プライバシーポリシー

最終更新日: 2025 年 1 月 16 日

このプライバシーポリシーには、お客様の個人データに関わる重要な情報が記載されています。このプライバシーポリシーをよくお読みください。

はじめに

当社はインターネットのための金融インフラを提供しています。多くの個人とあらゆる規模の事業者が、Stripe のテクノロジーとサービスを利用することで、購入体験をスムーズにし、決済を受け付け、入金を実行し、オンラインビジネスを管理しています。

本プライバシーポリシー (以下「本ポリシー」) では、当社が収集する個人データと、その使用方法、共有方法、およびプライバシーに関して当社にお問い合わせいただく方法の詳細について説明しています。また、本ポリシーでは、お客様がデータ主体として有する権利と選択肢 (当社によるお客様の個人データの特定の利用に異議を唱える権利を含みます) についても概説します。

アクティビティーに応じて、Stripe は「データ管理者」および/もしくは「データ処理業者」(または「サービスプロバイダー」) の役割を果たします。当社が果たす役割、本ポリシーに基づいて責任を負う具体的な Stripe 法人、お客様の個人データの処理に関する当社の法的根拠をはじめ、当社によるプライバシーの取り扱いについて、詳細はプライバシーセンターをご覧ください。

用語の定義

本ポリシーにおいて、「Stripe」または「当社」という用語は、本書に記載する個人データの収集、使用および取り扱いに責任を負う Stripe 法人を指します。お客様が居住する司法管轄区域に応じて、お客様の個人情報に関して責任を負う Stripe 法人がそれぞれ異なる場合があります。もっと知る。

「個人データ」とは、特定された個人または特定可能な個人に関連するあらゆる情報を指し、お客様が当社のサービスを利用する際に当社に提供する情報、当社が収集するお客様に関する情報 (デバイス情報、IPアドレスなど) が含まれます。

「サービス」とは、Stripe 利用規約 (「ビジネスサービス」) または Stripe 顧客利用規約 (「エンドユーザーサービス」)、Stripe.com、Link.com などのウェブサイト (「サイト」)、およびその他の Stripe のアプリケーションやオンラインサービスの下で Stripe が提供するプロダクト、サービス、デバイス、およびアプリケーションを指します。法人 (「ビジネスユーザー」) に対して、当社はビジネスサービスを提供します。個人利用を目的とする個人に対して、当社はエンドユーザーサービスを直接提供します。

「金融パートナー」とは、Stripe がサービスを提供するために提携している、金融機関、銀行、およびその他のパートナー (決済手段アクワイアラー、入金プロバイダー、カードネットワークなど) を指します。

「お客様」という用語の意味は、文脈に応じて異なり、最終顧客、エンドユーザー、代表者、または訪問者を指す場合があります。

• エンドユーザー。Link を使用して決済情報を保存するなど、お客様が個人利用を目的としてエンドユーザーサービスを利用する場合、お客様は「エンドユーザー」と呼ばれます。

• 最終顧客。お客様が、決済処理に Stripe Checkout ページを使用するビジネスユーザーから何かを購入する場合やビジネスユーザーから支払いを受ける場合など、お客様が Stripe と直接取引をしていないが、ビジネスユーザーにサービスを提供するために Stripe がお客様の個人データを受け取る場合、そのお客様は「最終顧客」と呼ばれます。

• 代表者。お客様が、たとえば、会社の創業者として、ビジネスユーザーのアカウント管理者として、またはビジネスユーザーから Stripe Issuing を介して従業員クレジットカードを受け取る受領者として、既存のビジネスユーザーまたは見込みビジネスユーザーを代表して行動する場合、お客様は「代表者」と呼ばれます。

• 訪問者。お客様が、Stripe のアカウントにログインせずにサイトを訪問して Stripe と通信する場合、または Stripe との通信に、エンドユーザー、最終顧客、もしくは代表者として関わっていない場合、お客様は「訪問者」と呼ばれます。たとえば、お客様が Stripe にメッセージを送信して、Stripe のサービスに関する詳細情報を求める場合、お客様は「訪問者」となります。

本ポリシーにおいて、「取引データ」とは、お客様がリクエストする取引を円滑に進めるために Stripe が収集し、使用するデータを指します。一部の取引データは個人データに該当し、これには、お客様の氏名、メールアドレス、連絡先番号、請求先住所、配送先住所、決済手段に関する情報 (クレジットカード番号、デビットカード番号、銀行口座情報、お客様が選択した支払いカードの画像など)、加盟店および所在地に関する情報、購入金額、購入日などが含まれることがあるほか、場合によっては購入内容に関する情報も含まれることがあります。

1. Stripe が収集する個人データとその使用・共有方法

2. 当社が個人データを収集、使用、共有するその他の方法

3. 個人データの取り扱いの法的根拠

4. お客様の行使と選択肢

5. セキュリティーとデータ保持

6. 国外へのデータ移転

7. 改訂と告知

8. 地域固有の規定

9. お問い合わせ

10. アメリカの消費者プライバシーに関する告知

1. Personal Data we collect and how we use and share it

Our collection and use of Personal Data differs based on whether you are an End User, End Customer, Representative, or Visitor, and the specific Service that you are using. For example, if you're a sole proprietor who wants to use our Business Services, we may collect your Personal Data to onboard your business; at the same time, you might also be an End Customer if you've bought goods from another Business User that is using our Services for payment processing. You could also be an End User if you used our End User Service, such as Link, for those transactions.

1.1 End Users

We provide End User Services when we provide the Services directly to you for your personal use (e.g., Link). Additional details regarding our collection, usage, and sharing of End User Personal Data, including the legal bases we rely on for processing such data, can be found in our Privacy Center.

a. Personal Data we collect about End Users

• Using Link or Connecting your bank account. Stripe offers a service called "Link," which allows you to create an account and store information for future interactions with Stripe’s Services and Business Users. You may save a number of different kinds of Personal Data using Link. For instance, you may save your name, payment method details, contact information, and address to conveniently use saved information to pay for transactions across our Business Users. When you choose to pay with Link, we will also collect Transaction Data associated with your transactions. Learn More.

• You can also share and save bank account details to your Link account using Stripe’s Financial Connections product. When you use Financial Connections, Stripe will periodically collect and process your account information (such as bank account owner information, account balances, account number and details, account transactions, and, in some cases, log-in credentials). You can ask us to cease the collection of such data at any time. Learn More.

• Finally, you can use Link to store your identity documents (such as your driver’s license) so that you can share them in future interactions with Stripe or its Business Users.

