What can I do about this clause?

{'method': 'EMAIL', 'recipient': 'privacy@leonardo.ai', 'difficulty': 'EASY', 'action_type': 'DELETE_DATA', 'instructions': 'Email privacy@leonardo.ai requesting deletion of your personal data under your applicable privacy rights (e.g., GDPR Art. 17 right to erasure or CCPA deletion right). Include your account email and a clear statement of your deletion request.', 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'FTC', 'reason': 'The FTC can act against unfair or deceptive data retention practices under FTC Act Section 5, particularly where retention periods are misrepresented or data is retained beyond stated purposes.', 'complaint_url': 'https://reportfraud.ftc.gov/'}

What is the severity of this clause?

ConductAtlas classifies this Data Retention Policy clause as medium severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Do other platforms have similar clauses?

Yes. ConductAtlas has identified similar Data Retention Policy clauses across approximately 64 other tracked platforms. You can compare how platforms differ on this clause type in the cross-platform comparison view.

Data Retention Policy — Leonardo AI

Share 𝕏 Share in Share 🔒 PDF

What it is

Leonardo AI keeps your data for as long as it thinks it needs to, without specifying exact timeframes — this means your information could be retained indefinitely.

Consumer impact (what this means for users)

The absence of specific retention timeframes means your account data, prompts, and generated images could be retained by Leonardo AI for an undefined period, even after you stop using the service.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Delete Your Data

Email privacy@leonardo.ai requesting deletion of your personal data under your applicable privacy rights (e.g., GDPR Art. 17 right to erasure or CCPA deletion right). Include your account email and a clear statement of your deletion request.

Cross-platform context

See how other platforms handle Data Retention Policy and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Without specific retention periods, users cannot predict how long their personal data — including prompts and generated content — will be stored, which undermines their ability to exercise deletion rights meaningfully.

View original clause language

We retain your personal information for as long as necessary to provide our Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer need your personal information, we will securely delete or anonymize it.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: GDPR Art. 5(1)(e) (storage limitation principle) requires personal data to be kept no longer than necessary for the specified purpose, with specific retention periods documented. GDPR Art. 13(2)(a) requires retention periods to be disclosed in the privacy notice. CCPA/CPRA §1798.100(d) requires disclosure of retention periods per data category. Australian APP 11.2 requires destruction or de-identification when data is no longer needed.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

FTC

The FTC can act against unfair or deceptive data retention practices under FTC Act Section 5, particularly where retention periods are misrepresented or data is retained beyond stated purposes.
File a complaint →

Provision details

Document information

Document

Leonardo AI Privacy Policy

Entity

Leonardo AI

Document last updated

April 29, 2026

Tracking information

First tracked

April 30, 2026

Last verified

April 30, 2026

Record ID

CA-P-004197

Document ID

CA-D-00480

Evidence Provenance

Source URL

https://leonardo.ai/privacy-policy

Wayback Machine

View archived versions →

SHA-256

ac60ef265e1e05c94b28dd719ab4d9bf7339502e5ad85457006b8f18e885cc23

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Leonardo AI | Document: Leonardo AI Privacy Policy | Record: CA-P-004197
Captured: 2026-04-30 06:59:23 UTC | SHA-256: ac60ef265e1e05c9…
URL: https://conductatlas.com/platform/leonardo-ai/leonardo-ai-privacy-policy/data-retention-policy/
Accessed: May 2, 2026

Classification

Severity

Medium

Data Retention Policy