Intuit determines its processing and may share within its group
For the processing described here, Intuit acts as a controller determining purposes and means. It may share information within its group and process it as controllers or joint controllers for the stated purposes.
Details not recorded for this card
Supporting quotations
Intuit determines the purposes and means of the processing of your personal information as described in this Privacy Statement, and therefore acts as a ‘data controller’ (or equivalent/similar terms under applicable data privacy laws) of such information.
and conduct processing activities as controllers or joint controllers for the purposes set out in this Privacy Statement.
Sharing & Disclosure · Company practice
Advertising networks can receive data, with a Credit Karma CCPA exception
Intuit may share data with advertising providers to tailor offers based on platform interactions, and partners may place cookies on other sites to tailor and measure ads. Regional terms matter: Credit Karma says it does not sell or share personal information subject to the CCPA. That legal use of “share” does not mean no information is ever disclosed under this statement.
Details not recorded for this card
Supporting quotations
Intuit may share personal information with advertising networks and other providers to tailor advertising and offers presented to you based on your interactions with the Intuit Platform’s products, services, and offerings. Our advertising partners may place cookies on unaffiliated websites in order to serve advertisements that may be relevant to you based on your browsing activities and interests and determine the effectiveness of such advertisements.
Credit Karma does not sell or share Personal Information subject to the CCPA, and therefore does not offer a “Your California Privacy Rights” link on its website.
GPC response excludes Credit Karma; Do Not Track is not honored
Intuit says it responds to Global Privacy Control for U.S. residents, expressly excluding Credit Karma. It does not respond to Do Not Track because no formal standard exists. The California provision separately says Credit Karma does not sell or share CCPA-covered information, explaining why it offers no California-rights link.
Details not recorded for this card
Supporting quotations
Intuit (excluding Credit Karma) responds to the Global Privacy Control signal for US residents, as described further in the United States section below. However, we do not respond to “Do Not Track” signals because there is no formal “Do Not Track” standard.
Credit Karma does not sell or share Personal Information subject to the CCPA, and therefore does not offer a “Your California Privacy Rights” link on its website.
Cross-references
contrast (model-proposed): Covered state residents have targeted-advertising controls — The general U.S. GPC statement excludes Credit Karma while the other-state provision uses broad automatic opt-out wording. Both are preserved; the latter is not treated as an unqualified Credit Karma GPC promise.
Legal and protection disclosures may occur without consent
As permitted by law, Intuit may disclose data without consent when it reasonably believes legal process requires it, to protect rights, property or safety, defend attacks, enforce agreements, prevent fraud or illegality, collect debts, or work with regulators and tax agencies for fraud prevention, protection or required risk controls.
Details not recorded for this card
Supporting quotations
We may share your personal information with third parties for legal reasons without your consent, and as permitted by law, including:
When we reasonably believe disclosure is required in order to comply with a subpoena, court order, or other applicable law, regulation or legal process;
To protect the rights, property, or safety of Intuit, TurboTax, the Intuit Platform, our customers or others;
To protect or defend against attacks;
To enforce, remedy, or apply our Terms of Service or other agreements;
To prevent fraud, cybersecurity attacks or illegal activity;
For debt collection; and
With regulatory agencies, including government tax agencies, as necessary to help detect and combat fraud and/or protect our customers, users and/or the Intuit Platform, or in required institutional risk control programs.
Sharing & Disclosure · User right or choice
Advertising opt-out resources are available
The statement says you may be able to opt out of interest-based ads through the Choices Opt-Out Page or the Canadian DAA page for Canadian users. It refers to the Intuit and Mailchimp cookie policies for further practices and settings; those policies are not supplied here.
International processing has a U.S. tax-return exception
Intuit may store and process information in the U.S. and other countries where it or its affiliates, subsidiaries or providers operate, as law permits; protections may differ or be weaker. U.S. Tax Return Information instead stays processed and stored in the U.S. unless you consent to transfer, in accordance with applicable law. Intuit says it uses appropriate safeguards for processing outside your jurisdiction.
Details not recorded for this card
Supporting quotations
Unless you have provided us with consent to transfer your personal information, US Tax Return Information shall be processed and stored in the United States in accordance with applicable law.
With the exception noted above, Intuit reserves the right to store and process your personal information in the United States and in any other country where Intuit or its affiliates, subsidiaries, or service providers operate facilities in accordance with and as permitted by applicable laws and regulations. Some of these countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective).
