Mailchimp is an email and marketing-automation platform owned and operated by The Rocket Science Group LLC, which is part of the Intuit group of companies (Intuit acquired Mailchimp in 2021); its data practices are governed by Intuit's Global Privacy Statement alongside a Mailchimp-specific Cookie Statement. Intuit's privacy statement discloses that personal information collected through one product, including "contact and purchase history details from Mailchimp," may be pooled and reused across its other products (QuickBooks, TurboTax, Credit Karma). Mailchimp's own Cookie Statement states it automatically embeds tracking pixels in every campaign email sent by its business customers, recording each recipient's email address, IP address, and the date/time of opens and clicks, and that it works with third-party ad networks to serve targeted advertising using cookies and pixel tags. Intuit states it does not sell personal information under the CCPA but does engage in "sharing" that consumers must opt out of. Ownership is fully traceable: Intuit Inc. is a public company (Nasdaq: INTU) per its SEC 10-K. Mailchimp's own newsroom disclosed a January 2023 security incident in which a social-engineering attack on employees gave an unauthorized actor access to 133 customer accounts; Mailchimp says it found no evidence of broader Intuit-system compromise and no credit card or password data was taken.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
10 ON FILE
[2026-03-09] · COLLECTION
Intuit's Global Privacy Statement states that personal information collected through any one Intuit product may be used across the entire "Intuit Platform," explicitly citing "contact and purchase history details from Mailchimp" as an example of data pooled with QuickBooks bookkeeping data, TurboTax information, and Credit Karma recommendations.
Mailchimp's Cookie Statement directly names its operating entity and corporate parent: Mailchimp is owned and operated by The Rocket Science Group LLC and is part of the Intuit group of companies, with Intuit, Inc. as its parent entity.
The service's policy indicates if you offer suggestions to the service, they may use that without your approval or compensation, but they do not become the owner.
Intuit Inc.'s Form 10-K (fiscal year 2025), filed with the SEC, confirms Intuit's common stock is registered and trades on the Nasdaq Global Select Market under ticker symbol INTU.
Mailchimp's Cookie Statement states it partners with third-party advertisers and ad networks that use cookies, web beacons, and pixel tags to collect data across the Mailchimp Sites and other sites/apps in order to serve targeted advertising.
Intuit's Global Privacy Statement states that Intuit and Mailchimp do not sell personal information under the CCPA, but offers a separate opt-out for the "sharing" of personal information — the CCPA term for cross-context behavioral-advertising disclosure — indicating Mailchimp self-declares this share-for-advertising practice while disclaiming sale.
Mailchimp's own newsroom notice discloses that on January 11, 2023, a social-engineering attack against Mailchimp employees and contractors gave an unauthorized actor access to a customer-support tool and, through it, to select customer accounts; the incident was limited to 133 Mailchimp accounts, with no evidence of broader Intuit-system compromise and no credit card or password data taken.
Mailchimp's Cookie Statement discloses that it automatically embeds single-pixel web beacons in every campaign email sent by its business customers ('Members'), which record each recipient's email address, IP address, and the date and time associated with every email open and link click.
Intuit's Global Privacy Statement confirms that certain parts of the Intuit Platform (which includes Mailchimp) make use of biometric personal information, collected only after providing notice and obtaining consent, per a separate Biometric Notice.