Affirm Privacy Notice

Data Access & Collection · Company practice

Affirm collects identity and profile details when you open an account or use the Services

If you open an account or use the Affirm Services, directly or through a merchant partner or third-party platform, Affirm may collect identity and profile information: full name, date of birth, Social Security number, Individual Taxpayer Identification Number, email address, mailing address, phone number, password and account preferences (if you create an account).

Supporting quotations

If you open an account or use the Affirm Services, either directly or through a merchant partner or a third-party platform, we may collect the following types of information:

Identity and Profile Information. This includes your full name, date of birth, Social Security number, Individual Taxpayer Identification Number, email address, mailing address, phone number, password and account preferences (if you create an account with us).

Qualifications & exceptions

• Collection may occur directly or through a merchant partner or a third-party platform.
• Account preferences are collected only if you create an account with Affirm.

Charges & Financial Obligations · Company practice

Financial information includes bank login credentials, account numbers and linked card numbers

Affirm may collect bank account online login information, bank account numbers, bank account details including transaction history, routing numbers and/or debit card numbers and credit card numbers that you link to your Affirm account or give Affirm when you use the Services.

Supporting quotations

Financial Information. This includes bank account online login information, bank account numbers, bank account details including transaction history, routing numbers and/or debit card numbers and credit card numbers that you link to your Affirm account or you give us when you use the Services.

Qualifications & exceptions

• Covers accounts and cards you link to Affirm or provide when using the Services.

Not stated here

• The Notice does not say how bank login credentials are secured or which vendors receive them.

Data Access & Collection · Company practice

Customer service calls, chats and emails may be recorded and kept for quality and training

Affirm collects information you provide when you engage its customer service personnel and mechanisms, including recorded phone calls, chat conversations, surveys and email correspondence. Recordings and transcripts of those interactions may be stored by Affirm and/or its vendors on its behalf for quality assurance and training purposes.

Supporting quotations

Customer Service Interaction Information. We collect information you provide when you engage with Affirm's customer service personnel and mechanisms, including through recorded phone calls, chat conversations, surveys, and email correspondence. Note that recordings and transcripts of customer service interactions may be stored by us and/or our vendors on our behalf for quality assurance and training purposes.

Qualifications & exceptions

• Storage may be by Affirm or by vendors acting on its behalf.
• Recordings and transcripts are kept for quality assurance and training.

Not stated here

• The Notice does not state how long recordings are retained.

Data Access & Collection · Company practice

Affirm records your marketing communication preferences, including third-party marketing

Affirm collects direct marketing and communications information: your preferences in receiving marketing communications from Affirm and its third parties, described as marketing and servicing vendors and merchant partners.

Supporting quotations

Direct Marketing and Communications Information. This includes your preferences in receiving marketing communications from us and our third parties (marketing and servicing vendors and merchant partners).

Qualifications & exceptions

• Third parties named are marketing and servicing vendors and merchant partners.

Data Access & Collection · Company practice

Location is collected only if you enable map search, and device settings can withdraw it

Affirm may collect or infer information about your general or precise location, including the precise location of your device, if you choose to enable that functionality by searching using maps on your device in the App. You can withdraw consent to this at any time using your device settings.

Supporting quotations

Geolocation Information. We may collect or infer information about your general or precise location (including the precise location of your device) if you choose to enable that functionality by searching using maps on your device in the App. You can withdraw your consent to this at any time using your device settings.

Qualifications & exceptions

• Precise device location depends on enabling map search in the App.
• Consent can be withdrawn at any time in device settings.

Data Access & Collection · Company practice

Photographs may be used by identity-verification vendors, including facial recognition

Affirm may collect information about your physical or biological characteristics such as photographs. Those photographs may be used by Affirm's identity verification vendors to verify your identity or detect fraud, including through facial recognition technologies controlled by those vendors.

Supporting quotations

Photographs. We may collect information about your physical or biological characteristics such as photographs. These photographs may be used by our identity verification vendors for verifying your identity or detecting fraud (including through facial recognition technologies controlled by such vendors).

Qualifications & exceptions

• Use is by identity verification vendors for identity verification or fraud detection.
• Facial recognition technologies are controlled by those vendors.

Not stated here

• The Notice does not name the identity verification vendors or state retention for photographs and facial-recognition data.

Data Access & Collection · Company practice

The browser extension reads merchant pages you open while it is enabled

If you use Affirm's browser extension or in-app browser, Affirm may collect information from merchant webpages you choose to access through those features while they are enabled, including website domain, page URL, cart contents, product details, pricing, quantities and related page information. Affirm uses that information to provide and improve extension features, provide more personalized experiences and support related services.

Supporting quotations

Browser Extension. If you use our browser extension or in-app browser, we may collect information from merchant webpages you choose to access through those features while they are enabled including website domain, page URL, cart contents, product details, pricing, quantities, and related page information. We use this information to provide and improve extension features, provide more personalized experiences, and support related services.

Qualifications & exceptions

• Covers merchant pages accessed through the extension or in-app browser while enabled.
• Stated purposes are providing and improving extension features, personalization and related services.

Data Access & Collection · Company practice

Usage and device data is collected automatically, including identifiers and activity

Affirm may automatically collect usage details and device information: browser, operating system or device details such as MAC address, cookie identifiers, IP address, mobile advertising and other unique identifiers, device ID, internet service provider, mobile carrier, general and inferred location, actions taken in the Services, interaction frequency and duration, links clicked, and other information about use. The Notice says this information is often collected through cookies, web beacons and other tracking technologies.

Supporting quotations

Usage Details and Device Information. We may collect certain information automatically when you use the Services, including details about your browser, operating system or device, (such as your MAC address, cookie identifiers, Internet protocol (IP) address, mobile advertising, and other unique identifiers, device ID, Internet service provider, mobile carrier, general location information (including inferred location based off of your IP address), actions that you take while using the Services, information about how you interact with the Services, including the frequency and duration of your activities, information about the links you click, and other information about how you use the Services.

The information described in this "Usage Details and Device Information" section is often collected through cookies, web beacons, and other tracking technologies.

Qualifications & exceptions

• Collected automatically when you use the Services.
• The Notice says the data is often collected through cookies, web beacons and other tracking technologies.

Not stated here

• The linked Cookie Notice is not supplied in this source; its purposes and opt-out details are not analyzed here.

Use & Processing · Company practice

Partners help collect data for site operations, analytics and personalized advertising

The Notice says Affirm's partners may help collect this data for site operations (features needed to provide the Services, such as recognizing a signed-in user, tracking content views, remembering preferences and ad frequency), analytics (understanding how the Services are used, tracking site performance and making improvements) and personalized advertising (tailored ads across services and devices and measuring ad effectiveness).

Supporting quotations

Our partners may help collect this data for:

Site operations: Enabling features that are necessary for providing you the Services on our site, such as identifying you as being signed in, tracking content views, remembering your preferences, and the number of times you have been shown an advertisement.

Analytics: Allowing us to understand how our Services are being used, track site performance, and make improvements.

Personalized advertising: Delivering tailored advertising based on your preferences or interests across services and devices, and measuring the effectiveness of advertisements.

Qualifications & exceptions

• Purposes are stated as site operations, analytics and personalized advertising.

Use & Processing · User right or choice

Opting out of ad networks limits interest-based ads but does not stop all advertising

Affirm points readers to the Network Advertising Initiative and Digital Advertising Alliance to learn how advertising networks collect and use information and how to limit that use, and notes that mobile advertiser IDs can be reset in device settings. It also says opting out of those networks does not stop ads on Affirm's Services or other websites; it limits interest-based advertising from participating companies under their opt-out tools and policies, companies outside those programs may continue interest-based ads, and deleting cookies may delete opt-out preferences.

Supporting quotations

You can learn more about how advertising networks collect and use your information, and how to limit that use, by visiting the Network Advertising Initiative, and the Digital Advertising Alliance. You can also manage tracking by certain mobile advertising networks through your device settings, including by resetting the advertiser ID on your Apple or Android device.

Please note that opting-out of these advertising networks services does not mean you will stop seeing ads while using our Services or on other websites. It only limits interest-based advertising from participating companies, in accordance with their opt-out tools and policies. Other companies that do not participate in these programs may continue to show you interest-based ads. Note that if you delete your cookies, you may also delete your opt-out preferences

Qualifications & exceptions

• Applies to participating advertising networks' interest-based advertising.
• Non-participating companies may continue interest-based ads.
• Deleting cookies may remove opt-out preferences.

Data Access & Collection · Company practice

Business users and sole proprietors also have business details collected

For business users or sole proprietors, Affirm may also collect business name, industry, business address, business email, business telephone number, tax identification number and ownership percentages.