When we transfer, store or process personal information outside of your jurisdiction (including to or in the United States, as described above), we take appropriate safeguards to require that your personal information remain protected in accordance with this Privacy Statement and applicable law.
Sharing & Disclosure · Company commitment
Mailchimp promises a choice before materially new use or outside sharing
In this DPF passage, Mailchimp says it will offer an opt-out or collect opt-in consent before using personal data for a materially different new purpose or sharing it with an external party outside the policy, meaning a party other than its processor. This entity-specific promise should not be generalized to every Credit Karma activity.
Details not recorded for this card
Supporting quotations
Should we need to use your personal data for a new purpose that is materially different from the purpose for which the personal data was originally collected, or share it with an external party not covered by this Privacy Policy (i.e., not our processor), The Rocket Science Group LLC d/b/a Mailchimp will offer you the opportunity to opt out through whatever means is most appropriate or collect your opt in consent before engaging in the new use or sharing.
Sharing & Disclosure · Restriction or exception
U.S. tax-return use or disclosure beyond preparation generally needs consent
For U.S. Tax Return Information, Intuit will not use or disclose it, even to group companies, without consent except as necessary for tax preparation or as authorized by law. If you agree to other uses or sharing, including platform use, this statement governs that handling.
Details not recorded for this card
Supporting quotations
US Tax Return Information
Except as necessary to provide you with tax preparation services or as authorized by law, we will not use or disclose your Tax Return Information – including to Intuit Group Companies – unless you consent.
If you agree to use or share your Tax Return Information for purposes other than tax preparation services, including use by the Intuit Platform, your Tax Return Information will be handled in accordance with this Privacy Statement.
Cross-references
qualifies (model-proposed): Information can power experiences across Intuit products — The platform-wide combination of data remains subject to the U.S. tax-return consent restriction, except necessary preparation or legal authorization.
California sharing opt-outs distinguish Intuit, Mailchimp and Credit Karma
For applicable CCPA sharing, Intuit offers a footer privacy-rights link and granular account preferences, plus automatic opt-out through recognized signals. Intuit and Mailchimp say they do not sell CCPA personal information; Credit Karma says it neither sells nor shares CCPA-covered information and therefore has no such footer link. Intuit also says it does not knowingly sell or share under-16s’ information. The broader signal statement expressly excludes Credit Karma from Intuit’s GPC response.
Details not recorded for this card
Supporting quotations
You can opt-out of the “sharing” of your Personal Information by visiting the “Your California Privacy Rights” link located at the footer of the Intuit website, or to make more granular choices, by visiting the Preferences section of your Intuit Account.
If you have enabled a recognized opt-out mechanism on your browser, device, or platform, you will automatically be opted out of any “sharings” when you interact with our Services.
Intuit and Mailchimp do not sell Personal Information under the CCPA. Credit Karma does not sell or share Personal Information subject to the CCPA, and therefore does not offer a “Your California Privacy Rights” link on its website. We do not knowingly sell or share the Personal Information of individuals under 16 years of age.
California customers may ask about direct-marketing disclosures
California customers can submit a written request using the listed contacts for certain information about categories disclosed, if any, to third parties or affiliates for those parties’ direct marketing.
Details not recorded for this card
Supporting quotations
Customers who are California residents may request certain information concerning the categories of personal information (if any) we disclose to third parties or affiliates for their direct marketing purposes. If you would like more information, please submit a written request to us using the contact information provided below.
Sharing & Disclosure · User right or choice
Covered state residents have targeted-advertising controls
For residents and information covered by the state section, Intuit points to footer Manage Cookies or Privacy Settings controls; Mailchimp describes optional tracking controlled through Cookie Preferences. It says Intuit, Mailchimp and Credit Karma do not otherwise sell personal information for money. Recognized signals automatically opt out of targeted-ad tracking, but the earlier general signal provision expressly excludes Credit Karma from Intuit’s GPC response. These statements should not be collapsed into a universal Credit Karma GPC promise.
Details not recorded for this card
Supporting quotations
You may opt-out of tracking for targeted advertising by visiting the “Manage Cookies” or “Privacy Settings” link located at the footer of the Intuit website.
Intuit, Mailchimp and Credit Karma do not otherwise “sell” your Personal Information to third parties for monetary consideration.
In addition, if you have enabled a recognized opt-out mechanism on your browser, device, or platform, you will be automatically opted out of tracking for targeted advertising purposes when you interact with our Services.
