This stored statement identifies March 9, 2026 as its last update; it does not establish that linked earlier versions or later changes have been reviewed.
Details not recorded for this card
Supporting quotations
Last Updated: March 9, 2026
Legal Rights & Agreement Rules · Context
A global statement with product supplements and exclusions
The statement covers Intuit Inc. and its group companies across their Services, including websites, apps, social media, marketing and data provided by other businesses. Product supplements may also apply. Customer-controlled processor work and the specified education processing are excluded, so “global” does not mean every Intuit processing activity is governed here.
Details not recorded for this card
Supporting quotations
These services include, as applicable, our websites, mobile applications, social media pages, marketing activities, and other activities described in this Privacy Statement, or when other businesses provide us your personal information (collectively, the “Services”). This Privacy Statement is global, meaning it applies to all Intuit Services. We may provide additional or supplemental privacy statements for certain products or services.
This Privacy Statement does not apply to certain processing activities where we are not the controller
This Privacy Statement also does not apply to Intuit’s processing of education records subject to state or federal laws or children’s data in our education curriculum products.
Not stated here
Linked product supplements and the education statement are not supplied here.
Tax preparation, platform services and business operations are covered
The described processing includes TurboTax tax-return preparation, providing the websites and platform benefits, and operating, improving and developing the business. Personalization may include ads or Intuit product recommendations depending on your settings. The tax-return definition concerns TurboTax preparation, not all information held by every service.
Details not recorded for this card
Supporting quotations
This Privacy Statement describes our privacy practices when we process:
Personal information for the purposes of preparing a tax return or in connection with the preparation of a tax return (collectively, “Tax Return Information”) as part of providing TurboTax tax preparation services;
Personal information for the purposes of providing the benefits of our websites and the Intuit Platform, including as defined in our applicable Terms of Service; and
Personal information as necessary to manage, run, improve, and develop our business and personalize your experience while interacting with the Intuit Platform. Depending on your settings, this may include showing you personalized ads or recommending certain Intuit products based on your interests.
Sharing & Disclosure · Company practice
Intuit determines its processing and may share within its group
For the processing described here, Intuit acts as a controller determining purposes and means. It may share information within its group and process it as controllers or joint controllers for the stated purposes.
Details not recorded for this card
Supporting quotations
Intuit determines the purposes and means of the processing of your personal information as described in this Privacy Statement, and therefore acts as a ‘data controller’ (or equivalent/similar terms under applicable data privacy laws) of such information.
and conduct processing activities as controllers or joint controllers for the purposes set out in this Privacy Statement.
Legal Rights & Agreement Rules · Restriction or exception
Other controllers answer for their own processing
An employer or financial partner may independently control processing alongside Intuit. Intuit determines its own activities and disclaims responsibility for those other controllers; questions and rights requests about their activities should go directly to them.
Details not recorded for this card
Supporting quotations
Intuit is not responsible for other data controllers’ processing activities, and you should contact them directly for questions about how they process your personal information and about how to exercise your privacy rights in relation to such processing.
Legal Rights & Agreement Rules · Restriction or exception
Customer privacy terms govern when Intuit is a processor
When Intuit processes data on a customer’s behalf, including professional tax software customers, that customer’s privacy statement and Intuit’s agreement with the customer govern. Contact the customer about that processing or to exercise related rights.
Details not recorded for this card
Supporting quotations
When we act as a processor or service provider, the privacy statement of the customer who uses our Services applies, instead of this Privacy Statement, and our processing of such personal information is governed by our agreements with such customers. If you have concerns about personal information that we process on behalf of a customer, or wish to exercise your privacy rights regarding such personal information, please contact the customer directly.
Questions about Intuit processing go to its contact section
The statement directs questions about Intuit’s processing to the contact details given later in the document. This does not replace the instruction to contact a customer or independent controller about its own processing.
Details not recorded for this card
Supporting quotations
If you have any questions about how Intuit processes your personal information, please see How to contact us below.
Linking & Identification · Company practice
Information can power experiences across Intuit products
When you share data with Intuit or bring it from third parties, Intuit uses it together across products rather than only the offering you use. Examples include QuickBooks bookkeeping, Mailchimp contact and purchase history, certain TurboTax information with consent where required, and Credit Karma recommendations. This can include customers or vendors whose data an Intuit customer placed on the platform.
Details not recorded for this card
Supporting quotations
When we say we process your data as a “platform,” we mean that when you choose to share data with us, or bring over information from third parties (like a bank or loan provider), Intuit uses that data together to power experiences across the Intuit Platform and products, not just within the individual offering(s) you’re using.
certain information from TurboTax (with your consent where it's required)
The personal information we use in this centralized way may relate to you as an end user of our Services or as a customer or vendor of an Intuit customer whose personal information has been included in the Intuit Platform.
Business administrators can control account access and information
For services that give access to a business account, such as QuickBooks, the owner or designated administrator can decide access rights, make decisions about personal information such as payroll, and require actions such as clock-in location tracking. Changes in access rights may remove access to information the business controls.
Details not recorded for this card
Supporting quotations
Business account information
If you are granted access to a business account (for example, in QuickBooks), the business owner or a designated administrator may control and administer details of your account, for example, by deciding your access rights; making decisions about your personal information (such as details about your payroll); or requiring you to take certain actions (for example, use location tracking to clock in for a shift). If the owner or designated administrator changes your access rights, then you may lose access to the information the business controls.
Account & Service Control · Restriction or exception
Business account use may follow the business’s own policies
A business owner or administrator can control account access and personal-information decisions. Business account use may also be subject to the business’s policies, which can differ from this statement. Intuit disclaims responsibility for those businesses’ privacy and security practices and advises considering their policies before connecting.
Details not recorded for this card
Supporting quotations
If the owner or designated administrator changes your access rights, then you may lose access to the information the business controls.
Your use of the Intuit Platform as part of a business account may be subject to the business’s policies, which may differ from this Privacy Statement. We are not responsible for the privacy or security practices of other businesses
What is collected depends on your interactions and settings
Collection depends on your interactions, account configuration and choices, including privacy settings. Processing also varies with the service or feature used, location and applicable law; the following categories are not a claim that every item is collected from every user.
Details not recorded for this card
Supporting quotations
The personal information that we collect or otherwise receive about you depends on the context of your interactions with Intuit, how you configure your account, and the choices you make, including your privacy settings. The way we process your personal information may also depend on the particular Services, functionalities, or experiences you use, your location, and applicable law.
Data Access & Collection · Company practice
Account setup and uploads can provide profile and payment data
When you or your organization create an account, activate a subscription or upload information, Intuit collects account information. Possible fields include names, employment and education, contact addresses, photo, payment and purchase history, demographics, preferences, subscription details and credentials. Collection varies with the interaction and settings.
Details not recorded for this card
Supporting quotations
We collect information when you (or your organization) create an account, activate a subscription, and/or upload information to the Intuit Platform.
Personal information may include your name, previous name(s) and/or nicknames, title and honorifics, professional title and company name, education, billing and mailing addresses, phone number and email address, profile photo, billing information (your payment information), purchase history, demographic information, preferences, subscription data, and your username and account credentials.
Data Access & Collection · Company practice
Identity checks may involve government identifiers
Intuit collects identifying information to verify identity and help with tax filing, including name, birth date, Social Security or social insurance numbers, driver’s license, passport and similar government identification. Which information is involved depends on the service and interaction.
Details not recorded for this card
Supporting quotations
We collect information to verify your identity, including your name, date of birth, social security number, social insurance number, driver’s license number, passport number, government-issued identification details, and similar information to verify your identity and to help you file your tax return.
Data Access & Collection · Company practice
Support and other interactions can be recorded
Support, feedback, optional surveys, events, research, training and other communications may provide Intuit your contact details and information you choose to share. Records can include monitored or recorded calls, chats, texts, voicemail, photos and audio/video, including recordings around physical locations.
Details not recorded for this card
Supporting quotations
We may collect personal information such as your name, email address, telephone number and any other personal information you choose to share when you reach out to us for support, give us feedback, participate in optional surveys, attend our events, participate in product research or training, or otherwise interact or communicate with us.
This information may include: call center recordings and call monitoring records, chat and text records, voicemails, photographs, and other audio recordings or video images, including those recorded in and around our physical locations.
Data Access & Collection · Company practice
Marketing preferences and community posts reach Intuit
You may provide contact details and marketing preferences. Intuit also receives content posted on its social-media and community pages.
Details not recorded for this card
Supporting quotations
You may provide us with your contact information and preferences for receiving marketing communications.
We receive content you post on our social media pages and our community pages.
Data Access & Collection · Company practice
Business and financial information may include other people’s details
Intuit may receive business finances, expenses, invoices, statements, transactions, payroll, payments, taxes, income, wages and investments, as well as information about customers, vendors and employees. This describes possible categories rather than collection of all categories from every user.
Details not recorded for this card
Supporting quotations
We may receive information about your business, your finances, expenses, invoices, financial statements, details of your financial transactions, payroll details, payment details, tax return details, details about your customers, vendors, or employees, income and wage information, and/or investment information.
Data Access & Collection · Company practice
Expert and chatbot interactions provide information
Intuit may receive questions, account details and guidance from interactions with live experts such as accountants or tax preparers. It may also receive information through chatbots, digital assistants and other interactive bots.
Details not recorded for this card
Supporting quotations
When you interact with these experts, we may receive information about the questions you ask, the details of your accounts, and the guidance provided to you.
We may receive information from you through your use of chatbots, digital assistants, or other interactive bots across the Intuit Platform
Data Access & Collection · Restriction or exception
Device and contact access requires device-setting permission
Certain features may access your device and contacts if you grant permission in your device settings.
Details not recorded for this card
Supporting quotations
If you grant permission in your device settings, certain features may have access to your device and contacts.
Inference & Profiling · Company practice
Interactions with Intuit customers can support recommendations about you
If you are an Intuit customer’s customer, vendor or prospect and interact through the platform—for example to pay an invoice, shop, engage with email or complete a survey—Intuit uses that information to make recommendations about you to its customers. Customers can also supply information directly. Anyone inputting others’ information must first provide sufficient notice, obtain required permissions and have a legal basis where law requires one.
