scores such as likelihood that you may be interested in certain benefits of our Platform | | ● Other third parties (including government agencies) as required by law | enabled a recognized opt-out mechanism on your browser, device, or platform, you will automatically be opted out of any “sharing” when you interact with our Services. Please go here to learn more about enabling one such preference signal, the Global Privacy Control: https://globalprivacycontrol.org/#download.
Charges & Financial Obligations · Company practice
Payment information is disclosed without sale or sharing
Intuit lists billing addresses, bank-account numbers and details if you use automated payments, and payment-card information. Business-purpose recipients are group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law. This payment-data row says no sale or sharing. California classifications are Commercial Information, Financial Information and California Customer Records.
Details not recorded for this card
Supporting quotations
Payment data, including: ● Billing address ● Bank account number and details (if you use automated payments) ● Payment card information | ● Commercial Information ● Financial Information ● California Customer Records | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
Sharing & Disclosure · Company practice
Transaction and authentication records enter ad sharing
The transactional category covers account and purchase histories, qualification data, returns, service and customer-service records, payments and credits, product/app downloads and purchases, website and app usage, in-app purchases, and authentication information such as account security questions. Intuit lists business-purpose disclosure to group companies, service providers and agents, financial service providers, joint-marketing or similar partners, and other third parties including government agencies as required by law. This category is shared for personalized ads through cookies and tracking. The Intuit footer’s “Your California Privacy Rights” link offers an opt-out; depending on your state, an enabled recognized browser, device or platform signal automatically opts you out when interacting with Services, with Global Privacy Control given as an example. California classifications are Commercial Information, Financial Information and California Customer Records.
Details not recorded for this card
Supporting quotations
Transactional data, including: ● Account history, qualification data, purchase history and related records (e.g., returns, product service records, records of payments, credits), customer service records ● Records related to downloads and purchases of products applications, including website | ● Commercial Information ● Financial Information ● California Customer Records | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Third parties with whom we have joint marketing and similar arrangements ● Other third parties (including government agencies) as required by law | This data is “shared” to provide personalized ads through cookies and other tracking technologies. You may opt-out of such “sharing” by visiting the “Your California Privacy Rights” link in the footer of the Intuit website. In addition, depending on your state of residence,if you have enabled a recognized opt-out mechanism on your browser, device, or platform, you will
and app usage and records relating to in-app purchases ● Data collected for consumer authentication (account security questions) | | | automatically be opted out of any “sharing” when you interact with our Services. Please go here to learn more about enabling one such preference signal, the Global Privacy Control: https://globalprivacycontrol.org/#download.
Cross-references
contrast (model-proposed): Financial and credit information has a no-sale-or-sharing entry — The financial-data row includes financial transactions but says no sale or sharing, while the transactional-data row describes personalized-ad sharing with opt-outs. These overlapping labels are retained as a tension; the notice does not supply a precise boundary that reconciles every overlap.
Charges & Financial Obligations · Company practice
Financial and credit information has a no-sale-or-sharing entry
Intuit’s financial-data examples span business and personal finances, expenses, invoices, financial statements and transactions, payroll and payment details, tax returns, customer/vendor/employee details, income and wages, investments, credit reports and credit scores. Business-purpose recipients are group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law. This row says no sale or sharing; it is distinct from the transactional-data row that describes ad sharing. California classifications are Commercial Information, Financial Information and California Customer Records.
Details not recorded for this card
Supporting quotations
Financial data, including: ● Information about your business, your finances, expenses, invoices, financial statements, details of your financial transactions, payroll details, payment details, tax return details, details about your customers, vendors, or employees, income and wage information, and/or investment information ● Credit reports, credit scores | ● Commercial Information ● Financial Information ● California Customer Records | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
This data is “shared” to provide personalized ads through cookies and other tracking technologies.
Cross-references
contrast (model-proposed): Transaction and authentication records enter ad sharing — The financial-data row includes financial transactions but says no sale or sharing, while the transactional-data row describes personalized-ad sharing with opt-outs. These overlapping labels are retained as a tension; the notice does not supply a precise boundary that reconciles every overlap.
contrast (model-proposed): Derived data is shared for personalized ads — The financial-data row says no sale or sharing, but the separate row for data derived from the preceding categories describes personalized-ad sharing with opt-outs. The derived-data statement is not restricted to underlying categories already marked shared; this does not establish that the original financial data itself is shared.
Data Access & Collection · Company practice
Related people’s contact details are included
For U.S. consumers, Intuit includes contact information for related people, such as authorized account users. The row lists business-purpose disclosure to group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law, and says no sale or sharing. California-only classifications are Identifiers and California Customer Records.
