Instacart keeps your personal data for as long as it needs to for business purposes, which may be longer than you would expect after you stop using the service.
Instacart does not specify precise retention periods for most data categories, meaning your shopping history, location data, and personal identifiers may be retained long after you stop using the service or delete your account.
Cross-platform context
See how other platforms handle Information Retention and similar clauses.
Compare across platforms →Vague retention language means your personal data including purchase history, location data, and account information could be stored indefinitely without a clear deletion timeline, increasing the risk of data breach exposure and limiting your ability to have data erased.
(1) REGULATORY FRAMEWORK: CPRA (Cal. Civ. Code §1798.100(a)(5)) requires businesses to disclose retention periods or criteria for each category of personal information collected. GDPR Art. 5(1)(e) requires storage limitation — data must not be kept longer than necessary for the stated purpose. PIPEDA Schedule 1, Principle 4.5 requires that personal information be retained only as long as necessary to fulfill identified purposes. Vague retention language may constitute a CPRA violation. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.