Details not recorded for this card
Supporting quotations
If you are a customer, vendor or prospect of an Intuit customer and interact with the Intuit Platform (for example, to pay an invoice, make a purchase, interact with an email, provide contact details or complete a survey), we will use this information to make recommendations about you to our customers.
Our customers may also provide business connection data directly about you to us; this is described below under ‘Other users’.
Third-party sources
If you input information about others into the Platform, you must only do so if you have first provided sufficient notice and received any required permissions, and have an appropriate legal basis if required by applicable law.
Data Access & Collection · Restriction or exception
Other people can supply your data; inputters must meet notice and permission duties
Intuit customers and other users may input information about you. If you input information about others, you must first give sufficient notice, obtain any required permissions and have an appropriate legal basis if law requires one.
Details not recorded for this card
Supporting quotations
As a result of those connections, others may be able to input personal information about you, including other customers using the Intuit Platform.
If you input information about others into the Platform, you must only do so if you have first provided sufficient notice and received any required permissions, and have an appropriate legal basis if required by applicable law.
Data Access & Collection · Restriction or exception
Third-party data is subject to consent or law and source restrictions
Intuit may obtain personal information from third parties with your consent or where law permits. It processes and protects that information under this statement consistently with additional restrictions imposed by the source. The sources vary over time and with platform use.
Details not recorded for this card
Supporting quotations
We may also receive personal information about you from other third parties where you have provided consent or where permitted by applicable law. We protect and process the personal information obtained from those third parties as described in this Privacy Statement, consistent with any additional restrictions imposed by the source of the information.
Linking & Identification · Company practice
Syncing a non-Intuit service brings information into Intuit
If you choose to sync an external account or service, Intuit receives its information according to that account’s settings, potentially including bank, social-media, purchase-history or business sales data. This is the inbound data flow; partner interactions can separately direct outbound sharing.
Details not recorded for this card
Supporting quotations
If you choose to sync a non-Intuit account/service with your Intuit account, we will receive information from that account/service according to your settings with that account/service. This may include details of your bank account information, social media information, purchase history or your business’s sales records through a point of sale application.
Data Access & Collection · Company practice
Outside providers supplement identity and troubleshooting information
Third parties help verify identity and business details and supplement or validate supplied information; they may include financial institutions, telecom and email providers. Support providers also supply troubleshooting information, potentially including call records, voicemail, photos and chats. The general consent-or-law and source-restriction conditions apply.
Details not recorded for this card
Supporting quotations
We work with certain third parties to help us verify your identity, the specifics of your business, and/or supplement the personal information you have provided and ensure the accuracy of your personal information.
These providers may include, for example, your financial institution, telecommunications provider, or email provider.
We receive personal information about you or your interaction with the Intuit Platform from certain third parties for troubleshooting purposes.
including call center recordings, call monitoring records, voicemails, photographs and chat records.
Data Access & Collection · Company practice
Credit bureaus can supply scores, reports and additional personal information
Where Intuit offers credit reports and scores, it requests them on your behalf from partners such as TransUnion, Experian and Equifax. Those partners may also supply employment or income information, Social Security numbers, vehicle or driver data and credit-profile offers to support personalized recommendations. This is subject to the stated consent-or-law condition and source restrictions.
Details not recorded for this card
Supporting quotations
We request these reports and credit scores on your behalf from credit bureau partners, like TransUnion, Experian and Equifax. These partners may also provide personal information such as employment or income data, social security number, vehicle or driver information, or information about special offers available based on your credit profile so we can make more personalized recommendations for you.
Data Access & Collection · Company practice
Users and risk-management providers can supply information
Intuit may receive data from accountants, bookkeepers, tax preparers, spouses, employers, business customers and referral programs. It may also receive data from risk, cybersecurity and anti-fraud providers to assess offering-related risks, combat illegal activity and protect information. Third-party collection remains subject to consent or applicable law and source restrictions.
Details not recorded for this card
Supporting quotations
we may receive personal information about you from other Intuit Platform users, such as your accountant, bookkeeper, tax preparer, spouse, employer, or other business customers using the Intuit Platform
We may also collect such personal information through features like member referral programs.
We may receive personal information from third parties that help us assess risks associated with our offerings, including to help combat fraud and illegal activity and to help protect your personal information.
Data Access & Collection · Company practice
Licensed data, public content and government records are information sources
Sources can include demographic and preference data licensors, companies making user-generated content available, government and tax agencies, and public databases and social platforms. Intuit also identifies joint offerings and marketing partners as a source category without detailing a separate data set there. Consent-or-law and source restrictions still apply.
Details not recorded for this card
Supporting quotations
We may receive information from information services and data licensors that provide demographic and preference information to us.
We may receive personal information from companies that make user-generated content from their service available to others, such as local business reviews or public social media posts.
We may offer co-branded services or experiences or engage in joint-marketing activities with others, including through our conferences or live events.
We receive information from government agencies, including from various tax agencies, such as your tax filing confirmation from the IRS.
We collect individual and household demographic information and preference information from publicly available sources, such as open government databases, social media platforms, and others.
Data Access & Collection · Company practice
Devices and service interactions may be logged automatically
Intuit, its service providers and business partners may automatically log information about you, devices and interactions over time. Examples include IP addresses, logs, errors, device types and identifiers, pages and features used, browser type and interactions with links or communications. Precise location and motion collection has the separate device-permission condition described next.
Details not recorded for this card
Supporting quotations
We, our service providers, and our business partners may automatically log personal information about you, your computer or mobile device, and your interaction over time with the Services
We may collect information about your device(s) such as IP addresses, log information, error messages, device type, and unique device identifiers.
We may collect information about your use of the Intuit Platform, such as the pages you viewed, the services and features you used or interacted with, your browser type, and details about any links or communications with which you interacted.
Certain features in the Intuit Platform may collect your precise location information, device motion information, or both, if you or your organization grant(s) us permission to do so through your device settings
Data Access & Collection · Restriction or exception
Precise location and device motion depend on device permission
Certain features may collect precise location, device motion or both when you or your organization grant permission through device settings. Examples include QuickBooks time tracking, Karma Drive and CK Money’s nearby ATM finder.
Details not recorded for this card
Supporting quotations
Certain features in the Intuit Platform may collect your precise location information, device motion information, or both, if you or your organization grant(s) us permission to do so through your device settings (for example, if you use QuickBooks’ time-tracking service, participate in Karma Drive, or use CK Money to locate nearby ATMs).
Desktop syncing can collect data and store personal information locally
Some web-enabled desktop offerings synchronize with information on your computer. Intuit may collect device information, product usage and error reports during that process and may store personal information locally on your device.
Details not recorded for this card
Supporting quotations
Some of our web-enabled desktop services and offerings synchronize with the information on your computer. In doing so, we may collect information such as device information, product usage, and error reports. We may also store personal information locally on your device.
Data Access & Collection · Company practice
Invisible email pixels can track communication interactions
Intuit or its service providers may obtain interaction data from email and communications providers or social networks, including whether emails are opened or forwarded. Invisible pixel tags in emails may be used for this tracking.
Details not recorded for this card
Supporting quotations
We or our third-party service providers may collect information from email providers, communication providers and social networks, such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.
Data Access & Collection · Company practice
Behavioral collection extends to customer sites and campaigns
Intuit may automatically collect device identifiers, page views, search results and link interactions on its sites, customers’ sites or stores, social sites and campaigns. For customer contacts, it may record delivery, views, opens, clicks, bounces and spam treatment of campaigns using its offerings.
Details not recorded for this card
Supporting quotations
We may automatically collect certain personal information about your use and interactions with our websites, customers’ websites or e-commerce stores, social media websites, and marketing campaigns that we or our customers organize, including device information (such as your IP address and unique device IDs), page view information and search results, links, and if you are a customer contact, whether or not a campaign presented or sent to you using our offerings has been viewed, delivered, opened, clicked on, whether it has bounced or was treated as spam.
Data Access & Collection · Company practice
Cookies and session replays can record detailed interactions
Intuit and service providers may use cookies and similar tools to deliver requested experiences, recognize visits, track interactions and improve services. Session replay tools such as FullStory and Medallia may record clicks, touches, mouse movements, scrolls and keystrokes for usability diagnosis and improvement. The statement provides a FullStory recording opt-out and says you control some cookie collection and use; linked cookie policies supply further details not included here.
Details not recorded for this card
Supporting quotations
Intuit and our service providers may use commonly used tools such as cookies, web beacons, pixels, local shared objects and similar technologies (collectively “cookies”) to collect information about you (“Cookie Information”) so we can provide the experiences you request, recognize your visit, track your interactions, and improve your and other customers’ experiences.
The replays include users’ clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions. These replays help us diagnose usability problems and identify areas for improvement.
and you can opt-out of session recording by FullStory
You have control over some of the information we collect from Cookies and how we use it. Please see Your Personal Information Rights and Choices section for more information.
Not stated here
The linked Intuit and Mailchimp cookie policies are not supplied in this source.
Data Access & Collection · Company commitment
Biometric collection requires prior notice and consent
Some platform features use biometric personal information. Intuit says it will first give notice and obtain your consent before collecting it. Further use details are referred to a separate Biometric Notice.
Details not recorded for this card
Supporting quotations
Certain parts of the Intuit Platform make use of biometric personal information (“Biometric Information“). We will not collect your Biometric Information without first providing notice and obtaining your consent.
Not stated here
The separate Biometric Notice is not supplied here.
Use & Processing · Company practice
Personal information supports accounts, services and support
Intuit may use personal information to provide the platform, create accounts, manage the relationship and business, resolve billing or other disputes, deliver requested services and credit reports or scores, connect users with experts or others, communicate financial-privacy notices, provide support and authenticate identity. Other uses may be described at collection.
Details not recorded for this card
Supporting quotations
We may use your personal information in a number of ways or as otherwise described at the time of collection:
Service delivery and operations. We may use your personal information to:
Provide you with the Intuit Platform, create your account and manage our relationship with you
Run and manage our business, including resolving billing and financial disputes
Provide features to you, such as your free credit reports and scores
Provide a product or service that you have requested through the Intuit Platform
Connect you with experts and other users
Communicate with you, such as sending you electronic notifications concerning your financial privacy
Provide you with support and resolve disputes
Authenticate your identity
Inference & Profiling · Company practice
Information supports eligibility checks and tailored experiences
Intuit may use information to evaluate eligibility for offers, products and services, understand needs and interests, and personalize services and communications. The separate marketing provision explains that insights from interactions can tailor recommendations, advertising and offers on Intuit and outside channels.
