Global Privacy Statement

Credit Karma · agreement dated March 9, 2026 · Official agreement

Read the agreement

129 of 129 cards

Legal Rights & Agreement Rules · Context

Statement last updated March 9, 2026

This stored statement identifies March 9, 2026 as its last update; it does not establish that linked earlier versions or later changes have been reviewed.

Details not recorded for this card

Supporting quotations

Last Updated: March 9, 2026

Legal Rights & Agreement Rules · Context

A global statement with product supplements and exclusions

The statement covers Intuit Inc. and its group companies across their Services, including websites, apps, social media, marketing and data provided by other businesses. Product supplements may also apply. Customer-controlled processor work and the specified education processing are excluded, so “global” does not mean every Intuit processing activity is governed here.

Details not recorded for this card

Supporting quotations

These services include, as applicable, our websites, mobile applications, social media pages, marketing activities, and other activities described in this Privacy Statement, or when other businesses provide us your personal information (collectively, the “Services”). This Privacy Statement is global, meaning it applies to all Intuit Services. We may provide additional or supplemental privacy statements for certain products or services.
This Privacy Statement does not apply to certain processing activities where we are not the controller
This Privacy Statement also does not apply to Intuit’s processing of education records subject to state or federal laws or children’s data in our education curriculum products.

Not stated here

  • Linked product supplements and the education statement are not supplied here.
Also annotated in the same passage (1)

Use & Processing · Company practice

Tax preparation, platform services and business operations are covered

The described processing includes TurboTax tax-return preparation, providing the websites and platform benefits, and operating, improving and developing the business. Personalization may include ads or Intuit product recommendations depending on your settings. The tax-return definition concerns TurboTax preparation, not all information held by every service.

Details not recorded for this card

Supporting quotations

This Privacy Statement describes our privacy practices when we process:
Personal information for the purposes of preparing a tax return or in connection with the preparation of a tax return (collectively, “Tax Return Information”) as part of providing TurboTax tax preparation services;
Personal information for the purposes of providing the benefits of our websites and the Intuit Platform, including as defined in our applicable Terms of Service; and
Personal information as necessary to manage, run, improve, and develop our business and personalize your experience while interacting with the Intuit Platform. Depending on your settings, this may include showing you personalized ads or recommending certain Intuit products based on your interests.

Sharing & Disclosure · Company practice

Intuit determines its processing and may share within its group

For the processing described here, Intuit acts as a controller determining purposes and means. It may share information within its group and process it as controllers or joint controllers for the stated purposes.

Details not recorded for this card

Supporting quotations

Intuit determines the purposes and means of the processing of your personal information as described in this Privacy Statement, and therefore acts as a ‘data controller’ (or equivalent/similar terms under applicable data privacy laws) of such information.
and conduct processing activities as controllers or joint controllers for the purposes set out in this Privacy Statement.

Legal Rights & Agreement Rules · Restriction or exception

Other controllers answer for their own processing

An employer or financial partner may independently control processing alongside Intuit. Intuit determines its own activities and disclaims responsibility for those other controllers; questions and rights requests about their activities should go directly to them.

Details not recorded for this card

Supporting quotations

Intuit is not responsible for other data controllers’ processing activities, and you should contact them directly for questions about how they process your personal information and about how to exercise your privacy rights in relation to such processing.

Legal Rights & Agreement Rules · Restriction or exception

Customer privacy terms govern when Intuit is a processor

When Intuit processes data on a customer’s behalf, including professional tax software customers, that customer’s privacy statement and Intuit’s agreement with the customer govern. Contact the customer about that processing or to exercise related rights.

Details not recorded for this card

Supporting quotations

When we act as a processor or service provider, the privacy statement of the customer who uses our Services applies, instead of this Privacy Statement, and our processing of such personal information is governed by our agreements with such customers. If you have concerns about personal information that we process on behalf of a customer, or wish to exercise your privacy rights regarding such personal information, please contact the customer directly.
Also annotated in the same passage (1)

Legal Rights & Agreement Rules · Procedure

Questions about Intuit processing go to its contact section

The statement directs questions about Intuit’s processing to the contact details given later in the document. This does not replace the instruction to contact a customer or independent controller about its own processing.

Details not recorded for this card

Supporting quotations

If you have any questions about how Intuit processes your personal information, please see How to contact us below.

Account & Service Control · Company practice

Business administrators can control account access and information

For services that give access to a business account, such as QuickBooks, the owner or designated administrator can decide access rights, make decisions about personal information such as payroll, and require actions such as clock-in location tracking. Changes in access rights may remove access to information the business controls.

Details not recorded for this card

Supporting quotations

Business account information
If you are granted access to a business account (for example, in QuickBooks), the business owner or a designated administrator may control and administer details of your account, for example, by deciding your access rights; making decisions about your personal information (such as details about your payroll); or requiring you to take certain actions (for example, use location tracking to clock in for a shift). If the owner or designated administrator changes your access rights, then you may lose access to the information the business controls.
Also annotated in the same passage (1)

Account & Service Control · Restriction or exception

Business account use may follow the business’s own policies

A business owner or administrator can control account access and personal-information decisions. Business account use may also be subject to the business’s policies, which can differ from this statement. Intuit disclaims responsibility for those businesses’ privacy and security practices and advises considering their policies before connecting.

Details not recorded for this card

Supporting quotations

If the owner or designated administrator changes your access rights, then you may lose access to the information the business controls.
Your use of the Intuit Platform as part of a business account may be subject to the business’s policies, which may differ from this Privacy Statement. We are not responsible for the privacy or security practices of other businesses
Also annotated in the same passage (1)

Data Access & Collection · Context

What is collected depends on your interactions and settings

Collection depends on your interactions, account configuration and choices, including privacy settings. Processing also varies with the service or feature used, location and applicable law; the following categories are not a claim that every item is collected from every user.

Details not recorded for this card

Supporting quotations

The personal information that we collect or otherwise receive about you depends on the context of your interactions with Intuit, how you configure your account, and the choices you make, including your privacy settings. The way we process your personal information may also depend on the particular Services, functionalities, or experiences you use, your location, and applicable law.

Data Access & Collection · Company practice

Account setup and uploads can provide profile and payment data

When you or your organization create an account, activate a subscription or upload information, Intuit collects account information. Possible fields include names, employment and education, contact addresses, photo, payment and purchase history, demographics, preferences, subscription details and credentials. Collection varies with the interaction and settings.

Details not recorded for this card

Supporting quotations

We collect information when you (or your organization) create an account, activate a subscription, and/or upload information to the Intuit Platform.
Personal information may include your name, previous name(s) and/or nicknames, title and honorifics, professional title and company name, education, billing and mailing addresses, phone number and email address, profile photo, billing information (your payment information), purchase history, demographic information, preferences, subscription data, and your username and account credentials.

Data Access & Collection · Company practice

Identity checks may involve government identifiers

Intuit collects identifying information to verify identity and help with tax filing, including name, birth date, Social Security or social insurance numbers, driver’s license, passport and similar government identification. Which information is involved depends on the service and interaction.

Details not recorded for this card

Supporting quotations

We collect information to verify your identity, including your name, date of birth, social security number, social insurance number, driver’s license number, passport number, government-issued identification details, and similar information to verify your identity and to help you file your tax return.

Data Access & Collection · Company practice

Support and other interactions can be recorded

Support, feedback, optional surveys, events, research, training and other communications may provide Intuit your contact details and information you choose to share. Records can include monitored or recorded calls, chats, texts, voicemail, photos and audio/video, including recordings around physical locations.

Details not recorded for this card

Supporting quotations

We may collect personal information such as your name, email address, telephone number and any other personal information you choose to share when you reach out to us for support, give us feedback, participate in optional surveys, attend our events, participate in product research or training, or otherwise interact or communicate with us.
This information may include: call center recordings and call monitoring records, chat and text records, voicemails, photographs, and other audio recordings or video images, including those recorded in and around our physical locations.

Data Access & Collection · Company practice

Marketing preferences and community posts reach Intuit

You may provide contact details and marketing preferences. Intuit also receives content posted on its social-media and community pages.

Details not recorded for this card

Supporting quotations

You may provide us with your contact information and preferences for receiving marketing communications.
We receive content you post on our social media pages and our community pages.

Data Access & Collection · Company practice

Business and financial information may include other people’s details

Intuit may receive business finances, expenses, invoices, statements, transactions, payroll, payments, taxes, income, wages and investments, as well as information about customers, vendors and employees. This describes possible categories rather than collection of all categories from every user.

Details not recorded for this card

Supporting quotations

We may receive information about your business, your finances, expenses, invoices, financial statements, details of your financial transactions, payroll details, payment details, tax return details, details about your customers, vendors, or employees, income and wage information, and/or investment information.

Data Access & Collection · Company practice

Expert and chatbot interactions provide information

Intuit may receive questions, account details and guidance from interactions with live experts such as accountants or tax preparers. It may also receive information through chatbots, digital assistants and other interactive bots.

Details not recorded for this card

Supporting quotations

When you interact with these experts, we may receive information about the questions you ask, the details of your accounts, and the guidance provided to you.
We may receive information from you through your use of chatbots, digital assistants, or other interactive bots across the Intuit Platform

Data Access & Collection · Restriction or exception

Device and contact access requires device-setting permission

Certain features may access your device and contacts if you grant permission in your device settings.

Details not recorded for this card

Supporting quotations

If you grant permission in your device settings, certain features may have access to your device and contacts.

Inference & Profiling · Company practice

Interactions with Intuit customers can support recommendations about you

If you are an Intuit customer’s customer, vendor or prospect and interact through the platform—for example to pay an invoice, shop, engage with email or complete a survey—Intuit uses that information to make recommendations about you to its customers. Customers can also supply information directly. Anyone inputting others’ information must first provide sufficient notice, obtain required permissions and have a legal basis where law requires one.

