This Privacy Notice ("Notice") explains how Affirm, Inc. and its affiliates Affirm Loan Services, LLC, Affirm Financial Solutions, LLC and Affirm Payments, LLC (collectively, "Affirm") collect, use and disclose your information when you request and obtain our financial products, interact with Affirm as a representative of another business, use our website, browser extension, and mobile applications, or otherwise interact with us (our "Services"). We also explain your data privacy rights and how you can exercise them.
Please note that certain information we collect and process in connection with your use of Affirm Services is considered "nonpublic personal information" (NPI) under the U.S. Gramm-Leach Bliley Act ("GLBA"). Affirm is considered a "financial institution" under GLBA, and as such, the collection and use of NPI is governed exclusively by federal law, not applicable state privacy laws. Section 9 of this Privacy Policy, titled "Affirm’s Privacy Notice for Consumer Financial Information," applies to this information.
This Notice updates how customer may opt-out of data sharing with merchants for marketing purpose. (07/29/2026)
If you open an account or use the Affirm Services, either directly or through a merchant partner or a third-party platform, we may collect the following types of information:
Identity and Profile Information. This includes your full name, date of birth, Social Security number, Individual Taxpayer Identification Number, email address, mailing address, phone number, password and account preferences (if you create an account with us).
Financial Information. This includes bank account online login information, bank account numbers, bank account details including transaction history, routing numbers and/or debit card numbers and credit card numbers that you link to your Affirm account or you give us when you use the Services.
Customer Service Interaction Information. We collect information you provide when you engage with Affirm's customer service personnel and mechanisms, including through recorded phone calls, chat conversations, surveys, and email correspondence. Note that recordings and transcripts of customer service interactions may be stored by us and/or our vendors on our behalf for quality assurance and training purposes.
Direct Marketing and Communications Information. This includes your preferences in receiving marketing communications from us and our third parties (marketing and servicing vendors and merchant partners).
Geolocation Information. We may collect or infer information about your general or precise location (including the precise location of your device) if you choose to enable that functionality by searching using maps on your device in the App. You can withdraw your consent to this at any time using your device settings.
Photographs. We may collect information about your physical or biological characteristics such as photographs. These photographs may be used by our identity verification vendors for verifying your identity or detecting fraud (including through facial recognition technologies controlled by such vendors).
Browser Extension. If you use our browser extension or in-app browser, we may collect information from merchant webpages you choose to access through those features while they are enabled including website domain, page URL, cart contents, product details, pricing, quantities, and related page information. We use this information to provide and improve extension features, provide more personalized experiences, and support related services.
Usage Details and Device Information. We may collect certain information automatically when you use the Services, including details about your browser, operating system or device, (such as your MAC address, cookie identifiers, Internet protocol (IP) address, mobile advertising, and other unique identifiers, device ID, Internet service provider, mobile carrier, general location information (including inferred location based off of your IP address), actions that you take while using the Services, information about how you interact with the Services, including the frequency and duration of your activities, information about the links you click, and other information about how you use the Services.
The information described in this "Usage Details and Device Information" section is often collected through cookies, web beacons, and other tracking technologies. For more information, see our Cookie Notice.
Our partners may help collect this data for:
Site operations: Enabling features that are necessary for providing you the Services on our site, such as identifying you as being signed in, tracking content views, remembering your preferences, and the number of times you have been shown an advertisement.
Analytics: Allowing us to understand how our Services are being used, track site performance, and make improvements.
Personalized advertising: Delivering tailored advertising based on your preferences or interests across services and devices, and measuring the effectiveness of advertisements.
You can learn more about how advertising networks collect and use your information, and how to limit that use, by visiting the Network Advertising Initiative, and the Digital Advertising Alliance. You can also manage tracking by certain mobile advertising networks through your device settings, including by resetting the advertiser ID on your Apple or Android device.
Please note that opting-out of these advertising networks services does not mean you will stop seeing ads while using our Services or on other websites. It only limits interest-based advertising from participating companies, in accordance with their opt-out tools and policies. Other companies that do not participate in these programs may continue to show you interest-based ads. Note that if you delete your cookies, you may also delete your opt-out preferences
Information about Businesses and Business Representatives. In addition to the other types of information listed in this section, if you are a business user or sole proprietor, we may collect your business name, industry, business address, business email, business telephone number, tax identification number, and ownership percentages.
We may also obtain information about you from:
Vendors/service providers. This includes vendors we rely on to provide our Services, like IT and security service providers.
