Door Kickers

"We may share your personal information with our affiliates and subsidiaries for everyday business purposes as described in this Statement, including for marketing purposes, for improving and developing our offerings, and for personalizing your experience on our Platform. ... Service providers or agents also include AI providers, including generative AI providers."

Intuit shares personal data broadly across its family of companies (TurboTax, QuickBooks, Credit Karma, Mailchimp) and with a wide range of third parties including AI providers, advertising networks, credit bureaus, financial services providers, and collection agencies.

"When you choose to share data with us, or bring over information from third parties (like a bank or loan provider), Intuit uses that data together to power experiences across the Intuit Platform and products, not just within the individual offering(s) you're using. This means that, for example, we may use your bookkeeping details from QuickBooks, contact and purchase history details from Mailchimp, certain information from TurboTax, and/or recommendations from Credit Karma."

Intuit explicitly combines user data across its entire product ecosystem — TurboTax, QuickBooks, Mailchimp, and Credit Karma — to build unified profiles, enabling extensive cross-service tracking and profiling.

"Certain features in the Intuit Platform may collect your precise location information, device motion information, or both, if you or your organization grant(s) us permission to do so through your device settings (for example, if you use QuickBooks' time-tracking service, participate in Karma Drive, or use CK Money to locate nearby ATMs)."

Intuit collects precise GPS location and device motion data for multiple features. Notably, an employer using QuickBooks can require employees to use location tracking to clock in for shifts, which may not be truly voluntary.

"We may collect information about your device(s) such as IP addresses, log information, error messages, device type, and unique device identifiers. ... we may use session-replay technologies, such as those provided by FullStory and Medallia, that employ software code to record users' interactions with the Services in a manner that allows us to watch video replays of those user sessions. The replays include users' clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions."

Intuit uses session replay technology that captures mouse movements, clicks, scrolls, and keystrokes — effectively surveillance of all user interactions. They also collect device contacts if permission is granted.

"From time to time we may change or update our Privacy Statement. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by posting a notice in the Intuit Platform or on a community post; by sending you a notification; or by other means consistent with applicable law."

Intuit reserves the right to change the privacy statement at any time. Notification may be as minimal as a community post, and continued use is treated as acceptance of the new terms.

"Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform and successfully run our business. Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information for as long as necessary to: comply with our legal or regulatory compliance needs; to exercise, establish or defend legal claims; and/or to protect against fraudulent or abusive activity on our service."

Intuit retains data indefinitely by default unless you specifically request deletion, and even deletion requests can be denied under broad justifications like 'running our business' or 'defending legal claims.'

"Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information for as long as necessary to: comply with our legal or regulatory compliance needs (e.g., maintaining records of transactions you have made with us); to exercise, establish or defend legal claims; and/or to protect against fraudulent or abusive activity on our service. ... There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons."

Intuit may retain personal information even after you request deletion or close your account, citing broad reasons including 'operational reasons' and potential legal claims, with no clear timeline for when retained data will ultimately be purged.