Details not recorded for this card

Supporting quotations

If you are a customer, vendor or prospect of an Intuit customer and interact with the Intuit Platform (for example, to pay an invoice, make a purchase, interact with an email, provide contact details or complete a survey), we will use this information to make recommendations about you to our customers.
Our customers may also provide business connection data directly about you to us; this is described below under ‘Other users’.
Third-party sources
If you input information about others into the Platform, you must only do so if you have first provided sufficient notice and received any required permissions, and have an appropriate legal basis if required by applicable law.
Also annotated in the same passage (1)

Data Access & Collection · Restriction or exception

Other people can supply your data; inputters must meet notice and permission duties

Intuit customers and other users may input information about you. If you input information about others, you must first give sufficient notice, obtain any required permissions and have an appropriate legal basis if law requires one.

Details not recorded for this card

Supporting quotations

As a result of those connections, others may be able to input personal information about you, including other customers using the Intuit Platform.
If you input information about others into the Platform, you must only do so if you have first provided sufficient notice and received any required permissions, and have an appropriate legal basis if required by applicable law.
Also annotated in the same passage (1)

Data Access & Collection · Restriction or exception

Third-party data is subject to consent or law and source restrictions

Intuit may obtain personal information from third parties with your consent or where law permits. It processes and protects that information under this statement consistently with additional restrictions imposed by the source. The sources vary over time and with platform use.

Details not recorded for this card

Supporting quotations

We may also receive personal information about you from other third parties where you have provided consent or where permitted by applicable law. We protect and process the personal information obtained from those third parties as described in this Privacy Statement, consistent with any additional restrictions imposed by the source of the information.

Linking & Identification · Company practice

Syncing a non-Intuit service brings information into Intuit

If you choose to sync an external account or service, Intuit receives its information according to that account’s settings, potentially including bank, social-media, purchase-history or business sales data. This is the inbound data flow; partner interactions can separately direct outbound sharing.

Details not recorded for this card

Supporting quotations

If you choose to sync a non-Intuit account/service with your Intuit account, we will receive information from that account/service according to your settings with that account/service. This may include details of your bank account information, social media information, purchase history or your business’s sales records through a point of sale application.

Data Access & Collection · Company practice

Outside providers supplement identity and troubleshooting information

Third parties help verify identity and business details and supplement or validate supplied information; they may include financial institutions, telecom and email providers. Support providers also supply troubleshooting information, potentially including call records, voicemail, photos and chats. The general consent-or-law and source-restriction conditions apply.

Details not recorded for this card

Supporting quotations

We work with certain third parties to help us verify your identity, the specifics of your business, and/or supplement the personal information you have provided and ensure the accuracy of your personal information.
These providers may include, for example, your financial institution, telecommunications provider, or email provider.
We receive personal information about you or your interaction with the Intuit Platform from certain third parties for troubleshooting purposes.
including call center recordings, call monitoring records, voicemails, photographs and chat records.

Data Access & Collection · Company practice

Credit bureaus can supply scores, reports and additional personal information

Where Intuit offers credit reports and scores, it requests them on your behalf from partners such as TransUnion, Experian and Equifax. Those partners may also supply employment or income information, Social Security numbers, vehicle or driver data and credit-profile offers to support personalized recommendations. This is subject to the stated consent-or-law condition and source restrictions.

Details not recorded for this card

Supporting quotations

We request these reports and credit scores on your behalf from credit bureau partners, like TransUnion, Experian and Equifax. These partners may also provide personal information such as employment or income data, social security number, vehicle or driver information, or information about special offers available based on your credit profile so we can make more personalized recommendations for you.

Data Access & Collection · Company practice

Users and risk-management providers can supply information

Intuit may receive data from accountants, bookkeepers, tax preparers, spouses, employers, business customers and referral programs. It may also receive data from risk, cybersecurity and anti-fraud providers to assess offering-related risks, combat illegal activity and protect information. Third-party collection remains subject to consent or applicable law and source restrictions.

Details not recorded for this card

Supporting quotations

we may receive personal information about you from other Intuit Platform users, such as your accountant, bookkeeper, tax preparer, spouse, employer, or other business customers using the Intuit Platform
We may also collect such personal information through features like member referral programs.
We may receive personal information from third parties that help us assess risks associated with our offerings, including to help combat fraud and illegal activity and to help protect your personal information.

Data Access & Collection · Company practice

Licensed data, public content and government records are information sources

Sources can include demographic and preference data licensors, companies making user-generated content available, government and tax agencies, and public databases and social platforms. Intuit also identifies joint offerings and marketing partners as a source category without detailing a separate data set there. Consent-or-law and source restrictions still apply.

Details not recorded for this card

Supporting quotations

We may receive information from information services and data licensors that provide demographic and preference information to us.
We may receive personal information from companies that make user-generated content from their service available to others, such as local business reviews or public social media posts.
We may offer co-branded services or experiences or engage in joint-marketing activities with others, including through our conferences or live events.
We receive information from government agencies, including from various tax agencies, such as your tax filing confirmation from the IRS.
We collect individual and household demographic information and preference information from publicly available sources, such as open government databases, social media platforms, and others.

Data Access & Collection · Company practice

Devices and service interactions may be logged automatically

Intuit, its service providers and business partners may automatically log information about you, devices and interactions over time. Examples include IP addresses, logs, errors, device types and identifiers, pages and features used, browser type and interactions with links or communications. Precise location and motion collection has the separate device-permission condition described next.

Details not recorded for this card

Supporting quotations

We, our service providers, and our business partners may automatically log personal information about you, your computer or mobile device, and your interaction over time with the Services
We may collect information about your device(s) such as IP addresses, log information, error messages, device type, and unique device identifiers.
We may collect information about your use of the Intuit Platform, such as the pages you viewed, the services and features you used or interacted with, your browser type, and details about any links or communications with which you interacted.
Certain features in the Intuit Platform may collect your precise location information, device motion information, or both, if you or your organization grant(s) us permission to do so through your device settings
Also annotated in the same passage (1)

Data Access & Collection · Restriction or exception

Precise location and device motion depend on device permission

Certain features may collect precise location, device motion or both when you or your organization grant permission through device settings. Examples include QuickBooks time tracking, Karma Drive and CK Money’s nearby ATM finder.

Details not recorded for this card

Supporting quotations

Certain features in the Intuit Platform may collect your precise location information, device motion information, or both, if you or your organization grant(s) us permission to do so through your device settings (for example, if you use QuickBooks’ time-tracking service, participate in Karma Drive, or use CK Money to locate nearby ATMs).
Also annotated in the same passage (1)

Data Access & Collection · Company practice

Desktop syncing can collect data and store personal information locally

Some web-enabled desktop offerings synchronize with information on your computer. Intuit may collect device information, product usage and error reports during that process and may store personal information locally on your device.

Details not recorded for this card

Supporting quotations

Some of our web-enabled desktop services and offerings synchronize with the information on your computer. In doing so, we may collect information such as device information, product usage, and error reports. We may also store personal information locally on your device.

Data Access & Collection · Company practice

Invisible email pixels can track communication interactions

Intuit or its service providers may obtain interaction data from email and communications providers or social networks, including whether emails are opened or forwarded. Invisible pixel tags in emails may be used for this tracking.

Details not recorded for this card

Supporting quotations

We or our third-party service providers may collect information from email providers, communication providers and social networks, such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.

Data Access & Collection · Company practice

Behavioral collection extends to customer sites and campaigns

Intuit may automatically collect device identifiers, page views, search results and link interactions on its sites, customers’ sites or stores, social sites and campaigns. For customer contacts, it may record delivery, views, opens, clicks, bounces and spam treatment of campaigns using its offerings.

Details not recorded for this card

Supporting quotations

We may automatically collect certain personal information about your use and interactions with our websites, customers’ websites or e-commerce stores, social media websites, and marketing campaigns that we or our customers organize, including device information (such as your IP address and unique device IDs), page view information and search results, links, and if you are a customer contact, whether or not a campaign presented or sent to you using our offerings has been viewed, delivered, opened, clicked on, whether it has bounced or was treated as spam.

Data Access & Collection · Company practice

Cookies and session replays can record detailed interactions

Intuit and service providers may use cookies and similar tools to deliver requested experiences, recognize visits, track interactions and improve services. Session replay tools such as FullStory and Medallia may record clicks, touches, mouse movements, scrolls and keystrokes for usability diagnosis and improvement. The statement provides a FullStory recording opt-out and says you control some cookie collection and use; linked cookie policies supply further details not included here.

Details not recorded for this card

Supporting quotations

Intuit and our service providers may use commonly used tools such as cookies, web beacons, pixels, local shared objects and similar technologies (collectively “cookies”) to collect information about you (“Cookie Information”) so we can provide the experiences you request, recognize your visit, track your interactions, and improve your and other customers’ experiences.
The replays include users’ clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions. These replays help us diagnose usability problems and identify areas for improvement.
and you can opt-out of session recording by FullStory
You have control over some of the information we collect from Cookies and how we use it. Please see Your Personal Information Rights and Choices section for more information.

Not stated here

  • The linked Intuit and Mailchimp cookie policies are not supplied in this source.

Use & Processing · Company practice

Personal information supports accounts, services and support

Intuit may use personal information to provide the platform, create accounts, manage the relationship and business, resolve billing or other disputes, deliver requested services and credit reports or scores, connect users with experts or others, communicate financial-privacy notices, provide support and authenticate identity. Other uses may be described at collection.

Details not recorded for this card

Supporting quotations

We may use your personal information in a number of ways or as otherwise described at the time of collection:
Service delivery and operations. We may use your personal information to:
Provide you with the Intuit Platform, create your account and manage our relationship with you
Run and manage our business, including resolving billing and financial disputes
Provide features to you, such as your free credit reports and scores
Provide a product or service that you have requested through the Intuit Platform
Connect you with experts and other users
Communicate with you, such as sending you electronic notifications concerning your financial privacy
Provide you with support and resolve disputes
Authenticate your identity

Inference & Profiling · Company practice

Information supports eligibility checks and tailored experiences

Intuit may use information to evaluate eligibility for offers, products and services, understand needs and interests, and personalize services and communications. The separate marketing provision explains that insights from interactions can tailor recommendations, advertising and offers on Intuit and outside channels.