Third party sources that we rely on to enrich our loan eligibility determinations. This includes credit reporting agencies, identity verification, fraud prevention, and similar services.
Merchant partners. We may obtain information about you, such as your billing and shipping address, from third parties like our merchant partners you interact with, identity verification services, or public sources or that we receive from companies that partner with us to provide products and services.
Online advertising companies and other advertising and research partners. This includes third parties who may disclose information about your interests, demographic information, and information about the marketing and advertisements you have seen or clicked on as you browse the internet.
Social media platforms and other publicly available data sources managed by third parties. Affirm may have access to your information from your accounts managed by third parties. The information we have access to varies by third party site and is controlled by your privacy settings and authorization on that site.
Business and Strategic Partners. Affirm may collect information about you from business and strategic partners that collaborate with Affirm. This allows us to link your existing Affirm account to other services or platforms you use, or to pre-populate your information to streamline account creation and enhance your experience with our Services.
We use your information for the following purposes:
Process transactions, resolve disputes, authenticate and verify identities, collect payments, prevent fraud and other illegal activities, customize the Services, and verify the accuracy of data. It may also be used to facilitate your relationship with our merchant partners you choose to interact with.
Understand our customer base may be used to conduct research and analysis, develop new or improved products and Services, in the utilization of artificial intelligence and/or machine learning tools, and to build relationships with merchant partners. If you are an employee, representative, or agent of a merchant, vendor, or other business entity, it may be used in connection with the business relationship between the entity and Affirm, or to market a prospective relationship to the entity you represent.
Provide customer service and support, respond to your questions, comments, and other requests.
Service update notices and inform you about products, services, and promotions that may be relevant. We may combine your information with information we collect from other companies and use it to improve and personalize your experience, including advertising. Your information may also be used to operate sweepstakes, contests, referral programs, or other optional promotional offers. Participation is voluntary and you may opt out at any time.
Monitor the performance of our Services, improve the user experience, and to ensure the security of our Services.
In connection with inquiries from regulators, law enforcement agencies, or parties involved in litigation, in each case anywhere in the world, as necessary for Affirm to comply with obligations or bring claims and exercise defenses, including to enforce the terms of loan agreements and Terms of Service.
De-identify information so it cannot reasonably identify you or your device. Once information has been de-identified, we commit to keeping it in de-identified form, and if we disclose it to third parties, we will also require them to commit to not re-identify it. Otherwise, our use and disclosure of de-identified information is not subject to any restrictions under this Privacy Notice, and we may use and disclose it to others for any purpose, without limitation.
We disclose your information for the following purposes:
To our affiliates and subsidiaries, including information regarding your experience using our Services.
To service providers and contractors to perform functions on our behalf, such as processing transactions, marketing, billing and collection, auditing and accounting, professional services, measurement and analytics services, security, maintenance and hosting of our Services, and IT.
To certain third parties as necessary to offer and improve our Services, including vendors who assist with identity verification, servicers of loans and lines of credits, business/strategic partners, partner and underwriting financial institutions, credit bureaus, and other financial institutions.
To third party fraud prevention, identity verification, and risk intelligence providers that help us detect, prevent, and investigate fraud, security incidents, and other harmful or unlawful activity. These providers may use information we disclose to provide fraud screening, authentication, identity verification, risk scoring, and related services to us. They may also use information we disclose, together with information they receive from other clients, to maintain and improve their fraud detection and risk intelligence products and services, including by generating aggregated, deidentified, or model-based insights that may be used to help us and other clients identify potentially fraudulent or high risk activity, as permitted by applicable law. We do not authorize these providers to use your personal information for their own direct marketing purposes.
To merchants you interact with while using our Services to effectuate your transactions, for internal analysis, for improvement of the Services, and to maintain and grow our partnerships with such merchants. When you accept this Notice and use our Services, you consent to us disclosing your information to merchants you interact with for those merchants to market to you. We do this to help merchants personalize services and offers, so you can have a better experience.
To opt-out of information disclosure to merchants for marketing, log into your Affirm account at www.affirm.com/u/ and update the "Allow Affirm to share your data" toggle in the "Security and privacy" tab in "Settings." If you opt out, we will continue to disclose your information as necessary to complete transactions you initiate, but will not disclose information for marketing purposes.
To third parties who assist us in serving online advertising regarding the Services. These third parties may use tracking technologies to collect or receive information through the Services and elsewhere on the internet and use that information to provide measurement services and targeted ads. Third parties may allow other companies to access information about you so that they may advertise other products you may be interested in as you browse the internet.
