KeyCorp Online Privacy Statement

KeyCorp (together with its subsidiaries and affiliates, "Key" or "we") is committed to maintaining the privacy and security of Personal Information. This Online Privacy Statement ("Statement") explains how Key collects, uses, shares, and protects your Personal Information. This Statement applies to our clients, employees, and other individuals from whom we collect Personal Information when you interact with us through Key's digital properties (e.g., websites, mobile applications), physical locations, such as branches, and affiliated websites displaying this Statement.

KeyCorp refers to all Key brands and affiliates including, but not limited to, KeyBank, Laurel Road, GradFin, and Key Investment Services.

The term Personal Information means information that alone or when in combination with other information may be used to identify, contact, or locate you, such as: address, email address, or phone number. Within this Statement, the term Personal Information also includes Sensitive Personal Information unless otherwise specified in the sections below. Sensitive Personal Information is called out separately in this Statement if it is handled differently. Sensitive Personal Information includes, but is not limited to, your social security number, drivers license and state identification numbers, login information, and financial account numbers.

At Key, we adhere to the following privacy principles:

If we change our privacy practices set forth in this Statement, we will make updates to this Statement and will provide additional notification to you, where required by law.

For any inquiries regarding our privacy practices, please call 1-800-KEY2YOU (539-2968).

For our Consumer Banking clients, please also see our KeyCorp Privacy Notice.

For Key employees and job applicants, please contact for additional information on our privacy practices related to employment and applicant information.

How We Use Your Personal Information

We use your Personal Information for reasons and business purposes such as:

For our clients and employees, we use your Sensitive Personal Information for reasons and business purposes such as:

We do not collect Sensitive Personal Information from website visitors or nonclients, including prospective clients or marketing leads.

Key and its service providers may also use anonymized or de-identified information for analysis to understand more about our customers and our industry, or for commercial purposes permitted by law. This information is not Personal Information.


What Personal Information We Collect

We collect your Personal Information in different ways depending on how you interact with us. For example, we collect your Personal Information from:

Depending on your relationship with us, the categories of your Personal Information and Sensitive Personal Information we collect may vary depending on your interaction with us but include:

Personal Information:

The Sensitive Personal Information contained in the above may include:

We retain each category of Personal Information above for the lengths of time required by applicable law and our retention policies.

How We Share Your Personal Information

We share your Personal Information among our affiliates (defined above) to offer additional products and services to you. This sharing occurs only within the Consumer Banking division including KeyBank, Key Investment Services, Laurel Road, and GradFin brands.

In addition, we share your Personal Information with our contracted service providers for the uses described in the “HOW WE USE YOUR PERSONAL INFORMATION” section above. The categories of third parties with which we share your Personal Information include:

You authorize us to share, and you consent to our sharing, your mobile subscriber details with service providers which will request your mobile carrier to use your mobile subscriber details for verifying your identity. Those details may include name, billing address, email, and phone number. This information may also include location information, if available. Additional use of your mobile subscriber data may be subject to third party privacy policies.

In addition, we may partner with third-parties (e.g., Meta, Google, LinkedIn, Trade Desk) to deliver and monitor advertisements on our Site and other sites across the web and digital properties (e.g., websites, mobile, etc.). We and/or our partners may monitor and record advertisement interactions, Web traffic, activities on third-party websites, and other activities in order to improve visitor experience and provide relevant advertising. We and/or our partners may use cookies, web beacons, or other monitoring technology to compile statistics about website traffic.

To learn more about this type of advertising, including how to opt out of certain types of online advertisements, please visit the Network Advertising Initiative’s website at Also note that opting out of this activity will not prevent advertisement placement. Generally speaking it will limit the placement of advertising that may interest you and place advertisements at random that may not be relevant to you.

We do not sell or otherwise share your Personal Information with third parties.

How We Protect Your Personal Information

We take our responsibility to protect your information very seriously. We use reasonable physical, technical, and procedural safeguards to secure your information from unauthorized use, access, alteration or disclosure. Please see Privacy & Security section for additional information.

What Your Privacy Rights Are and How You Can Exercise Your Privacy Rights

There are a number of privacy rights that may be afforded to you by laws and regulations regarding your Personal Information. Related to your interaction with KeyCorp, these privacy rights are as follows:

For California Residents under the California Privacy Rights Act (CPRA)

California residents have the right to request a copy of the categories or specific pieces of Personal Information a business has collected about them or to request deletion of certain Personal Information collected from the California resident. In addition, CPRA provides the right to correct inaccurate Personal Information a business maintains about the California resident.

