Ledger keeps your personal data for as long as needed to provide services, comply with laws, and resolve disputes — but does not specify exact retention periods for each data category in this excerpt.
Ledger retains your personal data indefinitely as long as it is 'necessary,' with legal compliance and dispute resolution cited as open-ended justifications — the absence of specific timeframes makes it difficult to know when your data will actually be deleted.
Cross-platform context
See how other platforms handle Data Retention Policy and similar clauses.
Compare across platforms →Without clearly defined retention periods per data category, users cannot know how long sensitive information like their shipping address or crypto activity data is held, limiting their ability to exercise erasure rights effectively.
REGULATORY FRAMEWORK: GDPR Art. 5(1)(e) (storage limitation principle) requires personal data be kept no longer than necessary for stated purposes. Art. 13(2)(a) requires controllers to inform data subjects of retention periods or, where not possible, the criteria used to determine them. CNIL and EDPB guidance requires specific retention schedules by data category, not generic 'as long as necessary' language.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.