If you log in using a third-party account like Google or Facebook, Character.AI collects information from that account and may retain it even after you disconnect the connection.
This analysis describes what Character.AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision establishes the operational mechanism by which Character.AI obtains user identity information through federated authentication, rather than requiring users to create separate credentials. This creates a data flow pathway from third-party platforms to Character.AI's systems during the login process.
Removal of this provision eliminates transparency about third-party integration practices and associated data sharing risks.
View full change record →Users who connect social accounts may be surprised to learn that disconnecting the account does not erase previously collected data, limiting the effectiveness of account unlinking as a privacy control.
How other platforms handle this
Your posts and certain profile information may remain even after you terminate your account. We urge you to consider the sensitivity of any information you may disclose in this way.
If you delete your account, we aim to delete your personal information from our servers within 30 days.
Affirm will retain your information in accordance with our Privacy Policy and any applicable state or federal law, rule or regulation.
"When you connect to us or log in through a Third-Party Account like Facebook or Google, we receive information from that third party identifying your account. Information we collect in this context includes third-party account details such as username or email address. We collect and store this information and use it to help you connect to the Services.Excerpt from Character.AI's Privacy Policy
Retention of previously collected third-party account data post-revocation of permission requires careful legal basis documentation under GDPR Article 6 and may conflict with data subject deletion requests under Article 17.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The provision establishes the operational mechanism by which Character.AI obtains user identity information through federated authentication, rather than requiring users to create separate credentials. This creates a data flow pathway from third-party platforms to Character.AI's systems during the login process.
Users who connect social accounts may be surprised to learn that disconnecting the account does not erase previously collected data, limiting the effectiveness of account unlinking as a privacy control.
ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Character.AI.