• Paying Stripe. When you purchase goods or services directly from Stripe, we receive your Transaction Data. For instance, when you make a payment to Stripe Climate, we collect information about the transaction, as well as your contact and payment method details.

• Identity/Verification Services. We offer an identity verification service that automates the comparison of your identity document (such as a driver’s license) with your image (such as a selfie). You can separately consent to us using your biometric data to enhance our verification technology, with the option to revoke your consent at any time. Learn More.

• For further information about other types of Personal Data that we may collect about End Users, including about your online activity and your engagement with our End User Services, please see the More ways we collect, use, and share Personal Data section below.

b. How we use and share Personal Data of End Users

• Services. We use and share your Personal Data to provide the End User Services to you, which includes support, personalization (such as language preferences and setting choices), and communication about our End User Services (such as communicating Policy updates and information about our Services). For example, Stripe may use cookies and similar technologies or the data you provide to our Business Users (such as when you input your email address on a Business User’s website) to recognize you and help you use Link when visiting our Business User’s website. Learn more about how we use cookies and similar technologies in Stripe’s Cookie Policy.

• Our Business Users. When you use Link to make payments with our Business Users, we share your Personal Data, including name, contact information, payment method details, and Transaction Data with those Business Users. Learn More. You can also direct Stripe to share your saved bank account information and identity documents with Business Users you do business with. Once we share your Personal Data with Business Users, we may process that Personal Data as a Data Processor for those Business Users, as detailed in Section 1.2 of this Policy.  You should consult the privacy policies of the Business Users’ you do business with for information on how they use the information shared with them.

• Fraud Detection and Loss Prevention. We use your Personal Data collected across our Services to detect fraud and prevent financial losses for you, us, and our Business Users and Financial Partners, including detecting unauthorized purchases. We may provide Business Users and Financial Partners, including those that use our fraud prevention-related Business Services (such as Stripe Radar), with Personal Data about you (including your attempted transactions) so that they can assess the fraud or loss risk associated with the transaction. Learn more about how we may use technology to assess the fraud risk associated with an attempted transaction and what information we share with Business Users and Financial Partners here and here.

• Advertising. Where permitted by applicable law, we may use your Personal Data, including Transaction Data, to assess your eligibility for, and offer you, other End User Services or promote existing End User Services, including through co-marketing with partners such as Stripe Business Users. Learn more. Subject to applicable law, including any consent requirements, we use and share End User Personal Data with third party partners to allow us to advertise our End User Services to you, including through interest-based advertising, and to track the efficacy of such ads. We do not transfer your Personal Data to third parties in exchange for payment, but we may provide your data to third-party partners, such as advertising partners, analytics providers, and social networks, who assist us in advertising our Services to you. Learn more.

• More. For further information about ways we may use and share End Users' Personal Data, please see the More ways we collect, use, and share Personal Data section below.

1.2 End Customers

Stripe provides various Business Services to our Business Users, which include processing in-person or online payments or payouts for those Business Users. When acting as a service provider—also referred to as a Data Processor—for a Business User, we process End Customer Personal Data in accordance with our agreement with the Business User and the Business User's lawful instructions. This happens, for example, when we process a payment for a Business User because you purchased a product from them, or when the Business User asks us to send you funds.

Business Users are responsible for ensuring that the privacy rights of their End Customers are respected, including obtaining appropriate consents and making disclosures about their own data collection and use associated with their products and services. If you're an End Customer, please refer to the privacy policy of the Business User you're doing business with for its privacy practices, choices, and controls.

We provide more comprehensive information about our collection, use, and sharing of End Customer Personal Data in our Privacy Center, including the legal bases we rely on for processing your Personal Data.

a. Personal Data we collect about End Customers

• Transaction Data. If you're an End Customer making payments to, receiving refunds or payments from, initiating a purchase or donation, or otherwise transacting with our Business User, whether in-person or online, we receive your Transaction Data. We may also receive your transaction history with the Business User. Learn More. Additionally, we may collect information entered into a checkout form even if you opt not to complete the form or transaction with the Business User. Learn More. A Business User who uses Stripe’s Terminal Service to provide its goods or services to End Customers may use the Terminal Service to collect End Customer Personal Data (like your name, email, phone number, address, signature, or age) in accordance with its own privacy policy.

• Identity/Verification Information. Stripe provides a verification and fraud prevention Service that our Business Users can use to verify Personal Data about you, such as your authorization to use a particular payment method. During the process, you’d be asked to share with us certain Personal Data (like your government ID and selfie for biometric verification, Personal Data you input, or Personal Data that is apparent from the physical payment method like a credit card image). To protect against fraud and determine if somebody is trying to impersonate you, we may cross-verify this data with information about you that we've collected from Business Users, Financial Partners, business affiliates, identity verification services, publicly available sources, and other third party service providers and sources. Learn More.

• More. For further information about other types of Personal Data that we may collect about End Customers, including about your online activity, please see the More ways we collect, use, and share Personal Data section below.

b. How we use and share Personal Data of End Customers

To provide our Business Services to our Business Users, we use and share End Customers' Personal Data with them. Where allowed, we also use End Customers' Personal Data for Stripe’s own purposes such as enhancing security, improving and offering our Business Services, and preventing fraud, loss, and other damages, as described further below.

• Payment processing and accounting. We use your Transaction Data to deliver Payment-related Business Services to Business Users — including online payment transactions processing, sales tax calculation, and invoice, bill, and dispute handling — and to help them determine their revenue, settle their bills, and execute accounting tasks. Learn More. We may also use your Personal Data to provide and improve our Business Services.

• During payment transactions, your Personal Data is shared with various entities in connection with your transaction. As a service provider or data processor, we share Personal Data to enable transactions as directed by Business Users. For instance, when you choose a payment method for your transaction, we may share your Transaction Data with your bank or other payment method provider, including as necessary to authenticate you, Learn More, process your transaction, prevent fraud, and handle disputes. The Business User you choose to do business with also receives Transaction Data and might share the data with others. Please review your merchant’s, bank’s, and payment method provider’s privacy policies for more information about how they use and share your Personal Data.

• Financial services. Certain Business Users leverage our Services to offer financial services to you via Stripe or our Financial Partners. For example, a Business User may issue a card product with which you can purchase goods and services. Such cards could carry the brand of Stripe, the bank partner, and/or the Business User. In addition to any Transaction Data we may generate or receive when these cards are used for purchases, we also collect and use your Personal Data to provide and manage these products, including assisting our Business Users in preventing misuse of the cards. Please review the privacy policies of the Business User and, if applicable, our bank partners associated with the financial service (the brands of which may be shown on the card) for more information.

