The government doesn't hide the fact that all this data can and will be used by the IRF equivalent in Brazil (Receita Federal)
I would assume the same for any credit card payment in the US