Provision record
Heap · Heap Privacy Policy · View original document ↗

Retention for contract duration plus limitation period

Medium severity Explicit document language Common · 275 of 352 platforms
Stay ahead of the changes
Track Heap and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Heap's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

How other platforms handle this

Palantir Medium

We keep the personal data we collect in line with our internal data retention policies for as long as you use our services or as long as is necessary to: (i) fulfil the purpose(s) for which we collected the personal data; (ii) provide and secure our products and services; (iii) resolve disputes...

Faire Medium

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information...

Mistral AI Medium

Mistral AI shall retain the Customer Exportable Data and Assets for a period of thirty (30) days from the earlier between (a) the expiration of the Transitional Period or (b) Customer's notification under Section 2.2.2 (b) of these Additional Terms.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Where we are processing personal information based on contract, we generally will retain the information for the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the statute of limitations...

Excerpt from Heap's Privacy Policy

Applicable regulations

CCPA/CPRA
California, USA
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN

Provision details

Document information
Document
Heap Privacy Policy
Entity
Heap
Document last updated
May 5, 2026
Tracking information
First tracked
Last verified
Record ID
CA-P-073141
Document ID
CA-D-00706
Evidence Provenance
Source URL
Wayback Machine
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Heap
Document: Heap Privacy Policy
Record ID: CA-P-073141
Captured: UTC
URL: https://conductatlas.com/platform/heap/heap-privacy-policy/provision/CA-P-073141/retention-for-contract-duration-plus-limitation-period/
Accessed: Aug. 18, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Heap's Retention for contract duration plus limitation period clause do?

The clause states: “Where we are processing personal information based on contract, we generally will retain the information for the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the statute of limitations...”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.

Is ConductAtlas affiliated with Heap?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Heap.