Details not recorded for this card

Supporting quotations

Evaluate your eligibility for marketing offers, products and services
Understand your needs and interests, and personalize your experience with the Services and our communications.
Personalize your experience and tailor recommendations, advertising, and offers presented to you, including through the development of insights about you and your needs based on your interactions with the Intuit Platform’s products, services, and offerings. These advertisements may be displayed to you on Intuit’s digital properties, including our websites and mobile apps, media platforms, connected devices, or other third-party platforms and channels.
Also annotated in the same passage (1)

Use & Processing · Company practice

Information is used for events and office security

Intuit may manage event registration, attendance and communications, register office visitors for security, and administer visitor nondisclosure agreements.

Details not recorded for this card

Supporting quotations

Manage event registrations and attendance, including sending related communications to you
Register visitors to our offices for security reasons and manage non-disclosure agreements that visitors may be required to sign

Sharing & Disclosure · Company practice

Advertising networks can receive data, with a Credit Karma CCPA exception

Intuit may share data with advertising providers to tailor offers based on platform interactions, and partners may place cookies on other sites to tailor and measure ads. Regional terms matter: Credit Karma says it does not sell or share personal information subject to the CCPA. That legal use of “share” does not mean no information is ever disclosed under this statement.

Details not recorded for this card

Supporting quotations

Intuit may share personal information with advertising networks and other providers to tailor advertising and offers presented to you based on your interactions with the Intuit Platform’s products, services, and offerings. Our advertising partners may place cookies on unaffiliated websites in order to serve advertisements that may be relevant to you based on your browsing activities and interests and determine the effectiveness of such advertisements.
Credit Karma does not sell or share Personal Information subject to the CCPA, and therefore does not offer a “Your California Privacy Rights” link on its website.
Also annotated in the same passage (2)

Sharing & Disclosure · Restriction or exception

GPC response excludes Credit Karma; Do Not Track is not honored

Intuit says it responds to Global Privacy Control for U.S. residents, expressly excluding Credit Karma. It does not respond to Do Not Track because no formal standard exists. The California provision separately says Credit Karma does not sell or share CCPA-covered information, explaining why it offers no California-rights link.

Details not recorded for this card

Supporting quotations

Intuit (excluding Credit Karma) responds to the Global Privacy Control signal for US residents, as described further in the United States section below. However, we do not respond to “Do Not Track” signals because there is no formal “Do Not Track” standard.
Credit Karma does not sell or share Personal Information subject to the CCPA, and therefore does not offer a “Your California Privacy Rights” link on its website.

Cross-references

  • contrast (model-proposed): Covered state residents have targeted-advertising controls — The general U.S. GPC statement excludes Credit Karma while the other-state provision uses broad automatic opt-out wording. Both are preserved; the latter is not treated as an unqualified Credit Karma GPC promise.
Also annotated in the same passage (2)

Account & Service Control · User right or choice

Customers can manage settings and correct certain data

Intuit offers customers privacy-management options, including those in the EU, UK/Gibraltar and Switzerland. Account settings allow privacy-setting updates, and certain personal information can be corrected directly within products at any time. Additional legal rights depend on location.

Details not recorded for this card

Supporting quotations

At Intuit, we believe that you have choices about information that pertains to you or your business.
We provide all customers, including those in the EU, UK (and Gibraltar), and Switzerland, with options to manage the privacy of their personal information.
You may update your privacy settings by visiting your account settings.
You can edit and correct certain personal information at any time by changing it directly in our products and services.
Your Rights
Depending on where you live, you may also have certain state- or country-specific rights with respect to your personal information.
Also annotated in the same passage (1)

Account & Service Control · User right or choice

Access and deletion requests have service-specific routes

You may download a copy of information through your account or the Intuit Privacy Center, or call 1 (877) 261-6470; deletion can be requested through account settings, that center or phone number. Credit Karma inquiries use its U.S. Help Center or UK/Canada rights-request pages, and Mailchimp has its own request page. A deletion request is not an unconditional promise to erase every record.

Details not recorded for this card

Supporting quotations

You may download a copy of the personal information we have about you by visiting your account
or by calling us toll-free at 1 (877) 261-6470.
If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center (for US members), the Credit Karma UK Privacy Rights Request Page (for Credit Karma UK members), or the Credit Karma Canada Privacy Rights Request Page (for Credit Karma Canada members).
You may ask us to delete your personal information by visiting your account settings
If your inquiry is specific to Mailchimp, please visit the

Cross-references

Account & Service Control · User right or choice

Change marketing preferences, unsubscribe emails or reply STOP to texts

Marketing preferences can be changed through account tools and the linked Intuit, Credit Karma U.S./UK and Mailchimp preference resources. Promotional emails include unsubscribe links. Replying STOP opts out of further marketing texts, including the Intuit SMS shortcode program. These instructions concern marketing communications.

Details not recorded for this card

Supporting quotations

To update your marketing communication preferences, you can go to the marketing preference tools in your account settings or you may use the links below. You may also unsubscribe using the link found at the bottom of all marketing and promotional emails. If you receive marketing text messages from us, including through Intuit’s SMS shortcode program, you may opt out of receiving further marketing text messages from us by replying STOP to the message.
communications preferences
communications preferences
communications preferences

Account & Service Control · Procedure

Rights requests can require identity or ownership verification

Rights may vary by state or country. To protect privacy, Intuit may ask for more information proving identity or ownership before fulfilling a data request and may be unable to act until proper documentation is provided.

Details not recorded for this card

Supporting quotations

Depending on where you live, you may also have certain state- or country-specific rights with respect to your personal information.
To help protect privacy and the security of your personal information, you may be asked to provide additional information to verify your identity and/or ownership rights before we can fulfill your data rights request. If we cannot verify your identity or your ownership rights to the data, we may not be able to service your request until you provide proper documentation.
Also annotated in the same passage (1)

Retention & Deletion · Company practice

Deletion requests and ended contracts do not always end retention

Unless deletion is specifically requested, Intuit retains data as necessary for retention requirements, services, platform benefits and business operations. Even after deletion requests or contract termination it may need records for legal/regulatory compliance, legal claims or fraud and abuse prevention. Different information may have different periods; no universal duration is stated.

Details not recorded for this card

Supporting quotations

Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform and successfully run our business. Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information for as long as necessary to:
comply with our legal or regulatory compliance needs (e.g., maintaining records of transactions you have made with us);
to exercise, establish or defend legal claims; and/or
to protect against fraudulent or abusive activity on our service.
This means we may keep different information for different periods.

Cross-references

Also annotated in the same passage (1)

Retention & Deletion · Company practice

Long-inactive account cancellation can trigger immediate deletion

If an account is canceled because it has not been used for a long time, Intuit may immediately delete its information. The statement gives neither an exact inactivity period nor a promise that every retained record is deleted.

Details not recorded for this card

Supporting quotations

If your account is canceled because you haven’t used it for a long time, we may delete this information immediately.
Also annotated in the same passage (1)

Retention & Deletion · Company commitment

Information that cannot yet be deleted is to be securely isolated

Technical, legal, regulatory or operational reasons may prevent full deletion, anonymization or de-identification. In those cases Intuit commits to reasonable measures to isolate the information securely from further processing until it can perform one of those actions.

Details not recorded for this card

Supporting quotations

There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it.

Sharing & Disclosure · Company practice

International processing has a U.S. tax-return exception

Intuit may store and process information in the U.S. and other countries where it or its affiliates, subsidiaries or providers operate, as law permits; protections may differ or be weaker. U.S. Tax Return Information instead stays processed and stored in the U.S. unless you consent to transfer, in accordance with applicable law. Intuit says it uses appropriate safeguards for processing outside your jurisdiction.

Details not recorded for this card

Supporting quotations

Unless you have provided us with consent to transfer your personal information, US Tax Return Information shall be processed and stored in the United States in accordance with applicable law.
With the exception noted above, Intuit reserves the right to store and process your personal information in the United States and in any other country where Intuit or its affiliates, subsidiaries, or service providers operate facilities in accordance with and as permitted by applicable laws and regulations. Some of these countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective).
When we transfer, store or process personal information outside of your jurisdiction (including to or in the United States, as described above), we take appropriate safeguards to require that your personal information remain protected in accordance with this Privacy Statement and applicable law.

Legal Rights & Agreement Rules · Company commitment

Transfer safeguards vary by transferring company and recipient

The statement describes adequacy decisions or regulations for some destinations. For specified non-DPF-certified group-company transfers and third-party providers or partners in destinations lacking adequacy, it identifies the June 4, 2021 EU Standard Contractual Clauses, modules 1–4, with the UK Addendum or Swiss modifications for relevant origins. DPF-certified entities have a separately described route; this card reports the statement’s mechanisms, not an independent legal adequacy finding.

Details not recorded for this card

Supporting quotations

The safeguards we use to transfer your personal information depend on the Intuit group company that transfers your information and the recipient of such information.
Some of these recipients of your personal information are located in countries for which the European Commission, the UK (and Gibraltar) Government, and the Swiss Government (as and where applicable) have issued “adequacy decisions” or “adequacy regulations” (data bridges)
Other recipients of your personal information are located in countries outside the EEA, Switzerland, and/or the UK that are not the subject of an adequacy decision.
as issued on 4 June 2021 under Article 46(2) using module 1 (controller to controller), module 2 (controller to processor), module 3 (processor to processor) and module 4 (processor to controller) transfers, including the UK Addendum permitted under Article 46(2) of the UK GDPR for the transfer of data originating in the UK and the Swiss Modifications provided for under the Swiss Federal Data Protection Act for the transfer of data originating from Switzerland.

Legal Rights & Agreement Rules · Company commitment

DPF statements name specific entities and give Principles priority

The statement says Intuit Inc. and Mailchimp comply with the EU-U.S., UK-extension and Swiss-U.S. frameworks. Its certification sentences name both for EU/UK data, but name Mailchimp specifically for Swiss data. It says the applicable DPF Principles govern conflicts with this policy. These entity-specific statements do not establish Credit Karma’s certification or independently verify certification status.