Supporting quotations

Information about Businesses and Business Representatives. In addition to the other types of information listed in this section, if you are a business user or sole proprietor, we may collect your business name, industry, business address, business email, business telephone number, tax identification number, and ownership percentages.

Qualifications & exceptions

• Applies to business users and sole proprietors.

Data Access & Collection · Company practice

Affirm obtains information from vendors and service providers such as IT and security firms

Affirm says it may also obtain information about you from vendors and service providers it relies on to provide the Services, such as IT and security service providers.

Supporting quotations

We may also obtain information about you from:

Vendors/service providers. This includes vendors we rely on to provide our Services, like IT and security service providers.

Sharing & Disclosure · Company practice

Online advertising partners may also collect information through tracking technologies

The Notice says the information described in its usage section is often collected through cookies, web beacons and other tracking technologies, and that third parties who assist with online advertising may use tracking technologies to collect or receive information through the Services and elsewhere on the internet for measurement services and targeted ads. Those third parties may let other companies access the information so those companies can advertise products as you browse.

Supporting quotations

The information described in this "Usage Details and Device Information" section is often collected through cookies, web beacons, and other tracking technologies.

To third parties who assist us in serving online advertising regarding the Services. These third parties may use tracking technologies to collect or receive information through the Services and elsewhere on the internet and use that information to provide measurement services and targeted ads. Third parties may allow other companies to access information about you so that they may advertise other products you may be interested in as you browse the internet.

Qualifications & exceptions

• Applies to third parties who assist with online advertising.

Not stated here

• The Notice does not name the advertising partners or the other companies given access.

Data Access & Collection · Company practice

Credit, identity and fraud-prevention sources are used to enrich loan eligibility decisions

Affirm says it relies on third-party sources to enrich its loan eligibility determinations, including credit reporting agencies, identity verification, fraud prevention and similar services.

Supporting quotations

Third party sources that we rely on to enrich our loan eligibility determinations. This includes credit reporting agencies, identity verification, fraud prevention, and similar services.

Qualifications & exceptions

• The stated purpose is enriching loan eligibility determinations.

Data Access & Collection · Company practice

Merchant partners and other third parties supply addresses and account information

Affirm may obtain information about you, such as billing and shipping address, from third parties like merchant partners you interact with, identity verification services, public sources, or companies that partner with Affirm to provide products and services.

Supporting quotations

Merchant partners. We may obtain information about you, such as your billing and shipping address, from third parties like our merchant partners you interact with, identity verification services, or public sources or that we receive from companies that partner with us to provide products and services.

Qualifications & exceptions

• Examples given are billing and shipping address.

Data Access & Collection · Company practice

Advertising and research partners supply interest, demographic and ad-interaction data

Affirm obtains information from online advertising companies and other advertising and research partners, including third parties who may disclose information about your interests, demographic information, and information about the marketing and advertisements you have seen or clicked on while browsing the internet.

Supporting quotations

Online advertising companies and other advertising and research partners. This includes third parties who may disclose information about your interests, demographic information, and information about the marketing and advertisements you have seen or clicked on as you browse the internet.

Not stated here

• The Notice does not name these advertising or research partners.

Data Access & Collection · Company practice

Information from your third-party accounts is limited by those sites' settings and your authorization

Affirm may access information from your accounts managed by third parties, including social media platforms and publicly available data sources. The information available varies by third-party site and is controlled by your privacy settings and authorization on that site.

Supporting quotations

Social media platforms and other publicly available data sources managed by third parties. Affirm may have access to your information from your accounts managed by third parties. The information we have access to varies by third party site and is controlled by your privacy settings and authorization on that site.

Qualifications & exceptions

• The information available varies by third-party site.
• It is controlled by your privacy settings and authorization on that site.

Data Access & Collection · Company practice

Business partners may supply information to link accounts and pre-populate onboarding

Affirm may collect information about you from business and strategic partners that collaborate with Affirm, which allows it to link your existing Affirm account to other services or platforms you use, or to pre-populate your information to streamline account creation and enhance your experience.

Supporting quotations

Business and Strategic Partners. Affirm may collect information about you from business and strategic partners that collaborate with Affirm. This allows us to link your existing Affirm account to other services or platforms you use, or to pre-populate your information to streamline account creation and enhance your experience with our Services.

Qualifications & exceptions

• Stated uses are linking an existing Affirm account to other services and pre-populating account creation.

Use & Processing · Company practice

Affirm uses information to run transactions, verify identity, collect payments and prevent fraud

To provide its Services, Affirm uses information to process transactions, resolve disputes, authenticate and verify identities, collect payments, prevent fraud and other illegal activities, customize the Services, and verify the accuracy of data. It may also be used to facilitate your relationship with merchant partners you choose to interact with.

Supporting quotations

We use your information for the following purposes:

Process transactions, resolve disputes, authenticate and verify identities, collect payments, prevent fraud and other illegal activities, customize the Services, and verify the accuracy of data. It may also be used to facilitate your relationship with our merchant partners you choose to interact with.

Qualifications & exceptions

• The merchant-partner facilitation applies to partners you choose to interact with.

Use & Processing · Company practice

Customer research, product development and AI or machine-learning tools use your information

Affirm uses information to understand its customer base, conduct research and analysis, develop new or improved products and Services, use artificial intelligence and/or machine learning tools, and build relationships with merchant partners. If you are an employee, representative or agent of a merchant, vendor or other business entity, the information may be used for the business relationship between that entity and Affirm, or to market a prospective relationship to the entity you represent.

Supporting quotations

Understand our customer base may be used to conduct research and analysis, develop new or improved products and Services, in the utilization of artificial intelligence and/or machine learning tools, and to build relationships with merchant partners. If you are an employee, representative, or agent of a merchant, vendor, or other business entity, it may be used in connection with the business relationship between the entity and Affirm, or to market a prospective relationship to the entity you represent.

Qualifications & exceptions

• Business-representative use covers the relationship between the entity and Affirm or marketing a prospective relationship to that entity.

Not stated here

• The Notice does not describe what data enters the AI or machine-learning tools or what those tools produce.

Use & Processing · Company practice

Information is used to answer your questions and provide customer support

Affirm uses information to provide customer service and support, and to respond to your questions, comments and other requests.

Supporting quotations

Provide customer service and support, respond to your questions, comments, and other requests.

Use & Processing · Company practice

Marketing uses include service updates, personalized offers and voluntary promotions

Affirm uses information to send service update notices and inform you about products, services and promotions that may be relevant. It may combine your information with information collected from other companies to improve and personalize your experience, including advertising, and may use it to operate sweepstakes, contests, referral programs or other optional promotional offers; participation is voluntary and you may opt out at any time.

Supporting quotations

Service update notices and inform you about products, services, and promotions that may be relevant. We may combine your information with information we collect from other companies and use it to improve and personalize your experience, including advertising. Your information may also be used to operate sweepstakes, contests, referral programs, or other optional promotional offers. Participation is voluntary and you may opt out at any time.

Qualifications & exceptions

• Participation in sweepstakes, contests and referral programs is voluntary.
• You may opt out at any time.

Security & Safeguards · Company practice

Website performance, user experience and security monitoring use your information

Affirm uses information to monitor the performance of the Services, improve the user experience and ensure the security of the Services.

Supporting quotations

Monitor the performance of our Services, improve the user experience, and to ensure the security of our Services.

Legal Rights & Agreement Rules · Company practice

Information is used for regulator, law-enforcement and litigation inquiries worldwide

Affirm uses information in connection with inquiries from regulators, law enforcement agencies or parties involved in litigation, in each case anywhere in the world, as necessary to comply with obligations or bring claims and exercise defenses, including to enforce loan agreements and Terms of Service.

Supporting quotations

In connection with inquiries from regulators, law enforcement agencies, or parties involved in litigation, in each case anywhere in the world, as necessary for Affirm to comply with obligations or bring claims and exercise defenses, including to enforce the terms of loan agreements and Terms of Service.

Qualifications & exceptions

• Inquiries may come from anywhere in the world.
• Use is as necessary to comply with obligations or bring and defend claims.

Use & Processing · Company commitment

De-identified information is not restricted, but Affirm promises not to re-identify it

Affirm de-identifies information so it cannot reasonably identify you or your device. Once information is de-identified, Affirm commits to keeping it in de-identified form and, if it discloses the information to third parties, to require them to commit not to re-identify it. Otherwise, Affirm's use and disclosure of de-identified information is not subject to any restrictions under this Notice, and Affirm may use and disclose it to others for any purpose without limitation.

Supporting quotations

De-identify information so it cannot reasonably identify you or your device. Once information has been de-identified, we commit to keeping it in de-identified form, and if we disclose it to third parties, we will also require them to commit to not re-identify it. Otherwise, our use and disclosure of de-identified information is not subject to any restrictions under this Privacy Notice, and we may use and disclose it to others for any purpose, without limitation.

