What is Link?

Stripe offers you the option to store your payment methods with us so that you can conveniently use them across certain merchants who are our Business Users – we call this “Link” (formerly known as “Remember Me”). When you choose to use Link, you agree to End User Terms of Service. These Terms, among other things, let us store your payment method so that you can pay faster on Link-supported sites.

What data does Link collect about end users?

Link collects personal data regarding end users, including:

• Information that identifies you, such as name, billing address, shipping address, email, and phone number;
  
• Payment method information, such as credit card number, CVC, and expiration date;
  
• Transaction data, such as merchant, billing and shipping address, purchase amount, and date of purchase; and
  
• Online activity data, such as IP address, language settings, sites where you used Link, and dates and times when you used Link. If you connect your bank account to your Link account, we will collect data from that account at the time of your purchase to facilitate that transaction and future transactions with that bank account.
  

We also capture common web analytics metadata such as your browser type, operating system, and IP address – which is sent by your browser to each website you access. Depending on how the merchant configured Link, we may also collect advanced fraud detection signals from your browser. We retain this information to help us prevent fraud, identify bugs to improve our products and services, and as permitted by law and our Privacy Policy.

You can access some of the data Link has collected from you through Stripe's Data Access Tool.

How does Stripe use Link end users' data?

Stripe will use Link end users' data in accordance with our Privacy Policy. For example, Stripe may use Link end users’ transactional data to provide services such as fraud detection, mitigating risk of financial loss, and improving our products and services. Stripe may also use your online activity, contact information, and saved payment and address information to market our products and services to you, where allowed by applicable law, including subject to any consent requirements.

Is Stripe a “Controller” of the data collected for Link?

Yes. Stripe is a “Controller” of the data collected for Link. A “controller” determines how and for what purpose personal data is processed (learn more). Stripe will use data, including end user transactional data, for various purposes including to improve our products and services.

How do I delete my Link account?

If you want to delete your Link account please follow the instructions on this page.

If you have not previously used Link and believe you received an SMS from us in error, please use the link in the SMS to opt-out.

What are the security protections available with Link?

Link was built by Stripe to provide an easy and secure way to pay in one click anywhere Link is enabled. Stripe processes billions of dollars of payments annually and is certified as a Payment Card Industry (PCI) Service Provider Level 1, which is the most stringent level of certification available in the payments industry. Learn more about security at Stripe here. We encrypt your data at rest and in transit to keep it secure.
We will also send a one-time code to your phone to verify it's you when you use Link on new devices and browsers.

How does Link use cookies?

Stripe collects identifying information about the devices that connect to its services, including via cookies. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection, authentication, and analytics. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.

What is "Sold through Link"?

When you see "Sold through Link," Stripe acts as the merchant of record on behalf of the Business User.

Business Users can offer and sell their digital products using Stripe Managed Payments under the "Sold through Link" brand. If you place an order for a digital product where you see "Sold through Link" – or if your card or bank statement shows "Link.com*[Business User name]" (or similar) – your purchase is being handled by Stripe through its Stripe Managed Payments product on behalf of the Business User.

Stripe also provides additional support and order management services through Link to help you manage your orders that were Sold through Link. They include:

A dashboard where you can see your order history, track and manage your purchases
Tools to update payment methods or manage subscriptions
Support for renewals, refunds or customer service

For subscriptions that are Sold through Link, you must have a Link account to ensure we can verify your identity, manage ongoing payments and provide continuous support. We provide these features in addition to the core Link experience described in the Link Privacy Policy and subject to these terms.

What Information is Shared with the Business User?

When you complete a "Sold through Link" order, Stripe shares your order information with the Business User so they can fulfil your order and manage their relationship with you. This may include your contact information, payment information, tax identification number, billing and shipping address, and order details.

The Business User may retain this information and use it according to their own privacy policy. For more details on how the Business User may handle your data, please refer to the Business User's privacy policy.

Why Do I Have to Create a Link Account to Use Certain Payment Methods?