• Identity/Verification services. We use Personal Data about your identity to perform verification services for Stripe or for the Business Users that you are transacting with, to prevent fraud, and to enhance security. For these purposes we may use Personal Data you provide directly or Personal Data we obtain from our service providers, including for phone verification. Learn More. If you provide a selfie along with an image of your identity document, we may employ biometric technology to compare and calculate whether they match and verify your identity. Learn More.

• Fraud detection and loss prevention. We use your Personal Data collected across our Services to detect and prevent losses for you, us, our Business Users, and Financial Partners. We may provide Business Users and Financial Partners, including those using our fraud prevention-related Business Services, with your Personal Data (including your attempted transactions) to help them assess the fraud or loss risk associated with a transaction. Learn more about how we may use technology to assess the fraud risk associated with an attempted transaction and what information we share with Business Users and Financial Partners here and here.

• Our Business Users (and their authorized third parties). We share End Customers' Personal Data with their respective Business Users and parties directly authorized by those Business Users to receive such data. Here are common examples of such sharing:

  • When a Business User instructs Stripe to provide another Business User with access to its Stripe account, including data related to its End Customers, via Stripe Connect.
    
  • Sharing information that you have provided to us with a Business User so that we can send payments to you on behalf of that Business User.
    
  • Sharing information, documents, or images provided by an End Customer with a Business User when the latter uses Stripe Identity, our identity verification Service, to verify the identity of the End Customer. 
    

• The Business Users you choose to do business with may further share your Personal Data with third parties (like additional third party service providers other than Stripe). Please review the Business User’s privacy policy for more information.

• Advertising by Business Users. If you initiate a purchasing process with a Business User, the Business User receives your Personal Data from us in connection with our provision of Services even if you don't finish your purchase. The Business User may use your Personal Data to market and advertise their products or services, subject to the terms of their privacy policy. Please review the Business User’s privacy policy for more information, including your rights to stop their use of your Personal Data for marketing purposes.

• More. For further information about additional ways by which we may use and share End Customers' Personal Data, please see the More ways we collect, use, and share Personal Data section below.

1.3 Representatives

We collect, use, and share Personal Data from Representatives of Business Users (for example, business owners) to provide our Business Services. For more information about how we collect, use, and share Personal Data from Representatives, as well as the legal bases we rely on for processing such Personal Data, please visit our Privacy Center.

a. Personal Data we collect about Representatives 

• Registration and contact information. When you register for a Stripe account for a Business User (including incorporation of a Business), we collect your name and login credentials. If you register for or attend an event organized by Stripe or sign up to receive Stripe communications, we collect your registration and profile data. As a Representative, we may collect your Personal Data from third parties, including data providers, to advertise, market, and communicate with you as detailed further in the More ways we collect, use, and share Personal Data section below. We may also link a location with you to tailor the Services or information effectively to your needs. Learn More.

• Identification Information. As a current or potential Business User, an owner of a Business User, or a shareholder, officer, or director of a Business User, we need your contact details, such as name, postal address, telephone number, and email address, to fulfill our Financial Partner and regulatory requirements, verify your identity, and prevent fraudulent activities and harm to the Stripe platform. We collect your Personal Data, such as ownership interest in the Business User, date of birth, government-issued identity documents, and associated identifiers, as well as any history of fraud or misuse, directly from you and/or from publicly available sources, third parties such as credit bureaus and via the Services we provide. Learn More. You may also choose to provide us with bank account information.

• More. For further information about other types of Personal Data that we may collect about Representatives, including your online activity, please see the More ways we collect, use, and share Personal Data section below.

b. How we use and share Personal Data of Representatives 

We typically use the Personal Data of Representatives to provide the Business Services to the corresponding Business Users. The ways we use and share this data are further described below.

• Business Services. We use and share Representatives’ Personal Data with Business Users to provide the Services requested by you or the Business User you represent.

• In some instances, we may have to submit your Personal Data to a government entity to provide our Business Services, for purposes such as the incorporation of a business, or calculating and paying applicable sales tax. For our tax-related Business Services, we may use your Personal Data to prepare tax documents and file taxes on behalf of the Business User you represent. For our Atlas business incorporation Services, we may use your Personal Data to submit forms to the IRS on your behalf and file documents with other government authorities, such as articles of incorporation in your state of incorporation.

• We share Representatives’ Personal Data with parties authorized by the corresponding Business User, such as Financial Partners servicing a financial product, or third party apps or services the Business User chooses to use alongside our Business Services. Here are common examples of such sharing:

  • Payment method providers, like Visa or WeChat Pay, require information about Business Users and their Representatives who accept their payment methods. This information is typically required during the onboarding process or for processing transactions and handling disputes for these Business Users. Learn More.
    
  • A Business User may authorize Stripe to share your Personal Data with other Business Users to facilitate the provision of Services through Stripe Connect.
    

• The use of Personal Data by a third party authorized by a Business User is subject to the third party’s privacy policy.

• If you are a Business User who has chosen a name that includes Personal Data (for example, a sole proprietorship or family name in a company name), we will use and share such information for the provision of our Services in the same way we do with any company name. This may include, for example, displaying it on receipts and other transaction-identifying descriptions.

• Fraud detection and loss prevention. We use Representatives’ Personal Data to identify and manage risks that our Business Services might be used for fraudulent activities causing losses to Stripe, End Users, End Customers, Business Users, Financial Partners, and others. We also use information about you obtained from publicly available sources, third parties like credit bureaus and from our Services to address such risks, including to identify patterns of misuse and monitor for terms of service violations. Stripe may share Representatives' Personal Data with Business Users, our Financial Partners, and third party service providers, including phone verification providers, Learn More, to verify the information provided by you and identify risk indicators. Learn More. We also use and share Representatives' Personal Data to conduct due diligence, including conducting anti-money laundering and sanctions screening in accordance with applicable law.

• Advertising. Where permitted by applicable law, and where required with your consent, we use and share Representatives’ Personal Data with third parties, including Partners, so we can advertise and market our Services and Partner integrations. Subject to applicable law, including any consent requirements, we may advertise through interest-based advertising and track the efficacy of such ads. See our Cookie Policy. We do not transfer your Personal Data to third parties in exchange for payment. However, we may provide your data to third party partners, like advertising partners, analytics providers, and social networks, who assist us in advertising our Services. Learn more. We may also use your Personal Data, including your Stripe account activity, to evaluate your eligibility for and offer you Business Services or promote existing Business Services. Learn more.

• More. For further information about additional ways by which we may use and share Representatives’ Personal Data, please see the More ways we collect, use, and share Personal Data section below.

