This analysis describes what Indeed's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Retention continues by default until one of three conditions is met, meaning data is not automatically deleted after a fixed period unless a specific legal or user-driven trigger occurs.
Interpretive note: The excerpt contains three independent retention-ending conditions; the canonical claim captures all three as a compound condition rather than selecting a single primary, which is the most accurate representation of the clause's structure.
The updated policy expands the purposes for which Indeed processes personal data to include fraud, abuse, platform-security threats, and risks to users or the public, beyond the prior focus on illegal activities. The revised terms now explicitly authorize sharing such information with law enforcement, regulators, and government authorities on a voluntary basis where lawful and appropriate. For job seekers, the policy now specifies that device information will be included when sharing application and candidate data with employers' Applicant Tracking Systems and scheduling platforms. These changes broaden the categories of data that may be processed and disclosed without requiring affirmative user consent for each disclosure.
View change record →The updated policy now explicitly states that phone numbers are collected as part of device information, in addition to IP addresses and user agent data. The legal basis for collecting and processing user data was also expanded to include improving Indeed's sites and services, beyond the prior focus on site security and service validity. These changes broaden the scope of personal information collected and the purposes for which Indeed may use that information under its stated legitimate interests framework.
View change record →Your data remains stored unless you actively request deletion or one of the other two conditions is independently satisfied.
How other platforms handle this
We keep some data until you delete your Google Account, such as information about how often you use Gemini Apps.
We may retain your Personal Data for a period of time consistent with the original purpose of collection...or as long as required to fulfill our legal and/or regulatory obligations.
We store your personal information for a period of time that is consistent with the business purposes set forth in Section 3 of this policy or as long as needed to fulfill and comply with legal obligations.
"we retain such data until it is no longer necessary to fulfill the purpose it is being used for, as required by applicable laws, or until you ask us to delete it.Excerpt from Indeed's Privacy Policy (Superseded Capture)
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Retention continues by default until one of three conditions is met, meaning data is not automatically deleted after a fixed period unless a specific legal or user-driven trigger occurs.
Your data remains stored unless you actively request deletion or one of the other two conditions is independently satisfied.
ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Indeed.