Details not recorded for this card

Supporting quotations

Intuit Inc. and The Rocket Science Group LLC d/b/a Mailchimp complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
The Rocket Science Group LLC d/b/a Mailchimp has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.
If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.

Legal Rights & Agreement Rules · Procedure

Mailchimp DPF complaints have escalation and possible arbitration routes

For EU, UK and Swiss data received under the DPF routes, Mailchimp commits to resolve Principles-related complaints and asks individuals to contact it first. Unresolved or inadequately acknowledged complaints can go to U.S.-based TRUSTe at no cost. If other DPF mechanisms do not resolve a compliance complaint, binding arbitration may be available under conditions identified on the linked DPF site. These are DPF complaint routes, not general mandatory arbitration terms for Credit Karma.

Details not recorded for this card

Supporting quotations

The Rocket Science Group LLC d/b/a Mailchimp commits to resolve DPF Principles-related complaints about our collection and use of your personal information.
should first contact The Rocket Science Group LLC d/b/a Mailchimp by using the details in the “How to contact us” section below.
If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.trustarc.com/watchdog/request for more information or to file a complaint. These dispute resolution services are provided at no cost to you.
For complaints regarding EU-U.S. DPF, the UK Extension to the EU-U.S DPF, and Swiss-U.S. DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration.

Not stated here

  • The external arbitration conditions are not supplied here.

Sharing & Disclosure · Company commitment

Mailchimp promises a choice before materially new use or outside sharing

In this DPF passage, Mailchimp says it will offer an opt-out or collect opt-in consent before using personal data for a materially different new purpose or sharing it with an external party outside the policy, meaning a party other than its processor. This entity-specific promise should not be generalized to every Credit Karma activity.

Details not recorded for this card

Supporting quotations

Should we need to use your personal data for a new purpose that is materially different from the purpose for which the personal data was originally collected, or share it with an external party not covered by this Privacy Policy (i.e., not our processor), The Rocket Science Group LLC d/b/a Mailchimp will offer you the opportunity to opt out through whatever means is most appropriate or collect your opt in consent before engaging in the new use or sharing.

Legal Rights & Agreement Rules · Company commitment

Mailchimp describes authority disclosures and onward-transfer responsibility

Mailchimp may have to disclose data in response to lawful public-authority requests, including security and law enforcement. For DPF data passed to agents, it remains responsible under the Principles for inconsistent agent processing unless it proves it is not responsible for the event causing damage. These provisions name Mailchimp.

Details not recorded for this card

Supporting quotations

In certain situations, The Rocket Science Group LLC d/b/a Mailchimp may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
The Rocket Science Group LLC d/b/a Mailchimp remains liable under the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles if the The Rocket Science Group LLC d/b/a Mailchimp’s agent processes personal information in a manner inconsistent with the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles, unless the The Rocket Science Group LLC d/b/a Mailchimp proves that it is not responsible for the event giving rise to damage.

Security & Safeguards · Company commitment

Reasonable safeguards are promised, but complete security is not

Intuit says it uses reasonable physical, technical and organizational protections designed to protect personal information, while declining to completely ensure or warrant its security.

Details not recorded for this card

Supporting quotations

We use reasonable physical, technical and organizational safeguards that are designed to protect your personal information. However, despite these controls, we cannot completely ensure or warrant the security of your personal information.

Legal Rights & Agreement Rules · Procedure

Material processing changes trigger notice through several possible channels

Intuit reserves the right to update the statement at any time. Material changes to processing will be notified through a platform or community notice, a notification, or other legally consistent means; direct individual notice is not the only method. The last-updated date identifies revisions, and readers are asked to check periodically.

Details not recorded for this card

Supporting quotations

From time to time we may change or update our Privacy Statement. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by posting a notice in the Intuit Platform or on a community post; by sending you a notification; or by other means consistent with applicable law.
You can see when this Privacy Statement was last updated by checking the “last updated” date at the top of this Privacy Statement. Please review this Privacy Statement periodically to stay informed about how Intuit protects your privacy.

Legal Rights & Agreement Rules · Restriction or exception

Intuit for Education use follows its own statement

Educators, administrators, students and parents or guardians involved with school districts using Intuit’s free financial-literacy curriculum are directed to the separate Intuit for Education Privacy Statement. This statement does not govern their use of those services.

Details not recorded for this card

Supporting quotations

Children
this privacy statement does not apply to your use of those services.
describes our practices and your rights related to the use of Intuit for Education.

Not stated here

  • The separate education statement is not included here.
Also annotated in the same passage (1)

Data Access & Collection · Company commitment

Services are not directed to under-13s, with education separately governed

Outside the separately governed Intuit for Education services, Intuit says the services are not intended for or directed to children under 13 and it does not knowingly collect children’s personal information. It asks readers who believe it holds a child’s information to contact it. The education exclusion must not be read as a universal ban on children’s data across every Intuit product.

Details not recorded for this card

Supporting quotations

this privacy statement does not apply to your use of those services.
Otherwise, our Services are not intended for or directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we may have information from a child, please contact us.
Also annotated in the same passage (1)

Legal Rights & Agreement Rules · Procedure

Privacy questions have product-specific forms and a free complaint escalation

Intuit invites questions and comments through its privacy question form, Credit Karma’s support-case form or Mailchimp’s privacy-rights page. If a privacy or information-use complaint remains unsatisfactorily addressed, it directs users to its U.S.-based third-party dispute-resolution provider free of charge.

Details not recorded for this card

Supporting quotations

If you have questions or comments about this Privacy Statement or our practices, please contact us.
You can submit Intuit privacy questions.
You can submit Credit Karma privacy questions.
You can submit Mailchimp privacy questions.
If you have an unresolved privacy or information use concern or complaint that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge)

Legal Rights & Agreement Rules · Context

Additional terms depend on residence and product

Additional rights and terms may apply based on your country of residence or the products you use. The U.S. provisions are introduced for U.S. residents; this does not extend each regional rule to every platform user.

Details not recorded for this card

Supporting quotations

Additional terms may apply to you based upon the country you reside in or the products you use.
If you are a resident of the United States, you may have the following rights and choices:

Legal Rights & Agreement Rules · Permission or license

Platform use consents to electronic financial-privacy notices

The U.S. section identifies Intuit as a financial institution subject to GLBA and says using, accessing or interacting with the platform consents to electronic financial-privacy notices. It links a separate GLBA Notice; its detailed terms are not supplied here.

Details not recorded for this card

Supporting quotations

Intuit is a financial institution subject to the Gramm-Leach-Bliley Act (GLBA).
By using, accessing, or interacting with the Intuit Platform, you are consenting to receive notices about your financial privacy electronically.
Please find our GLBA Notice

Legal Rights & Agreement Rules · Restriction or exception

California terms exclude exempt information and may yield to another notice

The California section covers residents’ CCPA personal information when Intuit acts as a business. It excludes exempt data and permits claimed legal exemptions for data or entities, such as GLBA-covered information. A different notice for categories such as employees or applicants applies instead where supplied. These limits qualify the California rights described next.

Details not recorded for this card

Supporting quotations

This section applies only to California residents.
For purposes of this section, the term “Personal Information” and “Sensitive Personal Information” each have the meaning given in the CCPA, but neither term includes information exempted from the scope of the CCPA.
Please note that we may claim legal exemptions for certain types of Personal Information and certain Intuit companies from all or certain parts of the CCPA, such as information subject to the Gramm-Leach-Bliley Act (GLBA) and other data protection laws. In some cases, we may provide a different privacy notice to certain categories of California residents, such as employees and job applicants, in which case that notice will apply instead of this section.

Data Access & Collection · Context

California category disclosures are in a separately linked chart

The statement links a chart of CCPA collection, use and disclosure categories for the current practices and preceding 12 months. Free-form submissions may include additional categories not listed in that chart. The chart itself is not included in this source, so its categories and disclosures are not inferred here.

Details not recorded for this card

Supporting quotations

summarizes the Personal Information we collect by reference to the categories of Personal Information specified in the CCPA, and describes our practices currently and during the 12 months preceding the effective date of this Privacy Statement. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of Personal Information not described in this chart.

Not stated here

  • The linked category chart is a separate document, not supplied in this assignment.

Account & Service Control · User right or choice

California access includes a 12-month account of data practices

For California residents and CCPA-covered data, access requests can seek the prior 12 months’ collection categories and sources, purposes of collection/sale/sharing, categories sold or shared and their recipients, and categories disclosed for business purposes and their recipients. These rights are not absolute; legally permitted refusals and the California scope exemptions apply.

Details not recorded for this card

Supporting quotations

Your California privacy rights. As a California resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.
You may request that we provide the following information about how we have collected and used your Personal Information during the past 12 months:
the categories of Personal Information we have collected about you,
the sources from which that information was collected,
the business or commercial purpose for collecting, selling, and/or sharing your Personal Information,
the categories of Personal Information we shared or sold about you,
the categories of third parties to whom we shared or sold Personal Information about you,
the categories of Personal Information we disclosed for a business purpose, and
the categories of third parties to whom we disclosed Personal Information about you for a business purpose.

Account & Service Control · Procedure

California copy and deletion requests have Credit Karma-specific contacts

For covered California information, request a copy or, where the right applies, deletion through the Intuit account privacy section, Privacy Center or 1 (877) 261-6470. Credit Karma inquiries use its Help Center or CCPArequests@creditkarma.com; Mailchimp uses its own rights page. Deletion is conditional and remains subject to retention exceptions and verification.

Details not recorded for this card

Supporting quotations

Request a copy of your Personal Information.
or call us toll-free at 1 (877) 261-6470.
If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com.
You may have the right, under certain circumstances, to request that we delete the Personal Information you have provided to us.

Cross-references

Account & Service Control · User right or choice

California residents can correct information directly

The California section says personal information can be edited and corrected directly within products and services at any time, within the section’s CCPA scope.

Details not recorded for this card

Supporting quotations

You can edit and correct your Personal Information at any time by changing it directly in our products and services.