1.4 Visitors

We collect, use, and share the Personal Data of Visitors. More details about how we collect, use, and share Visitors’ Personal Data, along with the legal bases we rely on for processing such Personal Data, can be found in our Privacy Center.

a. Personal Data we collect about Visitors

When you browse our Sites, we receive your Personal Data, either provided directly by you or collected through our use of cookies and similar technologies. See our Cookie Policy for more information. If you opt to complete a form on the Site or third party websites where our advertisements are displayed (like LinkedIn or Facebook), we collect the information you included in the form. This may include your contact information and other information pertaining to your questions about our Services. We may also associate a location with your visit. Learn More.

• More. Further details about other types of Personal Data that we may collect from Visitors, including your online activity, can be found in the More ways we collect, use, and share Personal Data section below.
  

b. How we use and share Personal Data of Visitors

• Personalization. We use the data we collect about you using cookies and similar technologies to measure engagement with the content on the Sites, improve relevancy and navigation, customize your experience (such as language preference and region-specific content), and curate content about Stripe and our Services that's tailored to you. For instance, as not all of our Services are available globally, we may customize our responses based on your region.

• Advertising. Where permitted by applicable law, and where required with your consent, we use and share Visitors’ Personal Data with third parties, including Partners, so we can advertise and market our Services and Partner integrations. Subject to applicable law, including any consent requirements, we may advertise through interest-based advertising and track the efficacy of such ads. See our Cookie Policy. We do not transfer your Personal Data to third parties in exchange for payment, but we may provide your data to third party partners, like advertising partners, analytics providers, and social networks, who assist us in advertising our Services. Learn more.

• Engagement. As you interact with our Sites, we use the information we collect about and through your devices to provide opportunities for further interactions, such as discussions about Services or interactions with chatbots, to address your questions.

• More. For more information about additional ways we may use and share Visitors’ Personal Data, please see the More ways we collect, use, and share Personal Data section below.

2. More ways we collect, use, and share Personal Data

In addition to the ways described above, we also process your Personal Data as follows:

a. Collection of Personal Data

• Online Activity. Depending on the Service used and how our Business Services are implemented by the Business Users, we may collect information related to:

  • The devices and browsers you use across our Sites and third party websites, apps, and other online services (“Third Party Sites”).
    
  • Usage data associated with those devices and browsers and your engagement with our Services, including data elements like IP address, plug-ins, language preference, time spent on Sites and Third Party Sites, pages visited, links clicked, payment methods used, and the pages that led you to our Sites and Third Party Sites. We also collect activity indicators, such as mouse activity indicators, to help us detect fraud. Learn More. See also our Cookie Policy.
    

• Communication and Engagement Information. We also collect information you choose to share with us through various channels, such as support tickets, emails, or social media. If you respond to emails or surveys from Stripe, we collect your email address, name, and any other data you opt to include in your email or responses. If you engage with us over the phone, we collect your phone number and any other information you might provide during the call. Calls with Stripe or Stripe representatives may be recorded. Learn More. Additionally, we collect your engagement data, like your registration for, attendance at, or viewing of Stripe events and any other interactions with Stripe personnel.

• Forums and Discussion Groups. If our Sites allow posting of content, we collect Personal Data that you provide in connection with the post.

b. Use of Personal Data. 

Besides the use of Personal Data described above, we use Personal Data in the ways listed below:

• Analyzing, Improving, and Developing our Services. We collect and process Personal Data throughout our various Services, whether you are an End User, End Customer, Representative, or Visitor, to improve our Services, develop new Services, and support our efforts to make our Services more efficient, relevant, and useful to you. Learn More.  We may use Personal Data to generate aggregate and statistical information to understand and explain how our Services are used.  Examples of how we use Personal Data to analyze, improve, and develop our products and services include:

  • Using analytics on our Sites, including as described in our Cookie Policy, to help us understand your use of our Sites and Services and diagnose technical issues. 
    
  • Training machine learning models to power our Services and protect against fraud and other harm.
    
  • Analyzing and drawing inferences from Transaction Data to reduce costs, fraud, and disputes and increase authentication and authorization rates for Stripe and our Business Users. 
    

• Communications. We use the contact information we have about you to deliver our Services, which may involve sending codes via SMS for your authentication. Learn More. If you are an End User, Representative, or Visitor, we may communicate with you using the contact information we have about you to provide information about our Services and our affiliates’ services, invite you to participate in our events, surveys, or user research, or otherwise communicate with you for marketing purposes, in compliance with applicable law, including any consent or opt-out requirements. For example, when you provide your contact information to us or when we collect your business contact details through participation at trade shows or other events, we may use this data to follow up with you regarding an event, provide information requested about our Services, and include you in our marketing information campaigns. Where permitted under applicable law, we may record our calls with you to provide our Services, comply with our legal obligations, perform research and quality assurance, and for training purposes.

• Social Media and Promotions. If you opt to submit Personal Data to engage in an offer, program, or promotion, we use the Personal Data you provide to manage the offer, program, or promotion. We also use the Personal Data you provide, along with the Personal Data you make available on social media platforms, for marketing purposes, unless we are not permitted to do so.

• Fraud Prevention and Security. We collect and use Personal Data to help us identify and manage activities that could be fraudulent or harmful across our Services, enable our fraud detection Business Services, and secure our Services and transactions against unauthorized access, use, alteration or misappropriation of Personal Data, information, and funds. As part of the fraud prevention, detection, security monitoring, and compliance efforts for Stripe and its Business Users, we collect information from publicly available sources, third parties (such as credit bureaus), and via the Services we offer. In some instances, we may also collect information about you directly from you, or from our Business Users, Financial Partners, and other third parties for the same purposes. Furthermore, to protect our Services, we may receive details such as IP addresses and other identifying data about potential security threats from third parties. Learn More. Such information helps us verify identities, conduct credit checks where lawfully permitted, and prevent fraud. Additionally, we might use technology to evaluate the potential risk of fraud associated with individuals seeking to procure our Business Services or arising from attempted transactions by an End Customer or End User with our Business Users or Financial Partners.

• Compliance with Legal Obligations. We use Personal Data to meet our contractual and legal obligations related to anti-money laundering, Know-Your-Customer ("KYC") laws, anti-terrorism activities, safeguarding vulnerable customers, export control, and prohibition of doing business with restricted persons or in certain business fields, among other legal obligations. For example, we may monitor transaction patterns and other online signals and use those insights to identify fraud, money laundering, and other harmful activity that could affect Stripe, our Financial Partners, End Users, Business Users and others. Learn More. Safety, security, and compliance of our Services are key priorities for us, and collecting and using Personal Data is crucial to this effort.