Not stated here
The regional signal wording does not expressly reconcile its general language with the earlier Credit Karma exclusion; no broader Credit Karma signal obligation is inferred.
Cross-references
contrast (model-proposed): GPC response excludes Credit Karma; Do Not Track is not honored — The general U.S. GPC statement excludes Credit Karma while the other-state provision uses broad automatic opt-out wording. Both are preserved; the latter is not treated as an unqualified Credit Karma GPC promise.
Sharing & Disclosure · Restriction or exception
Canadian data may be disclosed to authorities in other jurisdictions
The Canada section warns that, despite protection measures, personal information may be disclosed in response to valid demands or requests from governments, regulators, courts and law enforcement in other jurisdictions or countries.
Details not recorded for this card
Supporting quotations
While we take steps to maintain protection of your personal information, your personal information may be disclosed in response to valid demands or requests from governments, regulators, courts and law enforcement authorities in those other jurisdictions or countries.
Sharing & Disclosure · Company practice
UK product searches may share financial and contact data with named partners
For UK residents searching through the platform for financial or other products, including energy, internet and mobile offers, Intuit may share contact details, birth date, employment, income and housing/employment expenses with partners including HD Decisions, Capital One, Monevo, CarFinance 247 and Decision Tech. The linked partner policies are separate and their contents are not inferred.
Details not recorded for this card
Supporting quotations
For residents in the UK searching for financial or other products (including energy, internet, or mobile phone offers) through the Intuit Platform, we may share your personal information, including your contact details, date of birth, as well as the information you give us about your employment, income, and housing and employment expenses with third parties, including HD Decisions, Capital One, Monevo, CarFinance 247, and Decision Tech.
The partner privacy policies are linked but not supplied; no claims are made about their data use.
Sharing & Disclosure · User right or choice
European advertising opt-out resources include Mailchimp cookie preferences
Users in the European regional section may be able to opt out of interest-based ads through Network Advertising Initiative, Your Online Choices or the UK/EU GDPR Centres. Mailchimp targeted-ad tracking requests use its website’s footer Cookie Preferences control. These are opt-out routes, not a promise that all advertising stops.
Details not recorded for this card
Supporting quotations
You may be able to opt-out of such interest-based advertising by visiting
For Mailchimp, you can submit requests to opt-out of tracking for targeted advertising purposes by visiting the “Cookie Preferences” link in the footer of the
Sharing & Disclosure · Restriction or exception
Using certain API features also subjects you to the provider’s privacy policy
Intuit may use providers such as YouTube and Twilio for particular features. Choosing those features means accepting the third party’s privacy policy as well. The statement points to Google security permissions for YouTube API data and Twilio’s privacy notice for its data choices; those external policy terms are not supplied here.
Details not recorded for this card
Supporting quotations
We may share your personal information in the following circumstances:
We may use third party API services, such as YouTube and Twilio, for certain product features. If you choose to use those features, you acknowledge and agree that you are also bound by the third party’s privacy policy.
You may manage your YouTube API data by visiting Google’s security settings page
You may make choices about your Twilio API data by visiting Twilio’s privacy notice
Sharing & Disclosure · Company practice
Partner interaction can send data before you submit an application
Choosing to interact with a platform partner, apply for its offering or link an account is treated as consent and direction to share information with that partner. In some cases clicking through sends data automatically even though you still must submit the partner application. Information provided through Intuit or directly is subject to the partner’s practices and terms.
Details not recorded for this card
Supporting quotations
If you choose to interact with a platform partner, apply for their services or offerings, or otherwise link or sync your account to a platform partner’s product or service, you consent and direct us to share your personal information to the platform partner providing the service or offering.
In some cases, if you click through to go to a platform partner’s site, you will automatically be sending your personal information to that platform partner. When this happens, you will still have to submit your application on the platform partner’s site. Remember that any information you provide to a platform partner, whether through us or on your own, will be subject to their privacy practices and terms and conditions.
Sharing & Disclosure · Restriction or exception
Social sharing and public posts can expose personal information
Social-account features may let you share information potentially visible worldwide under the social provider’s policy rather than this statement. Public reviews, questions, comments and other forum content, including names or usernames, are public.
Details not recorded for this card
Supporting quotations
Any information you choose to share on social media may potentially be visible to a global audience and will be subject to the social media provider’s privacy policies (not this Privacy Statement).