Sharing & Disclosure · User right or choice

California sharing opt-outs distinguish Intuit, Mailchimp and Credit Karma

For applicable CCPA sharing, Intuit offers a footer privacy-rights link and granular account preferences, plus automatic opt-out through recognized signals. Intuit and Mailchimp say they do not sell CCPA personal information; Credit Karma says it neither sells nor shares CCPA-covered information and therefore has no such footer link. Intuit also says it does not knowingly sell or share under-16s’ information. The broader signal statement expressly excludes Credit Karma from Intuit’s GPC response.

Details not recorded for this card

Supporting quotations

You can opt-out of the “sharing” of your Personal Information by visiting the “Your California Privacy Rights” link located at the footer of the Intuit website, or to make more granular choices, by visiting the Preferences section of your Intuit Account.
If you have enabled a recognized opt-out mechanism on your browser, device, or platform, you will automatically be opted out of any “sharings” when you interact with our Services.
Intuit and Mailchimp do not sell Personal Information under the CCPA. Credit Karma does not sell or share Personal Information subject to the CCPA, and therefore does not offer a “Your California Privacy Rights” link on its website. We do not knowingly sell or share the Personal Information of individuals under 16 years of age.
Also annotated in the same passage (2)

Use & Processing · Company commitment

A limit right is promised if sensitive-data use exceeds CCPA-permitted purposes

Intuit says it collects CCPA sensitive information for legally allowed purposes or with consent, and uses it only as necessary for service operations, compliance/protection, research/development, or improvement/analytics in accordance with the CCPA. If it uses that information outside CCPA-permitted purposes, it promises a right to limit processing. The text does not state that this conditional limit control is currently required for every sensitive-data use.

Details not recorded for this card

Supporting quotations

We collect Sensitive Personal Information for the purposes allowed by law or with your consent. We only use Sensitive Personal Information as necessary for our (1) Service delivery and operations, (2) compliance and protection, (3) research and development, or (4) Service improvement and analytics purposes in accordance with CCPA. If we use Sensitive Personal Information outside the permitted purposes of the CCPA, we will provide you with the right to limit processing of Sensitive Personal Information.

Sharing & Disclosure · User right or choice

California customers may ask about direct-marketing disclosures

California customers can submit a written request using the listed contacts for certain information about categories disclosed, if any, to third parties or affiliates for those parties’ direct marketing.

Details not recorded for this card

Supporting quotations

Customers who are California residents may request certain information concerning the categories of personal information (if any) we disclose to third parties or affiliates for their direct marketing purposes. If you would like more information, please submit a written request to us using the contact information provided below.

Legal Rights & Agreement Rules · User right or choice

California privacy-rights exercise is protected from retaliation

The statement recognizes a right to be free from discrimination or retaliation related to exercising California privacy rights.

Details not recorded for this card

Supporting quotations

You have the right to be free from discrimination or retaliation related to your exercise of any of your California privacy rights.

Account & Service Control · Procedure

California requests require verification, with a power-of-attorney exception for agents

Intuit may verify credentials or seek more information, particularly without an account or after suspected unauthorized access. Credit Karma may require account login or confirmation of stored details; inability to confirm identity can lead to refusal. An authorized agent generally needs signed authority and direct identity/permission confirmation from you, except when it documents the specified California power of attorney. Inadequate proof of agency can lead to denial.

Details not recorded for this card

Supporting quotations

For Credit Karma members, we may require that you confirm certain pieces of Personal Information that we have on file and/or log into your Credit Karma account. If we are subsequently unable to confirm your identity, we may refuse your rights request.
If you do so, the authorized agent must present signed written authorization to act on your behalf, and you will also be required to independently verify your own identity directly with us and confirm with us that you provided the authorized agent permission to submit the rights request. This verification process is not necessary if your authorized agent provides documentation showing that the authorized agent has power of attorney to act on your behalf under Cal. Prob. Code §§ 4121 to 4130.
We may deny a request from an agent that does not submit adequate proof that they have been authorized by you to act on your behalf.

Not stated here

  • The linked authorized-agent instructions and external California statute are not supplied here; this card describes only the procedure expressly stated in this source.
Also annotated in the same passage (1)

Account & Service Control · Procedure

California agents need signed authority unless the stated power-of-attorney route applies

California residents may use an agent, but the agent must show signed authorization and the resident ordinarily must independently confirm identity and permission. That verification process is unnecessary with documentation of power of attorney under the cited California Probate Code provisions. Intuit may deny inadequately documented agency requests.

Details not recorded for this card

Supporting quotations

You may use an authorized agent to submit a rights request.
If you do so, the authorized agent must present signed written authorization to act on your behalf, and you will also be required to independently verify your own identity directly with us and confirm with us that you provided the authorized agent permission to submit the rights request. This verification process is not necessary if your authorized agent provides documentation showing that the authorized agent has power of attorney to act on your behalf under Cal. Prob. Code §§ 4121 to 4130.
We may deny a request from an agent that does not submit adequate proof that they have been authorized by you to act on your behalf.

Not stated here

  • Linked agent instructions and the external statute are not supplied; no additional requirements are inferred.
Also annotated in the same passage (1)

Legal Rights & Agreement Rules · Restriction or exception

Other-state rights depend on applicable law and exemptions

The other-U.S.-states section applies to residents protected by the relevant state privacy laws when Intuit acts as a business or controller. Its examples span Colorado through Rhode Island as listed in the statement. Exempt information or entities, such as GLBA cases, are excluded, and Intuit may claim other applicable exemptions. Rights can be refused where law permits; this is not a grant of identical rights to every U.S. resident.

Details not recorded for this card

Supporting quotations

This section applies only to the residents of U.S. states that have privacy laws that grant their residents the rights described below
but does not include information or entities exempted from the scope of the Applicable State Privacy Laws, such as those subject to GLBA. Please note that we may claim legal exemptions for certain types of Personal Information and certain Intuit companies from all or certain parts of the Applicable State Privacy Laws.
As a resident whose Personal Information is protected by Applicable State Privacy Laws, you may have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

Cross-references

Also annotated in the same passage (1)

Data Access & Collection · Context

A separate chart and report describe categories and handled requests

The state section refers to a separate chart covering current practices and the prior 12 months; voluntary free-form submissions may add categories beyond that chart. The California section also links a transparency report about processed requests. Neither linked document’s contents are supplied here.

Details not recorded for this card

Supporting quotations

Learn more about the requests we process by viewing our
summarizes the Personal Information we collect and describes our practices currently and during the 12 months preceding the effective date of this Privacy Statement. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of Personal Information not described in this chart.

Not stated here

  • The category chart and transparency report are external documents; no categories or request counts from them are inferred.

Account & Service Control · User right or choice

Covered state residents can request copies, correction and conditional deletion

Within applicable state-law scope, copies and conditional deletion can be requested through Intuit account controls, Privacy Center or 1 (877) 261-6470. Credit Karma uses its Help Center or CCPArequests@creditkarma.com; Mailchimp has its rights-request page. Data can be corrected directly in products. Verification, legal refusal and retention conditions still apply; a denied request can be appealed in writing.

Details not recorded for this card

Supporting quotations

You may request a copy of the Personal Information
If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com.
You can edit and correct your Personal Information at any time by changing it directly in our products and services.
You may have the right, under certain circumstances, to request that we delete the Personal Information you have provided to us.
If we decline to take action on any request that you submit in connection with the rights described above, you may ask that we reconsider our response by submitting a written request to us using the contact information provided below.
Also annotated in the same passage (1)

Sharing & Disclosure · User right or choice

Covered state residents have targeted-advertising controls

For residents and information covered by the state section, Intuit points to footer Manage Cookies or Privacy Settings controls; Mailchimp describes optional tracking controlled through Cookie Preferences. It says Intuit, Mailchimp and Credit Karma do not otherwise sell personal information for money. Recognized signals automatically opt out of targeted-ad tracking, but the earlier general signal provision expressly excludes Credit Karma from Intuit’s GPC response. These statements should not be collapsed into a universal Credit Karma GPC promise.

Details not recorded for this card

Supporting quotations

You may opt-out of tracking for targeted advertising by visiting the “Manage Cookies” or “Privacy Settings” link located at the footer of the Intuit website.
Intuit, Mailchimp and Credit Karma do not otherwise “sell” your Personal Information to third parties for monetary consideration.
In addition, if you have enabled a recognized opt-out mechanism on your browser, device, or platform, you will be automatically opted out of tracking for targeted advertising purposes when you interact with our Services.

Not stated here

  • The regional signal wording does not expressly reconcile its general language with the earlier Credit Karma exclusion; no broader Credit Karma signal obligation is inferred.

Cross-references

Inference & Profiling · User right or choice

Covered state residents can opt out of consequential automated profiling

Under the other-state section’s eligibility and exemption limits, you can opt out of automated evaluation or prediction of personal aspects, including finances, health, interests, reliability, behavior and location, to the extent it produces legal or similarly significant decisions. This does not describe an opt-out of every recommendation.

Details not recorded for this card

Supporting quotations

You can opt-out of the automated processing of your Personal Information to evaluate, analyze, or predict personal aspects related to your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements, to the extent this results in decisions that produce legal or similarly significant effects.
but does not include information or entities exempted from the scope of the Applicable State Privacy Laws, such as those subject to GLBA.
Also annotated in the same passage (2)

Use & Processing · Company commitment

Covered sensitive information will not be processed without consent

In the other-U.S.-states section, Intuit promises not to process sensitive personal information without consent where it falls under those applicable state laws. Exempt information or entities, including relevant GLBA cases, remain outside that section. This is separate from the California permitted-purpose wording.

Details not recorded for this card

Supporting quotations

Some of the Personal Information that we may collect may be considered Sensitive Personal Information under certain Applicable State Privacy Laws. We will not process your Sensitive Personal Information without your consent.
but does not include information or entities exempted from the scope of the Applicable State Privacy Laws, such as those subject to GLBA.