• Minors. Our Services are not directed to children under the age of 13, and we request that they do not provide Personal Data to seek Services directly from Stripe. In certain jurisdictions, we may impose higher age limits as required by applicable law.

c. Sharing of Personal Data. 

Besides the sharing of Personal Data described above, we share Personal Data in the ways listed below:

• Stripe Affiliates. We share Personal Data with other Stripe-affiliated entities for purposes identified in this Policy.

• Service Providers or Processors. In order to provide, communicate, market, analyze, and advertise our Services, we depend on service providers. These providers offer critical services such as providing cloud infrastructure, conducting analytics for the assessment of the speed, accuracy, and/or security of our Services, verifying identities, identifying potentially harmful activity, and providing customer service and audit functions. We authorize these service providers to use or disclose the Personal Data we make available to them to perform services on our behalf and to comply with relevant legal obligations. We require these service providers to contractually commit to security and confidentiality obligations for the Personal Data they process on our behalf. The majority of our service providers are based in the European Union, the United States of America, and India. Learn More.

• Financial Partners. We share Personal Data with certain Financial Partners to provide Services to Business Users and offer certain Services in conjunction with these Financial Partners. For instance, we may share certain Personal Data, such as payment processing volume, loan repayment data, and Representative contact information, with institutional investors and lenders who purchase loan receivables or provide financing related to Stripe Capital.  Learn More.

• Others with Consent. In some situations, we may not offer a service, but instead refer you to others (like professional service firms that we partner with to deliver the Atlas Service). In these instances, we will disclose the identity of the third party and the information to be shared with them, and seek your consent to share the information.

• Corporate Transactions. If we enter or intend to enter a transaction that modifies the structure of our business, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or part of our business, assets, or stock, we may share Personal Data with third parties in connection with such transaction. Any other entity that buys us or part of our business will have the right to continue to use your Personal Data, subject to the terms of this Policy.

• Compliance and Harm Prevention. We share Personal Data when we believe it is necessary to comply with applicable law; to abide by rules imposed by Financial Partners in connection with the use of their payment method; to enforce our contractual rights; to secure and protect the Services, rights, privacy, safety, and property of Stripe, you, and others, including against malicious or fraudulent activity; and to respond to valid legal requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include authorities outside your country of residence.

3. 個人データの取り扱いの法的根拠

EU の一般データ保護規則 (GDPR) およびその他の適用されるデータ保護法に従い、Stripe は、個人データの取り扱いに関して数多くの法的根拠に依拠しています。もっと知る。一部の法域においては、以下の地域固有の規定のセクションに概要を記載する、その他の法的根拠が存在する場合があります。

• a. 契約上・契約締結前の取引関係。Stripe は、取引先候補であるビジネスユーザーおよびエンドユーザーと取引関係を結び、これらの当事者との間における個々の契約上の義務を履行することを目的として、個人データを処理します。これらの処理アクティビティーには以下が含まれます。

  • Stripe アカウントや Stripe アカウントの認証情報の作成および管理 (当社のサービスの利用開始や利用拡大の申請に対する評価など)。
    
  • Stripe Checkout アカウントの作成および管理。
    
  • 会計、監査、および請求処理。
    
  • 決済処理および関連アクティビティー。これには、不正利用の検出、損失防止、取引の最適化、決済に関する通信、関連する顧客サービス活動が含まれます。
    

• b. 法令遵守。Stripe は、不正利用の監視、防止、検出に関する義務のほか、マネーロンダリング防止 (AML)・本人確認 (KYC) に関する規制に基づく義務など、違法・不法な活動の特定と報告に関連する法令、および財務報告に関する義務を遵守するために、個人や団体の本人確認を行う目的で個人データを取り扱います。たとえば、Stripe は、マネーロンダリングや金融犯罪の防止を目的に設けられている規制を遵守するため、ビジネスユーザーの身元情報を記録して身元確認を行うことを義務付けられる場合があります。これらの法的義務により、Stripe は、第三者に対して Stripe の法令遵守状況を報告し、第三者による検証監査を受けることを要求される場合があります。

• c. 正当な利益。適用法で認められている場合、Stripe は、正当なビジネス上の利益を法的根拠として個人データを取り扱います。お客様のデータを取り扱う正当な利益があるとみなされるビジネス目的には、たとえば、以下に掲げるようなものがあります。

  • 不正利用や不正な支払い取引の検出、監視、防止。
    
  • 最終顧客、エンドユーザー、ビジネスユーザー、金融パートナー、および Stripe にとっての金銭的損失、請求、賠償責任その他の損害の抑制。
    
  • Stripe の新たなサービスの適格性判断および提案 (もっと知る);。
    
  • 問い合わせへの対応、サービスに関する告知の送付、顧客サポートの提供。
    
  • サービスの信頼性の向上を含む、本サービス、システム、ツールの販売促進、分析、変更、改善や、新規のプロダクトおよびサービスの開発。
    
  • サイトおよびサービスの管理、運営、向上 (その有効性の把握や Stripe のデジタル資産の最適化を通じて行うもの)。
    
  • サービスや関連する改善点の分析および周知。
    
  • Stripe の事業の運営と保護、ならびに Stripe の事業に関する十分な情報に基づく意思決定および業績報告を可能にするビジネスインテリジェンスの集計分析および開発。
    
  • Stripe に代わってサービスを提供する第三者のサービスプロバイダー、および Stripe の事業の運営・改善を支援するビジネスパートナーとの個人データの共有 (もっと知る);。
    
  • Stripe とサービスの全体のネットワーク・情報のセキュリティーの確保。
    
  • Stripe の関連会社間での個人データの共有。
    

• d. 同意。Stripe は、お客様とのやり取り、および Link、Financial Connections、Atlas、Identity などのサービスの提供に関して、個人データの収集と処理について、承諾または明示的な同意に依拠する場合があります。Stripe がお客様の同意に基づいて個人データを取り扱う場合、お客様は、その同意をいつでも取り消す権利を有します。ただし、同意が取り消された場合でも、それ以前に同意に基づいて行われた取り扱いの合法性に影響を与えることはありません。

• e. 実質的な公共の利益。Stripe は、実質的な公共の利益を理由に必要とされ、かつ適用法に反することにならない場合 (重要な公的地位を有する者について確認を行う場合など)、GDPR で定義されている特別な個人データ項目を取り扱うことがあります。また、AML や KYC の義務の遵守を目的として制裁措置スクリーニングを実施する場合など、そのような取り扱いが適用法の下で認められている場合には、前科や犯罪歴に関連する個人データを取り扱うことがあります。