Prior to processing your request and to protect your Personal Information, Key will perform reasonable processes to verify your identity which will require you to provide certain information for us to confirm against our records or independent sources.To submit a request to access your Personal Information we collect or to submit a deletion request for certain Personal Information click on the link to access our CCPA request page or call 1-800-KEY2YOU (539-2968).

If you are client and have identified Personal Information that needs correction, please call 1-800-KEY2YOU (539-2968).

If you are an employee and your information requires correction, please contact please contact

In addition to your California privacy rights to request, correct, or delete your Personal Information, CPRA also provides you with the right:

For Customers to limit information sharing among Key affiliates for marketing purposes:

To limit the sharing of your Personal Information among Key affiliates you can call 1-800-361-0968 and follow the prompts accordingly. Please see our KeyCorp Privacy Notice for more information on this sharing.

General Marketing Preferences

We offer you additional choices to limit our marketing to you including limiting our mail, telephone, and email marketing. Please contact us at call 1-800-361-0968 and follow the prompts accordingly.

Children’s Online Privacy

Our online services are not intended for the use of children under the age of 13. We do not knowingly collect or retain any Personal Information from individuals under the age of 13 online. To learn more about the Children’s Online Privacy Protection Act (COPPA) please visit the Federal Trade Commission’s website at

Other Important Information Related To The Use And Control Of Your Information

Links to Third-Party Websites including Financial Data Aggregators

Our digital properties (e.g., websites, mobile applications) may contain links to third-party websites that link our products/services to Financial Data Aggregators (FDAs) when you choose to utilize services offered by FDAs. You should use caution and ensure that the FDA has appropriate policies and practices to protect the privacy and security of the information you provide. The use of your information by the FDA is governed by the FDA’s terms of use, not by Key. Key is not responsible for any information that you provide FDAs and if you share your information such as username and password, we will consider that you have consented and authorized any transaction initiated by using the information you provided.

Our Site may also contain information from third-party sites or provide surveys, advertisements, online calculators, forms, tips and tools related to fraud prevention or links to governance regulator websites for additional information. These links, pointers, and information from third party websites or applications are not part of our Site. This Statement does not apply to the online practices of these third-party websites. Key does not make any representations or warranties regarding these third-party websites. We are not responsible for any losses or damages in connection with the information, security, privacy practices, availability, content, or accuracy of materials of such third-party websites or applications. These third-party websites or applications might have Terms of Use or Privacy Policies different from us and third-party websites may provide less privacy and/or security than our Site. We encourage you to review the Terms of Use and Privacy Policy of all third-party websites before you share any Personal Information with them.

Physical Hardware Beacons at Our Bank Locations

Our customer-facing physical locations such as branches, ATM vestibules, and Key sponsorship/marketing events may also utilize your mobile device location services to identify when you are in or around one of our physical locations. You will be prompted to allow Key access to your location services. We may use your location services including your mobile device identifier to communicate with you including welcoming you to our properties, targeting advertisements, or offering other services such as automatically unlocking an ATM vestibule as you approach and locating a nearby branch. When you download our mobile application, you are provided additional information on this data collection and how to enable or disable the sharing over your mobile device information. You can enable/disable location sharing for our mobile applications within Settings of Key Applications on your own device at any time.

Use of Artificial Intelligence to Enhance Your Customer Experience

When you use our digital properties, we may utilize Artificial Intelligence (AI) based software or other mathematical models to analyze your financial transaction history and provide you with personalized insights into your account activity over time to assist with managing your finances. For example, notifying you when your paycheck is direct deposited; alerting you when you have a payment scheduled but not enough funds in your account; and providing suggestions on performing certain activities to save money. You consent to the use of this software when you accept the terms and conditions of our digital properties.

Third-Party Widgets

Please also be aware that we allow certain widgets (e.g., social share buttons) on our digital properties that enable users to easily share information on another platform, such as a social media platform. The third parties that own these widgets may have access to information about your browsing on pages of our digital properties where these widgets are placed.


Cookies are small text files that are placed on your device to distinguish you from other visitors to our digital properties. The use of cookies helps Key to improve your experience on our digital properties by helping provide usage data on the performance of our digital properties. The use of cookies is a standard practice. Key or our third-party advertising service providers may place cookies or similar files on your device’s hard drive. Certain browsers can inform you every time a cookie is being sent to you and certain web browsers allow you to choose not to accept cookies. You can also delete cookies from your computer at any time. If you refuse cookies, the functionality of our website may be impacted or become non-functional. Since every browser and device is different, you will need to follow your browser’s instructions for disabling or deleting cookies. Most web browsers allow you to delete or decline cookies, however doing so may impact your digital experience. For example, you may have to identify yourself more frequently, as services like Online Banking require you to accept cookies or similar files in order to function properly.

