Glean retains Personal Information for the duration necessary to fulfill the business purposes of collection and to meet legal, accounting, and dispute resolution obligations, with retention periods determined by sensitivity, risk, and applicable legal requirements.
This analysis describes what Glean's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The retention policy does not specify fixed retention periods for any data category, relying instead on purpose-based and obligation-based standards, which may require supplemental documentation to satisfy GDPR's storage limitation principle and CCPA's reasonable retention requirements.
Interpretive note: The absence of specific retention periods for each data category means operational compliance depends on undisclosed internal retention schedules, which cannot be assessed from this document alone.
Under this clause, Personal Information is retained on a purpose-based basis without stated fixed timelines; individuals exercising deletion rights should note that retention may continue where required for legal obligations, dispute resolution, or asset protection, as enumerated in the exemptions.
How other platforms handle this
Affirm will retain your information in accordance with our Privacy Policy and any applicable state or federal law, rule or regulation.
We collect and keep personal data only as needed or allowed for the purposes set out in this Statement, based on the reason we collected the personal data in the first instance and what is permitted under the laws that apply to the processing.
Mistral AI shall retain the Customer Exportable Data and Assets for a period of thirty (30) days from the earlier between (a) the expiration of the Transitional Period or (b) Customer's notification under Section 2.2.2 (b) of these Additional Terms.
"We retain Personal Information only as long as necessary to fulfill the legitimate business purposes for which it was collected, or as required to meet legal, accounting, reporting or other business obligations; resolve disputes; protect assets; and enforce agreements. In determining retention periods, we consider the nature and sensitivity of the information, the risk of unauthorized use or disclosure, whether purposes can be achieved through other means, and applicable legal requirements.Excerpt from Glean's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages GDPR's storage limitation principle, CCPA's reasonableness standard for retention, and LGPD's requirements for processing necessity.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The retention policy does not specify fixed retention periods for any data category, relying instead on purpose-based and obligation-based standards, which may require supplemental documentation to satisfy GDPR's storage limitation principle and CCPA's reasonable retention requirements.
Under this clause, Personal Information is retained on a purpose-based basis without stated fixed timelines; individuals exercising deletion rights should note that retention may continue where required for legal obligations, dispute resolution, or asset protection, as enumerated in the exemptions.
ConductAtlas has identified this type of provision across 274 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Glean.