• f. その他の有効な法的根拠。当社は、特定の法域で適用される法律に基づき認められる他の有効な法的根拠に従って、個人データをさらに処理する場合があります。詳細は以下の「地域固有の規定」のセクションをご覧ください。

4. お客様の権利と選択肢

お客様の所在地に応じて、また、適用法に従い、お客様は Stripe による個人データの収集、使用、開示に関して、次のような選択権を有する場合があります。

a. Stripe からの電子通信の受信のオプトアウト

Stripe からのマーケティング関連のメールの受信の停止を希望される場合は、そのようなメールに表示されている配信停止リンクをクリックするか、こちらに記載されている方法によってオプトアウトできます。オプトアウトのご希望を受けた場合、Stripe は実務上合理的に可能な限り速やかに対応するよう努めます。ただし、マーケティング関連メールの受信をオプトアウトした場合でも、Stripe はお客様に提供しているサービスに関する通知 (サポートや重要な法的通知など) を行う権利を留保していること、およびビジネスユーザーからのメッセージが引き続き届いたり、ビジネスユーザーからの指示に基づいて Stripe がその代理でお客様にメッセージを送付したりする場合があることにご注意ください。

b. データ保護に関するお客様の権利

お客様の所在地に応じて、また、適用法に従い、お客様は Stripe がデータ管理者として処理するお客様の個人データに関して、以下の権利を有する場合があります。

• Stripe によるお客様に関連する個人データの取り扱いの有無、当社が処理した個人データのカテゴリー、当社がお客様の個人データを共有した第三者または第三者のカテゴリーについて、確認を求める権利。

• Stripe が処理したお客様の個人データへのアクセスを求める権利 (もっと知る);。

• 不正確なデータ、不完全なデータ、または古くなった個人データを Stripe が訂正または更新するよう求める権利。

• 法律の規定に従った状況で、Stripe から個人データを消去するよう求める権利 (もっと知る);

• お客様からの要請 (Stripe が個人データを更新するよう求める要請など) について Stripe が検討している間など、特定の状況下で、Stripe が個人データの使用を制限するよう別途求める権利。

• 技術的に実行可能な場合に、Stripe が保有するお客様の個人データを他の企業に移転するよう求める権利。

• 個人データがお客様からの以前の同意に基づいて取り扱われている場合に、その同意を取り消す権利。

• 個人データの取り扱いが Stripe の正当な利益に基づいている場合に、個人データの取り扱いに異議を唱える権利。お客様からこのような異議申し立てを受けた場合、やむを得ない正当な理由があるか、法律に基づく理由のためその取り扱いが必要であるときを除き、Stripe は個人データの取り扱いを中止します (もっと知る); 

• これらの権利を行使したことで不当な扱いを受けない権利。 

• お客様の権利に関する Stripe の判断に対し、Stripe のデータ保護責任者 (以下「DPO」) (dpo@stripe.com) または関連する規制当局宛てに異議を唱える権利。

適用法によっては、お客様は個人データに関して他にも権利を有する場合があります。例として、以下の「地域固有の規定」のセクション内の「アメリカ」の項をご覧ください。

c. データ保護に関する権利の行使方法 

Stripe がデータ管理者として取り扱う個人データに関連するデータ保護についてお客様の権利を行使される場合は、プライバシーセンターをご確認いただくか、以下の概要説明に従って Stripe までお問い合わせください。Stripe がデータ処理業者として取り扱う個人データについてお客様の権利を行使される場合は、関連するデータ管理者 (ビジネスユーザー) にお問い合わせください。Stripe がデータ処理業者として取り扱う個人データについてお客様からお問い合わせを受けた場合は、当社が特定できる範囲で、関連するデータ管理者をお客様に紹介します。

5. セキュリティーとデータ保持

Stripe は、個人データの取り扱いに伴うリスクに応じた適切な水準の保護措置を講じられるよう、合理的な努力を払います。Stripe では、本ポリシーの対象となる個人データの不正なアクセス、破壊、喪失、改変、乱用を防止するための組織的、技術的および管理上の措置を設けています。もっと知る。しかし、残念ながら、100% の安全性が保証されているデータ転送システムや保存システムはありません。

Stripe におけるお客様の個人データの保護にご協力ください。Stripe アカウントをお持ちの場合は、強力なパスワードを使用し、不正利用に対してパスワードを保護し、他のサービスやアカウントで使用しているログイン認証情報と同じものを Stripe アカウントで使用するのを避けることで、個人データを保護することができます。Stripe との間のやりとりが安全でなくなったと思われる場合 (たとえば、Stripe アカウントのセキュリティーが侵害されたと思われる場合) は、直ちに Stripe にご連絡ください。

Stripe は、お客様もしくは Stripe のビジネスユーザーに対してサービスの提供を継続する限り、またはサービスの提供を継続することが合理的に見込まれる期間にわたって、お客様の個人データを保持します。Stripe は、お客様もしくはお客様の取引先ビジネスユーザーに対するサービスの直接提供を中止した場合であっても、また、お客様が Stripe アカウントを閉鎖するかビジネスユーザーとの取引を完了した場合であっても、以下のような目的でお客様の個人データを保持することがあります。

• 法的義務や規制上の義務を遵守するため。

• 不正利用の監視、検出、防止に関する業務を遂行可能にするため。

• 税務、会計、および財務報告上の義務に従うため。これには、Stripe が金融パートナーとの契約により個人データの保持を義務付けられている場合 (および、お客様が利用した決済手段により個人データの保持が義務付けられている場合) などが含まれます。

Stripe は個人データを保持する場合、適用法上の期間制限および記録保持義務に従って保持します。もっと知る。

6. 国外へのデータ移転

グローバル企業である Stripe は、お客様の個人データを、アメリカなどお客様がお住まいの国以外の国に移転することが必要となる場合があります。これらの国では、お客様がお住まいの国とはデータ保護規制が異なる可能性があります。データを国外に移転する場合、このような移転に関連して適用されるデータ保護法を遵守するための措置を講じます。Stripe は、当局 (法執行機関、治安当局など) から正当な要請を受け、個人データの開示を義務付けられる場合があります。もっと知る。

欧州経済領域 (EEA)、イギリスまたはスイスにお住まいのお客様は、プライバシーセンターで詳細をご確認ください。データ移転の仕組みの利用が適用法により義務付けられている場合、Stripe は以下の 1 つ以上を利用します。

• 適用法に基づく個人データの保護について十分性認定を受けている国や受領者への移転。  

• 欧州委員会が採択した EU 標準契約条項、および情報コミッショナー事務局が発行したイギリスの国際データ移転に関する補遺の使用。関連する標準契約条項の写しを入手することができます。もっと知る。