Pixels, Web Beacons, and Other Technologies

Key or our third-party advertising service providers may also use technologies to track users’ interactions with our digital properties. Some of these technologies include web beacons (transparent graphical images placed on a website), pixels, tags, and Flash objects (also referred to as “Local Shared Objects”). Please refer to your browser’s instructions to remove cached sites, history, and images from your device.

Additional Information on Digital Behavioral Advertising

Key and other third parties may collect information about your digital activities over time and across different digital properties when you use our digital properties. Some of the advertisements that click-through to Key’s digital presence and/or may be on Key’s digital presence contain cookies that allow for the monitoring of your response to these advertisements (sometimes referred to as interest-based advertisements), to help understand campaign effectiveness. This information is used by Key and others to analyze and track data, determine the popularity of certain content, deliver content targeted to users’ interests on our services and other digital properties, and to better understand digital activity. Key’s advertisements may also appear on other digital properties that use the same advertising service providers as Key does. These advertising service providers may use your browsing history across websites to choose which advertisements to display to you.

How browsers communicate Do Not Track signals is not yet uniform. As a result, this site is not currently equipped to interpret or respond to Do Not Track signals communicated by your browser. To learn more about online tracking, you can visit the Future of Privacy Forum’s “All About Do Not Track” website.

If you do not wish to have us or our third-party advertising service providers know which advertisements and subsequent websites you have viewed, you may opt-out at AboutAds (established by the Digital Advertising Alliance). The Digital Advertising Alliance website contains important information on cookies, behavioral advertising, and what opting out will and will not do and choices you can make regarding interest-based advertisements.

To learn more about this type of advertising, including how to opt out of certain types of online advertisements, please visit the Network Advertising Initiative's website at

These tracking technologies are used to gather information about Key’s user base. The information collected may include device-specific information (including, but not limited to, hardware model or version, operating system version, and unique device identifiers) and unique application numbers if included within the respective service. Key may produce and receive reports on this information from and by leveraging analytic service providers to understand specific market segments based on the demographic, location, and interest data received. This information may be used for, but not limited to, Remarketing, Display Network Impression Reporting, and Demographics and Interest Reporting. The use of these tracking features is governed by Google’s Privacy Policy, as amended by Google. You may opt-out of this data collection by installing the Google Analytics Opt-Out Browser Add-on and Google Ad Removal Plugin.

Please note: opting out of behavioral advertising will not stop you from receiving advertisements. You will still see the same number or a similar number of advertisements as before, but they may not be as relevant to you. If you use other devices or browsers and want to opt out of interest-based advertisements, you will need to repeat this process for each computer or browser. If you delete your cookies and want to continue to be opted out of interest-based advertisements, you will have to repeat this opt-out process.

Secure Submission of Personal Information

Please only submit Personal Information to Key through secure channels such as online applications, over the phone, or as otherwise directed by a Key representative. Do not provide Sensitive Personal Information, such as your social security number or account number, in public forums, such as social media websites. Please carefully review the Terms of Use and Privacy Policies on these social media and other sites as they may be different than our own policies.

Adobe Device Co-Op

Key participates in the Adobe Marketing Cloud Device Co-op, which helps companies build websites, applications, and advertisements that seamlessly flow across all user devices (desktops, laptops, tablets, phones, smart watches, etc.). The Adobe Marketing Cloud Device Co-op recognizes which of your devices are linked (used by the same person) through the use of technology that includes cookies and your IP address. Visit the Adobe website at for more information on cross-device tracking and/or to unlink your devices.

Social Media

Key provides information about our products, services, and community involvement on social media sites like Facebook and Twitter. Please keep in mind that any information you share on these social media sites is visible to all users. You should never post any Sensitive Personal Information (such as account number or social security number) on these sites. Please carefully review the Terms of Use and Privacy Policy on these sites as they may be different than our own policies.

Digital Session Recording

We use digital session recording to troubleshoot website and mobile performance and individual user issues, as needed. Sensitive Personal Information such as account number is masked within this session recording. You consent to the use of session recording when you agree to our online banking terms and conditions.

Changes to Key's Online Privacy Statement

Key's Online Privacy Statement is subject to change from time to time. When changes are made, Key will communicate these changes to you by posting the revised Statement on this page and adjust the “Last Updated” date. Any changes to this Statement will become effective on the date of posting unless indicated otherwise.

Last updated: January 1, 2023

(ID 2139-512)