For certain types of payment methods (for example, Pix and Stablecoins), you must create a Link account in order to use this method. This is because the merchant from whom you are making a purchase does not have a direct connection with your selected payment method and must therefore use Link to process the payment. If you do not wish to create a Link account, you can choose another payment method, such as a debit or credit card, to complete your purchase. Your Link account is subject to the Link terms and privacy policy. You can delete your Link account at any time as described on this page.

Deleting Your Information

You can request that your information be deleted from Link in connection with your "Sold through Link" orders by requesting the deletion of your Link account. To request deletion, please follow the instructions on this page.

Deleting your Link account will also result in:
- any active subscriptions Sold through Link being cancelled; and
- all information provided for a Sold through Link order will be deleted.

Please note that the Business User may have stored the information provided during checkout (such as your contact and billing details) independently of Link in accordance with their own privacy policy. We recommend reaching out to them directly if you would like them to delete your information as well.

Buying Cryptocurrency through Link

How does buying cryptocurrency through Link work?

Link provides End Users with the ability to use a variety of payment methods to purchase cryptocurrencies from third-party cryptocurrency exchange providers. Link also saves certain information, including your payment method, cryptocurrency wallet address, and cryptocurrency transaction history, to facilitate subsequent cryptocurrency purchases and other transactions. By choosing to use Link to purchase cryptocurrency, you agree to our Terms of Service.

Do I have to have a Link account to buy cryptocurrency through Stripe?

Yes, you must have a Link account to buy cryptocurrency through Stripe.

What data does Link collect when I buy cryptocurrency through Link?

In addition to data Link normally collects from end users (such as information that identifies you, payment method data, transaction information, and online activity data), Link collects data to facilitate your cryptocurrency purchases, such as your cryptocurrency wallet address. Link also collects certain information from end users, such as an image of your government-issued ID document, for identity verification through Stripe Identity.

For cryptocurrency purchases above a certain amount, we may conduct identity verification by checking your selfie (i.e., photo image of your face) against your government-issued ID document. We do this to conduct know-your-customer (KYC) checks as required by law and to prevent fraud and financial crimes. End users whose identity cannot be verified will not be able to purchase cryptocurrency through Link. Learn more about the identity verification process through Stripe Identity.

How does Stripe use data it collects from me when I buy cryptocurrency through Link?

As explained above, Stripe uses Link end users’ data in accordance with Link’s Privacy Policy. In addition, Stripe uses information you submit for identity verification to conduct know-your-customer (KYC) checks as required by law and prevent fraud and financial crimes. To learn more about how Stripe uses your identity information, see this page.

Who does Stripe share information with?

In addition to sharing information with our service providers to facilitate your cryptocurrency transactions, we, in accordance with our Terms of Service, share your identity information with third-party cryptocurrency exchange providers to facilitate their own fraud monitoring and prevention, compliance with applicable laws related to the identification and reporting of illegal and illicit activity, and certain financial reporting obligations. End users have an independent relationship with these third-party cryptocurrency exchange providers to purchase cryptocurrency, with Link facilitating such transactions.

Link may also share certain information as necessary with third parties to investigate and prevent potential fraudulent activity around cryptocurrency purchases. To learn more about Link’s data sharing practice, see our Privacy Policy.

How can I delete my data?

You can delete your Link account by following the directions on this page. You can learn more about how to delete your identity information here. To delete the selfie and ID document you submitted for identity verification, you can email [email protected]. But please note that Stripe is required by law to retain certain data for a period of time – typically between five and ten years – following any deletion request from or account closure by an end user who used Link to purchase cryptocurrency.

Can you delete my Link cryptocurrency transaction records from a public blockchain?

Wallet funding and transaction information related to your use of Link may be recorded on a public blockchain. Many public block chains are open to forensic analysis which can lead to deanonymisation and revelation of private financial information, especially when combined with other data. Because blockchains are decentralised or third-party networks that are not controlled or operated by Stripe or its affiliates, we are not able to erase, modify, or alter your personal data from such networks. For other deletion-related requests, please follow the instruction provided above.