Details not recorded for this card
Supporting quotations
Evaluate your eligibility for marketing offers, products and services
Understand your needs and interests, and personalize your experience with the Services and our communications.
Personalize your experience and tailor recommendations, advertising, and offers presented to you, including through the development of insights about you and your needs based on your interactions with the Intuit Platform’s products, services, and offerings. These advertisements may be displayed to you on Intuit’s digital properties, including our websites and mobile apps, media platforms, connected devices, or other third-party platforms and channels.
Information is used for events and office security
Intuit may manage event registration, attendance and communications, register office visitors for security, and administer visitor nondisclosure agreements.
Details not recorded for this card
Supporting quotations
Manage event registrations and attendance, including sending related communications to you
Register visitors to our offices for security reasons and manage non-disclosure agreements that visitors may be required to sign
Sharing & Disclosure · Company practice
Advertising networks can receive data, with a Credit Karma CCPA exception
Intuit may share data with advertising providers to tailor offers based on platform interactions, and partners may place cookies on other sites to tailor and measure ads. Regional terms matter: Credit Karma says it does not sell or share personal information subject to the CCPA. That legal use of “share” does not mean no information is ever disclosed under this statement.
Details not recorded for this card
Supporting quotations
Intuit may share personal information with advertising networks and other providers to tailor advertising and offers presented to you based on your interactions with the Intuit Platform’s products, services, and offerings. Our advertising partners may place cookies on unaffiliated websites in order to serve advertisements that may be relevant to you based on your browsing activities and interests and determine the effectiveness of such advertisements.
Credit Karma does not sell or share Personal Information subject to the CCPA, and therefore does not offer a “Your California Privacy Rights” link on its website.
GPC response excludes Credit Karma; Do Not Track is not honored
Intuit says it responds to Global Privacy Control for U.S. residents, expressly excluding Credit Karma. It does not respond to Do Not Track because no formal standard exists. The California provision separately says Credit Karma does not sell or share CCPA-covered information, explaining why it offers no California-rights link.
Details not recorded for this card
Supporting quotations
Intuit (excluding Credit Karma) responds to the Global Privacy Control signal for US residents, as described further in the United States section below. However, we do not respond to “Do Not Track” signals because there is no formal “Do Not Track” standard.
Credit Karma does not sell or share Personal Information subject to the CCPA, and therefore does not offer a “Your California Privacy Rights” link on its website.
Cross-references
contrast (model-proposed): Covered state residents have targeted-advertising controls — The general U.S. GPC statement excludes Credit Karma while the other-state provision uses broad automatic opt-out wording. Both are preserved; the latter is not treated as an unqualified Credit Karma GPC promise.
Legal and protection disclosures may occur without consent
As permitted by law, Intuit may disclose data without consent when it reasonably believes legal process requires it, to protect rights, property or safety, defend attacks, enforce agreements, prevent fraud or illegality, collect debts, or work with regulators and tax agencies for fraud prevention, protection or required risk controls.
Details not recorded for this card
Supporting quotations
We may share your personal information with third parties for legal reasons without your consent, and as permitted by law, including:
When we reasonably believe disclosure is required in order to comply with a subpoena, court order, or other applicable law, regulation or legal process;
To protect the rights, property, or safety of Intuit, TurboTax, the Intuit Platform, our customers or others;
To protect or defend against attacks;
To enforce, remedy, or apply our Terms of Service or other agreements;
To prevent fraud, cybersecurity attacks or illegal activity;
For debt collection; and
With regulatory agencies, including government tax agencies, as necessary to help detect and combat fraud and/or protect our customers, users and/or the Intuit Platform, or in required institutional risk control programs.
Account & Service Control · User right or choice
Customers can manage settings and correct certain data
Intuit offers customers privacy-management options, including those in the EU, UK/Gibraltar and Switzerland. Account settings allow privacy-setting updates, and certain personal information can be corrected directly within products at any time. Additional legal rights depend on location.
Details not recorded for this card
Supporting quotations
At Intuit, we believe that you have choices about information that pertains to you or your business.
We provide all customers, including those in the EU, UK (and Gibraltar), and Switzerland, with options to manage the privacy of their personal information.
You may update your privacy settings by visiting your account settings.
You can edit and correct certain personal information at any time by changing it directly in our products and services.
Your Rights
Depending on where you live, you may also have certain state- or country-specific rights with respect to your personal information.
Access and deletion requests have service-specific routes
You may download a copy of information through your account or the Intuit Privacy Center, or call 1 (877) 261-6470; deletion can be requested through account settings, that center or phone number. Credit Karma inquiries use its U.S. Help Center or UK/Canada rights-request pages, and Mailchimp has its own request page. A deletion request is not an unconditional promise to erase every record.
Details not recorded for this card
Supporting quotations
You may download a copy of the personal information we have about you by visiting your account
The statement says you may be able to opt out of interest-based ads through the Choices Opt-Out Page or the Canadian DAA page for Canadian users. It refers to the Intuit and Mailchimp cookie policies for further practices and settings; those policies are not supplied here.
Change marketing preferences, unsubscribe emails or reply STOP to texts
Marketing preferences can be changed through account tools and the linked Intuit, Credit Karma U.S./UK and Mailchimp preference resources. Promotional emails include unsubscribe links. Replying STOP opts out of further marketing texts, including the Intuit SMS shortcode program. These instructions concern marketing communications.
Details not recorded for this card
Supporting quotations
To update your marketing communication preferences, you can go to the marketing preference tools in your account settings or you may use the links below. You may also unsubscribe using the link found at the bottom of all marketing and promotional emails. If you receive marketing text messages from us, including through Intuit’s SMS shortcode program, you may opt out of receiving further marketing text messages from us by replying STOP to the message.
communications preferences
communications preferences
communications preferences
Account & Service Control · Procedure
Rights requests can require identity or ownership verification
Rights may vary by state or country. To protect privacy, Intuit may ask for more information proving identity or ownership before fulfilling a data request and may be unable to act until proper documentation is provided.
Details not recorded for this card
Supporting quotations
Depending on where you live, you may also have certain state- or country-specific rights with respect to your personal information.
To help protect privacy and the security of your personal information, you may be asked to provide additional information to verify your identity and/or ownership rights before we can fulfill your data rights request. If we cannot verify your identity or your ownership rights to the data, we may not be able to service your request until you provide proper documentation.
Deletion requests and ended contracts do not always end retention
Unless deletion is specifically requested, Intuit retains data as necessary for retention requirements, services, platform benefits and business operations. Even after deletion requests or contract termination it may need records for legal/regulatory compliance, legal claims or fraud and abuse prevention. Different information may have different periods; no universal duration is stated.
Details not recorded for this card
Supporting quotations
Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform and successfully run our business. Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information for as long as necessary to:
comply with our legal or regulatory compliance needs (e.g., maintaining records of transactions you have made with us);
to exercise, establish or defend legal claims; and/or
to protect against fraudulent or abusive activity on our service.
This means we may keep different information for different periods.
Long-inactive account cancellation can trigger immediate deletion
If an account is canceled because it has not been used for a long time, Intuit may immediately delete its information. The statement gives neither an exact inactivity period nor a promise that every retained record is deleted.
Details not recorded for this card
Supporting quotations
If your account is canceled because you haven’t used it for a long time, we may delete this information immediately.
Information that cannot yet be deleted is to be securely isolated
Technical, legal, regulatory or operational reasons may prevent full deletion, anonymization or de-identification. In those cases Intuit commits to reasonable measures to isolate the information securely from further processing until it can perform one of those actions.
Details not recorded for this card
Supporting quotations
There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it.
Sharing & Disclosure · Company practice
International processing has a U.S. tax-return exception
Intuit may store and process information in the U.S. and other countries where it or its affiliates, subsidiaries or providers operate, as law permits; protections may differ or be weaker. U.S. Tax Return Information instead stays processed and stored in the U.S. unless you consent to transfer, in accordance with applicable law. Intuit says it uses appropriate safeguards for processing outside your jurisdiction.
Details not recorded for this card
Supporting quotations
Unless you have provided us with consent to transfer your personal information, US Tax Return Information shall be processed and stored in the United States in accordance with applicable law.
With the exception noted above, Intuit reserves the right to store and process your personal information in the United States and in any other country where Intuit or its affiliates, subsidiaries, or service providers operate facilities in accordance with and as permitted by applicable laws and regulations. Some of these countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective).
When we transfer, store or process personal information outside of your jurisdiction (including to or in the United States, as described above), we take appropriate safeguards to require that your personal information remain protected in accordance with this Privacy Statement and applicable law.
Legal Rights & Agreement Rules · Company commitment
Transfer safeguards vary by transferring company and recipient
The statement describes adequacy decisions or regulations for some destinations. For specified non-DPF-certified group-company transfers and third-party providers or partners in destinations lacking adequacy, it identifies the June 4, 2021 EU Standard Contractual Clauses, modules 1–4, with the UK Addendum or Swiss modifications for relevant origins. DPF-certified entities have a separately described route; this card reports the statement’s mechanisms, not an independent legal adequacy finding.
Details not recorded for this card
Supporting quotations
The safeguards we use to transfer your personal information depend on the Intuit group company that transfers your information and the recipient of such information.
Some of these recipients of your personal information are located in countries for which the European Commission, the UK (and Gibraltar) Government, and the Swiss Government (as and where applicable) have issued “adequacy decisions” or “adequacy regulations” (data bridges)
Other recipients of your personal information are located in countries outside the EEA, Switzerland, and/or the UK that are not the subject of an adequacy decision.
as issued on 4 June 2021 under Article 46(2) using module 1 (controller to controller), module 2 (controller to processor), module 3 (processor to processor) and module 4 (processor to controller) transfers, including the UK Addendum permitted under Article 46(2) of the UK GDPR for the transfer of data originating in the UK and the Swiss Modifications provided for under the Swiss Federal Data Protection Act for the transfer of data originating from Switzerland.
