What can I do about this clause?

{'method': 'EMAIL', 'recipient': 'privacy@acorns.com', 'difficulty': 'EASY', 'action_type': 'DELETE_DATA', 'instructions': 'To request deletion of your personal data, email privacy@acorns.com with your name and account email address. Acorns must respond within 45 days and must specify if any data is being retained and under which legal exception.', 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'CFPB', 'reason': 'The CFPB oversees data retention and privacy practices of financial service providers and can investigate improper retention of consumer financial data.', 'complaint_url': 'https://www.consumerfinance.gov/complaint/'}

What is the severity of this clause?

ConductAtlas classifies this Data Retention and Deletion Rights clause as medium severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Do other platforms have similar clauses?

Yes. ConductAtlas has identified similar Data Retention and Deletion Rights clauses across approximately 4 other tracked platforms. You can compare how platforms differ on this clause type in the cross-platform comparison view.

Data Retention and Deletion Rights — Acorns

Share 𝕏 Share in Share 🔒 PDF

What it is

Acorns keeps your data even after you close your account if it has legal or business reasons to do so, which means closing your account does not guarantee your data is fully deleted.

Consumer impact (what this means for users)

Closing your Acorns account does not result in immediate deletion of all your personal and financial data; Acorns retains data for legal compliance and unspecified business purposes for an undetermined period post-closure.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Delete Your Data

To request deletion of your personal data, email privacy@acorns.com with your name and account email address. Acorns must respond within 45 days and must specify if any data is being retained and under which legal exception.

Cross-platform context

See how other platforms handle Data Retention and Deletion Rights and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Financial services firms have long retention obligations, but the open-ended 'legitimate business purposes' retention basis means your data may persist indefinitely after account closure without clear limits disclosed to you.

View original clause language

We retain personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. When you close your account, we may retain certain information as required by law or for legitimate business purposes, including to comply with our legal obligations, resolve disputes, and enforce our agreements.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: Regulation S-P (17 CFR Part 248) and FINRA Rule 4511 require broker-dealers and investment advisers to retain customer records for specified periods (typically 3-6 years). GLBA and CFPB examination guidance require retention for dispute resolution. CCPA/CPRA §1798.105 requires that deletion requests be honored unless a legal exception applies — the 'legitimate business purposes' exception must be narrowly applied and documented.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

CFPB

The CFPB oversees data retention and privacy practices of financial service providers and can investigate improper retention of consumer financial data.
File a complaint →

Provision details

Document information

Document

Acorns Privacy Policy

Entity

Acorns

Document last updated

April 29, 2026

Tracking information

First tracked

April 18, 2026

Last verified

April 18, 2026

Record ID

CA-P-002895

Document ID

CA-D-00172

Evidence Provenance

Source URL

https://www.acorns.com/privacy/

Wayback Machine

View archived versions →

SHA-256

8f942504d66331c35a17fda03088196d39a24f21469df43439f551c11b3f4c7d

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Acorns | Document: Acorns Privacy Policy | Record: CA-P-002895
Captured: 2026-04-18 10:35:59 UTC | SHA-256: 8f942504d66331c3…
URL: https://conductatlas.com/platform/acorns/acorns-privacy-policy/data-retention-and-deletion-rights/
Accessed: May 2, 2026

Classification

Severity

Medium

Data Retention and Deletion Rights