Cross-references

Also annotated in the same passage (1)

Legal Rights & Agreement Rules · User right or choice

Covered state rights include nondiscrimination and written appeals

Covered residents have a right against discrimination for exercising privacy rights. If Intuit declines a rights request, they may seek reconsideration in writing. Intuit promises a written outcome with reasons and, if denied, a way to contact the state attorney general for a complaint.

Details not recorded for this card

Supporting quotations

You have the right to be free from discrimination related to your exercise of any of your privacy rights.
If we decline to take action on any request that you submit in connection with the rights described above, you may ask that we reconsider our response by submitting a written request to us using the contact information provided below. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact your state attorney general’s office to submit a complaint.
Also annotated in the same passage (1)

Account & Service Control · Procedure

State requests and agents must establish identity and authority

For covered other-state rights, Intuit may require credentials or additional data, and Credit Karma may require login or matching stored information. Unverified identity can cause refusal. Agents need signed authority and the user’s direct identity/permission confirmation unless documented legally valid power of attorney makes that verification unnecessary; inadequate authority proof can lead to denial.

Details not recorded for this card

Supporting quotations

For Credit Karma members, we may require that you confirm certain pieces of Personal Information that we have on file and/or log into your Credit Karma account. If we are subsequently unable to confirm your identity, we may refuse your rights request.
If you do so, the authorized agent must present signed written authorization to act on your behalf, and you will also be required to independently verify your own identity directly with us and confirm with us that you provided the authorized agent permission to submit the rights request. This verification process is not necessary if your authorized agent provides documentation showing that the authorized agent has a legally valid power of attorney to act on your behalf.
We may deny a request from an agent that does not submit adequate proof that they have been authorized by you to act on your behalf.

Legal Rights & Agreement Rules · Procedure

U.S. Intuit privacy mail goes to Tucson

The U.S. contact is Intuit Inc., Attention: Privacy, 2800 E Commerce Center Place, Tucson, AZ 85706. The statement also links the Intuit Data Protection Officer contact form.

Details not recorded for this card

Supporting quotations

United States contact information:
Intuit Inc.
Attention: Privacy
2800 E Commerce Center Place
Tucson, AZ 85706
You can contact the Intuit Data Protection Officer

Legal Rights & Agreement Rules · Procedure

Credit Karma U.S. privacy contact is its legal department

The listed contact is Credit Karma LLC, Attention: Legal Department, PO Box 30963, Oakland CA 94604, with CCPArequests@creditkarma.com for requests.

Details not recorded for this card

Supporting quotations

Credit Karma LLC
Attention: Legal Department
PO Box 30963
Oakland CA 94604
CCPArequests@creditkarma.com

Legal Rights & Agreement Rules · Procedure

Mailchimp U.S. privacy mail goes to Atlanta

The Mailchimp contact is The Rocket Science Group LLC d/b/a Mailchimp, Attn: Privacy Officer, 405 North Angier Ave. NE, Atlanta, GA 30308. A Data Protection Officer contact link is also provided.

Details not recorded for this card

Supporting quotations

Mailchimp
The Rocket Science Group LLC d/b/a Mailchimp
Attn: Privacy Officer
405 North Angier Ave. NE,
Atlanta, GA 30308
You can contact the Mailchimp Data Protection Officer

Account & Service Control · User right or choice

Australian residents can manage settings and request access, correction or deletion

For Australian residents, the statement offers account privacy and marketing settings, direct editing of information, and access or deletion requests through the listed contact route. These are Australia-specific procedures, not additional U.S. Credit Karma rights.

Details not recorded for this card

Supporting quotations

If you are a resident of Australia, you may have the following rights and choices:
You may update your privacy settings by visiting your account settings.
To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.
You may request to access, to correct or to delete your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services. To make a request for access or deletion of your personal information, contact us through the link below.

Use & Processing · User right or choice

Australian objections or consent withdrawal can limit services

Australian residents may object to processing, including marketing, or request restriction through the contact link. Stopping some or all processing or withdrawing applicable consent may prevent Intuit from providing all services and support.

Details not recorded for this card

Supporting quotations

You may object to our processing of your personal information, including for marketing purposes, or ask us to restrict processing of your personal information.
If you request that we stop processing some or all of your personal information or you withdraw (where applicable) your consent for our use or disclosure of your personal information for purposes set out in this privacy notice, we might not be able to provide you all of the Services and customer support offered to our users and authorized under this Notice.

Legal Rights & Agreement Rules · Procedure

Australian privacy requests use QuickBooks support or the listed Sydney address

The Australian section links QuickBooks Australia support and lists Intuit Australia Pty. Limited, Level 34, 1 O’Connell St., Sydney, NSW 2000 Australia.

Details not recorded for this card

Supporting quotations

Australia contact information:
Visit the QuickBooks Australia website to learn how to contact their support team.
Intuit Australia Pty. Limited
Level 34, 1 O'Connell St.
Sydney, NSW 2000 Australia

Sharing & Disclosure · Restriction or exception

Canadian data may be disclosed to authorities in other jurisdictions

The Canada section warns that, despite protection measures, personal information may be disclosed in response to valid demands or requests from governments, regulators, courts and law enforcement in other jurisdictions or countries.

Details not recorded for this card

Supporting quotations

While we take steps to maintain protection of your personal information, your personal information may be disclosed in response to valid demands or requests from governments, regulators, courts and law enforcement authorities in those other jurisdictions or countries.

Account & Service Control · User right or choice

Canadian residents can change settings and marketing preferences

Canadian residents can use account settings for privacy and marketing preferences and unsubscribe from marketing emails. Interest-based advertising opt-outs may be available through the DAA Canada and Choices pages; this is phrased as a possibility, not a guarantee of eliminating all ads.

Details not recorded for this card

Supporting quotations

If you are a resident of Canada, you may have the following rights and choices:
You may update your privacy settings by visiting your account settings.
To update your marketing communication preferences, you can go to the marketing preference tools in your account settings. You may also click unsubscribe at the bottom of the marketing emails.
You may be able to opt-out of interest based advertising by visiting the

Account & Service Control · User right or choice

Canadian access, correction and deletion requests preserve retention exceptions

The Canada provision permits access, correction or deletion requests, with its stated business-need retention condition. Requests use the Intuit account, Credit Karma Canada rights page or Mailchimp rights page, and direct editing is available. Even after deletion is requested, Intuit may retain data for compliance, legal claims and fraud or abuse prevention under the general retention section.

Details not recorded for this card

Supporting quotations

You may make a request to access, to correct or to delete your personal information (provided we no longer have a business need to retain your personal information).
You can edit and correct your personal information at any time by changing it directly in our products and services. Even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on the Intuit Platform. Data retained for these purposes will be handled as described in “Data Retention”.

Use & Processing · User right or choice

Canadian consent can be withdrawn without undoing earlier lawful processing

Canadian residents can withdraw consent to collection, use and disclosure at any time. Withdrawal does not affect earlier lawful processing or processing based on another lawful ground. They can also complain to the applicable Privacy Commissioner.

Details not recorded for this card

Supporting quotations

You can withdraw your consent at any time to collection, use and disclosure of your personal information. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
You have the right to file a complaint with the applicable Privacy Commissioner about our collection and processing of your personal information.

Legal Rights & Agreement Rules · Procedure

Intuit Canada privacy contact is in Toronto

The listed contact is Intuit Canada, Attention: Privacy, 8 Spadina Ave., Suite 1900, Toronto, Ontario M5V 0S8. A Data Protection Officer contact form is also linked.

Details not recorded for this card

Supporting quotations

Canada contact information:
Intuit Canada
Attention: Privacy
8 Spadina Ave.
Suite 1900
Toronto, Ontario
M5V 0S8
You can contact the Intuit Data Protection Officer

Legal Rights & Agreement Rules · Procedure

Credit Karma Canada provides a privacy officer email and help route

The Canada section lists Credit Karma LLC, Attention: Privacy Officer, PO Box 30963, Oakland CA 94604. It directs inquiries to the Canadian Help Centre and provides dpo@creditkarma.com for its Canada Privacy Officer.

Details not recorded for this card

Supporting quotations

Credit Karma LLC
Attention: Privacy Officer
PO Box 30963
Oakland CA 94604
You can also email the Credit Karma Canada Privacy Officer by writing to
dpo@creditkarma.com

Legal Rights & Agreement Rules · Procedure

Canada’s Mailchimp contact remains the Atlanta privacy officer

Canadian Mailchimp inquiries can use its Help Centre or the linked question form. The postal contact is The Rocket Science Group LLC d/b/a Mailchimp, Attn: Privacy Officer, 405 North Angier Ave. NE, Atlanta, GA 30308 USA.

Details not recorded for this card

Supporting quotations

The Rocket Science Group LLC d/b/a Mailchimp
Attn: Privacy Officer
405 North Angier Ave. NE,
Atlanta, GA 30308 USA
If your inquiry is specific to Mailchimp, you can visit the

Security & Safeguards · Context

The India clause defines agreed security practices by reference to this statement

For Indian individuals’ data, the clause says users agree that the cited Information Technology Act security-practices term means this statement and procedures Intuit may implement from time to time, with notification at Intuit’s discretion. This reports the contractual wording and does not determine whether it satisfies the law.

Details not recorded for this card

Supporting quotations

Where data of Indian individuals are involved, you hereby agree that the “reasonable security practices and procedures” under section 43A Explanation (ii) of the Information Technology Act, 2000 means this Intuit’s Privacy Statement and such data security procedures that Intuit may implement from time to time and which may, in Intuit’s discretion, be informed to you from time to time.

Account & Service Control · User right or choice

The India section offers privacy, marketing and correction controls

The India section describes account privacy settings, account marketing preference tools, and direct editing and correction of personal information at any time. It does not state that these are the only choices available elsewhere in the statement.

Details not recorded for this card

Supporting quotations

You have choices when it comes to managing the privacy of your personal information.
You may update your privacy settings by visiting your account settings.
To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.
You can edit and correct your personal information at any time by changing it directly in our products and services.

Legal Rights & Agreement Rules · Procedure

India inquiries use QuickBooks support or the Bangalore address

The India contact section links QuickBooks India support and lists Intuit Technology Services Private Limited, Campus 4A, PrITech Park (Ecospace), 7th and 8th Floor, Belandur Village, Varthur Hobli, Bangalore East Taluk, Bangalore - 560 103 India.