Legal Rights & Agreement Rules · Company commitment
DPF statements name specific entities and give Principles priority
The statement says Intuit Inc. and Mailchimp comply with the EU-U.S., UK-extension and Swiss-U.S. frameworks. Its certification sentences name both for EU/UK data, but name Mailchimp specifically for Swiss data. It says the applicable DPF Principles govern conflicts with this policy. These entity-specific statements do not establish Credit Karma’s certification or independently verify certification status.
Details not recorded for this card
Supporting quotations
Intuit Inc. and The Rocket Science Group LLC d/b/a Mailchimp complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
The Rocket Science Group LLC d/b/a Mailchimp has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.
If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.
Legal Rights & Agreement Rules · Procedure
Mailchimp DPF complaints have escalation and possible arbitration routes
For EU, UK and Swiss data received under the DPF routes, Mailchimp commits to resolve Principles-related complaints and asks individuals to contact it first. Unresolved or inadequately acknowledged complaints can go to U.S.-based TRUSTe at no cost. If other DPF mechanisms do not resolve a compliance complaint, binding arbitration may be available under conditions identified on the linked DPF site. These are DPF complaint routes, not general mandatory arbitration terms for Credit Karma.
Details not recorded for this card
Supporting quotations
The Rocket Science Group LLC d/b/a Mailchimp commits to resolve DPF Principles-related complaints about our collection and use of your personal information.
should first contact The Rocket Science Group LLC d/b/a Mailchimp by using the details in the “How to contact us” section below.
If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.trustarc.com/watchdog/request for more information or to file a complaint. These dispute resolution services are provided at no cost to you.
For complaints regarding EU-U.S. DPF, the UK Extension to the EU-U.S DPF, and Swiss-U.S. DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration.
Not stated here
The external arbitration conditions are not supplied here.
Sharing & Disclosure · Company commitment
Mailchimp promises a choice before materially new use or outside sharing
In this DPF passage, Mailchimp says it will offer an opt-out or collect opt-in consent before using personal data for a materially different new purpose or sharing it with an external party outside the policy, meaning a party other than its processor. This entity-specific promise should not be generalized to every Credit Karma activity.
Details not recorded for this card
Supporting quotations
Should we need to use your personal data for a new purpose that is materially different from the purpose for which the personal data was originally collected, or share it with an external party not covered by this Privacy Policy (i.e., not our processor), The Rocket Science Group LLC d/b/a Mailchimp will offer you the opportunity to opt out through whatever means is most appropriate or collect your opt in consent before engaging in the new use or sharing.
Legal Rights & Agreement Rules · Company commitment
Mailchimp describes authority disclosures and onward-transfer responsibility
Mailchimp may have to disclose data in response to lawful public-authority requests, including security and law enforcement. For DPF data passed to agents, it remains responsible under the Principles for inconsistent agent processing unless it proves it is not responsible for the event causing damage. These provisions name Mailchimp.
Details not recorded for this card
Supporting quotations
In certain situations, The Rocket Science Group LLC d/b/a Mailchimp may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
The Rocket Science Group LLC d/b/a Mailchimp remains liable under the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles if the The Rocket Science Group LLC d/b/a Mailchimp’s agent processes personal information in a manner inconsistent with the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles, unless the The Rocket Science Group LLC d/b/a Mailchimp proves that it is not responsible for the event giving rise to damage.
Security & Safeguards · Company commitment
Reasonable safeguards are promised, but complete security is not
Intuit says it uses reasonable physical, technical and organizational protections designed to protect personal information, while declining to completely ensure or warrant its security.
Details not recorded for this card
Supporting quotations
We use reasonable physical, technical and organizational safeguards that are designed to protect your personal information. However, despite these controls, we cannot completely ensure or warrant the security of your personal information.
Legal Rights & Agreement Rules · Procedure
Material processing changes trigger notice through several possible channels
Intuit reserves the right to update the statement at any time. Material changes to processing will be notified through a platform or community notice, a notification, or other legally consistent means; direct individual notice is not the only method. The last-updated date identifies revisions, and readers are asked to check periodically.
Details not recorded for this card
Supporting quotations
From time to time we may change or update our Privacy Statement. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by posting a notice in the Intuit Platform or on a community post; by sending you a notification; or by other means consistent with applicable law.
You can see when this Privacy Statement was last updated by checking the “last updated” date at the top of this Privacy Statement. Please review this Privacy Statement periodically to stay informed about how Intuit protects your privacy.
Legal Rights & Agreement Rules · Restriction or exception
Intuit for Education use follows its own statement
Educators, administrators, students and parents or guardians involved with school districts using Intuit’s free financial-literacy curriculum are directed to the separate Intuit for Education Privacy Statement. This statement does not govern their use of those services.
Details not recorded for this card
Supporting quotations
Children
this privacy statement does not apply to your use of those services.
describes our practices and your rights related to the use of Intuit for Education.
Not stated here
The separate education statement is not included here.
Services are not directed to under-13s, with education separately governed
Outside the separately governed Intuit for Education services, Intuit says the services are not intended for or directed to children under 13 and it does not knowingly collect children’s personal information. It asks readers who believe it holds a child’s information to contact it. The education exclusion must not be read as a universal ban on children’s data across every Intuit product.
Details not recorded for this card
Supporting quotations
this privacy statement does not apply to your use of those services.
Otherwise, our Services are not intended for or directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we may have information from a child, please contact us.
Privacy questions have product-specific forms and a free complaint escalation
Intuit invites questions and comments through its privacy question form, Credit Karma’s support-case form or Mailchimp’s privacy-rights page. If a privacy or information-use complaint remains unsatisfactorily addressed, it directs users to its U.S.-based third-party dispute-resolution provider free of charge.
Details not recorded for this card
Supporting quotations
If you have questions or comments about this Privacy Statement or our practices, please contact us.
You can submit Intuit privacy questions.
You can submit Credit Karma privacy questions.
You can submit Mailchimp privacy questions.
If you have an unresolved privacy or information use concern or complaint that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge)
Legal Rights & Agreement Rules · Context
Additional terms depend on residence and product
Additional rights and terms may apply based on your country of residence or the products you use. The U.S. provisions are introduced for U.S. residents; this does not extend each regional rule to every platform user.
Details not recorded for this card
Supporting quotations
Additional terms may apply to you based upon the country you reside in or the products you use.
If you are a resident of the United States, you may have the following rights and choices:
Sharing & Disclosure · Restriction or exception
U.S. tax-return use or disclosure beyond preparation generally needs consent
For U.S. Tax Return Information, Intuit will not use or disclose it, even to group companies, without consent except as necessary for tax preparation or as authorized by law. If you agree to other uses or sharing, including platform use, this statement governs that handling.
Details not recorded for this card
Supporting quotations
US Tax Return Information
Except as necessary to provide you with tax preparation services or as authorized by law, we will not use or disclose your Tax Return Information – including to Intuit Group Companies – unless you consent.
If you agree to use or share your Tax Return Information for purposes other than tax preparation services, including use by the Intuit Platform, your Tax Return Information will be handled in accordance with this Privacy Statement.
Cross-references
qualifies (model-proposed): Information can power experiences across Intuit products — The platform-wide combination of data remains subject to the U.S. tax-return consent restriction, except necessary preparation or legal authorization.
Legal Rights & Agreement Rules · Permission or license
Platform use consents to electronic financial-privacy notices
The U.S. section identifies Intuit as a financial institution subject to GLBA and says using, accessing or interacting with the platform consents to electronic financial-privacy notices. It links a separate GLBA Notice; its detailed terms are not supplied here.
Details not recorded for this card
Supporting quotations
Intuit is a financial institution subject to the Gramm-Leach-Bliley Act (GLBA).
By using, accessing, or interacting with the Intuit Platform, you are consenting to receive notices about your financial privacy electronically.
Please find our GLBA Notice
Legal Rights & Agreement Rules · Restriction or exception
California terms exclude exempt information and may yield to another notice
The California section covers residents’ CCPA personal information when Intuit acts as a business. It excludes exempt data and permits claimed legal exemptions for data or entities, such as GLBA-covered information. A different notice for categories such as employees or applicants applies instead where supplied. These limits qualify the California rights described next.
Details not recorded for this card
Supporting quotations
This section applies only to California residents.
For purposes of this section, the term “Personal Information” and “Sensitive Personal Information” each have the meaning given in the CCPA, but neither term includes information exempted from the scope of the CCPA.
Please note that we may claim legal exemptions for certain types of Personal Information and certain Intuit companies from all or certain parts of the CCPA, such as information subject to the Gramm-Leach-Bliley Act (GLBA) and other data protection laws. In some cases, we may provide a different privacy notice to certain categories of California residents, such as employees and job applicants, in which case that notice will apply instead of this section.
Data Access & Collection · Context
California category disclosures are in a separately linked chart
The statement links a chart of CCPA collection, use and disclosure categories for the current practices and preceding 12 months. Free-form submissions may include additional categories not listed in that chart. The chart itself is not included in this source, so its categories and disclosures are not inferred here.
Details not recorded for this card
Supporting quotations
summarizes the Personal Information we collect by reference to the categories of Personal Information specified in the CCPA, and describes our practices currently and during the 12 months preceding the effective date of this Privacy Statement. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of Personal Information not described in this chart.
Not stated here
The linked category chart is a separate document, not supplied in this assignment.
Account & Service Control · User right or choice
California access includes a 12-month account of data practices
For California residents and CCPA-covered data, access requests can seek the prior 12 months’ collection categories and sources, purposes of collection/sale/sharing, categories sold or shared and their recipients, and categories disclosed for business purposes and their recipients. These rights are not absolute; legally permitted refusals and the California scope exemptions apply.
Details not recorded for this card
Supporting quotations
Your California privacy rights. As a California resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.
You may request that we provide the following information about how we have collected and used your Personal Information during the past 12 months:
the categories of Personal Information we have collected about you,
the sources from which that information was collected,
the business or commercial purpose for collecting, selling, and/or sharing your Personal Information,
the categories of Personal Information we shared or sold about you,
the categories of third parties to whom we shared or sold Personal Information about you,
the categories of Personal Information we disclosed for a business purpose, and
the categories of third parties to whom we disclosed Personal Information about you for a business purpose.
