Prior to asking a user to link their financial account, you should clearly explain your purpose for collecting their data, including how you will use and store their data. More details on Stripe’s guidelines for accessing your user’s information can be found here.

Prior to accessing your user’s financial data, your user must complete the Financial Connections authentication flow and agree to Stripe’s Terms and Privacy Policy. When completing the authentication flow, your user will see the data you’ve specified from the permissions parameter, and provide their consent to share this data.

If you are linking the user’s account to power an ACH Direct Debit transaction, you will also need to collect authorization from the user before initiating any ACH debits.