Intuit keeps your personal data for as long as it needs to run its services, meet legal requirements, or resolve any disputes, and will delete or anonymize it afterward.
This analysis describes what Intuit's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Open-ended retention language tied to legal obligations and dispute resolution means sensitive financial data, including tax records and government identifiers, could be retained for extended periods without a specific deletion deadline.
Interpretive note: The statement does not specify retention periods by data category, making it difficult to assess whether retention practices meet GDPR and CPRA specificity requirements without access to Intuit's internal retention schedules.
The updated terms establish new procedures for handling personal data complaints related to international data transfers under the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks. Users from these jurisdictions now have access to defined complaint and dispute resolution mechanisms, including referral to TRUSTe as an alternative dispute provider at no cost, and binding arbitration under certain conditions. Additionally, the policy now requires that before personal data is used for a materially new purpose or shared with external parties not covered as processors, Mailchimp will offer users the opportunity to opt out through appropriate means or collect opt-in consent.
View change record →Removal of general data retention and deletion commitment; replaced with more restrictive 'Data Retention After Deletion Request' provision that permits indefinite retention.
View full change record →Simplified language from specific enumeration (legal, accounting, fraud prevention) to broader categories (legal obligations, resolve disputes, enforce agreements).
View full change record →Your tax returns, Social Security numbers, and financial account data may be retained by Intuit for years based on broad legal and operational justifications, even after you stop using its products.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"We retain your personal information for as long as necessary to provide you with our products and services, comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer need your personal information, we will delete or anonymize it.Excerpt from Intuit's Privacy Statement
REGULATORY LANDSCAPE: Data retention practices engage GDPR's storage limitation principle, which requires personal data be kept no longer than necessary for the specified purpose.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Open-ended retention language tied to legal obligations and dispute resolution means sensitive financial data, including tax records and government identifiers, could be retained for extended periods without a specific deletion deadline.
Your tax returns, Social Security numbers, and financial account data may be retained by Intuit for years based on broad legal and operational justifications, even after you stop using its products.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Intuit.