Open Finance Privacy Notice (U.S.)

Mastercard · agreement dated November 24, 2025 · Official agreement

Read the agreement

10 of 69 cards in Sharing & Disclosure

Sharing & Disclosure · Restriction or exception

Notice does not explain what third parties you authorize do with your data

You may reach the Services through third parties and their applications that you have authorized to access your information so they can provide you a product or service. This notice does not explain what those third parties do with Personal Information Finicity provides to them on your behalf, or with other information they separately collect about you. Finicity encourages you to read their privacy notices and terms for their data practices.

Details
Who
Third parties you have authorized
Exception
Their handling of your information is not explained by this notice

Supporting quotations

You may access our Services through other third parties (and their related applications and services) that you have authorized to access your information in order for those third parties to provide a product or service to you.
This Privacy Notice does not explain what those third parties do with any Personal Information we provide to them on your behalf, or any other information they may separately collect about you.
Also annotated in the same passage (1)

Sharing & Disclosure · Company practice

When you authorize a third party, Finicity discloses your Personal Information to it, under a confidentiality contract

When you authorize third parties (and their related applications and services) to access your information so they can provide you a product or service, Finicity discloses your Personal Information, including from the categories identified in Section 1, to those third parties. It says it provides Personal Information to a third party only after that party has signed a confidentiality contract with Finicity, and only for business purposes. The notice does not explain what those third parties then do with the information Finicity provides on your behalf.

Details
Who
Finicity ("we")
Condition
You authorize the third party to access your information
Exception
Only after a signed confidentiality contract and only for business purposes

Supporting quotations

When you authorize third parties, and their related applications and services that you have authorized, to access your information in order to provide a product or service to you, we disclose your Personal Information, including from the categories identified above in Section 1, to those third parties. We only provide your Personal Information to a third party after such third party has a signed a confidentiality contract with us, and we provide your Personal Information to such third parties only for business purposes.
This Privacy Notice does not explain what those third parties do with any Personal Information we provide to them on your behalf

Qualifications & exceptions

  • Only after the third party has signed a confidentiality contract with Finicity.
  • Only for business purposes.

Not stated here

  • The notice does not define "business purposes" or say what the confidentiality contract requires of the third party.
Also annotated in the same passage (1)

Sharing & Disclosure · Company practice

Finicity may disclose Personal Information to service providers working on its behalf

Finicity says it may disclose your Personal Information to third-party service providers it employs to provide services on its behalf, including security, fraud prevention or identity verification, development, or other business processes.

Details
What it covers
Personal Information disclosed to service providers for security, fraud prevention, identity verification, development or other business processes

Supporting quotations

We may also disclose your Personal Information as follows:
To third-party service providers that we employ to provide services on our behalf, including security, fraud prevention or identity verification, development, or other business processes;

Sharing & Disclosure · Company practice

Partners such as financial institutions and payment processors may receive your data or derived de-identified data

Finicity says it may disclose Personal Information to partners with whom it collaborates to provide services, such as financial institutions or payment processors that facilitate payment transactions. Those partners may use the Personal Information, or de-identified, anonymized and/or aggregated data derived from it, to provide their services, including to third parties you have authorized to access your information. Elsewhere the notice says Finicity may generate de-identified and/or aggregated data, where permissible by law, and use or disclose it for any lawful purpose.

Details
Who
Partners such as financial institutions and payment processors
Why
So they may provide their services

Supporting quotations

We may also disclose your Personal Information as follows:
To partners (such as financial institutions or payment processors that facilitate payment transactions) with whom we collaborate to provide services, so that they may use the Personal Information or de-identified, anonymized and/or aggregated data derived from that Personal Information to provide their services, including to third parties that you have authorized to access your information in order to provide a product or service to you;
Where permissible by law, to generate de-identified and/or aggregated data that we may use or disclose for any lawful purpose, including purposes described in this Privacy Notice

Qualifications & exceptions

  • Partners may use the information "to provide their services".
Also annotated in the same passage (1)

Sharing & Disclosure · Company practice

Finicity may disclose Personal Information to Mastercard group affiliates

Finicity says it may disclose your Personal Information to its affiliates within the Mastercard group and points to the Mastercard Global Privacy Notice for more information. The text of that linked notice is not part of this document.

Details
Who
Affiliates within the Mastercard group

Supporting quotations

We may also disclose your Personal Information as follows:
To our affiliates within the Mastercard group; for more information, please see the Mastercard Global Privacy Notice;

Not stated here

  • The Mastercard Global Privacy Notice is linked but its text was not supplied, so the affiliates' own handling of the information is not shown here.

Sharing & Disclosure · Company practice

Finicity may disclose Personal Information to protect people, enforce terms, prevent loss or investigate fraud

Finicity says it may disclose your Personal Information when it believes disclosure is necessary to protect individuals' vital interests, to enforce its applicable Terms of Use, to prevent Mastercard from harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

Details
Condition
When Finicity believes disclosure is necessary

Supporting quotations

We may also disclose your Personal Information as follows:
When we believe disclosure is necessary to protect individuals’ vital interests, to enforce our applicable Terms of Use, prevent Mastercard against harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity

Qualifications & exceptions

  • Depends on Finicity's own belief that disclosure is necessary.

Sharing & Disclosure · Company practice

Finicity may disclose Personal Information in connection with a merger, acquisition or asset sale

Finicity says it may disclose your Personal Information to service providers, advisors, potential transactional partners or other third parties in connection with the consideration, negotiation or completion of a corporate transaction in which it is acquired by or merged with another company, or sells, liquidates or transfers all or a portion of its assets.

Details
Condition
Consideration, negotiation or completion of an acquisition, merger or asset transfer

Supporting quotations

We may also disclose your Personal Information as follows:
To service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.

Sharing & Disclosure · Company commitment

Finicity says it does not sell or "share" Personal Information for targeted advertising

Finicity states that it does not sell or "share" (disclose for targeted advertising purposes) your Personal Information.

Details
Who
Finicity
Exception
Does not sell or "share" Personal Information

Supporting quotations

Finicity does not sell or “share” (disclose for targeted advertising purposes) your Personal Information.

Not stated here

  • The statement is about Personal Information; the notice does not say whether the same applies to the de-identified, anonymized or aggregated data it may use or disclose for any lawful purpose.

Sharing & Disclosure · Company practice

Finicity says it has no actual knowledge of selling or sharing data of consumers under 16

Finicity states that it does not have actual knowledge that it sells or "shares" (discloses for targeted advertising purposes) Personal Information of consumers under 16 years of age.

Details
Who
Finicity

Supporting quotations

Finicity does not have actual knowledge that we sell or “share” (disclose for targeted advertising purposes) Personal Information of consumers under 16 years of age.