We may provide opportunities for you to publicly post reviews, questions, comments, suggestions, or other content that may include personal information, such as your name or username. Anything you share in a public forum is public
Sharing & Disclosure · Restriction or exception
Joint features and events involve sharing with your consent
With your consent, Intuit may share personal information with third parties jointly providing features, sales initiatives, promotions or events.
Details not recorded for this card
Supporting quotations
With your consent we may share your personal information with third parties who are jointly providing features, sales initiatives, promotions or events with us.
Sharing & Disclosure · Permission or license
Wireless use authorizes limited carrier disclosure for identification and fraud prevention
Using a wireless device with the platform authorizes the carrier to use or disclose available account and device information to Intuit or its service provider for the business relationship’s duration, solely to identify you or your device and prevent fraud.
Details not recorded for this card
Supporting quotations
When you use your wireless device in connection with the Intuit Platform, you authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to Intuit or its service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud.
Sharing & Disclosure · Company commitment
Text-program data is not passed to third parties for their own marketing
Intuit says personal information collected through its text-messaging program will not be shared, sold or rented to affiliated or unaffiliated third parties for their own marketing. This is a program-specific restriction, not a prohibition on every form of sharing.
Details not recorded for this card
Supporting quotations
Personal information collected through the text messaging program will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.
Research disclosures must not identify individuals
Intuit may share information with academic institutions, governments, nonprofits and others for research or academic/policy publication with appropriate controls, but says it only shares it in a way that identifies no individual.
Details not recorded for this card
Supporting quotations
We also share your personal information with third parties in the following circumstances.
With appropriate controls, we may share information with third parties, such as academic institutions, government and non-profit organizations, for research purposes or to publish academic or policy-related materials. We only share information in a way that does not identify any individual.
Sharing & Disclosure · Company practice
Financial products and credit issues can lead to financial-party disclosures
For financial products, Intuit may share personal information with collection agencies, credit bureaus, loan-service providers and payment-card association members. Fraud, credit, defaults or debt collection can also involve disclosures to companies, lawyers, agents, government agencies and card associations.
Details not recorded for this card
Supporting quotations
In connection with our financial products, we may share personal information with collection agencies, credit bureaus and loan services providers, and payment card association members. We may also share your personal information with other companies, lawyers, credit bureaus, agents, government agencies, and card associations in connection with issues related to fraud, credit, defaults, or debt collection.
Sharing & Disclosure · Company practice
Service providers including generative AI providers receive data with protection requirements
Intuit shares data with agents and providers acting on its behalf for stated purposes, including advertising, sales, hosting, security, business operations and AI services. Providers must implement reasonable privacy and information-protection controls consistent with this statement. This describes Intuit’s providers, distinct from cases where Intuit itself processes data for a customer under that customer’s terms.
Details not recorded for this card
Supporting quotations
We share personal information with our service providers or agents who provide services on our behalf for the purposes described in this Privacy Statement. Service providers or agents are required to implement reasonable privacy and information protection controls to maintain the privacy and security of information provided to them consistent with the privacy practices outlined in this Privacy Statement.
Service providers or agents also include AI providers, including generative AI providers.
Sharing & Disclosure · Company practice
Corporate transactions can involve disclosures before and after completion
In mergers, asset sales, financing, liquidation, bankruptcy or business acquisitions, Intuit may share personal information with the other company and its advisers before and after the transaction.
Details not recorded for this card
Supporting quotations
If we are involved with a merger, asset sale, financing, liquidation, bankruptcy, or the acquisition of all or part of our business to another company, we may share your personal information with that company and its advisors before and after the transaction date.
Sharing & Disclosure · Company practice
Affiliate sharing includes marketing, subject to applicable limits
Intuit may share information with affiliates and subsidiaries for the stated everyday business purposes, including marketing, development, improvement and personalization. Certain laws can let you limit particular sharing; regional terms provide details. Text-program data has the separate restriction against third parties’ own marketing. U.S. Tax Return Information also requires consent for group-company use or disclosure unless necessary for tax preparation or authorized by law.
Details not recorded for this card
Supporting quotations
We may share your personal information with our affiliates and subsidiaries for everyday business purposes as described in this Statement, including for marketing purposes, for improving and developing our offerings, and for personalizing your experience on our Platform. Certain laws may provide you with the right to limit our information sharing activities in certain circumstances. Please review these rights in the “Region and state-specific terms” section below.
Personal information collected through the text messaging program will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.