Intuit Financial Services End User Privacy Statement

This Intuit Financial Services End User Privacy Statement (“Intuit Financial Services Privacy Statement”) explains how we, Intuit Inc. and the Intuit group companies (collectively “Intuit,” “we,” “us,” or “our”), collect, use, share, or otherwise process the personal information that we collect from individuals who choose to use Intuit Financial Services to connect their online accounts with banks or other financial institutions (“Financial Institutions,” and such accounts “Third-Party Accounts”) with Intuit and other non-Intuit applications with which you have a pre-existing relationship (“Developer Apps”). It does not apply to any other Intuit services (including our websites or the Intuit Platform and our marketing activities) as described in Intuit’s Global Privacy Statement. 

This Intuit Financial Services Privacy Statement does not cover what the Developer Apps do with your data. You should review the privacy policies or terms of service for those Apps for information about their practices. Intuit is not responsible for any acts or omissions of Developer Apps, including the types of data they collect or how they use or protect such data. 

Gramm-Leach-Bliley Act (GLBA)

Intuit is a financial institution subject to the Gramm-Leach-Bliley Act (GLBA). 

By using, accessing, or interacting with the Intuit Platform, you are consenting to receive notices about your financial privacy electronically.

Please find our GLBA Notice here.

If you have any questions about how Intuit processes your personal information, please see How to contact us below.

Information you provide to us

You may provide us with the following personal information when you choose to connect your Third-Party Accounts (like your bank accounts) to a Developer App through Intuit Financial Services:

• Login data such as your Financial Institution username and password, or a security token for Financial Institutions that support this.
• Identity verification information when needed for identity verification purposes to connect your Third-Party Accounts, including your date of birth, security questions and answers, documentary ID and one-time password (OTP).

When you provide this data, you also give Intuit permission and authority to act on your behalf to access and transmit your data to and from the relevant Financial Institution that holds your Third-Party Account.

Third-party sources

Data we collect from Financial Institutions when you connect your Third-Party Account. We may collect the following data from Financial Institutions when you connect your Third-Party Accounts with or through the Intuit Financial Services:

• Account data, including financial institution name, account name, account type, account ownership, branch number, IBAN, BIC, account number, routing number, and sort code;
• Account balance data, including current and available balance;
• Credit account data, including due dates, balances owed, payment amounts and dates, transaction history, credit limit, repayment status, and interest rate;
• Loan account data, including due dates, repayment status, balances, payment amounts and dates, interest rate, guarantor, loan type, payment plan, and terms;
• Investment account/asset data, including transaction information, type of asset, identifying details about the asset, quantity, price, fees, and cost basis;
• Account owner data, including name, email address, phone number, date of birth, and address information;
• Transaction data, including amount, date, payor, payee, type, quantity, price, location, involved securities, and a description of the transaction; and/or
• Professional data, including data about your employer, in cases where you’ve connected your payroll accounts or provided us with your pay stub or tax form information.

Data we receive about you from Developer Apps. When needed for Intuit to provide the Intuit Financial Services, the developers of the Apps you use may provide us with identifiers and commercial information about you, like your name, email address, phone number, or information about your Third-Party Accounts and transactions.

Data we receive about you from other sources. When needed to help prevent fraud, abuse, or security threats, we may also receive data about you directly from third parties, including our service providers or identity verification services.

Automatic data collection

We and our service providers may automatically log personal information about you, your computer or mobile device, and your interaction with the Intuit Financial Services, such as:

• Device information. We may collect information about your device(s) such as IP addresses, browser type, coarse location, log information, error messages, device type, and unique device identifiers. For example, we may collect IP addresses from you as part of our sign in and security features. 
• Usage information. We may collect information about your use of the Intuit Financial Services, such as the features you used or interacted with and details about any links or communications with which you interacted.

Cookies and similar technologies

Intuit and our service providers may use commonly used tools such as cookies, web beacons, pixels, local shared objects and similar technologies (collectively “cookies”) to collect information about you (“Cookie Information”) so we can provide the experiences you request and improve your and other customers’ experiences.

We may use your personal information in a number of ways or as otherwise described at the time of collection.

Service delivery and operations. We may use your personal information to operate, provide, and maintain the Intuit Financial Services, as well as to provide support to you, help resolve disputes, authenticate your identity, and communicate with you about the Intuit Financial Services.