Details not recorded for this card
Supporting quotations
Important Information for U.S.-based Consumers
Data about others, including: ● Contact information for related persons, such as authorized users of your account | ● Identifiers ● California Customer Records | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
CCPA statutory category** **This entire column applies to California residents only.
Device identifiers and logs are shared for personalized ads
Intuit collects IP addresses, device types and characteristics, unique identifiers such as MAC addresses, SSIDs and ad IDs, and logs and error messages. Business-purpose recipients include group companies, service providers and agents, financial service providers, advertising partners, and other third parties including government agencies as required by law. Device data is shared for personalized ads through cookies and tracking. You can opt out using “Your California Privacy Rights” in the Intuit website footer; depending on your state, an enabled recognized browser, device or platform signal also automatically opts you out when interacting with Services. Global Privacy Control is one example. California classifications are Identifiers and Internet or Network Information.
Details not recorded for this card
Supporting quotations
Device information, including: ● IP address ● Device type and characteristics ● Unique device identifiers (e.g., MAC Address, SSIDs, and AD ID) ● Log information and error messages | ● Identifiers ● Internet or Network Information | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Third-party advertising partners ● Other third parties (including government agencies) as required by law | This data is “shared” to provide personalized ads through cookies and other tracking technologies. You may opt-out of such sharing by visiting the “Your California Privacy Rights” link in the footer of the Intuit website. In addition, depending on your state of residence,if you have enabled a recognized opt-out mechanism on your browser, device, or platform, you will automatically be opted out of any “sharing” when you interact with our Services. To learn more about enabling one such preference signal, the Global Privacy Control, please go to: https://globalprivacycontrol.org/#download.
Sharing & Disclosure · Company practice
Browsing and feature use enter personalized-ad sharing
Intuit’s online-activity category covers use of its Platform and websites, customers’ websites or e-commerce stores, and social media sites: pages viewed, services and features used, and links or communications interacted with. Business-purpose recipients are group companies, service providers and agents, financial service providers, advertising partners, and other third parties including government agencies as required by law. This data is shared for personalized ads through cookies and tracking. The Intuit website footer’s “Your California Privacy Rights” link offers an opt-out; depending on your state, an enabled recognized browser, device or platform signal automatically opts you out when interacting with Services. Global Privacy Control is an example. California classifications are Identifiers, Commercial Information and Internet or Network Information.
Details not recorded for this card
Supporting quotations
Online activity and usage information including: ● Information about your use of the Intuit Platform and our websites, customers’ websites or e-commerce stores, and social media websites, such as the pages you viewed, the services and features you used or interacted with, and details about | ● Identifiers ● Commercial Information ● Internet or Network Information | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Third-party advertising partners ● Other third parties (including government agencies) as required by law | This data is “shared” to provide personalized ads through cookies and other tracking technologies. You may opt-out of such sharing by visiting the “Your California Privacy Rights” link in the footer of the Intuit website. In addition, depending on your state of residence,if you have enabled a recognized opt-out mechanism on your browser, device,
any links or communications with which you interacted | | | or platform, you will automatically be opted out of any “sharing” when you interact with our Services. To learn more about enabling one such preference signal, the Global Privacy Control, please go to: https://globalprivacycontrol.org/#download.
Data Access & Collection · Company practice
Precise location and motion depend on device permission
Intuit lists precise location and/or device-motion information if you grant permission in device settings. Precise location carries the sensitive-information marker; the California category is Geolocation Data. Business-purpose recipients are group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law. This row says no sale or sharing of the category.
Details not recorded for this card
Supporting quotations
Precise location data: ● Precise location* and/or device motion information if you grant permission in your device settings | ● Geolocation Data | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
* Denotes a category of “sensitive personal information,” as defined in Cal. Civ. Code § 1798.140(ae).
Intuit lists information from email and communication providers and social networks about interactions with its messages, including opening or forwarding emails. Business-purpose recipients are group companies, service providers and agents, financial service providers, advertising partners, and other third parties including government agencies as required by law. This interaction data is shared for personalized ads through cookies and tracking. You may opt out through “Your California Privacy Rights” in the Intuit website footer; depending on your state, an enabled recognized browser, device or platform signal automatically opts you out when interacting with Services. Global Privacy Control is one example. California classifications are Identifiers, Commercial Information, California Customer Records and Internet or Network Information.
