Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Intuit's privacy policy indicates a robust approach to data collection and use, raising several concerns for users. The company explicitly states it may train its AI/ML models with user data, and aggregates data across its various platforms like QuickBooks, Mailchimp, TurboTax, and Credit Karma to create comprehensive user profiles and tailor services (data_use-2). Moreover, a wide array of third parties are involved in collecting extensive user data, which includes highly sensitive personal and financial identifiers (risk_flags-3, risk_flags-5). The policy also notes the potential for other users to input personal information about you into the platform (risk_flags-2) and the use of session replay technologies to record user interactions (risk_flags-4). While the policy outlines some options for data deletion, it also reserves the right to retain information under certain circumstances even after a deletion request (gotchas-1, gotchas-2). Users should be aware that their data may also be processed in countries with potentially weaker data protection laws (risk_flags-7).
88% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
5 findings
Critical issues and red flags raised by the policy text. These are typically material, hard-to-reverse harms that are often not well-disclosed.
high88% confidence
Third-Party Data Input on You
Other users, including customers of Intuit Platform, accountants, bookkeepers, tax preparers, spouses, employers, or other business customers, may be able to input personal information about you into the platform.
Why it matters: Your personal information may be provided to the company by other users, which could include sensitive details from various individuals or entities.
The Intuit Platform is designed to help you connect with other people and businesses. As a result of those connections, others may be able to input personal information about you, including other customers using the Intuit Platform. For example, an Intuit customer may share personal information about you with us in order to use and benefit from the Intuit Platform. You also may be able to input or process personal information about others, for example, if you are an account administrator of one of our products or use Intuit to manage customer lists.
**Information you provide to us**, paragraph 13 · Citation strength: strong
medium90% confidence
Use of Session Replay Technologies
The company may use session-replay technologies to record users' interactions with the services, including clicks, mobile app touches, mouse movements, scrolls, and keystrokes/key touches.
Why it matters: Your interactions with the service, including every click, touch, scroll, and keystroke, may be recorded and replayed, potentially revealing sensitive information and providing a detailed record of your usage.
For example, we may use session-replay technologies, such as those provided by FullStory and Medallia, that employ software code to record users’ interactions with the Services in a manner that allows us to watch video replays of those user sessions. The replays include users’ clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions. These replays help us diagnose usability problems and identify areas for improvement.
**Cookies and similar technologies**, paragraph 1 · Citation strength: strong
medium88% confidence
Broad Data Collection for Identity Verification
The company collects identity verification information, which includes highly sensitive data such as name, date of birth, social security number, social insurance number, driver's license number, passport number, and other government-issued identification details.
Why it matters: Providing such extensive personal and government-issued identification details for identity verification poses a risk of significant harm if this data is breached or misused.
We collect information to verify your identity, including your name, date of birth, social security number, social insurance number, driver’s license number, passport number, government-issued identification details, and similar information to verify your identity and to help you file your tax return.
**Information you provide to us**, paragraph 3 · Citation strength: strong
medium88% confidence
Recording and Monitoring Communications
The company may collect personal information that includes call center recordings, call monitoring records, chat and text records, voicemails, photographs, and other audio or video images when users interact or communicate with them.
Why it matters: Your conversations and interactions with customer support, including sensitive details discussed, may be recorded and monitored, reducing your privacy in communications with the company.
This information may include: call center recordings and call monitoring records, chat and text records, voicemails, photographs, and other audio recordings or video images, including those recorded in and around our physical locations.
**Information you provide to us**, paragraph 4 · Citation strength: strong
low85% confidence
Data Processing in Risky Countries
The company reserves the right to store and process personal information in the United States and any other country where its affiliates, subsidiaries, or service providers operate. Some of these countries may have data protection laws that are different from and potentially less protective than the user's home country.
Why it matters: Your personal information may be stored and processed in countries with less stringent data protection laws, which could increase the risk of your data being accessed or compromised without adequate legal recourse.
Intuit reserves the right to store and process your personal information in the United States and in any other country where Intuit or its affiliates, subsidiaries, or service providers operate facilities in accordance with and as permitted by applicable laws and regulations. Some of these countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective).
**International data transfers**, paragraph 2 · Citation strength: strong
Data Use
3 findings
How your data is collected, processed, and shared. This section also highlights whether key promises are made about your data (e.g., about not selling it).
medium90% confidence
Personalized Ads and Recommendations
The company may personalize your experience by showing you personalized ads or recommending certain products based on information collected from your interactions with the Intuit Platform and insights developed about your needs.
Why it matters: You will receive targeted advertisements and product recommendations based on your personal information and usage patterns, which could influence your financial decisions and expose you to persistent marketing tailored to your perceived needs.
Personal information as necessary to manage, run, improve, and develop our business and personalize your experience while interacting with the Intuit Platform. Depending on your settings, this may include showing you personalized ads or recommending certain Intuit products based on your interests.
Scope of this Privacy Statement and our role, paragraph 5 · Citation strength: strong
medium88% confidence
Data Aggregation Across Multiple Services
When you share data with the company or integrate information from third parties, Intuit combines this data to power experiences across the entire Intuit Platform and its various products, rather than limiting it to the specific offering you are using. This can include data from QuickBooks, Mailchimp, TurboTax, and Credit Karma.