To comply with applicable law and respond to requests from law enforcement agencies or other government authorities or third parties, as permitted by law. This may be done without your consent when we have a good faith belief that it is necessary to protect our customers, employees, or property, in emergency situations, to enforce our rights under our terms of service and policies, or to combat fraud or criminal activity.
In connection with corporate transactions, in the event that Affirm enters into, or intends to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or any portion of our business, assets or stock.
If you no longer wish to receive notifications about our Services such as account alerts, scheduled payment reminders, legal compliance or deals nearby, you may change your notification preferences by contacting us here. Alternatively, you may be able to indicate your preference by logging into your account and adjusting your preferences or by following the directions provided with the communication. Affirm reserves the right to close or limit access to your account should you opt-out of the crucial notices that are required to perform the Affirm Service. You are still responsible for any amounts due to Affirm even if we close or limit access to your account.
You can opt out of receiving SMS messages by replying "STOP" or contacting us here. Alternatively, you may be able to indicate your preference by logging into your account and adjusting your preferences or by following the directions provided with the communication. Again, Affirm reserves the right to close or limit access to your account should you opt out of the crucial notices that are required to perform the Affirm Service. You are still responsible for any amounts due to Affirm even if we close or limit access to your account.
You can stop all collection of information by our browser extension by disabling it in the browser settings, uninstalling the browser extension, or hiding the extension. You can limit collection through the in-app browser by choosing not to use the in-app browser for merchant browsing where an alternative is available.
You can review and edit your Personal Information at any time by logging in to your account or by contacting us through the My account section here. You can also request to close your account if you do not have an active loan by contacting us here. If you close your Affirm account, we will mark your account in our database as "Closed," but will keep your account information in our database to comply with our legal obligations. This is necessary in order to deter fraud, by ensuring that persons who try to commit fraud will not be able to avoid detection simply by closing their account and opening a new account. If you close your account, your personally identifiable information will not be used by us for any further purposes, nor sold or disclosed to third parties, except as necessary to prevent fraud and assist law enforcement, as required by law or in accordance with this Privacy Notice.
Some states extend specific privacy rights to their residents. Section 8 discusses these rights in more detail below.
Affirm maintains physical, electronic and procedural security measures to guard against unauthorized access to systems and uses safeguards such as firewalls and data encryption. We enforce physical access controls to our buildings and we authorize access to your information only for those employees or agents who require it to fulfill the responsibilities of their jobs. However, please note that no security measures are perfect or impenetrable. As such, we cannot guarantee the security of your information.
Affirm will retain your Personal Information for as long as is necessary to complete the purposes for which it was collected, or as may be required by law.
We utilize the following criteria to determine the length of time for which we retain information:
The business purposes for which the information is used, and the length of time for which the information is required to achieve those purposes;
Whether we are required to retain the information type in order to comply with legal obligations or contractual commitments, to defend against potential legal claims, or as otherwise necessary to investigate theft or other activities potentially in violation of Affirm's policies and procedures applicable to you or against the law, to ensure a secure online environment, or to protect health and safety;
The privacy impact of ongoing retention on the consumer; and
The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle of information in light of the volume and complexity of the systems in our infrastructure.
Individual pieces of information such as those listed above may exist in different systems that are used for different business or legal purposes. A different maximum retention period may apply to each use case of the information. Certain individual pieces of information may also be stored in combination with other individual pieces of information, and the maximum retention period may be determined by the purpose for which that information set is used.
If you have questions or concerns regarding this Privacy Notice, you should contact us at privacy@affirm.com.
If you have questions about how a merchant processes your information, you should contact the merchant or visit the merchant’s privacy notice.
Certain U.S. states provide consumers with rights regarding their Personal Information. However, as explained above, Affirm, in connection with financial services we offer, is governed by GLBA, which exempts NPI collected from most state privacy laws. When applicable, we provide the rights outlined below for information collected outside the scope of GLBA, for example, information collected from you when you browse our website in a logged-out state.
You can find out more information about the website data we collect in our Cookie Notice, including how to opt out of certain cookies and web-tracking technologies.
Under California law, you have certain rights regarding how your personal information is collected and used. This section serves as our "Notice at Collection" under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and includes additional disclosures under California’s Shine the Light law. This section applies only to personal information collected outside the scope of the GLBA.