Account & Service Control · Procedure
California copy and deletion requests have Credit Karma-specific contacts
For covered California information, request a copy or, where the right applies, deletion through the Intuit account privacy section, Privacy Center or 1 (877) 261-6470. Credit Karma inquiries use its Help Center or CCPArequests@creditkarma.com; Mailchimp uses its own rights page. Deletion is conditional and remains subject to retention exceptions and verification.
Details not recorded for this card
Supporting quotations
Request a copy of your Personal Information.
or call us toll-free at 1 (877) 261-6470.
If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com.
You may have the right, under certain circumstances, to request that we delete the Personal Information you have provided to us.
California residents can correct information directly
The California section says personal information can be edited and corrected directly within products and services at any time, within the section’s CCPA scope.
Details not recorded for this card
Supporting quotations
You can edit and correct your Personal Information at any time by changing it directly in our products and services.
Sharing & Disclosure · User right or choice
California sharing opt-outs distinguish Intuit, Mailchimp and Credit Karma
For applicable CCPA sharing, Intuit offers a footer privacy-rights link and granular account preferences, plus automatic opt-out through recognized signals. Intuit and Mailchimp say they do not sell CCPA personal information; Credit Karma says it neither sells nor shares CCPA-covered information and therefore has no such footer link. Intuit also says it does not knowingly sell or share under-16s’ information. The broader signal statement expressly excludes Credit Karma from Intuit’s GPC response.
Details not recorded for this card
Supporting quotations
You can opt-out of the “sharing” of your Personal Information by visiting the “Your California Privacy Rights” link located at the footer of the Intuit website, or to make more granular choices, by visiting the Preferences section of your Intuit Account.
If you have enabled a recognized opt-out mechanism on your browser, device, or platform, you will automatically be opted out of any “sharings” when you interact with our Services.
Intuit and Mailchimp do not sell Personal Information under the CCPA. Credit Karma does not sell or share Personal Information subject to the CCPA, and therefore does not offer a “Your California Privacy Rights” link on its website. We do not knowingly sell or share the Personal Information of individuals under 16 years of age.
A limit right is promised if sensitive-data use exceeds CCPA-permitted purposes
Intuit says it collects CCPA sensitive information for legally allowed purposes or with consent, and uses it only as necessary for service operations, compliance/protection, research/development, or improvement/analytics in accordance with the CCPA. If it uses that information outside CCPA-permitted purposes, it promises a right to limit processing. The text does not state that this conditional limit control is currently required for every sensitive-data use.
Details not recorded for this card
Supporting quotations
We collect Sensitive Personal Information for the purposes allowed by law or with your consent. We only use Sensitive Personal Information as necessary for our (1) Service delivery and operations, (2) compliance and protection, (3) research and development, or (4) Service improvement and analytics purposes in accordance with CCPA. If we use Sensitive Personal Information outside the permitted purposes of the CCPA, we will provide you with the right to limit processing of Sensitive Personal Information.
Sharing & Disclosure · User right or choice
California customers may ask about direct-marketing disclosures
California customers can submit a written request using the listed contacts for certain information about categories disclosed, if any, to third parties or affiliates for those parties’ direct marketing.
Details not recorded for this card
Supporting quotations
Customers who are California residents may request certain information concerning the categories of personal information (if any) we disclose to third parties or affiliates for their direct marketing purposes. If you would like more information, please submit a written request to us using the contact information provided below.
Legal Rights & Agreement Rules · User right or choice
California privacy-rights exercise is protected from retaliation
The statement recognizes a right to be free from discrimination or retaliation related to exercising California privacy rights.
Details not recorded for this card
Supporting quotations
You have the right to be free from discrimination or retaliation related to your exercise of any of your California privacy rights.
Account & Service Control · Procedure
California requests require verification, with a power-of-attorney exception for agents
Intuit may verify credentials or seek more information, particularly without an account or after suspected unauthorized access. Credit Karma may require account login or confirmation of stored details; inability to confirm identity can lead to refusal. An authorized agent generally needs signed authority and direct identity/permission confirmation from you, except when it documents the specified California power of attorney. Inadequate proof of agency can lead to denial.
Details not recorded for this card
Supporting quotations
For Credit Karma members, we may require that you confirm certain pieces of Personal Information that we have on file and/or log into your Credit Karma account. If we are subsequently unable to confirm your identity, we may refuse your rights request.
If you do so, the authorized agent must present signed written authorization to act on your behalf, and you will also be required to independently verify your own identity directly with us and confirm with us that you provided the authorized agent permission to submit the rights request. This verification process is not necessary if your authorized agent provides documentation showing that the authorized agent has power of attorney to act on your behalf under Cal. Prob. Code §§ 4121 to 4130.
We may deny a request from an agent that does not submit adequate proof that they have been authorized by you to act on your behalf.
Not stated here
The linked authorized-agent instructions and external California statute are not supplied here; this card describes only the procedure expressly stated in this source.
California agents need signed authority unless the stated power-of-attorney route applies
California residents may use an agent, but the agent must show signed authorization and the resident ordinarily must independently confirm identity and permission. That verification process is unnecessary with documentation of power of attorney under the cited California Probate Code provisions. Intuit may deny inadequately documented agency requests.
Details not recorded for this card
Supporting quotations
You may use an authorized agent to submit a rights request.
If you do so, the authorized agent must present signed written authorization to act on your behalf, and you will also be required to independently verify your own identity directly with us and confirm with us that you provided the authorized agent permission to submit the rights request. This verification process is not necessary if your authorized agent provides documentation showing that the authorized agent has power of attorney to act on your behalf under Cal. Prob. Code §§ 4121 to 4130.
We may deny a request from an agent that does not submit adequate proof that they have been authorized by you to act on your behalf.
Not stated here
Linked agent instructions and the external statute are not supplied; no additional requirements are inferred.
Legal Rights & Agreement Rules · Restriction or exception
Other-state rights depend on applicable law and exemptions
The other-U.S.-states section applies to residents protected by the relevant state privacy laws when Intuit acts as a business or controller. Its examples span Colorado through Rhode Island as listed in the statement. Exempt information or entities, such as GLBA cases, are excluded, and Intuit may claim other applicable exemptions. Rights can be refused where law permits; this is not a grant of identical rights to every U.S. resident.
Details not recorded for this card
Supporting quotations
This section applies only to the residents of U.S. states that have privacy laws that grant their residents the rights described below
but does not include information or entities exempted from the scope of the Applicable State Privacy Laws, such as those subject to GLBA. Please note that we may claim legal exemptions for certain types of Personal Information and certain Intuit companies from all or certain parts of the Applicable State Privacy Laws.
As a resident whose Personal Information is protected by Applicable State Privacy Laws, you may have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.
A separate chart and report describe categories and handled requests
The state section refers to a separate chart covering current practices and the prior 12 months; voluntary free-form submissions may add categories beyond that chart. The California section also links a transparency report about processed requests. Neither linked document’s contents are supplied here.
Details not recorded for this card
Supporting quotations
Learn more about the requests we process by viewing our
summarizes the Personal Information we collect and describes our practices currently and during the 12 months preceding the effective date of this Privacy Statement. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of Personal Information not described in this chart.
Not stated here
The category chart and transparency report are external documents; no categories or request counts from them are inferred.
Account & Service Control · User right or choice
Covered state residents can request copies, correction and conditional deletion
Within applicable state-law scope, copies and conditional deletion can be requested through Intuit account controls, Privacy Center or 1 (877) 261-6470. Credit Karma uses its Help Center or CCPArequests@creditkarma.com; Mailchimp has its rights-request page. Data can be corrected directly in products. Verification, legal refusal and retention conditions still apply; a denied request can be appealed in writing.
Details not recorded for this card
Supporting quotations
You may request a copy of the Personal Information
If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com.
You can edit and correct your Personal Information at any time by changing it directly in our products and services.
You may have the right, under certain circumstances, to request that we delete the Personal Information you have provided to us.
If we decline to take action on any request that you submit in connection with the rights described above, you may ask that we reconsider our response by submitting a written request to us using the contact information provided below.
Covered state residents have targeted-advertising controls
For residents and information covered by the state section, Intuit points to footer Manage Cookies or Privacy Settings controls; Mailchimp describes optional tracking controlled through Cookie Preferences. It says Intuit, Mailchimp and Credit Karma do not otherwise sell personal information for money. Recognized signals automatically opt out of targeted-ad tracking, but the earlier general signal provision expressly excludes Credit Karma from Intuit’s GPC response. These statements should not be collapsed into a universal Credit Karma GPC promise.
Details not recorded for this card
Supporting quotations
You may opt-out of tracking for targeted advertising by visiting the “Manage Cookies” or “Privacy Settings” link located at the footer of the Intuit website.
Intuit, Mailchimp and Credit Karma do not otherwise “sell” your Personal Information to third parties for monetary consideration.
In addition, if you have enabled a recognized opt-out mechanism on your browser, device, or platform, you will be automatically opted out of tracking for targeted advertising purposes when you interact with our Services.
Not stated here
The regional signal wording does not expressly reconcile its general language with the earlier Credit Karma exclusion; no broader Credit Karma signal obligation is inferred.
Cross-references
contrast (model-proposed): GPC response excludes Credit Karma; Do Not Track is not honored — The general U.S. GPC statement excludes Credit Karma while the other-state provision uses broad automatic opt-out wording. Both are preserved; the latter is not treated as an unqualified Credit Karma GPC promise.
Inference & Profiling · User right or choice
Covered state residents can opt out of consequential automated profiling
Under the other-state section’s eligibility and exemption limits, you can opt out of automated evaluation or prediction of personal aspects, including finances, health, interests, reliability, behavior and location, to the extent it produces legal or similarly significant decisions. This does not describe an opt-out of every recommendation.
Details not recorded for this card
Supporting quotations
You can opt-out of the automated processing of your Personal Information to evaluate, analyze, or predict personal aspects related to your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements, to the extent this results in decisions that produce legal or similarly significant effects.
but does not include information or entities exempted from the scope of the Applicable State Privacy Laws, such as those subject to GLBA.
