Amex

"We (and our Service Providers or Advertising Partners) may collect information using Cookies and Similar Technologies about: your browsing and app use activities over time, and across websites and apps; the likely associations among different browsers and devices, such as whether two devices are associated with the same individual."

American Express and its partners track users across multiple websites, apps, browsers, and devices, building cross-device profiles to associate activity from different devices to the same individual.

"We may share Personal Information as required or as permitted by law, with: credit bureaus and similar institutions; the American Express Family of Companies; our Service Providers who perform services for us and help us operate our business; financial institutions or Co-brand Partners with whom we jointly offer or develop products and services."

American Express shares personal information broadly across its family of companies, co-brand partners, financial institutions, credit bureaus, and numerous service providers, creating a wide data-sharing ecosystem.

"We (and our Service Providers or Advertising Partners) may collect information using Cookies and Similar Technologies about: the location of your mobile device (for example, when you use mobile websites or apps to register to receive location-based content). We may use Online Information to: use the location of your mobile device for location-based services; provide location-based content and advertising personalization."

American Express collects mobile device location data and uses it not only for requested services but also for advertising personalization, sharing location-derived insights with advertising partners.

"We (and our Service Providers or Advertising Partners) may collect information using Cookies and Similar Technologies about: the device, operating system, and browser version you use; the IP address and information related to that IP address (such as domain information, your internet provider and general geographic location); browsing history on our website or in our apps (such as what you search for, the pages you view, how long you stay, and how often you come back)."

American Express collects detailed device fingerprinting data including OS, browser version, IP address, browsing history, and app usage patterns, going beyond what is needed for core financial services.

"Since we may change this online privacy statement, we recommend that you check the current version available from time to time. If we make changes to this statement, we will update the "Effective Date" at the top of this page."

American Express can change the privacy policy at any time with no obligation to notify users directly — they merely update the effective date and expect users to check periodically.

"We will keep your Online Information only as long as we must to deliver our products and services, unless we are required by law or regulation or for litigation and regulatory investigations to keep it. We will not keep your personal data longer than is necessary, except as otherwise required by applicable law."

The retention policy provides no specific timelines for data deletion and includes broad exceptions for legal, regulatory, and litigation purposes that could justify indefinite retention.