Michael Zimmer.org

With their recent push to get the citizens of Planet Google to start using Google Checkout, Google’s growing infrastructure of dataveillance now includes purchasing data. From Google Checkout’s privacy policy:

• Registration information – When you sign up for Google Checkout, we ask for your personal information so that we can provide you with the service. The information we require to register for the service includes your name, credit or debit card number, card expiration date, card verification number (CVN), address, phone number, and email address. For sellers, we also require you to provide your bank account number, and in some situations, your personal address, your business category, your taxpayer identification number or social security number, and certain information about your sales or transaction volume. This information allows us to process payments and protect users from fraud. In some cases, we may also ask you to send us additional information or to answer additional questions to help verify your information. The information we collect is stored in association with your Google Account.
• Information obtained from third parties – In order to protect you from fraud or other misconduct, we may obtain information about you from third parties to verify the information you provide. For example, we may use card authorization and fraud screening services to verify that your credit or debit card information and address match the information that you provided to us. Also, for sellers, we may obtain information about you and your business from a credit bureau or a business information service such as Dun & Bradstreet.
• Transaction information – When you use Google Checkout to conduct a transaction, we collect information about each transaction, including the transaction amount, a description provided by the seller of the goods or services being purchased, the names of the seller and buyer, and the type of payment used.

John Battelle has much more.