• 適用法に従って利用できるその他の法的手段。 

Stripe, Inc. は、EU・アメリカ間データプライバシーフレームワーク (「EU・アメリカ間 DPF」)、EU・アメリカ間 DPF のイギリスへの拡張、およびスイス・アメリカ間データプライバシーフレームワーク (アメリカ商務省が定めるもの) に適宜準拠します。もっと知る。

このプライバシーポリシーに記載されている Stripe によるプライバシーの取り扱いは、越境プライバシールール (「CBPR」) システムおよび処理者向けプライバシー認証 (「PRP」) システムに準拠しています。これらのシステムは、参加する経済圏間で転送される個人データを確実に保護することを目的とした組織向けの枠組みです。適用法によって CBPR や PRP が有効な移転の仕組みと認められている場合、Stripe は、Stripe が取得した CBPR / PRP 認証に従って個人データを移転します。この枠組みについて、詳細はこちらとこちらをご覧ください。当社が十分に対応していないプライバシーまたはデータ使用についてご不明な点や懸念事項がございましたら、アメリカに拠点を置く当社の第三者の紛争解決プロバイダー https://feedback-form.truste.com/watchdog/request にお問い合わせください。手数料はかかりません。当社の認証のステータスを確認するには、こちら (CBPR) とこちら (PRP) をご覧ください。

7. 改訂と告知

Stripe は、サービスの新規追加、プライバシーの取り扱いの変更、関連法の改正などを反映するため、本ポリシーを随時変更することがあります。本ポリシーの冒頭にある「最終更新日」には、本ポリシーが最後に実質的に改訂された日付が記載されています。本ポリシーの改訂は、改訂後のポリシーをサービスに掲載した時点または改訂を知らせるその他の通知を行った時点 (法令で義務付けられる場合) のうち、いずれか遅い方の時点で効力を生じます。

Stripe は、本ポリシーや当社が収集する個人データに関する情報や注意を Web サイトに掲載することがあります。また、お客様がエンドユーザーまたは代表者である場合は、Stripe ダッシュボードのほか、Stripe アカウントに登録されているメールアドレスや住所への送付により、お客様への情報提供や注意喚起を行う場合があります。

8. Jurisdiction-specific provisions

• Australia. “Personal Data” includes “personal information” as defined under applicable privacy laws in Australia, including the Privacy Act 1988 (Cth) as amended from time to time. 

  • If we use personal information to make automated decisions that could reasonably be expected to significantly affect your rights or interests, we will provide the legally required information and transparency via our Privacy Center, and/or on a case by case basis. 
    
  • If you are an Australian resident and dissatisfied with our handling of any complaint you raise under this Policy, you may consider contacting the Office of the Australian Information Commissioner.
    

• Brazil. You may exercise your rights by contacting our DPO Adi Gilad at dpo@stripe.com. Brazilian residents, for whom the Lei Geral de Proteção de Dados Pessoais (“LGPD”) applies, have rights set forth in Article 18 of the LGPD.  If the LGPD is applicable to the processing of your Personal Data, you may have the right to:

  • Confirm the existence of the data processing;
    
  • Access your Personal Data;
    
  • Correct incomplete, inaccurate or outdated data;
    
  • Anonymize, block, or delete data that is unnecessary, excessive or processed in violation of the LGPD;
    
  • Transfer your data to another service or product provider;
    
  • Delete data processed with your consent;
    
  • Obtain information about the public or private entities with which Stripe has shared your Personal Data;
    
  • Obtain information about how to and the consequences of refusing consent; and
    
  • Withdraw consent.
    

• Canada. As used in this Policy, “applicable law” includes the Federal Personal Information Protection and Electronic Documents Act (“PIPEDA”), the Personal Information Protection Act, SBC 2003 c 63, in British Columbia, the Personal Information Protection Act, SA 2003 c P-6.5, in Alberta, and the Act Respecting the Protection of Personal Information in the Private Sector, CQLR c P-39-1 (“Quebec Private Sector Act”), in Quebec. Learn more.  “Personal Data” includes “personal information” as defined under those laws.

  • Stripe’s Chief Privacy Officer is the person in charge of personal information, including under the Quebec Private Sector Act.  You may contact them via email at privacy\@stripe.com.  When Stripe collects Personal Data belonging to Canadian (including Quebec) residents, it transfers that data to data centers in the United States.  When Stripe relies on service providers to process Personal Data as described herein, those service providers may also be located outside of Canada or Quebec.
    
  • You have the right to request access or rectification of the Personal Data Stripe holds related to you or to withdraw any consent given to the processing of such personal data.  You may exercise those rights by contacting Stripe’s Chief Privacy Officer at privacy\@stripe.com.  If you are an End Customer, you should contact the Business User with which you transacted to exercise your rights.
    

• EEA and UK. You may exercise your rights by contacting our DPO at dpo@stripe.com. If you are a resident of the EEA or the Stripe entity accountable for your Personal data is otherwise subject to the GDPR, and you believe our processing of your information contradicts the GDPR, you may direct your questions or complaints to the Irish Data Protection Commission. If you are a resident of the UK, direct your questions or concerns to the UK Information Commissioner’s Office. You also have additional rights under the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Learn More.

• India. In this Policy, “applicable law” includes the Digital Personal Data Protection Act (“DPDPA”) once the DPDPA enters into effect. Further, the term “data controller” includes “data fiduciaries,” and the term “data subject” includes “data principal,” both as defined in the DPDPA.

  • In some cases, and as permitted under the DPDPA, we may rely on “legitimate use” as a legal basis. For example, we might do so when you voluntarily provide your Personal Data to us. Where we are required to obtain your explicit and informed consent, we will do so on a case by case basis. “Consent Managers” as defined under the DPDPA may submit a request to revoke or provide consent using the methods described in the Contact Us section below, or as set out in the following paragraph, or via other means made available by Stripe in the future. We may ask for proof of authorization and identity before processing such a request.
    
  • You have the right to contact Stripe to nominate another individual, who may, in the event of your death or incapacity, exercise your rights under this Privacy Policy and under the DPDPA and implementing regulations.
    
  • In certain cases, you may be asked to consent to the collection and processing of your Aadhaar number by Stripe India Private Limited and/or its third party verification partner(s). The purpose of this collection is to facilitate the identification verification process as required under applicable laws. Your provision of Aadhaar details is purely voluntary, and you may provide other identification documents as may be accepted by us from time to time. You will not be denied service merely for not submitting Aadhaar details.
    
