The policy states personal data is retained until proactively deleted by AI21 or upon a valid user deletion request, with exceptions permitting extended retention for legal and regulatory compliance, dispute records, anticipated litigation, and aggregated data, with no stated maximum retention periods.
This analysis describes what AI21 Labs's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision does not specify maximum retention periods for any category of personal data, and the carve-outs for legal compliance, dispute records, and litigation prospect are open-ended in scope and duration. This structure may require evaluation under GDPR's storage limitation principle, which generally requires that personal data not be kept longer than necessary for its stated purpose.
Under these terms, personal data will be retained until AI21 proactively deletes it or until a valid deletion request is submitted, with no stated maximum retention period. Extended retention is permitted for legal compliance, dispute records, litigation prospect, and aggregated data purposes, with the applicable duration left unspecified.
Cross-platform context
See how other platforms handle Data Retention with Open-Ended Carve-Outs and similar clauses.
Compare across platforms →"Your Personal Data will be stored until we proactively delete it, or you send a valid deletion request. Please note that in some circumstances we may store your Personal Data for longer periods of time. These circumstances include: (i) where we are required to do so, for example for compliance with legal and regulatory requirements in accordance with legal, regulatory, tax or accounting requirements, (ii) for us to have an accurate record of your dealings with us in the event of any complaints or challenges, (iii) if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings, and/or (iv) in the form of Aggregated Information.Excerpt from AI21 Labs's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision implicates GDPR's storage limitation principle, which requires that personal data be kept no longer than necessary for the purposes for which it is processed.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision does not specify maximum retention periods for any category of personal data, and the carve-outs for legal compliance, dispute records, and litigation prospect are open-ended in scope and duration. This structure may require evaluation under GDPR's storage limitation principle, which generally requires that personal data not be kept longer than necessary for its stated purpose.
Under these terms, personal data will be retained until AI21 proactively deletes it or until a valid deletion request is submitted, with no stated maximum retention period. Extended retention is permitted for legal compliance, dispute records, litigation prospect, and aggregated data purposes, with the applicable duration left unspecified.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AI21 Labs.