Cohere removed 16 sentences from its privacy policy that previously specified data retention practices for different user types and procedures for requesting deletion of personal information inadvertently included in platform inputs. The updated policy now provides only a general reference to retention practices without specifying the 30-day retention period for Enterprise Users, the non-processing of personal information for Trial and Researcher accounts, response timelines for deletion requests, or guidance on training data deletion. This creates operational ambiguity about what retention periods currently apply to different user categories and how deletion requests are handled.
All users: Users can no longer find in the privacy policy specific information about how long their data is kept or how quickly deletion requests will be answered.
The updated policy removes explicit language describing data retention timelines and deletion request procedures that were previously available. The prior policy stated that Enterprise Users' inputs and outputs were retained for 30 days, that Trial Users and Researchers were not intended to process personal information, and that deletion requests would normally be responded to within one month (up to three months for complex requests). The updated policy now contains only a general reference to 'retention practices' without specifying these timelines, response windows, or user-type distinctions. Users cannot determine from the updated policy what retention periods apply to their account category or what timeline to expect for deletion requests.
→ Locate and review Cohere's external 'retention practices' documentation to determine what retention periods apply to your account type.
→ If you submitted a deletion request and have not received a response within the timeline you expect, contact privacy@cohere.com for clarification on response procedures.
Removal of explicit 30-day retention period for Enterprise Users and statement that Trial/Researcher accounts are not intended to process personal information.
Removal of stated response timelines (normally one month; up to three months for complex requests) and verification procedures for deletion requests.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
The removal of specific retention period disclosures and deletion request procedures creates compliance risk under privacy frameworks that require transparency about data retention practices. GDPR Article 17 and similar regulations obligate controllers to disclose how …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001945.
In an update detected on August 18, 2026, Cohere revised its Enterprise Data Commitments to explicitly describe data handling controls …
In an update detected on August 18, 2026, Cohere's Terms of Use were revised to reflect product navigation changes. The …
The change detected on August 18, 2026 involves updates to product navigation and naming on Cohere's website. The updated text …
Buried in Robinhood's customer agreement is broad authority to close your positions, suspend your account, and force arbitration. Here is w…
Stripe's terms authorize fund reserves, payout withholding, and account termination. Here is what the agreement states and what business ow…
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.