Details not recorded for this card

Supporting quotations

India contact information
Visit the QuickBooks India website to learn how to contact their support team.
Intuit Technology Services Private Limited
Campus 4A, PrITech Park (Ecospace)
7th and 8th Floor, Belandur Village
Varthur Hobli, Bangalore East Taluk
Bangalore - 560 103 India

Legal Rights & Agreement Rules · Context

European personal data excludes permanently anonymous information

In the UK/Gibraltar, EEA and Switzerland section, the statement equates personal information with EU/UK personal data: information identifying an individual directly or indirectly. It excludes anonymous data where identity has been permanently removed, rather than treating any masked identifier as anonymous.

Details not recorded for this card

Supporting quotations

United Kingdom (and Gibraltar)(UK), European Economic Area (EEA), and Switzerland
Personal Information
References to “personal information” in this Privacy Statement are equivalent to “personal data” governed by EU and UK data protection laws. Essentially, “personal data” is information about an individual, where that individual is either directly identified or can be identified. It does not include ‘anonymous data’ (i.e., information where the identity of an individual has been permanently removed).
Also annotated in the same passage (1)

Sharing & Disclosure · Company practice

UK product searches may share financial and contact data with named partners

For UK residents searching through the platform for financial or other products, including energy, internet and mobile offers, Intuit may share contact details, birth date, employment, income and housing/employment expenses with partners including HD Decisions, Capital One, Monevo, CarFinance 247 and Decision Tech. The linked partner policies are separate and their contents are not inferred.

Details not recorded for this card

Supporting quotations

For residents in the UK searching for financial or other products (including energy, internet, or mobile phone offers) through the Intuit Platform, we may share your personal information, including your contact details, date of birth, as well as the information you give us about your employment, income, and housing and employment expenses with third parties, including HD Decisions, Capital One, Monevo, CarFinance 247, and Decision Tech.
HD Decisions
Capital One
Monevo
CarFinance 247
Decision Tech

Not stated here

  • The partner privacy policies are linked but not supplied; no claims are made about their data use.

Account & Service Control · User right or choice

European residents have settings, access and correction routes

Residents of the UK/Gibraltar, EEA and Switzerland may manage account privacy settings and request access, correction or deletion. Copies can be requested through the account Privacy tab or UK/EU GDPR Centres; Credit Karma UK and Mailchimp have dedicated rights pages. Information can be corrected directly in products. Deletion has the separately stated retention exceptions.

Details not recorded for this card

Supporting quotations

If you are a resident of the UK(and Gibraltar), the EEA or Switzerland you may have the following rights and choices:
You may update your privacy settings by visiting your account settings.
You may request to access, to correct or to delete your personal information.
You may request a copy of your personal information in the Privacy tab of your account
If your inquiry is specific to Credit Karma UK, you may request a copy of your personal information by visiting
You can edit and correct your personal information at any time by changing it directly in our products and services.

Retention & Deletion · Restriction or exception

European deletion requests leave specified retention grounds intact

UK/Gibraltar, EEA and Swiss users can request deletion through the account Privacy tab or GDPR Centres, with dedicated Credit Karma UK and Mailchimp routes. Intuit may still retain information for legal/regulatory compliance, legal claims and fraud or abuse prevention, handled under the general retention section.

Details not recorded for this card

Supporting quotations

You may request for us to delete your personal information in the Privacy tab of your account
Please note that even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on our Service. Data retained for these purposes will be handled as described in the section “Data Retention”.

Cross-references

Use & Processing · User right or choice

European residents may object, seek restriction or request portability

The UK/Gibraltar, EEA and Switzerland section says residents may object to processing, ask for restriction and request portability of their personal information. These are stated request rights; this passage does not specify every eligibility condition or guarantee every request’s outcome.

Details not recorded for this card

Supporting quotations

You may object to our processing of your personal information or ask us to restrict processing of your personal information.
You may request portability of your personal information.

Legal Rights & Agreement Rules · User right or choice

European residents can complain to a supervisory authority

UK/Gibraltar, EEA and Swiss residents are told they may complain to a supervisory authority about collection and processing. The statement links European and UK contact resources and warns that some authorities require exhausting Intuit’s internal complaints process first.

Details not recorded for this card

Supporting quotations

You have the right to file a complaint with a supervisory authority about our collection and processing of your personal information.
Certain supervisory authorities will require that you exhaust our internal complaints process before looking into your complaint.

Account & Service Control · User right or choice

European marketing controls include account tools and unsubscribe links

For UK/Gibraltar, EEA and Swiss users, the statement points to account preferences, the appropriate GDPR Centre, Mailchimp email settings and Credit Karma UK Help Centre instructions. Marketing emails also provide unsubscribe links.

Details not recorded for this card

Supporting quotations

To update your marketing communication preferences, you can go to the marketing preference tools in your account settings
instructions on how to update preferences. You may also click unsubscribe at the bottom of the marketing emails.

Not stated here

  • The linked marketing-help pages are not supplied; their further steps and requirements are not inferred.

Sharing & Disclosure · User right or choice

European advertising opt-out resources include Mailchimp cookie preferences

Users in the European regional section may be able to opt out of interest-based ads through Network Advertising Initiative, Your Online Choices or the UK/EU GDPR Centres. Mailchimp targeted-ad tracking requests use its website’s footer Cookie Preferences control. These are opt-out routes, not a promise that all advertising stops.

Details not recorded for this card

Supporting quotations

You may be able to opt-out of such interest-based advertising by visiting
For Mailchimp, you can submit requests to opt-out of tracking for targeted advertising purposes by visiting the “Cookie Preferences” link in the footer of the

Legal Rights & Agreement Rules · Context

EU and UK representatives are named for specified entities

Intuit Inc., Intuit Limited and Mailchimp appoint Intuit Ireland Software Limited as their EU representative. Intuit Inc. and Mailchimp appoint Intuit Limited as UK representative. Although the heading mentions Switzerland, these sentences do not identify a separate Swiss representative, and they do not list Credit Karma among the represented entities.

Details not recorded for this card

Supporting quotations

UK and EEA and Swiss Representative
In the EEA: Intuit Inc., Intuit Limited and Mailchimp have each appointed Intuit Ireland Software Limited as its Representative in the European Union
In the UK: Intuit Inc., and Mailchimp have each appointed Intuit Limited as its Representative in the UK

Not stated here

  • A separate Swiss representative is not identified in these sentences; no additional appointment is inferred.

Legal Rights & Agreement Rules · Procedure

Intuit’s UK regional contact is at Cardinal Place in London

The listed regional contact is Intuit Limited, Attention: Intuit Data Protection Administration, Cardinal Place, 80 Victoria Street, London, United Kingdom SW1E 5JL, with a QuickBooks UK GDPR Centre link.

Details not recorded for this card

Supporting quotations

United Kingdom, EEA and Switzerland contact information
Intuit Limited
Attention: Intuit Data Protection Administration,
Cardinal Place, 80 Victoria Street, London,
United Kingdom, SW1E 5JL
https://quickbooks.intuit.com/uk/gdpr/

Legal Rights & Agreement Rules · Procedure

Credit Karma UK lists its London address and Help Centre

The contact is Credit Karma UK Limited, 4th Floor, One New Oxford Street, London WC1A 1NU, alongside a Credit Karma UK Help Centre link.

Details not recorded for this card

Supporting quotations

Credit Karma UK Limited
4th Floor
One New Oxford Street
London WC1A 1NU
Credit Karma UK Help Centre

Legal Rights & Agreement Rules · Procedure

The Irish regional contact is in Dublin

The listed contact is Intuit Ireland Software Limited, 112-114 St Stephen’s Green, Suite 416, Dublin 2, D02 TD28, Ireland, with a QuickBooks EU GDPR Centre link.

Details not recorded for this card

Supporting quotations

Intuit Ireland Software Limited
112-114 St Stephen’s Green
Suite 416
Dublin 2, D02 TD28
Ireland
https://quickbooks.intuit.com/eu/gdpr/

Legal Rights & Agreement Rules · Procedure

Unanswered European privacy concerns can go to the relevant DPO

The final regional contact paragraph links the Intuit and Mailchimp Data Protection Officer form and gives dpo@creditkarma.com for Credit Karma’s Data Protection Officer. It is a contact route for unanswered questions or concerns.

Details not recorded for this card

Supporting quotations

If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact the Intuit and Mailchimp Data Protection Officer
the Credit Karma Data Protection Officer by writing to
dpo@creditkarma.com

Use & Processing · Company practice

Product development can use personal information to train AI models

Intuit may analyze platform use, interactions and certain content customers send or display to improve products, develop insights and train AI or machine-learning models. Google Workspace API data is expressly excluded from generalized model development, improvement and training; Intuit says that data is ingested only to deliver services on the customer’s behalf and ensure safety, not retrain models. The separate U.S. Tax Return Information restriction also applies: use or disclosure beyond necessary tax preparation or legal authorization requires consent.

Details not recorded for this card

Supporting quotations

Research and development. We may use your personal information to:
Improve and develop our products and services by analyzing how they are used and interacted with, by training our artificial intelligence models and other machine learning models, as well as by assessing the use of and interactions with our Platform and certain content our customers send or display through the Platform, including by conducting data analytics to develop insights about you, your needs, and your preferences, so we can make more informed predictions, recommendations, and products for our customers.
Please note any data obtained through Google Workspace APIs is not used to develop, improve, or train any generalized AI and/or ML models. Any data originating from the Google Workspace API is instead ingested only by Intuit’s and our third-party providers’ artificial intelligence tools to deliver services on the customer’s behalf and to ensure safety, not for model retraining.

Cross-references

Use & Processing · Company practice

Combined information can become anonymous research and marketing statistics

Intuit may combine and anonymize information about interactions to create aggregate anonymous statistics for research, including work with academic institutions, and for marketing, promoting, improving and developing the platform.

