So, effective November 17 Paypal is going to apply changes that will collect everything about you, under the sun.

[onenote]

7. Paypal already collects most if not all of that data.

Here is a link to the current privacy policy: https://www.paypal.com/us/legalhub/paypal/privacy-full

Categories of Personal Information collected from you, including from your interactions with us and use of the Services ersonal Identifiers: Such as Name, Business Name, Address, Phone Number, Email, IP address, Device Information, Information collected from cookies or other tracking technologies, other information necessary to establish an account or profile.
Records and Financial Information: Such as, bank account and routing numbers, credit and debit card information, amount you send or request, other financial information.
Transaction and Experience Information: Such as online shopping cart information, shopping activity and goods or services considered on Partners and Merchants sites, shipping options and associated costs when you check out, purchase history, and order tracking and product information.
Geolocation: We may collect IP-based geolocation data and Global Positioning System (GPS) with your consent during your user experience or based on your mobile application settings.
Internet or network activity: interactions with our Services, Information about response time for web pages, download errors, date and time when you used the service, Location Information, such as your IP address, statistics regarding how pages are loaded or viewed, the websites you visited before coming to the Sites and other usage and browsing information collected through Cookies (“Technical Usage Data”).
Biometric: When you consent in the user experience, we collect voice identification, photo identification, or face scans to verify your identity and authenticate you for certain actions related to your account, including, for example, verify your identity and authenticate you to meet regulatory requirements or before you access accounts and Services, recover passwords, update profile info, manage payments and payment methods, lift account limitations, and initiate cryptocurrency transfers.
Audio, electronic, visual, or similar information: Call recordings when you talk to customer service.
Professional or employment information: including business information, job title, contact emails, phone numbers and taxpayer ID numbers.
Imported Contact Information: including name, address, phone number, images, email address or usernames associated with the contacts.
PayPal Account Profile Information: username, profile picture, gender, or personal description which you add that may include sensitive personal information. You can set your profile to “Private” at any time.
Information you provide when you contact us: Your response to surveys, recorded conversations, chat conversations with us, email correspondence with us, account or profile status, repayment history, voice identification, Information about others if you choose to share it with us.
Inferred data: We may infer information about you such as your preferences and shopping behavior, based on your transactions and interactions with our Services or with our Partners and Merchants.
Characteristics of Protected Classifications: including age or date of birth, national origin, disability, citizenship, military status.
Sensitive Personal Information: Social Security number, government-issued identification, bank account and routing numbers, credit and debit card information, voice identification and Photo IDs or Precise Geolocation.
Information from your device: including, language settings, browser ID, cookie preferences, time zone, operating system, platform, screen resolution and similar information about your device settings, data collected from cookies or other tracking technologies.
We may also obtain the above categories of Personal Information from the following categories of sources:


And here is a link to the updated policy that takes effect in November: https://www.paypalobjects.com/marketing/ua/pdf/US/en/privacy-full-111725.pdf

Categories of Personal Information collected from you, including from your interactions with us and use of the Services:
• Personal identifiers: Such a same, business name, address, phone number, email, IP address, device information, information collected from cookies or other tracking technologies, government-issued identification, signature, and other information necessary to establish an account or profile.
• Records and financial information: Such as identity card numbers, government-issued identification, account header information, bank account and routing numbers, credit and debit card information, income, amount you send or request, your payment instrument, card, financial or funding account in connection with the Services, including issuer name, card type, country code, payment account number, CVV, username, and IBAN information.
• Transaction and experience information: Such as account balances, transaction history and transaction details, online shopping cart information, transaction ID, shopping activity and goods or services considered on Partners and Merchants sites, shipping address, shipping options and associated costs when you check out, purchase history, seller information, such as seller name, industry and postal code, buyer information, purchase information, and order tracking and product information.
• Commercial information: Such as payout amount, payor information, and the record of the Services.
• Geolocation data: Such as Global Positioning System (“GPS”), which we may collect with your consent if you have an account for financial Services, and IP-based geolocation data during your user experience or based on your mobile application settings.
• Internet or network activity: Such as interactions with our Services, information about response time for web pages, download errors, date and time when you used the service, shopping history, location information, such as your IP address, statistics regarding how pages are loaded or viewed, the websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies.
• Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account, including, for example, to verify your identity before you access accounts and Services, recover passwords, update profile information, manage payments and payment methods, lift account limitations, and initiate cryptocurrency transfers.

• Audio, electronic, visual, or similar information: Such as call recordings when you talk to customer service.
• Professional or employment information: Such as business information, job title, contact emails, phone numbers and taxpayer ID numbers.
• Imported contact information: Such as name, address, phone number, images, email address or usernames associated with the contacts you import or enter manually.
• Account profile information: Such as username, profile picture, gender, or personal description, which you add that may include Sensitive Personal Information. You can set your profile to “Private” at any time.
• Information you provide when you contact us: Such as your responses to surveys, recorded conversations, chat conversations with us, email correspondence with us, account or profile status, repayment history, voice identification, vulnerability-related information provided by you and information about others if you choose to share it with us.
• Inferred data: Such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment, your preferences and shopping behavior, which we may infer based on your transactions and interactions with our Services, ads and offers or with our Partners and Merchants.
• Information related to legal requirements: Such as information from external sanction lists, including name, date of birth, place of birth, occupation, and the reason why the person is on the external sanction lists in question, consistent with applicable law.
• Characteristics of protected classifications: Such as, age or date of birth, nationality, disability, citizenship, and military status.
• Sensitive Personal Information: Such as Social Security and tax ID number, government-issued and other related identification, bank account and routing numbers, credit and debit card information, financial information, biometric data (as described above), or precise geolocation data, depending on applicable privacy law. In certain jurisdictions (e.g. under the GDPR), this may also be referred to as “special category information”.
• Information from your device: Such as language settings, browser ID, device ID, device type, cookie preferences, time zone, operating system, platform, screen resolution, and similar information about your device settings, device’s web browser, and internal connection, and data collected from Cookies or other tracking technologies.