SoFi: Bank, Investing & Crypto

"Business and marketing partners. Third parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services, or whose products or services may be of interest to you. Other lenders. SoFi may share your information with other lenders or loan brokers to offer products and services to you. If you are not eligible for a loan from SoFi or you decline an offer, SoFi may share your information with another lender to determine if that lender can fulfill your request."

SoFi shares user data with a wide range of third parties including marketing partners, other lenders, loan brokers, social media platforms, and advertising companies — even sharing your information with other lenders if you decline SoFi's offer.

"Precise geolocation data – With your consent, we collect precise geolocation data (any data that is derived from a device and that is used or intended to be used to locate a consumer within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet) to help you locate ATMs. Geolocation data – which may include, city, state, and country and location associated with your I.P. address."

SoFi collects both precise GPS-level geolocation (within 1,850 feet) and general IP-based location data, and shares non-precise geolocation with advertising partners, service providers, and social media platforms.

"Session Replay Technologies. SoFi will capture your use of the Site and may record your use. We use third-party services that employ software code to record users' interactions with the Website in a manner that allows us to watch DVR-like replays of those user sessions. The replays include users' clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions."

SoFi records complete user sessions including all clicks, keystrokes, mouse movements, and scrolls via third-party session replay tools, creating DVR-like recordings of everything users do on the site.

"Inferences, drawn from any of the information identified above to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. These are shared with Service providers, Advertising Partners, Third parties designated by you, Business and marketing partners, Business transferees, and Social media platforms."

SoFi builds detailed psychological and behavioral profiles by combining data across its services and shares these inferred profiles — including psychological trends and predispositions — with advertisers and social media platforms.

"We may change or update this Privacy Policy periodically. When we do, we will let you know by appropriate means such as by posting the revised Privacy Policy on our website with a new "Last Updated" date. Any changes to this Privacy Policy will become effective when posted unless indicated otherwise."

SoFi can change the privacy policy at any time and changes take effect immediately upon posting, with no requirement for user consent or advance notice beyond updating the website.

"We retain information we collect about you, and use the following factors to determine the retention period of personal information: to maintain an ongoing relationship with you as a customer, member, or business contact. to perform under applicable terms and services to which you agreed. as necessary in connection with the lawful purposes set out in this Privacy Policy. to comply with applicable laws to establish, exercise or defend our legal rights."

SoFi provides no specific retention periods or deletion timelines, instead listing broad justifications that could allow indefinite data retention even after the customer relationship ends.