Provision record
Heap · Heap Privacy Policy · View original document ↗

No retention of payment card information

Medium severity Explicit document language Common · 275 of 352 platforms
Stay ahead of the changes
Track Heap and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Heap's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

How other platforms handle this

Walmart Medium

We will keep the personal information we collect about you for as long as necessary to carry out the purposes set forth in this Privacy Notice...but no longer than as required or permitted under applicable law or internal Walmart policy.

Disney+ Medium

We will keep your detailed payment information, such as credit card number and expiration date, on file.

NVIDIA NIM Medium

If the disclosing party sends a written request, the receiving party will promptly return or destroy all Confidential Information received from the disclosing party, together with copies, except that a party may retain archival copies in accordance with its document retention policy or as required b...

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
We do not retain any personally identifiable financial information such as credit card numbers. Rather, all such information is provided directly by you to our third-party processor.

Excerpt from Heap's Privacy Policy

Applicable regulations

CCPA/CPRA
California, USA
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN

Provision details

Document information
Document
Heap Privacy Policy
Entity
Heap
Document last updated
May 5, 2026
Tracking information
First tracked
Last verified
Record ID
CA-P-073111
Document ID
CA-D-00706
Evidence Provenance
Source URL
Wayback Machine
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Heap
Document: Heap Privacy Policy
Record ID: CA-P-073111
Captured: UTC
URL: https://conductatlas.com/platform/heap/heap-privacy-policy/provision/CA-P-073111/no-retention-of-payment-card-information/
Accessed: Aug. 18, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Heap's No retention of payment card information clause do?

The clause states: “We do not retain any personally identifiable financial information such as credit card numbers. Rather, all such information is provided directly by you to our third-party processor.”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.

Is ConductAtlas affiliated with Heap?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Heap.