Why it matters: Your data from different services (e.g., bookkeeping, email marketing, tax preparation, credit information) are aggregated, allowing the company to create a comprehensive profile of your financial and business activities, which could be used for personalized services, recommendations, or further data processing across its ecosystem.
When we say we process your data as a “platform,” we mean that when you choose to share data with us, or bring over information from third parties (like a bank or loan provider), Intuit uses that data together to power experiences across the Intuit Platform and products, not just within the individual offering(s) you’re using. This means that, for example, we may use your bookkeeping details from QuickBooks, contact and purchase history details from Mailchimp, certain information from TurboTax (with your consent where it's required), and/or recommendations from Credit Karma.
**The Intuit Platform and your personal information**, paragraph 1 · Citation strength: strong
low85% confidence
Business Account Administration Control
If you are granted access to a business account, such as in QuickBooks, the business owner or a designated administrator has control over your account details, including access rights and decisions about your personal information, and can require you to take certain actions like location tracking.
Why it matters: Your access to information and personal data within a business account can be controlled by an administrator, who may also make decisions regarding your personal information, potentially including sensitive data like payroll details or requiring location tracking.
Some experiences and services within the Intuit Platform allow you to interact with a business (such as your employer). If you are granted access to a business account (for example, in QuickBooks), the business owner or a designated administrator may control and administer details of your account, for example, by deciding your access rights; making decisions about your personal information (such as details about your payroll); or requiring you to take certain actions (for example, use location tracking to clock in for a shift). If the owner or designated administrator changes your access rights, then you may lose access to the information the business controls.
Terms related to account cancellation and service renewal, including any penalties, fees, or difficulties in stopping recurring charges or deleting accounts.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Gotchas
2 findings
Less-than-obvious conditions, exceptions, and
medium85% confidence
Information Retention After Deletion Request
Even if you submit a deletion request or if the contractual relationship has ended, the company may still be required to maintain your personal information to comply with legal/regulatory needs, exercise/defend legal claims, or protect against fraudulent/abusive activity.
Why it matters: Even if you request deletion of your personal information, the company may retain it for various reasons, meaning your data might not be fully removed as you expect. You could continue to be exposed to risks associated with data retention, such as data breaches or unauthorized access, beyond your active use of the service.
Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform and successfully run our business. Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information for as long as necessary to:
Inability to Completely Delete Personal Information
There may be occasions where the company is unable to fully delete, anonymize, or de-identify personal information due to technical, legal, regulatory compliance, or other operational reasons.
Why it matters: Your personal information may not be completely deleted, anonymized, or de-identified when requested due to technical, legal, or operational constraints, meaning your data could remain accessible or recoverable.
There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it.
These are the policies or practices that work to protect you as a user. They are usually explicit and provide a direct benefit.
Protection95% confidence
Biometric Information Consent
The company will not collect your Biometric Information without first providing notice and obtaining your consent.
Why it helps: Opt-in consent prevents the collection of your biometric data without your explicit permission, giving you control over this sensitive information.
We will not collect your Biometric Information without first providing notice and obtaining your consent. For more details about how we use Biometric Information, please see our [Biometric Notice](https://www.intuit.com/privacy/statement/biometric-notice/).
Global Privacy Control Signal Honored for US Residents (excluding Credit Karma)
Intuit (excluding Credit Karma) responds to the Global Privacy Control signal for US residents.
Why it helps: Respecting the Global Privacy Control signal provides US residents with an automated way to signal their privacy preferences, enhancing their control over personal data sharing for advertising and tracking.
Intuit (excluding Credit Karma) responds to the Global Privacy Control signal for US residents, as described further in the United States section below.
How we share your personal information, paragraph 19 · Citation strength: strong
Protection95% confidence
Email Unsubscribe Option
You may unsubscribe using the link found at the bottom of all marketing and promotional emails.
Why it helps: The option to unsubscribe from marketing emails allows you to easily control the promotional communications you receive, reducing unwanted solicitations.
You may also unsubscribe using the link found at the bottom of all marketing and promotional emails.
Your personal information rights and choices, paragraph 9 · Citation strength: strong
Protection95% confidence
SMS Opt-Out
If you receive marketing text messages, you may opt out of receiving further messages by replying STOP to the message.
Why it helps: The ability to opt out of marketing text messages by replying 'STOP' provides a simple and direct method to cease unwanted SMS communications.
If you receive marketing text messages from us through Intuit’s SMS shortcode program, you may opt out of receiving further marketing text messages from us by replying STOP to the message.
Your personal information rights and choices, paragraph 9 · Citation strength: strong
Protection90% confidence
Non-collection of Children's Personal Information (excluding Intuit for Education)
The company's services are not intended for children under 13, and they state they do not knowingly collect personal information from children. If they believe they may have information from a child, they ask to be contacted.
Why it helps: Not knowingly collecting personal information from children under 13 protects minors from data exploitation and aligns with privacy regulations designed to safeguard children's online data.
Otherwise, our Services are not intended for or directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we may have information from a child, please contact us.
Personal information collected through the short code program (when signing up for SMS texts) will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.
Why it helps: This commitment ensures that data provided specifically for SMS marketing will not be sold or shared with other companies for their marketing, limiting the spread of your contact information.
Personal information collected through the short code program (i.e., when you sign up for SMS texts), will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.
How we share your personal information, paragraph 10 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.