No, not without your permission. The only exceptions are abuse or fraud investigations and valid legal process.
We also don't store full credit card numbers, and security researchers can report vulnerabilities through our HackerOne programme.
📖 More: Platform Security · Infrastructure Security