Details not recorded for this card
Supporting quotations
Communication interaction data: ● Information from email providers, communication providers and social networks, such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) | ● Identifiers ● Commercial Information ● California Customer Records ● Internet or Network Information | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Third-party advertising partners ● Other third parties (including government agencies) as required by law | This data is “shared” to provide personalized ads through cookies and other tracking technologies. You may opt-out of such sharing by visiting the “Your California Privacy Rights” link in the footer of the Intuit website. In addition, depending on your state of residence, if you have enabled a recognized opt-out mechanism on your browser, device, or platform, you will automatically be opted out of any “sharing” when you
interact with our Services. To learn more about enabling one such preference signal, the Global Privacy Control, please go to: https://globalprivacycontrol.org/#download.
Cross-references
contrast (model-proposed): Marketing preferences are included in the disclosures — Contact details and marketing preferences carry a no-sale-or-sharing statement, while interactions with email and other messages are shared for personalized ads with opt-outs. The protection for marketing preferences should not be read as covering all communication tracking.
Where to learn about enabling Global Privacy Control
The notice directs readers to https://globalprivacycontrol.org/#download to learn how to enable Global Privacy Control as a preference signal. This is guidance to an external resource; the linked resource’s contents are not included in this notice.
Details not recorded for this card
Supporting quotations
To learn more about enabling one such preference signal, the Global Privacy Control, please go to: https://globalprivacycontrol.org/#download.
Photos, videos and call recordings are disclosed for business purposes
In this U.S.-consumer notice, Intuit lists photographs, videos, call-center recordings, call-monitoring records and voicemails as collected audiovisual or sensory information. It lists business-purpose disclosure to group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law. The row says no sale or sharing. The California classification is Audio, Visual, and Similar Sensory Information.
Details not recorded for this card
Supporting quotations
Important Information for U.S.-based Consumers
Audio visual or similar sensory information: ● Photographs and videos ● Call center recordings, call monitoring records, and voicemails | ● Audio, Visual, and Similar Sensory Information | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
Compliance, safety and security records are included
The “Other California customer records” row includes customer screening and legal-compliance records (with tax law, ADA and international sanctions as examples), occupational and environmental safety records, and privacy and security records including breach notifications. Business-purpose recipients are group companies, service providers and agents, financial service providers, and other third parties including government agencies as required by law. The row says no sale or sharing. Its Identifiers and California Customer Records classifications apply to California residents only; listing compliance records does not supply the cited laws’ requirements.
Details not recorded for this card
Supporting quotations
Other California customer records: ● Compliance program data, including customer screening records, and other records maintained to demonstrate compliance with applicable laws, such as tax laws, ADA, international sanctions, et al. ● Occupational and environmental safety records ● Records of privacy and security, including any security breach notifications | ● Identifiers ● California Customer Records | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Other third parties (including government agencies) as required by law | N/A - we do not “sell” or “share” this personal information or personal data.
CCPA statutory category** **This entire column applies to California residents only.
Inference & Profiling · Company practice
Derived data is shared for personalized ads
Intuit separately lists data derived from the preceding categories, classified as Inferences for California residents. Its business-purpose recipients are group companies, service providers and agents, financial service providers, advertising partners, and other third parties including government agencies as required by law. This derived data is shared for personalized ads through cookies and tracking. You can opt out through “Your California Privacy Rights” in the Intuit website footer. Depending on your state, an enabled recognized browser, device or platform signal automatically opts you out when interacting with Services; Global Privacy Control is one example. The table’s no-sale-or-sharing statements for some underlying categories do not extend expressly to this derived-data row.
Details not recorded for this card
Supporting quotations
Data derived from the above categories | ● Inferences | ● Intuit Group of Companies ● Service providers and agents ● Financial service providers ● Third-party advertising partners ● Other third parties (including government agencies) as required by law | This data is “shared” to provide personalized ads through cookies and other tracking technologies. You may opt-out of such sharing by visiting the “Your California Privacy Rights” link in the footer of the Intuit website. In addition, depending on your state of residence, if you have enabled a recognized opt-out mechanism on your browser, device, or platform, you will automatically be opted out of any “sharing” when you interact with our Services. To learn more about enabling one such preference signal, the Global Privacy Control, please go to: https://globalprivacycontrol.org/#download.
N/A - we do not “sell” or “share” this personal information or personal data.
Cross-references
contrast (model-proposed): Financial and credit information has a no-sale-or-sharing entry — The financial-data row says no sale or sharing, but the separate row for data derived from the preceding categories describes personalized-ad sharing with opt-outs. The derived-data statement is not restricted to underlying categories already marked shared; this does not establish that the original financial data itself is shared.