Covered sensitive information will not be processed without consent
In the other-U.S.-states section, Intuit promises not to process sensitive personal information without consent where it falls under those applicable state laws. Exempt information or entities, including relevant GLBA cases, remain outside that section. This is separate from the California permitted-purpose wording.
Details not recorded for this card
Supporting quotations
Some of the Personal Information that we may collect may be considered Sensitive Personal Information under certain Applicable State Privacy Laws. We will not process your Sensitive Personal Information without your consent.
but does not include information or entities exempted from the scope of the Applicable State Privacy Laws, such as those subject to GLBA.
Legal Rights & Agreement Rules · User right or choice
Covered state rights include nondiscrimination and written appeals
Covered residents have a right against discrimination for exercising privacy rights. If Intuit declines a rights request, they may seek reconsideration in writing. Intuit promises a written outcome with reasons and, if denied, a way to contact the state attorney general for a complaint.
Details not recorded for this card
Supporting quotations
You have the right to be free from discrimination related to your exercise of any of your privacy rights.
If we decline to take action on any request that you submit in connection with the rights described above, you may ask that we reconsider our response by submitting a written request to us using the contact information provided below. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact your state attorney general’s office to submit a complaint.
State requests and agents must establish identity and authority
For covered other-state rights, Intuit may require credentials or additional data, and Credit Karma may require login or matching stored information. Unverified identity can cause refusal. Agents need signed authority and the user’s direct identity/permission confirmation unless documented legally valid power of attorney makes that verification unnecessary; inadequate authority proof can lead to denial.
Details not recorded for this card
Supporting quotations
For Credit Karma members, we may require that you confirm certain pieces of Personal Information that we have on file and/or log into your Credit Karma account. If we are subsequently unable to confirm your identity, we may refuse your rights request.
If you do so, the authorized agent must present signed written authorization to act on your behalf, and you will also be required to independently verify your own identity directly with us and confirm with us that you provided the authorized agent permission to submit the rights request. This verification process is not necessary if your authorized agent provides documentation showing that the authorized agent has a legally valid power of attorney to act on your behalf.
We may deny a request from an agent that does not submit adequate proof that they have been authorized by you to act on your behalf.
Legal Rights & Agreement Rules · Procedure
U.S. Intuit privacy mail goes to Tucson
The U.S. contact is Intuit Inc., Attention: Privacy, 2800 E Commerce Center Place, Tucson, AZ 85706. The statement also links the Intuit Data Protection Officer contact form.
Details not recorded for this card
Supporting quotations
United States contact information:
Intuit Inc.
Attention: Privacy
2800 E Commerce Center Place
Tucson, AZ 85706
You can contact the Intuit Data Protection Officer
Legal Rights & Agreement Rules · Procedure
Credit Karma U.S. privacy contact is its legal department
The listed contact is Credit Karma LLC, Attention: Legal Department, PO Box 30963, Oakland CA 94604, with CCPArequests@creditkarma.com for requests.
Details not recorded for this card
Supporting quotations
Credit Karma LLC
Attention: Legal Department
PO Box 30963
Oakland CA 94604
CCPArequests@creditkarma.com
Legal Rights & Agreement Rules · Procedure
Mailchimp U.S. privacy mail goes to Atlanta
The Mailchimp contact is The Rocket Science Group LLC d/b/a Mailchimp, Attn: Privacy Officer, 405 North Angier Ave. NE, Atlanta, GA 30308. A Data Protection Officer contact link is also provided.
Details not recorded for this card
Supporting quotations
Mailchimp
The Rocket Science Group LLC d/b/a Mailchimp
Attn: Privacy Officer
405 North Angier Ave. NE,
Atlanta, GA 30308
You can contact the Mailchimp Data Protection Officer
Account & Service Control · User right or choice
Australian residents can manage settings and request access, correction or deletion
For Australian residents, the statement offers account privacy and marketing settings, direct editing of information, and access or deletion requests through the listed contact route. These are Australia-specific procedures, not additional U.S. Credit Karma rights.
Details not recorded for this card
Supporting quotations
If you are a resident of Australia, you may have the following rights and choices:
You may update your privacy settings by visiting your account settings.
To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.
You may request to access, to correct or to delete your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services. To make a request for access or deletion of your personal information, contact us through the link below.
Use & Processing · User right or choice
Australian objections or consent withdrawal can limit services
Australian residents may object to processing, including marketing, or request restriction through the contact link. Stopping some or all processing or withdrawing applicable consent may prevent Intuit from providing all services and support.
Details not recorded for this card
Supporting quotations
You may object to our processing of your personal information, including for marketing purposes, or ask us to restrict processing of your personal information.
If you request that we stop processing some or all of your personal information or you withdraw (where applicable) your consent for our use or disclosure of your personal information for purposes set out in this privacy notice, we might not be able to provide you all of the Services and customer support offered to our users and authorized under this Notice.
Legal Rights & Agreement Rules · Procedure
Australian privacy requests use QuickBooks support or the listed Sydney address
The Australian section links QuickBooks Australia support and lists Intuit Australia Pty. Limited, Level 34, 1 O’Connell St., Sydney, NSW 2000 Australia.
Details not recorded for this card
Supporting quotations
Australia contact information:
Visit the QuickBooks Australia website to learn how to contact their support team.
Intuit Australia Pty. Limited
Level 34, 1 O'Connell St.
Sydney, NSW 2000 Australia
Sharing & Disclosure · Restriction or exception
Canadian data may be disclosed to authorities in other jurisdictions
The Canada section warns that, despite protection measures, personal information may be disclosed in response to valid demands or requests from governments, regulators, courts and law enforcement in other jurisdictions or countries.
Details not recorded for this card
Supporting quotations
While we take steps to maintain protection of your personal information, your personal information may be disclosed in response to valid demands or requests from governments, regulators, courts and law enforcement authorities in those other jurisdictions or countries.
Account & Service Control · User right or choice
Canadian residents can change settings and marketing preferences
Canadian residents can use account settings for privacy and marketing preferences and unsubscribe from marketing emails. Interest-based advertising opt-outs may be available through the DAA Canada and Choices pages; this is phrased as a possibility, not a guarantee of eliminating all ads.
Details not recorded for this card
Supporting quotations
If you are a resident of Canada, you may have the following rights and choices:
You may update your privacy settings by visiting your account settings.
To update your marketing communication preferences, you can go to the marketing preference tools in your account settings. You may also click unsubscribe at the bottom of the marketing emails.
You may be able to opt-out of interest based advertising by visiting the
Account & Service Control · User right or choice
Canadian access, correction and deletion requests preserve retention exceptions
The Canada provision permits access, correction or deletion requests, with its stated business-need retention condition. Requests use the Intuit account, Credit Karma Canada rights page or Mailchimp rights page, and direct editing is available. Even after deletion is requested, Intuit may retain data for compliance, legal claims and fraud or abuse prevention under the general retention section.
Details not recorded for this card
Supporting quotations
You may make a request to access, to correct or to delete your personal information (provided we no longer have a business need to retain your personal information).
You can edit and correct your personal information at any time by changing it directly in our products and services. Even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on the Intuit Platform. Data retained for these purposes will be handled as described in “Data Retention”.
Use & Processing · User right or choice
Canadian consent can be withdrawn without undoing earlier lawful processing
Canadian residents can withdraw consent to collection, use and disclosure at any time. Withdrawal does not affect earlier lawful processing or processing based on another lawful ground. They can also complain to the applicable Privacy Commissioner.
Details not recorded for this card
Supporting quotations
You can withdraw your consent at any time to collection, use and disclosure of your personal information. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
You have the right to file a complaint with the applicable Privacy Commissioner about our collection and processing of your personal information.
Legal Rights & Agreement Rules · Procedure
Intuit Canada privacy contact is in Toronto
The listed contact is Intuit Canada, Attention: Privacy, 8 Spadina Ave., Suite 1900, Toronto, Ontario M5V 0S8. A Data Protection Officer contact form is also linked.
Details not recorded for this card
Supporting quotations
Canada contact information:
Intuit Canada
Attention: Privacy
8 Spadina Ave.
Suite 1900
Toronto, Ontario
M5V 0S8
You can contact the Intuit Data Protection Officer
Legal Rights & Agreement Rules · Procedure
Credit Karma Canada provides a privacy officer email and help route
The Canada section lists Credit Karma LLC, Attention: Privacy Officer, PO Box 30963, Oakland CA 94604. It directs inquiries to the Canadian Help Centre and provides dpo@creditkarma.com for its Canada Privacy Officer.
Details not recorded for this card
Supporting quotations
Credit Karma LLC
Attention: Privacy Officer
PO Box 30963
Oakland CA 94604
You can also email the Credit Karma Canada Privacy Officer by writing to
dpo@creditkarma.com
Legal Rights & Agreement Rules · Procedure
Canada’s Mailchimp contact remains the Atlanta privacy officer
Canadian Mailchimp inquiries can use its Help Centre or the linked question form. The postal contact is The Rocket Science Group LLC d/b/a Mailchimp, Attn: Privacy Officer, 405 North Angier Ave. NE, Atlanta, GA 30308 USA.
Details not recorded for this card
Supporting quotations
The Rocket Science Group LLC d/b/a Mailchimp
Attn: Privacy Officer
405 North Angier Ave. NE,
Atlanta, GA 30308 USA
If your inquiry is specific to Mailchimp, you can visit the
Security & Safeguards · Context
The India clause defines agreed security practices by reference to this statement
For Indian individuals’ data, the clause says users agree that the cited Information Technology Act security-practices term means this statement and procedures Intuit may implement from time to time, with notification at Intuit’s discretion. This reports the contractual wording and does not determine whether it satisfies the law.
Details not recorded for this card
Supporting quotations
Where data of Indian individuals are involved, you hereby agree that the “reasonable security practices and procedures” under section 43A Explanation (ii) of the Information Technology Act, 2000 means this Intuit’s Privacy Statement and such data security procedures that Intuit may implement from time to time and which may, in Intuit’s discretion, be informed to you from time to time.
Account & Service Control · User right or choice
The India section offers privacy, marketing and correction controls
The India section describes account privacy settings, account marketing preference tools, and direct editing and correction of personal information at any time. It does not state that these are the only choices available elsewhere in the statement.
Details not recorded for this card
Supporting quotations
You have choices when it comes to managing the privacy of your personal information.
