Sezzle is a buy-now-pay-later (BNPL) service operated by Sezzle Inc., a Delaware-incorporated, Minneapolis-headquartered company publicly traded on Nasdaq (SEZL), whose FY2025 Form 10-K discloses that founder/CEO Charlie Youakim holds approximately 44.2% beneficial ownership per a Schedule 13D filing. Sezzle's own iOS App Store privacy label declares that Location, Contact Info and Identifiers linked to the user's identity may be 'used to track you across apps and websites owned by other companies,' alongside a broader set of Financial Info, Location, Contact Info, Identifiers and Usage Data collected and linked to identity. Sezzle's privacy-policy pages at legal.sezzle.com are JavaScript-rendered single-page-app shells that returned no server-rendered text under a live fetch or a Wayback snapshot, so no direct privacy-policy language could be cited in this research; the 10-K confirms Sezzle operates under GLBA and applicable state/federal privacy laws and discloses that it maintains PCI DSS Level 1 service-provider certification, independently assessed by a Qualified Security Assessor. No breach or FTC/CFPB enforcement action specific to Sezzle's data practices was found in this research.
TRACK RECORD
1 ENFORCEMENT ACTION
[2026-02-24]
Sezzle Inc.'s FY2025 Form 10-K states that the company engages third-party service providers 'to conduct evaluations of our security controls, including independent audits,' with results reported to management and the Audit and Risk Committee, and separately discusses Gramm-Leach-Bliley Act and applicable state/federal privacy-law compliance as part of its regulatory framework; no breach or specific enforcement action against Sezzle was disclosed in the sections reviewed.
The Sezzle iOS App Store privacy label states that Financial Info, Location, Contact Info, Identifiers and Usage Data may be collected and linked to the user's identity, with Payment Info and Credit Info also collected under an 'App Functionality' use category; User Content and Diagnostics are collected but not linked to identity.
The SEC EDGAR company registry confirms Sezzle Inc. as CIK 0001662991, a Delaware-incorporated company headquartered at 700 Nicollet Mall, Suite 640, Minneapolis, MN, with a continuous 10-K filing history back to 2022, corroborating the corporate identity and control structure described in the 10-K.
Sezzle Inc.'s FY2025 Form 10-K discloses that, per an Amendment No. 1 to a Schedule 13D filed with the SEC on February 11, 2025, founder and CEO Charlie Youakim reported beneficial ownership of over 14,899,386 shares of common stock, representing approximately 44.2% beneficial ownership of the company.
The same App Store 'Data Used to Track You' disclosure indicates that identity-linked Location, Contact Info and Identifiers are made available to other companies for cross-app/cross-website tracking, functioning as a self-declared third-party data disclosure distinct from Sezzle's own first-party use; no privacy-policy language describing sharing terms could be independently verified because legal.sezzle.com's privacy-policy pages render as a client-side app shell with no fetchable text.
Sezzle's own PCI DSS policy page states that the company 'is certified as a Level 1 Service Provider under the Payment Card Industry Data Security Standard (PCI DSS), the highest level of PCI certification available to service providers,' and that this certification means 'an independent Qualified Security Assessor (QSA) has fully assessed Sezzle's security controls, rather than Sezzle assessing itself.'
Sezzle Inc.'s FY2025 Form 10-K states that the company engages third-party service providers 'to conduct evaluations of our security controls, including independent audits,' with results reported to management and the Audit and Risk Committee, and separately discusses Gramm-Leach-Bliley Act and applicable state/federal privacy-law compliance as part of its regulatory framework; no breach or specific enforcement action against Sezzle was disclosed in the sections reviewed.
The Sezzle iOS App Store privacy label discloses a 'Data Used to Track You' category stating that Location, Contact Info and Identifiers 'may be used to track you across apps and websites owned by other companies' — Apple's App Tracking Transparency category for cross-app/cross-site tracking.