Chase
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Chase collects account, device, and partner data, uses it for ads and affiliates, and the site is as-is with no notice to shut it off.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Name, accounts, cards, tax IDs, licenses, IP, cookies, device IDs, location, and partner data.
Read the exact line
Privacy policy
“When you visit or use our online services, we may collect personal information from or about you including your name, email address, mailing address, telephone number(s), account numbers, limited location information, user name and password.”
Training
They use it for banking, fraud, analytics, tailored marketing, and interest-based ads.
Read the exact line
Privacy policy
“Providing you tailored content and marketing messages; operating, evaluating and improving our business (including developing new products and services; improving existing products and services; performing data analytics;”
Sharing
Affiliates, service providers, co-branded partners, and others in a sale or for legal reasons.
Read the exact line
Privacy policy
“We may share the information we collect from and about you with our affiliates and other third parties as described below.”
Kept
The documents do not say how long they keep your information.
Read the exact line
Privacy policy
“You may review, or update certain account information by logging in and accessing the “Customer Center” section.”
Controls
You can update some account info online and opt out of some interest-based ads.
Read the exact line
Privacy policy
“If you do not want your information collected and used by the companies we work with for OBA purposes, you can opt out of this form of OBA by following the instructions in the next section.”
Fine print
The site is as-is; they can change terms by posting and cut off access without notice.
Read the exact line
Terms of service
“JPMORGAN CHASE RESERVES THE RIGHT TO TERMINATE ANY OR ALL WEBSITE OFFERINGS OR TRANSMISSIONS WITHOUT PRIOR NOTICE TO THE USER.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Opt out of online behavioral advertising
http://youradchoices.com or the Advertising Options Icon on certain Chase ads
Update account information
Log in and open the Customer Center, or Contact Us / branch / statements
Review U.S. Consumer Privacy Notice choices
U.S. Consumer Privacy Notice referenced in this Online Privacy Policy
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can add data about you from partners and credit bureaus, not just what you type on the site.
Read the exact line
Privacy policy
“We may also collect information about you from additional online and offline sources including from co-branded partner sites or commercially available third-party sources, such as credit reporting agencies.”
For example, a credit report could be mixed with your Chase login and browsing data.
Ads can be based on your accounts, transactions, and data from other companies they work with.
Read the exact line
Privacy policy
“Which advertisements you see is often determined using the information we or our affiliates, service providers and other companies that we work with have about you, including information about your relationships with us”
For example, the type of accounts you hold could be used to decide which credit offer you see.
They may share collected information with other companies for advertising where the law allows.
Read the exact line
Privacy policy
“we may share with others the information we collect from and about you as stated in this policy under Information We Collect.”
For example, browsing and account-related data could be shared so ads follow you on other sites.
They can shut off the website or services without warning you first.
Read the exact line
Terms of service
“JPMORGAN CHASE RESERVES THE RIGHT TO TERMINATE ANY OR ALL WEBSITE OFFERINGS OR TRANSMISSIONS WITHOUT PRIOR NOTICE TO THE USER.”
For example, a page or tool you rely on could disappear overnight with no email.
They do not promise the site will work correctly or be error-free.
Read the exact line
Terms of service
“THE WEBSITE (INCLUDING ALL INFORMATION AND MATERIALS CONTAINED ON THE WEBSITE) IS PROVIDED "AS IS" "AS AVAILABLE".”
For example, if a page shows wrong info, they say they are not giving about it.
If you access someone else’s account data, you may have to pay Chase’s legal and breach costs.
Read the exact line
Terms of service
“you shall , defend, and JPMorgan Chase & Co. and all of its direct and indirect subsidiaries, officers, directors, employees, agents, successors, and assigns from any and all losses”
For example, looking up another person’s account could make you cover investigation and credit-monitoring costs.
The mobile app can collect precise location, though they say they may ask first.
Read the exact line
Privacy policy
“We may ask your permission before collecting certain information (such as precise geo-location information) through Chase Mobile.”
For example, the Chase app might request GPS to know where you are banking.
You can turn off some interest-based ads through an industry opt-out site.
Read the exact line
Privacy policy
“To opt out of OBA, please click on the following link and follow the instructions: http://youradchoices.com.”
For example, you can visit youradchoices.com so Chase ads on other sites are less based on your browsing.
They say they use standard security measures to limit who can see personal information.
Read the exact line
Privacy policy
“We use reasonable physical, electronic, and procedural safeguards that comply with legal and regulatory standards to protect and limit access to personal information.”
For example, they claim locked buildings and electronic controls, but they do not list audits here.
The main sites are not meant for kids under 13, except a kids banking program.
Read the exact line
Privacy policy
“With the exception of the Chase First Banking℠ program, our online services are not intended for children under 13.”
For example, a 12-year-old should not use regular Chase online banking without that kids program.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
How we got here · grade F · score 30/100 · 15 of 15 policy answers backed by a verified quote · 7 not stated
What does the app collect beyond what it needs to work?
They collect account and ID data plus usage, cookies, device IDs, location, and data from credit bureaus and partners.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They and partners use cookies and browsing history for interest-based ads, with an industry opt-out.
Do they sell or share your data, and can you opt out?
They share with affiliates, co-branded partners, and others, and say they will honor choices you have given them.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use reasonable physical, electronic, and procedural safeguards that meet legal standards.
Is there a real age gate, and are teens protected?
Services are not intended for children under 13 except Chase First Banking; they do not describe age checks.
Will they tell you when the rules change, and is the policy specific?
Privacy changes go live when posted with a new date; terms can change when posted. Retention and purposes stay fairly general.
Can they close your account without warning, and can you get your data out first?
They reserve the right to end website offerings or transmissions without prior notice.
If something goes wrong, who pays?
The site is as-is with no warranties, and they disclaim lost profits and many other damages. A separate indemnity applies if you access others’ accounts.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 2,232 words at a college graduate level (Flesch reading ease 33.8); the terms are 2,456 words at a professional or legal expert level.