You may update your privacy settings by visiting your account settings.
To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.
You can edit and correct your personal information at any time by changing it directly in our products and services.
Legal Rights & Agreement Rules · Procedure
India inquiries use QuickBooks support or the Bangalore address
The India contact section links QuickBooks India support and lists Intuit Technology Services Private Limited, Campus 4A, PrITech Park (Ecospace), 7th and 8th Floor, Belandur Village, Varthur Hobli, Bangalore East Taluk, Bangalore - 560 103 India.
Details not recorded for this card
Supporting quotations
India contact information
Visit the QuickBooks India website to learn how to contact their support team.
Intuit Technology Services Private Limited
Campus 4A, PrITech Park (Ecospace)
7th and 8th Floor, Belandur Village
Varthur Hobli, Bangalore East Taluk
Bangalore - 560 103 India
Legal Rights & Agreement Rules · Context
European personal data excludes permanently anonymous information
In the UK/Gibraltar, EEA and Switzerland section, the statement equates personal information with EU/UK personal data: information identifying an individual directly or indirectly. It excludes anonymous data where identity has been permanently removed, rather than treating any masked identifier as anonymous.
Details not recorded for this card
Supporting quotations
United Kingdom (and Gibraltar)(UK), European Economic Area (EEA), and Switzerland
Personal Information
References to “personal information” in this Privacy Statement are equivalent to “personal data” governed by EU and UK data protection laws. Essentially, “personal data” is information about an individual, where that individual is either directly identified or can be identified. It does not include ‘anonymous data’ (i.e., information where the identity of an individual has been permanently removed).
Legal Rights & Agreement Rules · Company commitment
European processing requires a purpose-specific legal basis
In the UK/Gibraltar, EEA and Switzerland section, personal data covers identifiable people and excludes permanently anonymous information. Intuit says it uses information only as permitted by law and needs a legal basis for each collection purpose, depending on data and context. A linked table maps activities, categories, purposes and bases, but is not supplied here; the card cannot assign a particular basis to each activity.
Details not recorded for this card
Supporting quotations
References to “personal information” in this Privacy Statement are equivalent to “personal data” governed by EU and UK data protection laws.
It does not include ‘anonymous data’ (i.e., information where the identity of an individual has been permanently removed).
We use your personal information only as permitted by law. Applicable EEA, UK(and Gibraltar) and Swiss data protection law requires us to have a “legal basis” for each purpose for which we collect your personal information. Our legal basis for collecting and using the personal information described in this Privacy Statement will depend on the type of personal information and the specific context in which we collect it.
Not stated here
The linked lawful-basis table is not supplied; activity-specific legal bases remain unknown in this analysis.
UK product searches may share financial and contact data with named partners
For UK residents searching through the platform for financial or other products, including energy, internet and mobile offers, Intuit may share contact details, birth date, employment, income and housing/employment expenses with partners including HD Decisions, Capital One, Monevo, CarFinance 247 and Decision Tech. The linked partner policies are separate and their contents are not inferred.
Details not recorded for this card
Supporting quotations
For residents in the UK searching for financial or other products (including energy, internet, or mobile phone offers) through the Intuit Platform, we may share your personal information, including your contact details, date of birth, as well as the information you give us about your employment, income, and housing and employment expenses with third parties, including HD Decisions, Capital One, Monevo, CarFinance 247, and Decision Tech.
The partner privacy policies are linked but not supplied; no claims are made about their data use.
Account & Service Control · User right or choice
European residents have settings, access and correction routes
Residents of the UK/Gibraltar, EEA and Switzerland may manage account privacy settings and request access, correction or deletion. Copies can be requested through the account Privacy tab or UK/EU GDPR Centres; Credit Karma UK and Mailchimp have dedicated rights pages. Information can be corrected directly in products. Deletion has the separately stated retention exceptions.
Details not recorded for this card
Supporting quotations
If you are a resident of the UK(and Gibraltar), the EEA or Switzerland you may have the following rights and choices:
You may update your privacy settings by visiting your account settings.
You may request to access, to correct or to delete your personal information.
You may request a copy of your personal information in the Privacy tab of your account
If your inquiry is specific to Credit Karma UK, you may request a copy of your personal information by visiting
You can edit and correct your personal information at any time by changing it directly in our products and services.
Retention & Deletion · Restriction or exception
European deletion requests leave specified retention grounds intact
UK/Gibraltar, EEA and Swiss users can request deletion through the account Privacy tab or GDPR Centres, with dedicated Credit Karma UK and Mailchimp routes. Intuit may still retain information for legal/regulatory compliance, legal claims and fraud or abuse prevention, handled under the general retention section.
Details not recorded for this card
Supporting quotations
You may request for us to delete your personal information in the Privacy tab of your account
Please note that even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on our Service. Data retained for these purposes will be handled as described in the section “Data Retention”.
European residents may object, seek restriction or request portability
The UK/Gibraltar, EEA and Switzerland section says residents may object to processing, ask for restriction and request portability of their personal information. These are stated request rights; this passage does not specify every eligibility condition or guarantee every request’s outcome.
Details not recorded for this card
Supporting quotations
You may object to our processing of your personal information or ask us to restrict processing of your personal information.
You may request portability of your personal information.
Use & Processing · User right or choice
European consent withdrawal does not undo earlier lawful processing
When processing relies on consent, UK/Gibraltar, EEA and Swiss users can withdraw it at any time. Withdrawal does not affect past lawful processing or processing based on lawful grounds other than consent.
Details not recorded for this card
Supporting quotations
If we process your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Legal Rights & Agreement Rules · User right or choice
European residents can complain to a supervisory authority
UK/Gibraltar, EEA and Swiss residents are told they may complain to a supervisory authority about collection and processing. The statement links European and UK contact resources and warns that some authorities require exhausting Intuit’s internal complaints process first.
Details not recorded for this card
Supporting quotations
You have the right to file a complaint with a supervisory authority about our collection and processing of your personal information.
Certain supervisory authorities will require that you exhaust our internal complaints process before looking into your complaint.
Account & Service Control · User right or choice
European marketing controls include account tools and unsubscribe links
For UK/Gibraltar, EEA and Swiss users, the statement points to account preferences, the appropriate GDPR Centre, Mailchimp email settings and Credit Karma UK Help Centre instructions. Marketing emails also provide unsubscribe links.
Details not recorded for this card
Supporting quotations
To update your marketing communication preferences, you can go to the marketing preference tools in your account settings
instructions on how to update preferences. You may also click unsubscribe at the bottom of the marketing emails.
Not stated here
The linked marketing-help pages are not supplied; their further steps and requirements are not inferred.
Sharing & Disclosure · User right or choice
European advertising opt-out resources include Mailchimp cookie preferences
Users in the European regional section may be able to opt out of interest-based ads through Network Advertising Initiative, Your Online Choices or the UK/EU GDPR Centres. Mailchimp targeted-ad tracking requests use its website’s footer Cookie Preferences control. These are opt-out routes, not a promise that all advertising stops.
Details not recorded for this card
Supporting quotations
You may be able to opt-out of such interest-based advertising by visiting
For Mailchimp, you can submit requests to opt-out of tracking for targeted advertising purposes by visiting the “Cookie Preferences” link in the footer of the
Legal Rights & Agreement Rules · Context
EU and UK representatives are named for specified entities
Intuit Inc., Intuit Limited and Mailchimp appoint Intuit Ireland Software Limited as their EU representative. Intuit Inc. and Mailchimp appoint Intuit Limited as UK representative. Although the heading mentions Switzerland, these sentences do not identify a separate Swiss representative, and they do not list Credit Karma among the represented entities.
Details not recorded for this card
Supporting quotations
UK and EEA and Swiss Representative
In the EEA: Intuit Inc., Intuit Limited and Mailchimp have each appointed Intuit Ireland Software Limited as its Representative in the European Union
In the UK: Intuit Inc., and Mailchimp have each appointed Intuit Limited as its Representative in the UK
Not stated here
A separate Swiss representative is not identified in these sentences; no additional appointment is inferred.
Legal Rights & Agreement Rules · Procedure
Intuit’s UK regional contact is at Cardinal Place in London
The listed regional contact is Intuit Limited, Attention: Intuit Data Protection Administration, Cardinal Place, 80 Victoria Street, London, United Kingdom SW1E 5JL, with a QuickBooks UK GDPR Centre link.
Details not recorded for this card
Supporting quotations
United Kingdom, EEA and Switzerland contact information
The listed contact is Intuit Ireland Software Limited, 112-114 St Stephen’s Green, Suite 416, Dublin 2, D02 TD28, Ireland, with a QuickBooks EU GDPR Centre link.
Unanswered European privacy concerns can go to the relevant DPO
The final regional contact paragraph links the Intuit and Mailchimp Data Protection Officer form and gives dpo@creditkarma.com for Credit Karma’s Data Protection Officer. It is a contact route for unanswered questions or concerns.
Details not recorded for this card
Supporting quotations
If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact the Intuit and Mailchimp Data Protection Officer
the Credit Karma Data Protection Officer by writing to
dpo@creditkarma.com
Use & Processing · Company practice
Product development can use personal information to train AI models
Intuit may analyze platform use, interactions and certain content customers send or display to improve products, develop insights and train AI or machine-learning models. Google Workspace API data is expressly excluded from generalized model development, improvement and training; Intuit says that data is ingested only to deliver services on the customer’s behalf and ensure safety, not retrain models. The separate U.S. Tax Return Information restriction also applies: use or disclosure beyond necessary tax preparation or legal authorization requires consent.
Details not recorded for this card
Supporting quotations
Research and development. We may use your personal information to:
Improve and develop our products and services by analyzing how they are used and interacted with, by training our artificial intelligence models and other machine learning models, as well as by assessing the use of and interactions with our Platform and certain content our customers send or display through the Platform, including by conducting data analytics to develop insights about you, your needs, and your preferences, so we can make more informed predictions, recommendations, and products for our customers.
Please note any data obtained through Google Workspace APIs is not used to develop, improve, or train any generalized AI and/or ML models. Any data originating from the Google Workspace API is instead ingested only by Intuit’s and our third-party providers’ artificial intelligence tools to deliver services on the customer’s behalf and to ensure safety, not for model retraining.
Combined information can become anonymous research and marketing statistics
Intuit may combine and anonymize information about interactions to create aggregate anonymous statistics for research, including work with academic institutions, and for marketing, promoting, improving and developing the platform.
Details not recorded for this card
Supporting quotations
Combine and anonymize information about your interactions with Intuit to create aggregate, anonymized statistics for use in research (including by contracting with academic institutions) and for marketing, promoting, improving, and developing our platform.
Use & Processing · Company practice
Marketing uses preferences and inferred interests across channels
Intuit, service providers and advertising partners may collect and use personal information for marketing. Promotional communications, gifts and recommendations may arrive by email, post, phone, SMS or push notifications in accordance with marketing preferences. Insights about interactions can tailor offers and ads on Intuit properties and outside platforms or devices. Advertising-network sharing is addressed separately and regional rules may add choices.
Details not recorded for this card
Supporting quotations
We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes to:
Market services, products and experiences, including to deliver gifts and promotional materials, product recommendations and other non-transactional communications via email, post, telephone, SMS or push notifications, in accordance with your marketing preferences.
Personalize your experience and tailor recommendations, advertising, and offers presented to you, including through the development of insights about you and your needs based on your interactions with the Intuit Platform’s products, services, and offerings. These advertisements may be displayed to you on Intuit’s digital properties, including our websites and mobile apps, media platforms, connected devices, or other third-party platforms and channels.
Whistleblower identity may need to be disclosed in an investigation
Information supplied when reporting alleged misconduct is processed for the investigation and retained under internal policies until it is complete. Intuit says it makes efforts to maintain confidentiality but may need to reveal the reporter’s identity depending on the investigation. The passage does not promise immediate deletion upon completion.
Details not recorded for this card
Supporting quotations
personal information you provide will be processed as a part of the investigation of the allegations and retained in accordance with our internal policies until the investigation is complete. While we make every effort to maintain confidentiality, depending on the investigation, disclosing your identity to other individuals may be necessary.
Legal Rights & Agreement Rules · Company practice
Personal information is used for protection, compliance and legal proceedings
Intuit may use information to prevent misuse, enforce service terms including customer content rules, comply with law, protect rights, property and safety, prevent fraud or illegality, exercise rights in judicial, administrative or arbitration proceedings, and enforce or remedy agreements.
Details not recorded for this card
Supporting quotations
Compliance and protection. We may use your personal information to:
Protect against misuse or abuse of our Services and ensure compliance with our Terms of Service, including in relation to content our customers send or display through the Platform
Comply with legal and regulatory requirements
Protect the rights, property, safety or security of the Intuit Platform, our customers, employees or others and prevent fraudulent or illegal activity
Exercise our rights in the course of judicial, administrative, or arbitration proceedings
Enforce, remedy, or apply our Terms of Service or other agreements
Use & Processing · Restriction or exception
Some uses require consent; compatible purposes may also be used
Intuit may specifically request consent in some cases, including where law requires it. It may also process information for purposes compatible with those listed when applicable law permits. This is not unrestricted permission for unrelated purposes.
Details not recorded for this card
Supporting quotations
In some cases, we may specifically ask for your consent to use your personal information, such as when required by law.
We may process your personal information for other purposes that are compatible with the above purposes where permitted by applicable law.
Inference & Profiling · Company practice
AI features may involve both automated and human processing
Using AI conversational features may involve automated and manual human processing of personal information. Intuit describes personalized predictions, financial insights, tax suggestions and credit-product recommendations. Some laws may give a right to object to automated processing, with details in the regional section; this is not stated as a universal right.
Details not recorded for this card
Supporting quotations
When you use or interact with features on the Intuit Platform like chatbots, digital assistants, or other digital conversational experiences powered by artificial intelligence, we may process your personal information using automated and manual (human) methods.
Certain laws may provide you with the right to object to the automated processing of your personal information. Please review these rights in the “Region and state-specific terms” section below.
Sharing & Disclosure · Restriction or exception
Using certain API features also subjects you to the provider’s privacy policy
Intuit may use providers such as YouTube and Twilio for particular features. Choosing those features means accepting the third party’s privacy policy as well. The statement points to Google security permissions for YouTube API data and Twilio’s privacy notice for its data choices; those external policy terms are not supplied here.
Details not recorded for this card
Supporting quotations
We may share your personal information in the following circumstances:
We may use third party API services, such as YouTube and Twilio, for certain product features. If you choose to use those features, you acknowledge and agree that you are also bound by the third party’s privacy policy.
You may manage your YouTube API data by visiting Google’s security settings page
You may make choices about your Twilio API data by visiting Twilio’s privacy notice
Sharing & Disclosure · Company practice
Partner interaction can send data before you submit an application
Choosing to interact with a platform partner, apply for its offering or link an account is treated as consent and direction to share information with that partner. In some cases clicking through sends data automatically even though you still must submit the partner application. Information provided through Intuit or directly is subject to the partner’s practices and terms.
Details not recorded for this card
Supporting quotations
If you choose to interact with a platform partner, apply for their services or offerings, or otherwise link or sync your account to a platform partner’s product or service, you consent and direct us to share your personal information to the platform partner providing the service or offering.
In some cases, if you click through to go to a platform partner’s site, you will automatically be sending your personal information to that platform partner. When this happens, you will still have to submit your application on the platform partner’s site. Remember that any information you provide to a platform partner, whether through us or on your own, will be subject to their privacy practices and terms and conditions.
Sharing & Disclosure · Restriction or exception
Social sharing and public posts can expose personal information
Social-account features may let you share information potentially visible worldwide under the social provider’s policy rather than this statement. Public reviews, questions, comments and other forum content, including names or usernames, are public.
Details not recorded for this card
Supporting quotations
Any information you choose to share on social media may potentially be visible to a global audience and will be subject to the social media provider’s privacy policies (not this Privacy Statement).
We may provide opportunities for you to publicly post reviews, questions, comments, suggestions, or other content that may include personal information, such as your name or username. Anything you share in a public forum is public
Sharing & Disclosure · Restriction or exception
Joint features and events involve sharing with your consent
With your consent, Intuit may share personal information with third parties jointly providing features, sales initiatives, promotions or events.
Details not recorded for this card
Supporting quotations
With your consent we may share your personal information with third parties who are jointly providing features, sales initiatives, promotions or events with us.
Sharing & Disclosure · Permission or license
Wireless use authorizes limited carrier disclosure for identification and fraud prevention
Using a wireless device with the platform authorizes the carrier to use or disclose available account and device information to Intuit or its service provider for the business relationship’s duration, solely to identify you or your device and prevent fraud.
Details not recorded for this card
Supporting quotations
When you use your wireless device in connection with the Intuit Platform, you authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to Intuit or its service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud.
Sharing & Disclosure · Company commitment
Text-program data is not passed to third parties for their own marketing
Intuit says personal information collected through its text-messaging program will not be shared, sold or rented to affiliated or unaffiliated third parties for their own marketing. This is a program-specific restriction, not a prohibition on every form of sharing.
Details not recorded for this card
Supporting quotations
Personal information collected through the text messaging program will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.
Research disclosures must not identify individuals
Intuit may share information with academic institutions, governments, nonprofits and others for research or academic/policy publication with appropriate controls, but says it only shares it in a way that identifies no individual.
Details not recorded for this card
Supporting quotations
We also share your personal information with third parties in the following circumstances.
With appropriate controls, we may share information with third parties, such as academic institutions, government and non-profit organizations, for research purposes or to publish academic or policy-related materials. We only share information in a way that does not identify any individual.
Sharing & Disclosure · Company practice
Financial products and credit issues can lead to financial-party disclosures
For financial products, Intuit may share personal information with collection agencies, credit bureaus, loan-service providers and payment-card association members. Fraud, credit, defaults or debt collection can also involve disclosures to companies, lawyers, agents, government agencies and card associations.
Details not recorded for this card
Supporting quotations
In connection with our financial products, we may share personal information with collection agencies, credit bureaus and loan services providers, and payment card association members. We may also share your personal information with other companies, lawyers, credit bureaus, agents, government agencies, and card associations in connection with issues related to fraud, credit, defaults, or debt collection.
Sharing & Disclosure · Company practice
Service providers including generative AI providers receive data with protection requirements
Intuit shares data with agents and providers acting on its behalf for stated purposes, including advertising, sales, hosting, security, business operations and AI services. Providers must implement reasonable privacy and information-protection controls consistent with this statement. This describes Intuit’s providers, distinct from cases where Intuit itself processes data for a customer under that customer’s terms.
Details not recorded for this card
Supporting quotations
We share personal information with our service providers or agents who provide services on our behalf for the purposes described in this Privacy Statement. Service providers or agents are required to implement reasonable privacy and information protection controls to maintain the privacy and security of information provided to them consistent with the privacy practices outlined in this Privacy Statement.
Service providers or agents also include AI providers, including generative AI providers.
Sharing & Disclosure · Company practice
Corporate transactions can involve disclosures before and after completion
In mergers, asset sales, financing, liquidation, bankruptcy or business acquisitions, Intuit may share personal information with the other company and its advisers before and after the transaction.
Details not recorded for this card
Supporting quotations
If we are involved with a merger, asset sale, financing, liquidation, bankruptcy, or the acquisition of all or part of our business to another company, we may share your personal information with that company and its advisors before and after the transaction date.
Sharing & Disclosure · Company practice
Affiliate sharing includes marketing, subject to applicable limits
Intuit may share information with affiliates and subsidiaries for the stated everyday business purposes, including marketing, development, improvement and personalization. Certain laws can let you limit particular sharing; regional terms provide details. Text-program data has the separate restriction against third parties’ own marketing. U.S. Tax Return Information also requires consent for group-company use or disclosure unless necessary for tax preparation or authorized by law.
Details not recorded for this card
Supporting quotations
We may share your personal information with our affiliates and subsidiaries for everyday business purposes as described in this Statement, including for marketing purposes, for improving and developing our offerings, and for personalizing your experience on our Platform. Certain laws may provide you with the right to limit our information sharing activities in certain circumstances. Please review these rights in the “Region and state-specific terms” section below.
Personal information collected through the text messaging program will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.