Details not recorded for this card

Supporting quotations

Combine and anonymize information about your interactions with Intuit to create aggregate, anonymized statistics for use in research (including by contracting with academic institutions) and for marketing, promoting, improving, and developing our platform.

Use & Processing · Company practice

Marketing uses preferences and inferred interests across channels

Intuit, service providers and advertising partners may collect and use personal information for marketing. Promotional communications, gifts and recommendations may arrive by email, post, phone, SMS or push notifications in accordance with marketing preferences. Insights about interactions can tailor offers and ads on Intuit properties and outside platforms or devices. Advertising-network sharing is addressed separately and regional rules may add choices.

Details not recorded for this card

Supporting quotations

We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes to:
Market services, products and experiences, including to deliver gifts and promotional materials, product recommendations and other non-transactional communications via email, post, telephone, SMS or push notifications, in accordance with your marketing preferences.
Personalize your experience and tailor recommendations, advertising, and offers presented to you, including through the development of insights about you and your needs based on your interactions with the Intuit Platform’s products, services, and offerings. These advertisements may be displayed to you on Intuit’s digital properties, including our websites and mobile apps, media platforms, connected devices, or other third-party platforms and channels.
Also annotated in the same passage (1)

Retention & Deletion · Company practice

Whistleblower identity may need to be disclosed in an investigation

Information supplied when reporting alleged misconduct is processed for the investigation and retained under internal policies until it is complete. Intuit says it makes efforts to maintain confidentiality but may need to reveal the reporter’s identity depending on the investigation. The passage does not promise immediate deletion upon completion.

Details not recorded for this card

Supporting quotations

personal information you provide will be processed as a part of the investigation of the allegations and retained in accordance with our internal policies until the investigation is complete. While we make every effort to maintain confidentiality, depending on the investigation, disclosing your identity to other individuals may be necessary.

Legal Rights & Agreement Rules · Company practice

Personal information is used for protection, compliance and legal proceedings

Intuit may use information to prevent misuse, enforce service terms including customer content rules, comply with law, protect rights, property and safety, prevent fraud or illegality, exercise rights in judicial, administrative or arbitration proceedings, and enforce or remedy agreements.

Details not recorded for this card

Supporting quotations

Compliance and protection. We may use your personal information to:
Protect against misuse or abuse of our Services and ensure compliance with our Terms of Service, including in relation to content our customers send or display through the Platform
Comply with legal and regulatory requirements
Protect the rights, property, safety or security of the Intuit Platform, our customers, employees or others and prevent fraudulent or illegal activity
Exercise our rights in the course of judicial, administrative, or arbitration proceedings
Enforce, remedy, or apply our Terms of Service or other agreements

Use & Processing · Restriction or exception

Some uses require consent; compatible purposes may also be used

Intuit may specifically request consent in some cases, including where law requires it. It may also process information for purposes compatible with those listed when applicable law permits. This is not unrestricted permission for unrelated purposes.

Details not recorded for this card

Supporting quotations

In some cases, we may specifically ask for your consent to use your personal information, such as when required by law.
We may process your personal information for other purposes that are compatible with the above purposes where permitted by applicable law.

Inference & Profiling · Company practice

AI features may involve both automated and human processing

Using AI conversational features may involve automated and manual human processing of personal information. Intuit describes personalized predictions, financial insights, tax suggestions and credit-product recommendations. Some laws may give a right to object to automated processing, with details in the regional section; this is not stated as a universal right.

Details not recorded for this card

Supporting quotations

When you use or interact with features on the Intuit Platform like chatbots, digital assistants, or other digital conversational experiences powered by artificial intelligence, we may process your personal information using automated and manual (human) methods.
Certain laws may provide you with the right to object to the automated processing of your personal information. Please review these rights in the “Region and state-specific terms” section below.

Sharing & Disclosure · Restriction or exception

Using certain API features also subjects you to the provider’s privacy policy

Intuit may use providers such as YouTube and Twilio for particular features. Choosing those features means accepting the third party’s privacy policy as well. The statement points to Google security permissions for YouTube API data and Twilio’s privacy notice for its data choices; those external policy terms are not supplied here.

Details not recorded for this card

Supporting quotations

We may share your personal information in the following circumstances:
We may use third party API services, such as YouTube and Twilio, for certain product features. If you choose to use those features, you acknowledge and agree that you are also bound by the third party’s privacy policy.
You may manage your YouTube API data by visiting Google’s security settings page
You may make choices about your Twilio API data by visiting Twilio’s privacy notice

Sharing & Disclosure · Company practice

Partner interaction can send data before you submit an application

Choosing to interact with a platform partner, apply for its offering or link an account is treated as consent and direction to share information with that partner. In some cases clicking through sends data automatically even though you still must submit the partner application. Information provided through Intuit or directly is subject to the partner’s practices and terms.

Details not recorded for this card

Supporting quotations

If you choose to interact with a platform partner, apply for their services or offerings, or otherwise link or sync your account to a platform partner’s product or service, you consent and direct us to share your personal information to the platform partner providing the service or offering.
In some cases, if you click through to go to a platform partner’s site, you will automatically be sending your personal information to that platform partner. When this happens, you will still have to submit your application on the platform partner’s site. Remember that any information you provide to a platform partner, whether through us or on your own, will be subject to their privacy practices and terms and conditions.

Sharing & Disclosure · Restriction or exception

Social sharing and public posts can expose personal information

Social-account features may let you share information potentially visible worldwide under the social provider’s policy rather than this statement. Public reviews, questions, comments and other forum content, including names or usernames, are public.

Details not recorded for this card

Supporting quotations

Any information you choose to share on social media may potentially be visible to a global audience and will be subject to the social media provider’s privacy policies (not this Privacy Statement).
We may provide opportunities for you to publicly post reviews, questions, comments, suggestions, or other content that may include personal information, such as your name or username. Anything you share in a public forum is public

Sharing & Disclosure · Restriction or exception

Joint features and events involve sharing with your consent

With your consent, Intuit may share personal information with third parties jointly providing features, sales initiatives, promotions or events.

Details not recorded for this card

Supporting quotations

With your consent we may share your personal information with third parties who are jointly providing features, sales initiatives, promotions or events with us.

Sharing & Disclosure · Permission or license

Wireless use authorizes limited carrier disclosure for identification and fraud prevention

Using a wireless device with the platform authorizes the carrier to use or disclose available account and device information to Intuit or its service provider for the business relationship’s duration, solely to identify you or your device and prevent fraud.

Details not recorded for this card

Supporting quotations

When you use your wireless device in connection with the Intuit Platform, you authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to Intuit or its service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud.

Sharing & Disclosure · Company commitment

Text-program data is not passed to third parties for their own marketing

Intuit says personal information collected through its text-messaging program will not be shared, sold or rented to affiliated or unaffiliated third parties for their own marketing. This is a program-specific restriction, not a prohibition on every form of sharing.

Details not recorded for this card

Supporting quotations

Personal information collected through the text messaging program will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.

Cross-references

Sharing & Disclosure · Company commitment

Research disclosures must not identify individuals

Intuit may share information with academic institutions, governments, nonprofits and others for research or academic/policy publication with appropriate controls, but says it only shares it in a way that identifies no individual.

Details not recorded for this card

Supporting quotations

We also share your personal information with third parties in the following circumstances.
With appropriate controls, we may share information with third parties, such as academic institutions, government and non-profit organizations, for research purposes or to publish academic or policy-related materials. We only share information in a way that does not identify any individual.

Sharing & Disclosure · Company practice

Financial products and credit issues can lead to financial-party disclosures

For financial products, Intuit may share personal information with collection agencies, credit bureaus, loan-service providers and payment-card association members. Fraud, credit, defaults or debt collection can also involve disclosures to companies, lawyers, agents, government agencies and card associations.

Details not recorded for this card

Supporting quotations

In connection with our financial products, we may share personal information with collection agencies, credit bureaus and loan services providers, and payment card association members. We may also share your personal information with other companies, lawyers, credit bureaus, agents, government agencies, and card associations in connection with issues related to fraud, credit, defaults, or debt collection.

Sharing & Disclosure · Company practice

Service providers including generative AI providers receive data with protection requirements

Intuit shares data with agents and providers acting on its behalf for stated purposes, including advertising, sales, hosting, security, business operations and AI services. Providers must implement reasonable privacy and information-protection controls consistent with this statement. This describes Intuit’s providers, distinct from cases where Intuit itself processes data for a customer under that customer’s terms.

Details not recorded for this card

Supporting quotations

We share personal information with our service providers or agents who provide services on our behalf for the purposes described in this Privacy Statement. Service providers or agents are required to implement reasonable privacy and information protection controls to maintain the privacy and security of information provided to them consistent with the privacy practices outlined in this Privacy Statement.
Service providers or agents also include AI providers, including generative AI providers.

Sharing & Disclosure · Company practice

Corporate transactions can involve disclosures before and after completion

In mergers, asset sales, financing, liquidation, bankruptcy or business acquisitions, Intuit may share personal information with the other company and its advisers before and after the transaction.

Details not recorded for this card

Supporting quotations

If we are involved with a merger, asset sale, financing, liquidation, bankruptcy, or the acquisition of all or part of our business to another company, we may share your personal information with that company and its advisors before and after the transaction date.

Sharing & Disclosure · Company practice

Affiliate sharing includes marketing, subject to applicable limits

Intuit may share information with affiliates and subsidiaries for the stated everyday business purposes, including marketing, development, improvement and personalization. Certain laws can let you limit particular sharing; regional terms provide details. Text-program data has the separate restriction against third parties’ own marketing. U.S. Tax Return Information also requires consent for group-company use or disclosure unless necessary for tax preparation or authorized by law.

Details not recorded for this card

Supporting quotations

We may share your personal information with our affiliates and subsidiaries for everyday business purposes as described in this Statement, including for marketing purposes, for improving and developing our offerings, and for personalizing your experience on our Platform. Certain laws may provide you with the right to limit our information sharing activities in certain circumstances. Please review these rights in the “Region and state-specific terms” section below.
Personal information collected through the text messaging program will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.

Cross-references