California Shine the Light Law: California residents may request information regarding whether we have disclosed certain categories of personal information to third parties for their direct marketing purposes during the preceding year. Companies subject to this law may either provide this information upon request or offer a way for consumers to opt out of such disclosures.
Affirm provides a mechanism to opt out of such disclosures. As explained above, we disclose certain personal information to our merchant partners about customers that have created an Affirm account so that our merchant partners can provide more relevant advertising to such individuals. To opt-out of this sharing, log into your Affirm account at www.affirm.com/u/ and update your "Allow Affirm to share your data" toggle in the "Security and privacy" tab under "Settings."
If you opt out, we will continue to disclose your personal information as necessary to complete transactions you initiate, but will not disclose personal information for the merchants' own direct marketing purposes.
To opt out of disclosures that are considered "sales" or "sharing" under the CCPA, see the "Your Choices regarding 'sharing' and 'selling'" section below.
California Consumer Privacy Act: California residents may have the right to receive certain disclosures regarding the collection, use, and sharing of Personal Information. These disclosures apply only to information not subject to GLBA or another applicable exemption.
We may collect the following categories of personal information:
| Category of Personal Information | Required Information |
|---|---|
| Internet or other similar network activity | |
| We collect information about your browsing history, search history, interaction with websites, and applications or advertisements automatically when you utilize our Services. |
Source: Collected automatically when you use our Services. Purpose of collection and use: Used for purposes listed under Section 2 above, including to gauge online activity on our website, measure the effectiveness of online services, applications, and tools, and to serve targeted advertisements based on your online activities. Categories of Parties to Whom PI is "Disclosed":
Retention Considerations: See Section 6 |
Learn more about tracking technologies and cookie settings in our Cookie Notice.
Your choices regarding "sharing" and "selling." Affirm does not disclose Personal Information to third parties in exchange for monetary compensation. However, as discussed in this Privacy Notice, Affirm does work with advertising partners to collect information about user internet browsing activities to provide those users with more relevant advertising as they browse. This may be considered the "sale" or "sharing" of Personal Information for cross-context behavioral advertising under the CCPA.
You may opt out of this activity based on our use of cookies/pixels. To opt out of these activities, follow the instructions in 8.2.1 under Right to opt out of Sale and Sharing. We also honor any legally-required browser opt out signals (e.g., Global Privacy Control).
Notice concerning Do Not Track. Do Not Track ("DNT ") is a browser setting that allows users to signal that they do not want their online activity tracked across websites. While we are committed to providing meaningful privacy choices through the mechanisms described in our Cookies Notice, we do not currently recognize or respond to DNT signals. However, as mentioned above, we do honor legally required browser-based signals such as GPC.
Retention of your personal information. Please see Section 6 of our Privacy Notice for details about our data retention practices.
Other CCPA rights. Please see Section 8.2 immediately below for information about the additional rights you may have with respect to your Personal Information under the CCPA.
As mentioned above, Affirm is a financial institution subject to GLBA, and much of the personal information we collect and process is considered NPI under that law. As a result, many state privacy laws do not apply to that information.
This section describes the rights that may apply to personal information collected outside the scope of the GLBA, including when you use Affirm’s website in a logged-out state or interact with us outside of a financial product or service.
Right to know/access information: request access to Personal Information collected about you and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it.
Right to correct/rectify inaccurate information: request correction of inaccurate Personal Information that we hold about you under certain circumstances. Affirm account holders may generally modify certain Personal Information by logging into your account or contacting us through the My Account section here.
Right to request deletion of information: request deletion of any Personal Information that we have collected from you, subject to legal exceptions.
Right to opt out of Sale and Sharing: Affirm does not disclose Personal Information to third parties in exchange for monetary compensation. However, as discussed in this Privacy Notice, Affirm does work with advertising partners to collect information about user internet browsing activities to provide those users with more relevant advertising. This may be considered the "sale" or "sharing" of Personal Information or processing of Personal Information for online targeted advertising under applicable U.S. state laws. You have the right to opt out of this activity based on our use of cookies/pixels by managing your preferences through the "Your Privacy Choices" link located in the footer of our website.
Right to non-discrimination: Exercise any of the rights listed here without being treated unfairly or denied services.
Residents of California and Oregon may request that we limit the use or disclosure of certain sensitive personal information. This includes information about your race, ethnicity, religion, and philosophical beliefs, financial information to the extent such would enable access to your account, biometric information, and health information including your status as transgender or non-binary, your status as a victim of a crime, past and present geolocation information within 1,750 feet of your location. However, please note that Affirm does not collect or process sensitive personal information at this time, with the exception of geolocation information if you choose to allow this within the App.
