Anthropic · Anthropic Privacy Policy

Deletion Rights and 30-Day Back-End Purge

Medium severity
Share 𝕏 Share in Share 🔒 PDF

What it is

You can delete individual conversations from Claude.ai and they will disappear from your view immediately, but Anthropic keeps them on its servers for up to 30 more days before fully deleting them.

Consumer impact (what this means for users)

When you delete a conversation in Claude.ai, your conversation data is not immediately and permanently destroyed — Anthropic retains it internally for up to 30 days, during which it remains on Anthropic's servers and is subject to its security and access policies.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    In Claude.ai, open the conversation you wish to delete, select the option to delete it from your conversation history. The conversation will be removed from your view immediately and deleted from Anthropic's back-end systems within 30 days. For full account data deletion, email privacy@anthropic.com.

Cross-platform context

See how other platforms handle Deletion Rights and 30-Day Back-End Purge and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

There is a 30-day window after you delete a conversation during which Anthropic still retains it on its back-end systems, which means the data is not immediately erased and could potentially be accessed or used during that window.

View original clause language
the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions. You also are able to delete individual conversations, which will be removed immediately from your conversation history and automatically deleted from our back-end within 30 days. Learn more here.

Institutional analysis (Compliance & legal intelligence)

1. REGULATORY FRAMEWORK: GDPR Art. 17 (right to erasure/'right to be forgotten') requires erasure 'without undue delay,' which the EDPB has interpreted as typically within one month. A 30-day back-end retention period after user-initiated deletion is within this window but requires clear justification. CCPA §1798.105(d) requires deletion within 45 days of a verified request (extendable by 45 additional days). Brazil LGPD Art. 18(VI) provides a deletion right. The 30-day period is also relevant to backup and disaster recovery retention — the policy does not specify whether backups are separately purged, which is a common gap in erasure compliance. 2.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has authority over data retention and deletion representations under Section 5, including whether companies delete data within the timeframes they represent to consumers.
    File a complaint →

Provision details

Document information
Document
Anthropic Privacy Policy
Entity
Anthropic
Document last updated
April 29, 2026
Tracking information
First tracked
March 6, 2026
Last verified
April 28, 2026
Record ID
CA-P-003864
Document ID
CA-D-00012
Evidence Provenance
Source URL
Wayback Machine
SHA-256
55f589f5c2a5a187a9d045dc6c7e4954a2dbf9ac00fb6e3ea782dbcf9ad69387
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Anthropic | Document: Anthropic Privacy Policy | Record: CA-P-003864
Captured: 2026-03-06 20:00:36 UTC | SHA-256: 55f589f5c2a5a187…
URL: https://conductatlas.com/platform/anthropic/anthropic-privacy-policy/deletion-rights-and-30-day-back-end-purge/
Accessed: April 29, 2026
Classification
Severity
Medium
Categories

Other provisions in this document