  • If you have any questions or complaints regarding the processing of your Personal Data in India, or if you want to receive this Policy or communicate with us about privacy in one of India’s official languages, please contact our Nodal and Grievance Officer. Learn More. Alternatively, you may contact our DPO at dpo@stripe.com. If we are unable to address your complaint or grievance, you have the right to escalate the matter to the Data Protection Board of India.
    

• Indonesia. In this Policy, “applicable law” includes Law No. 11 of 2008 as amended by Law No. 19 of 2016 on Electronic Information and Transactions, Government Regulation No. 71 of 2019 on the Implementation of Electronic Systems and Transactions, and Minister of Communication and Informatics Regulation No. 20 of 2016 on Personal Data Protection in Electronic Systems, and from September 2024, Law No. 27 of 2022 concerning Personal Data Protection (“PDP Law”). If you have any questions or complaints about this Policy, please contact our DPO at dpo@stripe.com.

• Japan. In this Policy, “applicable law” includes the Act on the Protection of Personal Information (“APPI”). When we transfer Personal Data of data subjects in Japan to jurisdictions not recognized as ‘adequate’ by the Personal Information Protection Commission, we enter into written agreements with any third parties located outside of Japan. These written agreements provide rights and obligations equivalent to those provided under the Japanese Act on the Protection of Personal Information. For more information on how we ensure that third parties protect your data and where your data is located, please see above or contact us as described below. For a description of foreign systems and frameworks that may affect the implementation of equivalent measures by the third party, see here. In some cases, and as permitted under the APPI, we may rely on “public interest” as a legal basis, such as fraud detection and loss prevention.

• Malaysia. If you have any questions or complaints about this Policy, please contact our DPO at dpo@stripe.com.

• Singapore. In this Policy, “applicable law” includes the Personal Data Protection Act 2012 (“PDPA”) (No. 26 of 2012) as amended from time to time. In some cases, and as permitted under the PDPA, we may rely on “deemed consent” as a legal basis. For example, we do so when you voluntarily provide your personal data to us. If you have any questions or complaints about this Policy, please contact our DPO at dpo@stripe.com.

• Switzerland. In this Policy, “applicable law” includes the Swiss Federal Act on Data Protection (“FADP”), as revised. To exercise your rights under the FADP, please contact our DPO at dpo@stripe.com. You may also have additional rights under the Swiss-U.S. Data Privacy Framework. Learn More.

• Thailand. In this Policy, “applicable law” includes the Personal Data Protection Act 2019 (“PDPA”). If we rely on certain legal bases (such as “legal obligation” or “contractual necessity” and you do not provide us with your Personal Data, we may not be able to lawfully provide you services. If you have any questions or complaints about this Policy, please contact our DPO at dpo@stripe.com. Where required, we have put in place appropriate safeguards for the cross-border transfer of Personal Data from Thailand, including the EU Standard Contractual Clauses as adapted for Thailand data transfers in accordance with the Notification of the Personal Data Protection Committee on Criteria for the Protection of Personal Data Sent or Transferred to a Foreign Country Pursuant to Section 29 of the Personal Data Protection Act, B.E. 2562 B.E. 2566 (2023).

• United States. If you are a consumer located in the United States (“US”), we process your personal information in accordance with US federal and state privacy laws. For additional details, please review the information below and see our additional U.S. Privacy Disclosures here. Stripe uses cookies, including advertising cookies, as described in our Cookie Policy.

  • Your Rights and Choices. As a US consumer and subject to certain limitations under US privacy laws, you may have choices regarding our use and disclosure of your Personal Data.  In addition to the above rights, you may also have the rights listed in this section. Please see our Privacy Center to learn more about data subject rights metrics and learn more about the laws under which these rights may apply. 
    
    • Exercising the right to know: You have a right to request additional information about the categories of personal information collected, sold, disclosed, or shared; purposes for which this personal information was collected, sold, or shared; categories of sources of personal information; and categories of third parties with whom we disclosed or shared this personal information.
      
    • Exercising the right to opt-out from a sale or sharing: We do not transfer your personal data to third parties in exchange for payment. However, as noted above, we may provide the data to third party partners, such as advertising partners, analytics providers, and social networks, who assist us in advertising our products and Services to you. Because these third parties may use the data Stripe provides for their own purposes, Stripe's provision of data to these parties may be considered a data “sale” or “sharing” (for behavioral advertising) as those terms are defined under the CCPA and other applicable US privacy laws. You can opt out of targeted advertising and any related data “sales” or “sharing” (for behavioral advertising) here.
      
    • Exercising the right to limit the use or sharing of Sensitive Personal Information: We do not sell or share (for behavioral advertising) Sensitive Personal Information as defined by US privacy laws and have not done so in the past 12 months. Learn more about our collection and use of Sensitive Personal Information over the last 12 months here.
      
    • Profiling with legal or similarly significant effects: In the event that we engage in profiling or automated decision making for which applicable law entitles you to an opt out we will provide you with notice of how to exercise that opt-out right.
      
    • Appeal: If you wish to appeal any of our decisions regarding a rights request under US privacy laws, you may do so by contacting Stripe’s Data Protection Officer (“DPO”) at dpo@stripe.com.
      
  • To submit a request to exercise any of the rights described above, please contact us using the methods described in the Contact Us section below. Please note that rights under some U.S. state laws do not apply to Personal Data we collect, process, and disclose when you act as a consumer to obtain financial products or services from Stripe for personal, family, or household purposes. The federal Gramm-Leach Bliley Act may govern how Stripe shares and protects that data instead. See our US Consumer Privacy Notice below for more information.
    
  • We will verify your request by asking you to send it from the email address associated with your account or requiring you to provide information necessary to verify your identity, including name, address, transaction history, photo identification, and other information associated with your account.
    
  • You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA and other applicable US privacy laws. Your agent may submit a request on your behalf by contacting us using the methods described in the Contact Us section below. We may still require you to directly verify your identity and confirm that you gave the authorized agent permission to submit the request.
    

Global Privacy Control signals. Stripe honors the Global Privacy Control (GPC) opt-out preference signals. Learn More.

9. お問い合わせ

本ポリシーに関してご不明点や苦情等がございましたら、Stripe までご連絡ください。お客様が最終顧客 (ビジネスユーザーとビジネスや取引を行っている個人) である場合、ビジネスユーザーによるプライバシーの取り扱い、選択肢、管理策については、各ビジネスユーザーのプライバシーポリシーやプライバシーに関する告知を参照するか、ビジネスユーザーに直接お問い合わせください。

Stripe におけるプライバシーの取り扱いに関する詳細については、Stripe プライバシーセンターをご覧ください。