Residents of Minnesota, Oregon, and Connecticut may request a list of the "third parties" (as defined under applicable law) with whom we have disclosed their personal information. To request this list, please email us at privacy@affirm.com with the subject line "third parties."
You may submit an appeal if we deny a privacy-related request. For instructions on how to file an appeal, please email us at privacy@affirm.com, with the subject line "Oregon resident appeal," "Minnesota resident appeal," or "Montana resident appeal" as applicable.
You can exercise your privacy rights in two ways:
In order to process your request, we must verify your request. Depending on the type of request and how you submit your request (e.g., through your account or via email) we do this by:
If you have authorized someone else to make requests on your behalf (e.g., an authorized agent), we will require that you provide a signed letter confirming the identity and authority of that person. Such signed letters can be submitted by emailing privacy@affirm.com with the subject line "authorized third party."
[Rev. 08/2025]
| Facts | What does Affirm, Inc. do with your personal information? |
|---|---|
| Why? | Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. |
| What? |
The types of personal information we collect and share depend on the product or service you have with us. This information can include: - Social security number and payment history - Transaction history and account transactions - Credit scores and checking account information When you are no longer our customer, we continue to share your information as described in this notice. |
| How? | All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Affirm, Inc. chooses to share; and whether you can limit this sharing. |
| Reasons we can share your personal information | Does Affirm, Inc. share? | Can you limit this sharing? |
|---|---|---|
|
For our everyday business purposes--
such as to process your transactions, maintain your account(s), offer or service loans or lines of credit, offer other financial services, respond to court orders and legal investigations, or report to credit bureaus |
Yes | No |
|
For our marketing purposes--
to offer our products and services to you |
Yes | No |
| For joint marketing with other financial companies | Yes | No |
|
For our affiliates' everyday business purposes--
information about your transactions and experiences |
Yes | No |
|
For our affiliates' everyday business purposes--
information about your creditworthiness |
No | We don't share |
| For our affiliates to market to you | No | We don't share |
| For nonaffiliates to market to you | Yes | Yes |
| To Limit Our Sharing |
You may limit our sharing by logging into your Affirm account at www.affirm.com/u/ and update your "Allow Affirm to share your data" toggle in the "Security and privacy" tab under "Settings."
Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice, or earlier if you consent or as permitted by law. When you are no longer our customer, we continue to share your information as described in this notice. However, you can contact us at any time to limit our sharing. |
| Questions? | Call (855) 423-3729 or email customercare@affirm.com |
| Who we are | |
| Who is providing this notice? | Affirm, Inc. |
| What we do | |
| How does Affirm, Inc. protect my personal information? | To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. |
| How does Affirm, Inc. collect my personal information? |
We collect your personal information, for example, when you
- Apply for a loan or open an account - Provide account information or pay your bills - Use your credit or debit card We also collect your personal information from others, such as credit bureaus, affiliates, or other companies. |
| Why can't I limit all sharing? |
Federal law gives you the right to limit only
- sharing for affiliates' everyday business purposes--information about your creditworthiness - affiliates from using your information to market to you - sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law. |
| Definitions | |
| Affiliates |
Companies related by common ownership or control. They can be financial and nonfinancial companies.
Our affiliates include companies with an Affirm name, such as Affirm Loan Services, LLC, Affirm Financial Solutions, LLC and Affirm Payments, LLC. |
| Nonaffiliates |
Companies not related by common ownership or control. They can be financial and nonfinancial companies.
- Nonaffiliates we can share with include our merchant partners, third-party platforms, and marketing service providers. |
| Joint marketing |
A formal agreement between nonaffiliated financial companies that together market financial products or services to you.
Our joint marketing partners include bank and merchant partners. |
| Other important information | |
|
Special Notice For State Residents
For California Residents. We will not share personal information with affiliates or nonaffiliates except as permitted by California law, such as to process your transaction or with your consent. For Vermont Residents. We will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law. Additional information concerning our privacy policies can be found in this Privacy Notice or by contacting us at privacy@affirm.com |
|
We may partner with banks ("Bank Partners") to offer certain products and services. If you are approved for a product offered through Affirm by one of our Bank Partners, or through other partnerships with Bank Partners, your non-public personal information will be subject to the following privacy notices: