Acorns · Acorns Privacy Policy · View original document ↗

Data Retention and Deletion Rights

Medium severity Rare · 7 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Acorns recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Acorns Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Acorns keeps your data even after you close your account if it has legal or business reasons to do so, which means closing your account does not guarantee your data is fully deleted.

This analysis describes what Acorns's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The provision clarifies the operational conditions under which personal data remains in Acorns' systems beyond active service use. By conditioning retention on legal requirements and legitimate business purposes, the clause establishes a framework that extends data retention obligations beyond the service relationship itself.

Recent Activity

This document changed recently

Medium Apr 18, 2026

The updated policy removes explicit language describing how data flows when users sign in via Apple or Google, including what information those services share with Acorns and how it is used. Previously, the policy stated that Acorns receives information such as name and email address through third-party sign-in services solely to manage accounts and provide services. The revised language also shifts the AI chatbot from an optional feature users 'may access' to a stated service Acorns 'uses' to direct users to internal articles. Users no longer have a published explanation of third-party sign-in data practices in the privacy notice, though the terms suggest data shared through third-party services remains subject to those providers' terms.

View change record →

Consumer impact (what this means for users)

Closing your Acorns account does not result in immediate deletion of all your personal and financial data; Acorns retains data for legal compliance and unspecified business purposes for an undetermined period post-closure.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    To request deletion of your personal data, email privacy@acorns.com with your name and account email address. Acorns must respond within 45 days and must specify if any data is being retained and under which legal exception.

How other platforms handle this

Public.com Medium

We retain personal information for as long as necessary to provide our Services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and for other legitimate and lawful business purposes.

Spotify Medium

Please note there are situations where Spotify is unable to delete your data, for example when: it's still necessary to process the data for the purpose we collected it for; we have an overriding interest in continuing to process the data, for example where we need the data to protect our services f...

X Medium

If you follow the instructions here, your account will be deactivated and your data will be queued for deletion. When deactivated, your X account, including your display name, username, and public profile, will no longer be viewable on X.com, X for iOS, and X for Android. For up to 30 days after dea...

See all platforms with this clause type →

Monitoring

Acorns has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We retain personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. When you close your account, we may retain certain information as required by law or for legitimate business purposes, including to comply with our legal obligations, resolve disputes, and enforce our agreements.

— Excerpt from Acorns's Acorns Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY FRAMEWORK: Regulation S-P (17 CFR Part 248) and FINRA Rule 4511 require broker-dealers and investment advisers to retain customer records for specified periods (typically 3-6 years). GLBA and CFPB examination guidance require retention for dispute resolution. CCPA/CPRA §1798.105 requires that deletion requests be honored unless a legal exception applies — the 'legitimate business purposes' exception must be narrowly applied and documented.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • CFPB
    The CFPB oversees data retention and privacy practices of financial service providers and can investigate improper retention of consumer financial data.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
FCRA
United States Federal
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN

Provision details

Document information
Document
Acorns Privacy Policy
Entity
Acorns
Document last updated
May 5, 2026
Tracking information
First tracked
April 18, 2026
Last verified
April 18, 2026
Record ID
CA-P-002895
Document ID
CA-D-00172
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
8f942504d66331c35a17fda03088196d39a24f21469df43439f551c11b3f4c7d
Analysis generated
April 18, 2026 10:35 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Acorns
Document: Acorns Privacy Policy
Record ID: CA-P-002895
Captured: 2026-04-18 10:35:59 UTC
SHA-256: 8f942504d66331c3…
URL: https://conductatlas.com/platform/acorns/acorns-privacy-policy/data-retention-and-deletion-rights/
Accessed: June 17, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Acorns's Data Retention and Deletion Rights clause do?

The provision clarifies the operational conditions under which personal data remains in Acorns' systems beyond active service use. By conditioning retention on legal requirements and legitimate business purposes, the clause establishes a framework that extends data retention obligations beyond the service relationship itself.

How does this clause affect you?

Closing your Acorns account does not result in immediate deletion of all your personal and financial data; Acorns retains data for legal compliance and unspecified business purposes for an undetermined period post-closure.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 7 platforms. See the full comparison.

Is ConductAtlas affiliated with Acorns?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Acorns.