The notice identifies data retention as a discrete subject, indicating that the policy describes the periods or criteria used to determine how long personal information is retained.
This analysis describes what Afterpay's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Data retention terms for a consumer financial services provider engage GLBA recordkeeping requirements, CCPA/CPRA rights to deletion, and state privacy law obligations that may limit retention beyond the purpose for which data was collected.
Interpretive note: The specific retention periods and criteria are described in a section of the notice not fully reproduced in the document text provided, preventing assessment of their scope or adequacy.
The agreement addresses data retention practices in a dedicated section; the specific retention periods or criteria applicable to different categories of personal information are described there.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"How Long We Keep Your InformationExcerpt from Afterpay's Privacy Policy
(1) REGULATORY LANDSCAPE: Data retention practices for a GLBA-covered entity engage Regulation P and applicable federal financial recordkeeping requirements.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Data retention terms for a consumer financial services provider engage GLBA recordkeeping requirements, CCPA/CPRA rights to deletion, and state privacy law obligations that may limit retention beyond the purpose for which data was collected.
The agreement addresses data retention practices in a dedicated section; the specific retention periods or criteria applicable to different categories of personal information are described there.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Afterpay.