Research and development. We may use your personal information to:

• Improve and develop our products and services by analyzing how they are used and interacted with, including by conducting data analytics to develop insights about you, your needs, and your preferences, so we can make more informed predictions, recommendations, and products for our customers; and 
• Combine and anonymize information about your interactions with Intuit to create aggregate, anonymized statistics for use in research (including by contracting with academic institutions) and for marketing, promoting, improving, and developing our services.

Compliance and protection. We may use your personal information to:

• Protect against misuse or abuse of the Intuit Financial Services and ensure compliance with the Intuit Financial Services Terms of Service;
• Comply with legal and regulatory requirements;
• Protect the rights, property, safety or security of Intuit, our users, customers, developers, partners, employees or others and investigate or prevent fraudulent or illegal activity;
• Exercise our rights in the course of judicial, administrative, or arbitration proceedings; and
• Enforce, remedy, or apply the Intuit Financial Services Terms of Service or other agreements.

With your consent. In some cases, we may specifically ask for your consent to use your personal information, such as when required by law.

We may process your personal information for other purposes that are compatible with the above purposes where permitted by applicable law.

When you interact with our services.

We may share your personal information in the following circumstances:

• With the Developer App you are using and as directed by that developer; and
• With Financial Institutions to help establish, maintain, or manage a connection you’ve chosen to make between your Third-Party Accounts and a Developer App.

Other circumstances.

We also share your personal information with third parties in the following circumstances.

• With service providers or agents. We share personal information with our service providers or agents who provide services on our behalf for the purposes described in this Intuit Financial Services Privacy Statement. Service providers or agents are required to implement reasonable privacy and information protection controls to maintain the privacy and security of information provided to them consistent with the privacy practices outlined in this Intuit Financial Services Privacy Statement. Service providers or agents may include companies that assist us with our technology offerings (such as internet hosting, security, or anti-fraud providers) and help us run our business.
• For mergers and acquisitions. If we are involved with a merger, asset sale, financing, liquidation, bankruptcy, or the acquisition of all or part of our business to another company, we may share your personal information with that company and its advisors before and after the transaction date.
• For legal reasons. We may share your personal information with third parties for legal reasons without your consent, and as permitted by law, including:
• When we reasonably believe disclosure is required in order to comply with a subpoena, court order, or other applicable law, regulation or legal process;
• To protect the rights, property, or safety of Intuit, our customers or others;
• To protect or defend against attacks;
• To enforce, remedy, or apply our Intuit Financial Services Terms of Service or other agreements;
• To prevent fraud, cybersecurity attacks or illegal activity;
• For debt collection; and
• With regulatory agencies, including government tax agencies, as necessary to help detect and combat fraud and/or protect our customers, users and/or the Intuit Financial Services, or in required institutional risk control programs.
• For any other notified purpose with your consent or at your direction.

Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with the Intuit Financial Services and successfully run our business. Even if you submit a deletion request, we may be required to maintain your personal information for as long as necessary to:

• comply with our legal or regulatory compliance needs (e.g., maintaining records of transactions you have made with us);
• to exercise, establish or defend legal claims; and/or
• to protect against fraudulent or abusive activity on the Intuit Financial Services.

This means we may keep different information for different periods. If your account is canceled because you haven’t used it for a long time, we may delete this information immediately.

There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it.

Intuit reserves the right to store and process your personal information in the United States and in any other country where Intuit or its affiliates, subsidiaries, or service providers operate facilities in accordance with and as permitted by applicable laws and regulations. Some of these countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective).

When we transfer, store or process personal information outside of your jurisdiction (including to or in the United States, as described above), we take appropriate safeguards to require that your personal information remain protected in accordance with this Intuit Financial Services Privacy Statement and applicable law.

We use reasonable physical, technical and organizational safeguards that are designed to protect your personal information. However, despite these controls, we cannot completely ensure or warrant the security of your personal information. You can find out more about how we protect your personal information here.

From time to time we may change or update the Intuit Financial Services Privacy Statement. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by sending you a notification or by other means consistent with applicable law.

You can see when this Intuit Financial Services Privacy Statement was last updated by checking the “last updated” date at the top of this Intuit Financial Services Privacy Statement. Please review this Intuit Financial Services Privacy Statement periodically to stay informed about how Intuit protects your privacy.

Our services are not intended for or directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe we may have information from a child, please contact us.

If you have questions or comments about this Intuit Financial Services Privacy Statement or our practices, please contact us by submitting your privacy question here.

If you have an unresolved privacy or information use concern or complaint that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

United States contact information:

Intuit Inc.

Attention: Privacy

2800 E Commerce Center Place

Tucson, AZ 85706

You can contact the Intuit Data Protection Officer here.