Qualifications & exceptions

• The commitment covers keeping de-identified data de-identified and requiring recipients not to re-identify it.
• All other use and disclosure of de-identified information is stated to be unrestricted.

Not stated here

• The Notice does not describe the de-identification method or any re-identification controls beyond the recipient commitment.

Sharing & Disclosure · Company practice

Information is disclosed to Affirm's affiliates and subsidiaries, including experience data

Affirm discloses your information to its affiliates and subsidiaries, including information about your experience using the Services, as one of the purposes for which it discloses information.

Supporting quotations

We disclose your information for the following purposes:

To our affiliates and subsidiaries, including information regarding your experience using our Services.

Qualifications & exceptions

• Includes information about your experience using the Services.

Sharing & Disclosure · Company practice

Service providers and contractors process information for Affirm's business functions

Affirm discloses information to service providers and contractors to perform functions on its behalf, such as processing transactions, marketing, billing and collection, auditing and accounting, professional services, measurement and analytics services, security, maintenance and hosting of the Services, and IT.

Supporting quotations

To service providers and contractors to perform functions on our behalf, such as processing transactions, marketing, billing and collection, auditing and accounting, professional services, measurement and analytics services, security, maintenance and hosting of our Services, and IT.

Qualifications & exceptions

• The listed recipients act to perform functions on Affirm's behalf.

Sharing & Disclosure · Company practice

Vendors, servicers, underwriting banks and credit bureaus receive information to offer the Services

Affirm discloses information to certain third parties as necessary to offer and improve the Services, including vendors who assist with identity verification, servicers of loans and lines of credit, business and strategic partners, partner and underwriting financial institutions, credit bureaus and other financial institutions.

Supporting quotations

To certain third parties as necessary to offer and improve our Services, including vendors who assist with identity verification, servicers of loans and lines of credits, business/strategic partners, partner and underwriting financial institutions, credit bureaus, and other financial institutions.

Qualifications & exceptions

• Disclosure is described as necessary to offer and improve the Services.

Sharing & Disclosure · Company practice

Fraud and risk providers may use shared data to improve their own risk products

Affirm discloses information to third-party fraud prevention, identity verification and risk intelligence providers that help detect, prevent and investigate fraud, security incidents and other harmful or unlawful activity. Those providers may use the information, together with information from other clients, to maintain and improve their fraud detection and risk intelligence products, including aggregated, deidentified or model-based insights that help Affirm and other clients identify potentially fraudulent or high-risk activity, as permitted by applicable law. Affirm says it does not authorize these providers to use personal information for their own direct marketing.

Supporting quotations

To third party fraud prevention, identity verification, and risk intelligence providers that help us detect, prevent, and investigate fraud, security incidents, and other harmful or unlawful activity. These providers may use information we disclose to provide fraud screening, authentication, identity verification, risk scoring, and related services to us. They may also use information we disclose, together with information they receive from other clients, to maintain and improve their fraud detection and risk intelligence products and services, including by generating aggregated, deidentified, or model-based insights that may be used to help us and other clients identify potentially fraudulent or high risk activity, as permitted by applicable law. We do not authorize these providers to use your personal information for their own direct marketing purposes.

Qualifications & exceptions

• Providers may combine Affirm's data with information from other clients to maintain and improve their products.
• Affirm states it does not authorize use for the providers' own direct marketing.
• Provider use is described as permitted by applicable law.

Not stated here

• The Notice does not name the fraud and risk providers or the model-based insights they produce.

Sharing & Disclosure · Company practice

Merchants receive information, and accepting the Notice consents to their marketing

Affirm discloses information to merchants you interact with while using the Services to effectuate your transactions, for internal analysis, for improvement of the Services, and to maintain and grow its partnerships with those merchants. The Notice says that when you accept it and use the Services, you consent to Affirm disclosing your information to merchants you interact with so those merchants can market to you, to help them personalize services and offers.

Supporting quotations

3.5 With our merchant partners.

To merchants you interact with while using our Services to effectuate your transactions, for internal analysis, for improvement of the Services, and to maintain and grow our partnerships with such merchants. When you accept this Notice and use our Services, you consent to us disclosing your information to merchants you interact with for those merchants to market to you. We do this to help merchants personalize services and offers, so you can have a better experience.

Qualifications & exceptions

• Applies to merchants you interact with while using the Services.
• Consent to merchant marketing is tied to accepting the Notice and using the Services.

Not stated here

• The Notice does not identify which merchants receive the information or how they use it beyond marketing.

Sharing & Disclosure · User right or choice

Merchant marketing sharing can be switched off without stopping transaction disclosures

To opt out of information disclosure to merchants for marketing, an account holder logs into Affirm and updates the "Allow Affirm to share your data" toggle in the "Security and privacy" tab under "Settings." If you opt out, Affirm says it will continue to disclose information as necessary to complete transactions you initiate but will not disclose information for marketing purposes.

Supporting quotations

To opt-out of information disclosure to merchants for marketing, log into your Affirm account at www.affirm.com/u/ and update the "Allow Affirm to share your data" toggle in the "Security and privacy" tab in "Settings." If you opt out, we will continue to disclose your information as necessary to complete transactions you initiate, but will not disclose information for marketing purposes.

Qualifications & exceptions

• The opt-out is made in account settings through the sharing toggle.
• Transaction-related disclosures continue after opting out.

Sharing & Disclosure · Company practice

Advertising partners use tracking data and may pass access to other companies

Affirm discloses information to third parties who help it serve online advertising about the Services. Those third parties may use tracking technologies to collect or receive information through the Services and elsewhere on the internet and use it to provide measurement services and targeted ads, and may allow other companies to access information about you so those companies can advertise products to you as you browse.

Supporting quotations

To third parties who assist us in serving online advertising regarding the Services. These third parties may use tracking technologies to collect or receive information through the Services and elsewhere on the internet and use that information to provide measurement services and targeted ads. Third parties may allow other companies to access information about you so that they may advertise other products you may be interested in as you browse the internet.

Qualifications & exceptions

• Recipients are third parties who assist with online advertising.

Not stated here

• The Notice does not name the advertising partners or the other companies that may receive access.

Legal Rights & Agreement Rules · Company practice

Affirm discloses information for legal requests and to protect customers, staff or property

Affirm discloses information to comply with applicable law and respond to requests from law enforcement agencies, other government authorities or third parties as permitted by law. It says this may be done without consent when it has a good-faith belief that it is necessary to protect customers, employees or property, in emergencies, to enforce its rights under its terms of service and policies, or to combat fraud or criminal activity.

Supporting quotations

To comply with applicable law and respond to requests from law enforcement agencies or other government authorities or third parties, as permitted by law. This may be done without your consent when we have a good faith belief that it is necessary to protect our customers, employees, or property, in emergency situations, to enforce our rights under our terms of service and policies, or to combat fraud or criminal activity.

Qualifications & exceptions

• Disclosure is described as permitted by law.
• Consentless disclosure rests on Affirm's good-faith belief that it is necessary for the listed purposes.

Sharing & Disclosure · Company practice

Information may transfer with a reorganization, merger, sale or change of control

Affirm discloses information in connection with corporate transactions, if it enters into or intends to enter into a transaction that alters the structure of its business, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or any portion of its business, assets or stock.

Supporting quotations

In connection with corporate transactions, in the event that Affirm enters into, or intends to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or any portion of our business, assets or stock.

Qualifications & exceptions

• Applies to a transaction Affirm enters into or intends to enter into.
• Covers all or any portion of its business, assets or stock.

Not stated here

• The Notice does not state what notice or choice customers receive before such a transfer.

Account & Service Control · User right or choice

You can change notification preferences, but opting out of crucial notices may limit your account

If you no longer wish to receive notifications about the Services such as account alerts, scheduled payment reminders, legal compliance notices or deals nearby, you can change notification preferences by contacting Affirm through its help center, or by adjusting preferences in your account or following the directions in the communication. Affirm reserves the right to close or limit access to your account if you opt out of the crucial notices required to perform the Service, and you remain responsible for amounts due to Affirm even if the account is closed or limited.

Supporting quotations

If you no longer wish to receive notifications about our Services such as account alerts, scheduled payment reminders, legal compliance or deals nearby, you may change your notification preferences by contacting us here. Alternatively, you may be able to indicate your preference by logging into your account and adjusting your preferences or by following the directions provided with the communication. Affirm reserves the right to close or limit access to your account should you opt-out of the crucial notices that are required to perform the Affirm Service. You are still responsible for any amounts due to Affirm even if we close or limit access to your account.

Qualifications & exceptions

• Changing preferences may be done through the help center, account settings or the directions in a communication.
• Affirm reserves the right to close or limit access if you opt out of crucial notices.
• Amounts due remain owed after closure or limitation.

Account & Service Control · User right or choice

Replying STOP opts out of SMS messages, with the same account-closure reservation

You can opt out of receiving SMS messages by replying "STOP" or contacting Affirm through its help center, or by adjusting preferences in your account or following the directions provided with the communication. Affirm again reserves the right to close or limit access to your account if you opt out of crucial notices required to perform the Service, and you remain responsible for amounts due even if the account is closed or limited.

Supporting quotations

You can opt out of receiving SMS messages by replying "STOP" or contacting us here. Alternatively, you may be able to indicate your preference by logging into your account and adjusting your preferences or by following the directions provided with the communication. Again, Affirm reserves the right to close or limit access to your account should you opt out of the crucial notices that are required to perform the Affirm Service. You are still responsible for any amounts due to Affirm even if we close or limit access to your account.

Qualifications & exceptions

• Opt-out is by replying STOP or through the help center or account preferences.
• Affirm reserves the right to close or limit access if you opt out of crucial notices.
• Amounts due remain owed.

Data Access & Collection · User right or choice

Disabling, uninstalling or hiding the extension stops its collection

You can stop all collection of information by the browser extension by disabling it in the browser settings, uninstalling the extension, or hiding it. Collection through the in-app browser can be limited by choosing not to use the in-app browser for merchant browsing where an alternative is available.

Supporting quotations

You can stop all collection of information by our browser extension by disabling it in the browser settings, uninstalling the browser extension, or hiding the extension. You can limit collection through the in-app browser by choosing not to use the in-app browser for merchant browsing where an alternative is available.

Qualifications & exceptions

• The in-app browser limit applies where an alternative is available.

Account & Service Control · User right or choice

You can review, edit or close your account, but closed-account data is kept for legal and fraud reasons

You can review and edit your personal information at any time by logging into your account or contacting Affirm through the My account section, and you can request to close your account if you do not have an active loan. If you close your Affirm account, Affirm marks it "Closed" in its database but keeps the account information to comply with legal obligations and to deter fraud by preventing people from avoiding detection through closing and reopening accounts. Affirm says the personally identifiable information will not be used for further purposes, nor sold or disclosed to third parties, except as necessary to prevent fraud and assist law enforcement, as required by law or in accordance with the Notice.

Supporting quotations

You can review and edit your Personal Information at any time by logging in to your account or by contacting us through the My account section here. You can also request to close your account if you do not have an active loan by contacting us here. If you close your Affirm account, we will mark your account in our database as "Closed," but will keep your account information in our database to comply with our legal obligations. This is necessary in order to deter fraud, by ensuring that persons who try to commit fraud will not be able to avoid detection simply by closing their account and opening a new account. If you close your account, your personally identifiable information will not be used by us for any further purposes, nor sold or disclosed to third parties, except as necessary to prevent fraud and assist law enforcement, as required by law or in accordance with this Privacy Notice.

Qualifications & exceptions

• Account closure requires no active loan.
• Closed-account information is retained to comply with legal obligations and deter fraud.
• The no-further-use statement is subject to fraud prevention, law enforcement, legal requirements and the Notice.

Security & Safeguards · Company commitment

Affirm uses physical, electronic and procedural safeguards but cannot guarantee security

Affirm maintains physical, electronic and procedural security measures against unauthorized access to systems and uses safeguards such as firewalls and data encryption. It enforces physical access controls to its buildings and authorizes access to your information only for employees or agents who need it to fulfil their job responsibilities. The Notice adds that no security measures are perfect or impenetrable and Affirm cannot guarantee the security of your information.

Supporting quotations

Affirm maintains physical, electronic and procedural security measures to guard against unauthorized access to systems and uses safeguards such as firewalls and data encryption. We enforce physical access controls to our buildings and we authorize access to your information only for those employees or agents who require it to fulfill the responsibilities of their jobs. However, please note that no security measures are perfect or impenetrable. As such, we cannot guarantee the security of your information.

Qualifications & exceptions

• Access is limited to employees or agents who require it for their responsibilities.
• Affirm states it cannot guarantee security.

Not stated here

• The Notice does not describe specific encryption standards or incident-response commitments.

Retention & Deletion · Company practice

Personal information is kept as long as necessary or as law requires, with no fixed period

Affirm retains personal information for as long as necessary to complete the purposes for which it was collected, or as may be required by law. The Notice says individual pieces of information may exist in different systems used for different business or legal purposes, a different maximum retention period may apply to each use case, and where information is stored in combination the maximum period may be determined by the purpose of that information set.

Supporting quotations

Affirm will retain your Personal Information for as long as is necessary to complete the purposes for which it was collected, or as may be required by law.

Individual pieces of information such as those listed above may exist in different systems that are used for different business or legal purposes. A different maximum retention period may apply to each use case of the information. Certain individual pieces of information may also be stored in combination with other individual pieces of information, and the maximum retention period may be determined by the purpose for which that information set is used.

Qualifications & exceptions

• Retention is purpose-based or legally required.
• Different maximum periods may apply to different systems and use cases.

Not stated here

• The Notice states no fixed retention period for any data category.

Retention & Deletion · Company practice

Retention length weighs business purpose, legal duties, privacy impact and system design

Affirm says it uses four criteria to determine retention length: the business purposes for which the information is used and the time needed to achieve them; whether retention is required for legal obligations or contractual commitments, to defend potential legal claims, or to investigate theft or other policy violations or unlawful activity, ensure a secure online environment or protect health and safety; the privacy impact of ongoing retention on the consumer; and how information is maintained and flows through its systems and how best to manage its lifecycle given the volume and complexity of its infrastructure.

Supporting quotations

We utilize the following criteria to determine the length of time for which we retain information:

The business purposes for which the information is used, and the length of time for which the information is required to achieve those purposes;

Whether we are required to retain the information type in order to comply with legal obligations or contractual commitments, to defend against potential legal claims, or as otherwise necessary to investigate theft or other activities potentially in violation of Affirm's policies and procedures applicable to you or against the law, to ensure a secure online environment, or to protect health and safety;

The privacy impact of ongoing retention on the consumer; and

The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle of information in light of the volume and complexity of the systems in our infrastructure.

Qualifications & exceptions

• Criteria are stated as factors, not fixed periods.

Legal Rights & Agreement Rules · Procedure

Privacy questions go to privacy@affirm.com; merchant processing questions go to the merchant

Affirm asks that questions or concerns about the Privacy Notice be sent to privacy@affirm.com. For questions about how a merchant processes your information, it directs you to the merchant or the merchant's privacy notice.

Supporting quotations

If you have questions or concerns regarding this Privacy Notice, you should contact us at privacy@affirm.com.

If you have questions about how a merchant processes your information, you should contact the merchant or visit the merchant’s privacy notice.

Qualifications & exceptions

• Merchant processing questions are directed to the merchant.

Legal Rights & Agreement Rules · Restriction or exception

State privacy rights apply to information outside GLBA's financial scope

Certain U.S. states give consumers rights over their personal information. Affirm says that for the financial services it offers it is governed by GLBA, which exempts NPI from most state privacy laws, so the rights it describes apply only when applicable and to information collected outside GLBA's scope, such as browsing the website while logged out or interacting outside a financial product or service. It points to its Cookie Notice for website data and how to opt out of cookies and web tracking.

Supporting quotations

Certain U.S. states provide consumers with rights regarding their Personal Information. However, as explained above, Affirm, in connection with financial services we offer, is governed by GLBA, which exempts NPI collected from most state privacy laws. When applicable, we provide the rights outlined below for information collected outside the scope of GLBA, for example, information collected from you when you browse our website in a logged-out state.

You can find out more information about the website data we collect in our Cookie Notice, including how to opt out of certain cookies and web-tracking technologies.

This section describes the rights that may apply to personal information collected outside the scope of the GLBA, including when you use Affirm’s website in a logged-out state or interact with us outside of a financial product or service.

Qualifications & exceptions

• Rights are described as applying outside GLBA's scope.
• Examples given are logged-out website browsing and interactions outside a financial product or service.
• Cookie and web-tracking choices are covered by the separately linked Cookie Notice.

Not stated here

• The linked Cookie Notice is not supplied in this source; its terms are not analyzed.

Legal Rights & Agreement Rules · Context

California section is the CCPA Notice at Collection for data outside GLBA

Under California law the Notice serves as Affirm's "Notice at Collection" under the California Consumer Privacy Act as amended by the California Privacy Rights Act, and includes additional disclosures under California's Shine the Light law. The section applies only to personal information collected outside the scope of GLBA.

Supporting quotations

Under California law, you have certain rights regarding how your personal information is collected and used. This section serves as our "Notice at Collection" under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and includes additional disclosures under California’s Shine the Light law. This section applies only to personal information collected outside the scope of the GLBA.

Qualifications & exceptions

• Applies only to personal information outside GLBA's scope.
• Includes Shine the Light disclosures in addition to CCPA/CPRA ones.

Sharing & Disclosure · User right or choice

California Shine the Light requests are answered by an opt-out of merchant marketing sharing

The Notice explains that California residents may request information about whether certain categories of personal information were disclosed to third parties for their direct marketing during the preceding year, and that companies may either provide that information on request or offer a way to opt out. Affirm provides an opt-out: it discloses personal information to merchant partners about customers who created an Affirm account so those merchants can provide more relevant advertising, and the opt-out is the "Allow Affirm to share your data" toggle in the "Security and privacy" tab under "Settings." After opting out, Affirm continues to disclose personal information as necessary to complete transactions you initiate but not for the merchants' own direct marketing.

Supporting quotations

California Shine the Light Law: California residents may request information regarding whether we have disclosed certain categories of personal information to third parties for their direct marketing purposes during the preceding year. Companies subject to this law may either provide this information upon request or offer a way for consumers to opt out of such disclosures.

Affirm provides a mechanism to opt out of such disclosures. As explained above, we disclose certain personal information to our merchant partners about customers that have created an Affirm account so that our merchant partners can provide more relevant advertising to such individuals. To opt-out of this sharing, log into your Affirm account at www.affirm.com/u/ and update your "Allow Affirm to share your data" toggle in the "Security and privacy" tab under "Settings."

If you opt out, we will continue to disclose your personal information as necessary to complete transactions you initiate, but will not disclose personal information for the merchants' own direct marketing purposes.

Qualifications & exceptions

• The opt-out covers disclosures to merchant partners for the merchants' direct marketing.
• Transaction-related disclosures continue after opting out.

Legal Rights & Agreement Rules · Restriction or exception

CCPA disclosures apply only to information not subject to GLBA or another exemption

The Notice says California residents may have the right to receive certain disclosures about the collection, use and sharing of personal information, and that these disclosures apply only to information not subject to GLBA or another applicable exemption.

Supporting quotations

California Consumer Privacy Act: California residents may have the right to receive certain disclosures regarding the collection, use, and sharing of Personal Information. These disclosures apply only to information not subject to GLBA or another applicable exemption.

Qualifications & exceptions

• Applies only to information outside GLBA or another applicable exemption.

Data Access & Collection · Company practice

California table lists network activity as the category collected, with its sources and recipients

In its California Notice at Collection, Affirm's table lists "Internet or other similar network activity" as the category of personal information it may collect. For that category the table states: Affirm collects browsing history, search history and interaction with websites, applications or advertisements automatically when you use the Services; the information is used for the purposes in Section 2, including gauging online activity, measuring the effectiveness of online services and tools, and serving targeted ads based on online activities; it is disclosed to service providers, merchant partners, advertising partners and other third parties listed in Section 3; and retention is described in Section 6. It points to the Cookie Notice for tracking technologies and cookie settings.

Supporting quotations

We may collect the following categories of personal information:

Categories of Personal Information we may collect

Category of Personal Information Required Information

Internet or other similar network activity

We collect information about your browsing history, search history, interaction with websites, and applications or advertisements automatically when you utilize our Services.

Source: Collected automatically when you use our Services.

Purpose of collection and use: Used for purposes listed under Section 2 above, including to gauge online activity on our website, measure the effectiveness of online services, applications, and tools, and to serve targeted advertisements based on your online activities.

Categories of Parties to Whom PI is "Disclosed":

Service providers

Merchant partners

Advertising partners

Other third parties listed under Section 3.

Retention Considerations: See Section 6

Learn more about tracking technologies and cookie settings in our Cookie Notice.

Qualifications & exceptions

• The table states one category of personal information: internet or other similar network activity.
• Collection is automatic when you use the Services.
• Parties listed are service providers, merchant partners, advertising partners and other third parties listed in Section 3.
• Retention is by reference to Section 6.

Not stated here

• The Cookie Notice linked for tracking and cookie settings is not supplied.

Sharing & Disclosure · User right or choice

Advertising data may count as a CCPA sale or sharing, with a cookie-based opt-out

Affirm says it does not disclose personal information to third parties in exchange for monetary compensation, but that working with advertising partners to collect browsing information and provide more relevant ads may be considered the "sale" or "sharing" of personal information for cross-context behavioral advertising under the CCPA. Readers may opt out of that activity through their cookie/pixel preferences, following the instructions in Section 8.2.1 under Right to opt out of Sale and Sharing, and Affirm says it honors legally required browser opt-out signals such as the Global Privacy Control.

Supporting quotations

Your choices regarding "sharing" and "selling." Affirm does not disclose Personal Information to third parties in exchange for monetary compensation. However, as discussed in this Privacy Notice, Affirm does work with advertising partners to collect information about user internet browsing activities to provide those users with more relevant advertising as they browse. This may be considered the "sale" or "sharing" of Personal Information for cross-context behavioral advertising under the CCPA.

You may opt out of this activity based on our use of cookies/pixels. To opt out of these activities, follow the instructions in 8.2.1 under Right to opt out of Sale and Sharing. We also honor any legally-required browser opt out signals (e.g., Global Privacy Control).

Qualifications & exceptions

• No monetary exchange is stated.
• The sale or sharing characterization concerns advertising-related browsing data.
• Opt-out is through cookie/pixel preferences.
• Legally required browser signals such as GPC are honored.

Use & Processing · Company practice

Affirm does not respond to Do Not Track signals but honors required signals like GPC

The Notice says Do Not Track is a browser setting that signals a preference against cross-site tracking. Affirm says that while it provides privacy choices through the mechanisms described in its Cookies Notice, it does not currently recognize or respond to DNT signals, but it does honor legally required browser-based signals such as the Global Privacy Control.

Supporting quotations

Notice concerning Do Not Track. Do Not Track ("DNT ") is a browser setting that allows users to signal that they do not want their online activity tracked across websites. While we are committed to providing meaningful privacy choices through the mechanisms described in our Cookies Notice, we do not currently recognize or respond to DNT signals. However, as mentioned above, we do honor legally required browser-based signals such as GPC.

Qualifications & exceptions

• DNT is not recognized or responded to.
• Legally required browser signals such as GPC are honored.
• Other choices are described in the Cookie Notice.

Not stated here

• The Cookie Notice is not supplied in this source.

Legal Rights & Agreement Rules · Restriction or exception

Section 8.2 rights cover information outside GLBA, such as logged-out browsing

Affirm repeats that it is a GLBA financial institution and that much of the personal information it collects is NPI, so many state privacy laws do not apply to that information. The rights in this section therefore apply to personal information collected outside GLBA's scope, including when you use Affirm's website in a logged-out state or interact with it outside a financial product or service.

Supporting quotations

As mentioned above, Affirm is a financial institution subject to GLBA, and much of the personal information we collect and process is considered NPI under that law. As a result, many state privacy laws do not apply to that information.

This section describes the rights that may apply to personal information collected outside the scope of the GLBA, including when you use Affirm’s website in a logged-out state or interact with us outside of a financial product or service.

Qualifications & exceptions

• NPI governed by GLBA remains outside these state rights.
• Examples of covered data are logged-out website use and interactions outside a financial product or service.

Account & Service Control · User right or choice

Consumers in five states may request access to the information Affirm holds

Residents of California, Oregon, Minnesota, Montana and Connecticut may request access to personal information collected about them, and information about the source of that information, the purposes for which it is collected, and the third parties and service providers with whom Affirm shares it.

Supporting quotations

Right to know/access information: request access to Personal Information collected about you and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it.

Qualifications & exceptions

• Applies to residents of California, Oregon, Minnesota, Montana and Connecticut.

Account & Service Control · User right or choice

Consumers may request correction of inaccurate personal information in certain circumstances

Residents of the five listed states may request correction of inaccurate personal information that Affirm holds about them under certain circumstances. Affirm account holders may generally modify certain personal information by logging into their account or contacting Affirm through the My Account section.

Supporting quotations

Right to correct/rectify inaccurate information: request correction of inaccurate Personal Information that we hold about you under certain circumstances. Affirm account holders may generally modify certain Personal Information by logging into your account or contacting us through the My Account section here.

Qualifications & exceptions

• Correction of inaccurate information is available under certain circumstances.
• Account holders can generally modify certain information themselves.

Account & Service Control · User right or choice

Consumers may request deletion of collected personal information, subject to legal exceptions

Residents of the five listed states may request deletion of any personal information that Affirm has collected from them, subject to legal exceptions.

Supporting quotations

Right to request deletion of information: request deletion of any Personal Information that we have collected from you, subject to legal exceptions.

Qualifications & exceptions

• Deletion is subject to legal exceptions.

Not stated here

• The Notice does not list the legal exceptions in this section.

Sharing & Disclosure · User right or choice

Advertising-related sharing can be opted out through the footer privacy choices link

Residents of the five listed states have a right to opt out of the sale and sharing of their personal information. Affirm says it does not disclose personal information to third parties in exchange for monetary compensation, but that working with advertising partners to collect browsing information and serve relevant ads may be considered the "sale" or "sharing" of personal information, or processing for online targeted advertising, under applicable U.S. state laws. Affirm says the right is exercised by managing cookie/pixel preferences through the "Your Privacy Choices" link in the footer of its website.

Supporting quotations

Right to opt out of Sale and Sharing: Affirm does not disclose Personal Information to third parties in exchange for monetary compensation. However, as discussed in this Privacy Notice, Affirm does work with advertising partners to collect information about user internet browsing activities to provide those users with more relevant advertising. This may be considered the "sale" or "sharing" of Personal Information or processing of Personal Information for online targeted advertising under applicable U.S. state laws. You have the right to opt out of this activity based on our use of cookies/pixels by managing your preferences through the "Your Privacy Choices" link located in the footer of our website.

Your choices regarding "sharing" and "selling." Affirm does not disclose Personal Information to third parties in exchange for monetary compensation. However, as discussed in this Privacy Notice, Affirm does work with advertising partners to collect information about user internet browsing activities to provide those users with more relevant advertising as they browse. This may be considered the "sale" or "sharing" of Personal Information for cross-context behavioral advertising under the CCPA.

Qualifications & exceptions

• No disclosure in exchange for monetary compensation is stated.
• The opt-out covers cookie/pixel-based advertising activity.
• The opt-out link is in the website footer.

Account & Service Control · User right or choice

Exercising these rights should not lead to unfair treatment or denied services

The Notice states a right to non-discrimination: exercising any of the listed rights should not result in being treated unfairly or denied services.

Supporting quotations

Right to non-discrimination: Exercise any of the rights listed here without being treated unfairly or denied services.

Qualifications & exceptions

• Stated as exercising the listed rights without unfair treatment or denial of services.

Account & Service Control · User right or choice

Sensitive-data limits exist for California and Oregon, but Affirm says it collects little

Residents of California and Oregon may request that Affirm limit the use or disclosure of certain sensitive personal information: information about race, ethnicity, religion and philosophical beliefs, financial information that would enable access to an account, biometric information, health information including status as transgender or non-binary, status as a victim of a crime, and past or present geolocation information within 1,750 feet of their location. Affirm says it does not collect or process sensitive personal information at this time, except geolocation information if you choose to allow it in the App.

Supporting quotations

Residents of California and Oregon may request that we limit the use or disclosure of certain sensitive personal information. This includes information about your race, ethnicity, religion, and philosophical beliefs, financial information to the extent such would enable access to your account, biometric information, and health information including your status as transgender or non-binary, your status as a victim of a crime, past and present geolocation information within 1,750 feet of your location. However, please note that Affirm does not collect or process sensitive personal information at this time, with the exception of geolocation information if you choose to allow this within the App.

Qualifications & exceptions

• Applies to California and Oregon residents.
• Affirm states it does not currently collect or process sensitive personal information, except app geolocation the user allows.

Not stated here

• The Notice does not explain how the limit request would be handled if sensitive information were collected.

Sharing & Disclosure · User right or choice

Minnesota, Oregon and Connecticut residents may request a list of third-party recipients

Residents of Minnesota, Oregon and Connecticut may request a list of the "third parties" (as defined under applicable law) with whom Affirm has disclosed their personal information, by emailing privacy@affirm.com with the subject line "third parties."

Supporting quotations

Residents of Minnesota, Oregon, and Connecticut may request a list of the "third parties" (as defined under applicable law) with whom we have disclosed their personal information. To request this list, please email us at privacy@affirm.com with the subject line "third parties."

Qualifications & exceptions

• Applies to Minnesota, Oregon and Connecticut residents.
• Request is by email with the stated subject line.

Account & Service Control · User right or choice

Oregon, Minnesota and Montana residents may appeal a denied privacy request

Residents of Oregon, Minnesota and Montana may submit an appeal if Affirm denies a privacy-related request, by emailing privacy@affirm.com with the subject line "Oregon resident appeal," "Minnesota resident appeal" or "Montana resident appeal" as applicable.

Supporting quotations

You may submit an appeal if we deny a privacy-related request. For instructions on how to file an appeal, please email us at privacy@affirm.com, with the subject line "Oregon resident appeal," "Minnesota resident appeal," or "Montana resident appeal" as applicable.

Qualifications & exceptions

• Applies to Oregon, Minnesota and Montana residents.
• Appeals go by email with the state-specific subject line.

Account & Service Control · Procedure

Privacy requests go through the account portal or Customer Care, or by email

Affirm says privacy rights can be exercised in two ways. Account holders may submit a request through the account privacy portal or by contacting Customer Care at (855) 423-3729, and signing in lets Affirm verify identity automatically for faster processing. People without an account, or who have trouble submitting through the account, may email privacy@affirm.com with the subject line "non-account holder."

Supporting quotations

You can exercise your privacy rights in two ways:

If you have an Affirm account, you may submit a request by visiting here or by contacting Customer Care at (855) 423-3729. By signing in to your account to submit the request, you will be able to automatically verify your identity, which will result in faster processing of your request.

If you do not have an Affirm account, or are having trouble submitting a request through your account, you may submit a request by emailing us at privacy@affirm.com with the subject line "non-account holder."

Qualifications & exceptions

• Account-holder requests can be verified automatically by signing in.
• Non-account-holder requests go by email with the stated subject line.

Not stated here

• The account privacy portal linked as "here" is not supplied as text in this source; its request form content is not analyzed.

Account & Service Control · Procedure

Affirm verifies requests by matching identifiers or confirming contact details

Before processing a request, Affirm verifies it. Depending on the request and how it was submitted, Affirm does this by asking you to provide personal identifiers it can match against information it previously collected, and by asking you to confirm the request using the email address or telephone number stated in the request. If you authorized someone else, such as an authorized agent, Affirm requires a signed letter confirming that person's identity and authority, which can be sent to privacy@affirm.com with the subject line "authorized third party."

Supporting quotations

In order to process your request, we must verify your request. Depending on the type of request and how you submit your request (e.g., through your account or via email) we do this by:

Asking you to provide personal identifiers we can match against information we may have collected from you previously

Asking you to confirm your request using the email address or telephone number stated in the request.

If you have authorized someone else to make requests on your behalf (e.g., an authorized agent), we will require that you provide a signed letter confirming the identity and authority of that person. Such signed letters can be submitted by emailing privacy@affirm.com with the subject line "authorized third party."

Qualifications & exceptions

• Verification method depends on the request type and submission channel.
• Authorized agents require a signed letter confirming identity and authority.

Legal Rights & Agreement Rules · Company commitment

The GLBA notice gives Vermont residents stricter limits on affiliate and nonaffiliate sharing

For Vermont residents, the GLBA notice says Affirm will not disclose information about your creditworthiness to its affiliates, and will not disclose your personal information, financial information, credit report or health information to nonaffiliated third parties for them to market to you, other than as permitted by Vermont law.

Supporting quotations

For Vermont Residents. We will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law.

Qualifications & exceptions

• Applies to Vermont residents.
• The restriction is subject to what Vermont law permits.

Legal Rights & Agreement Rules · Context

Bank-partner products are governed by the partner bank's own privacy notice

The Notice says Affirm may partner with banks ("Bank Partners") to offer products and services, and that if you are approved for a product offered through Affirm by one of its Bank Partners, or through other partnerships with Bank Partners, your non-public personal information is subject to those banks' privacy notices. The Notice links notices for Cross River Bank, Celtic Bank, Lead Bank, Evolve Bank and Trust, and Stride Bank.

Supporting quotations

We may partner with banks ("Bank Partners") to offer certain products and services. If you are approved for a product offered through Affirm by one of our Bank Partners, or through other partnerships with Bank Partners, your non-public personal information will be subject to the following privacy notices:

Cross River Bank Privacy Notice

Celtic Bank Privacy Notice

Lead Bank Privacy Notice

Evolve Bank and Trust Privacy Notice

Stride Bank Privacy Notice

Qualifications & exceptions

• Applies to products offered through Affirm by a Bank Partner or through other Bank Partner partnerships.
• Non-public personal information is subject to the bank's notice.

Not stated here

• The bank partners' privacy notices linked here (Cross River, Celtic, Lead, Evolve and Stride) are not supplied in this source; their terms and any differences between them are not analyzed.

Charges & Financial Obligations · Context

Payment options carry 0–36% APR and vary with purchase amount and merchant

The Notice states that payment options through Affirm are provided by its lending partners, that rates are 0–36% APR based on credit and subject to an eligibility check, and that Affirm Pay in 4 is 0% APR. Options depend on purchase amount and may vary by merchant, a down payment may be required, and the Notice gives an example: at a $400 purchase price, a $80 down payment followed by 12 monthly payments of $28.88 at 15% APR, or 4 interest-free payments of $100 every two weeks. Availability and eligibility vary and restrictions apply.

Supporting quotations

Payment options through Affirm are provided by these lending partners: affirm.com/lenders. Your rate will be 0–36% APR based on credit, and is subject to an eligibility check. Affirm Pay in 4 payment option is 0% APR.

Options depend on your purchase amount and may vary by merchant. A down payment may be required. For example, at a purchase price of $400 you could pay a down payment of $80, followed by 12 monthly payments of $28.88 at 15% APR or 4 interest-free payments of $100 every 2 weeks. Affirm availability and eligibility may vary. Restrictions apply. See affirm.com/terms#use.

Qualifications & exceptions

• Rates are described as 0–36% APR based on credit and subject to eligibility.
• Pay in 4 is stated as 0% APR.
• A down payment may be required; options vary by purchase amount and merchant.

Not stated here

• The linked Terms of Service and lender list are not supplied in this source; their terms are not analyzed.

Charges & Financial Obligations · Context

The Affirm Money Account is held at Cross River Bank, not by Affirm

The Notice says the Affirm Money Account is held with Cross River Bank, Member FDIC; Affirm is not a bank, and FDIC insurance covers accounts held with Cross River Bank if that bank fails. It also states that California residents' Affirm Loan Services, LLC is licensed by the Department of Financial Protection and Innovation and that loans are made or arranged under California Financing Law license 60DBO-111681.

Supporting quotations

The Affirm Money™ Account is held with Cross River Bank (CRB), Member FDIC. Affirm is not a bank. FDIC insurance covers accounts held with CRB in the event CRB fails. California residents: Affirm Loan Services, LLC is licensed by the Department of Financial Protection and Innovation. Loans are made or arranged pursuant to California Financing Law license 60DBO-111681.

Qualifications & exceptions

• FDIC insurance covers failure of Cross River Bank, not Affirm.
• The California licensing statement concerns Affirm Loan Services, LLC.

Charges & Financial Obligations · Context

The Affirm Card is issued by Evolve or Stride and is unavailable in U.S. territories

The Notice says the Affirm Card is a Visa debit card issued by Evolve Bank & Trust or Stride Bank, N.A., Members FDIC, under licenses from Visa U.S.A. Inc.; Affirm is not a bank, FDIC insurance covers only the failure of Evolve and/or Stride, and the card is not available to residents of U.S. territories.

Supporting quotations

The Affirm Card is a Visa® debit card issued by Evolve Bank & Trust (Evolve) or Stride Bank, N.A. (Stride), Members FDIC, pursuant to licenses from Visa U.S.A. Inc. Affirm is not a bank. FDIC insurance will only cover the failure of Evolve and/or Stride. Learn more. The Affirm Card is not available to residents of U.S. territories.

Qualifications & exceptions

• Issuers are Evolve Bank & Trust or Stride Bank, N.A.
• FDIC insurance covers only the failure of those banks.
• Not available to residents of U.S. territories.

Charges & Financial Obligations · Context

The one-time virtual card is issued by Cross River, Sutton or Celtic Bank

The Notice says the one-time-use Affirm virtual card is issued by Cross River Bank, Sutton Bank or Celtic Bank, Members FDIC, under a license from Visa U.S.A. Inc. It also lists Affirm, Inc. (NMLS ID 1883087) and Affirm Loan Services, LLC (NMLS ID 1479506).

Supporting quotations

The one-time-use Affirm virtual card is issued by CRB, Sutton Bank, or Celtic Bank, Members FDIC, pursuant to a license from Visa U.S.A. Inc. Affirm, Inc., NMLS ID 1883087. Affirm Loan Services, LLC, NMLS ID 1479506.

Qualifications & exceptions

• Issuers are Cross River Bank, Sutton Bank or Celtic Bank.
• The NMLS identifiers are stated for Affirm, Inc. and Affirm Loan Services, LLC.

Not stated here

• The license and disclosure details referenced at the end of the document are not supplied as text in this source.

Data Access & Collection · Context

Notice covers how Affirm and its affiliates handle information for the Services

Affirm, Inc., together with Affirm Loan Services, LLC, Affirm Financial Solutions, LLC and Affirm Payments, LLC (collectively "Affirm"), explains in this Notice how it collects, uses and discloses your information when you request and obtain its financial products, interact with Affirm as a representative of another business, use its website, browser extension or mobile applications, or otherwise interact with it (the "Services"). The Notice also explains data privacy rights and how to exercise them.

Supporting quotations

This Privacy Notice ("Notice") explains how Affirm, Inc. and its affiliates Affirm Loan Services, LLC, Affirm Financial Solutions, LLC and Affirm Payments, LLC (collectively, "Affirm") collect, use and disclose your information when you request and obtain our financial products, interact with Affirm as a representative of another business, use our website, browser extension, and mobile applications, or otherwise interact with us (our "Services"). We also explain your data privacy rights and how you can exercise them.

Qualifications & exceptions

• The described scope includes financial products and the website, browser extension and mobile applications.
• Interacting with Affirm as a representative of another business is also within the described scope.

Legal Rights & Agreement Rules · Restriction or exception

GLBA financial information is governed by federal law and Section 9, not state privacy law

Affirm says certain information collected and processed for its Services is "nonpublic personal information" (NPI) under the U.S. Gramm-Leach Bliley Act, and that Affirm is a "financial institution" under GLBA. On that basis the Notice states the collection and use of that NPI is governed exclusively by federal law rather than applicable state privacy laws, and that Section 9 of this Privacy Policy, titled "Affirm's Privacy Notice for Consumer Financial Information," applies to it. The Notice repeats the limit in its state-rights part: GLBA exempts NPI from most state privacy laws, and the state rights it describes cover information collected outside GLBA's scope, such as browsing the website while logged out.

Supporting quotations

Please note that certain information we collect and process in connection with your use of Affirm Services is considered "nonpublic personal information" (NPI) under the U.S. Gramm-Leach Bliley Act ("GLBA"). Affirm is considered a "financial institution" under GLBA, and as such, the collection and use of NPI is governed exclusively by federal law, not applicable state privacy laws. Section 9 of this Privacy Policy, titled "Affirm’s Privacy Notice for Consumer Financial Information," applies to this information.

Certain U.S. states provide consumers with rights regarding their Personal Information. However, as explained above, Affirm, in connection with financial services we offer, is governed by GLBA, which exempts NPI collected from most state privacy laws. When applicable, we provide the rights outlined below for information collected outside the scope of GLBA, for example, information collected from you when you browse our website in a logged-out state.

As mentioned above, Affirm is a financial institution subject to GLBA, and much of the personal information we collect and process is considered NPI under that law. As a result, many state privacy laws do not apply to that information.

9. Affirm’s Privacy Notice for Consumer Financial Information

[Rev. 08/2025]

Qualifications & exceptions

• Applies to information that counts as NPI under GLBA in connection with Affirm Services.
• Section 9 of this Notice, revised 08/2025, is the separate notice for that information.
• The state consumer privacy rights described later apply outside GLBA's scope, for example logged-out website use.

Not stated here

• The Notice does not determine which individual data items are NPI beyond this general GLBA statement.

Sharing & Disclosure · Context

14 Oct 2026 update concerns opting out of data sharing with merchants for marketing

The Notice is dated "Last Updated 14 Oct 2026" and says this version updates how a customer may opt out of data sharing with merchants for marketing purposes, with a 07/29/2026 date beside that statement. The update note states the subject of the change and its date; it does not state the opt-out steps or the earlier wording.

Supporting quotations

Last Updated 14 Oct 2026

This Notice updates how customer may opt-out of data sharing with merchants for marketing purpose. (07/29/2026)

Qualifications & exceptions

• The note identifies the changed opt-out subject and dates the change 07/29/2026.
• The note does not reproduce the opt-out steps.

Not stated here

• The Notice does not show the prior version's wording or which customers the change affects.

Legal Rights & Agreement Rules · Context

Section 9 is Affirm, Inc.'s separate GLBA privacy notice, revised 08/2025

Section 9 of the Notice is titled "Affirm's Privacy Notice for Consumer Financial Information" and is marked Revision 08/2025. Its opening line describes it as facts about how Affirm, Inc. uses your personal information.

Supporting quotations

9. Affirm’s Privacy Notice for Consumer Financial Information

[Rev. 08/2025]

Facts about how Affirm, Inc. uses your personal information

Qualifications & exceptions

• Section 9 revision is dated 08/2025.
• The notice provider is Affirm, Inc.

Not stated here

• The Notice does not explain how the 08/2025 GLBA notice and the 14 Oct 2026 main Notice are synchronized.

Charges & Financial Obligations · Company practice

The GLBA notice explains why federal law requires it and what data it covers

The GLBA notice's Facts table says financial companies choose how they share personal information, federal law gives consumers the right to limit some but not all sharing, and federal law requires the notice explaining collection, sharing and protection. It says the types of personal information collected and shared depend on the product or service, and gives examples: Social Security number and payment history, transaction history and account transactions, credit scores and checking account information. It adds that when you are no longer a customer, Affirm continues to share information as described in the notice.

Supporting quotations

Facts What does Affirm, Inc. do with your personal information?

Why? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.

What? The types of personal information we collect and share depend on the product or service you have with us. This information can include:

Social security number and payment history

Transaction history and account transactions

Credit scores and checking account information

When you are no longer our customer, we continue to share your information as described in this notice.

Qualifications & exceptions

• Examples given are Social Security number and payment history, transaction history and account transactions, credit scores and checking account information.
• The data covered depends on the product or service.
• Sharing continues after the customer relationship ends.

Sharing & Disclosure · Company practice

GLBA notice shares for everyday business, marketing and joint marketing without a limit option

In the reasons-for-sharing table, Affirm says it shares personal information for its everyday business purposes (such as processing transactions, maintaining accounts, offering or servicing loans and lines of credit, offering other financial services, responding to court orders and legal investigations, or reporting to credit bureaus), for its marketing purposes to offer its products and services, and for joint marketing with other financial companies. For each of those rows the table answers "Yes" to sharing and "No" to whether the customer can limit it.

Supporting quotations

How? All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Affirm, Inc. chooses to share; and whether you can limit this sharing.

Reasons Affirm, Inc. can share your personal information

Reasons we can share your personal information Does Affirm, Inc. share? Can you limit this sharing?

For our everyday business purposes-- such as to process your transactions, maintain your account(s), offer or service loans or lines of credit, offer other financial services, respond to court orders and legal investigations, or report to credit bureaus Yes No

For our marketing purposes-- to offer our products and services to you Yes No

For joint marketing with other financial companies Yes No

Qualifications & exceptions

• The table answers that customers cannot limit these three sharing rows.
• Everyday-business examples include court orders, legal investigations and credit-bureau reporting.

Sharing & Disclosure · Company practice

GLBA table: affiliates' credit and marketing data is not shared; nonaffiliate marketing can be limited

The GLBA sharing table states that Affirm shares information about your transactions and experiences for its affiliates' everyday business purposes, with no customer limit. It answers that it does not share information about your creditworthiness for affiliates' everyday business purposes, and does not share for affiliates to market to you. For nonaffiliates to market to you, the table answers that Affirm shares and that the customer can limit that sharing.

Supporting quotations

For our affiliates' everyday business purposes-- information about your transactions and experiences Yes No

For our affiliates' everyday business purposes-- information about your creditworthiness No We don't share

For our affiliates to market to you No We don't share

For nonaffiliates to market to you Yes Yes

Qualifications & exceptions

• Affiliate transaction and experience sharing cannot be limited.
• Affiliate creditworthiness sharing and affiliate marketing are marked as not shared.
• Nonaffiliate marketing sharing can be limited.

Sharing & Disclosure · User right or choice

The GLBA notice lets customers limit sharing through the account toggle at any time

The GLBA notice explains the rights to limit sharing and says a customer may limit sharing by logging into the Affirm account and updating the "Allow Affirm to share your data" toggle in the "Security and privacy" tab under "Settings." For a new customer, Affirm can begin sharing 30 days from the date it sent the notice, or earlier if the customer consents or as permitted by law, and sharing continues after the customer relationship ends; the customer can still contact Affirm at any time to limit sharing. Questions go to (855) 423-3729 or customercare@affirm.com.

Supporting quotations

Explanation of your rights to limit the sharing of your personal information

To Limit Our Sharing You may limit our sharing by logging into your Affirm account at www.affirm.com/u/ and update your "Allow Affirm to share your data" toggle in the "Security and privacy" tab under "Settings."

Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice, or earlier if you consent or as permitted by law. When you are no longer our customer, we continue to share your information as described in this notice.

However, you can contact us at any time to limit our sharing.

Questions? Call (855) 423-3729

Qualifications & exceptions

• Sharing may begin 30 days after the notice is sent, earlier with consent or as permitted by law.
• Sharing continues after the customer relationship ends.
• Limiting is available at any time through the account toggle or by contacting Affirm.

Charges & Financial Obligations · Company practice

Affirm, Inc. gives the GLBA notice, and collects data when you apply, pay or use a card

The GLBA notice identifies Affirm, Inc. as the entity providing it. It says Affirm protects personal information with security measures that comply with federal law, including computer safeguards and secured files and buildings. It collects personal information, for example, when you apply for a loan or open an account, provide account information or pay bills, and use your credit or debit card, and it also collects information from others such as credit bureaus, affiliates or other companies.

Supporting quotations

Who is Affirm, Inc. and how we interact with your personal information

Who we are

Who is providing this notice? Affirm, Inc.

What we do

How does Affirm, Inc. protect my personal information? To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

How does Affirm, Inc. collect my personal information? We collect your personal information, for example, when you

Apply for a loan or open an account

Provide account information or pay your bills

Use your credit or debit card

We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.

Qualifications & exceptions

• Security measures are described as complying with federal law.
• Collection examples are applying or opening an account, providing account information or paying bills, and using a card.

Legal Rights & Agreement Rules · Restriction or exception

Federal law limits only three kinds of sharing; state law may add rights

The GLBA notice explains that federal law gives the customer the right to limit only three things: sharing for affiliates' everyday business purposes involving information about creditworthiness, affiliates using the information to market to the customer, and sharing for nonaffiliates to market to the customer. It adds that state laws and individual companies may give additional rights to limit sharing.

Supporting quotations

Why can't I limit all sharing? Federal law gives you the right to limit only

sharing for affiliates' everyday business purposes--information about your creditworthiness

affiliates from using your information to market to you

sharing for nonaffiliates to market to you

State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law.

Qualifications & exceptions

• The federal limit right covers only the three listed sharing types.
• State laws and individual companies may add rights.

Legal Rights & Agreement Rules · Context

The GLBA notice defines affiliates, nonaffiliates and joint marketing

The GLBA notice defines affiliates as companies related by common ownership or control, which can be financial and nonfinancial, and lists Affirm Loan Services, LLC, Affirm Financial Solutions, LLC and Affirm Payments, LLC as affiliates with an Affirm name. It defines nonaffiliates as companies not related by common ownership or control, which can be financial and nonfinancial, and says nonaffiliates it can share with include merchant partners, third-party platforms and marketing service providers. Joint marketing means a formal agreement between nonaffiliated financial companies that together market financial products or services to you, with bank and merchant partners given as its joint marketing partners.

Supporting quotations

Definitions

Affiliates Companies related by common ownership or control. They can be financial and nonfinancial companies.

Our affiliates include companies with an Affirm name, such as Affirm Loan Services, LLC, Affirm Financial Solutions, LLC and Affirm Payments, LLC.

Nonaffiliates Companies not related by common ownership or control. They can be financial and nonfinancial companies.

Nonaffiliates we can share with include our merchant partners, third-party platforms, and marketing service providers.

Joint marketing A formal agreement between nonaffiliated financial companies that together market financial products or services to you.

Our joint marketing partners include bank and merchant partners.

Qualifications & exceptions

• Affiliates and nonaffiliates can each be financial or nonfinancial companies.
• Joint marketing requires a formal agreement between nonaffiliated financial companies.

Legal Rights & Agreement Rules · Company commitment

The GLBA notice limits California sharing to what California law permits

Under "Other important information" and its "Special Notice For State Residents," the GLBA notice says that for California residents it will not share personal information with affiliates or nonaffiliates except as permitted by California law, such as to process a transaction or with the customer's consent.

Supporting quotations

Other important information

Special Notice For State Residents

For California Residents. We will not share personal information with affiliates or nonaffiliates except as permitted by California law, such as to process your transaction or with your consent.

Qualifications & exceptions

• Applies to California residents.
• Exceptions are conduct permitted by California law, such as processing a transaction or consent.

Not stated here

• The Vermont-specific statement that follows in the source belongs to the next section packet and is not analyzed here.