This analysis describes what LlamaIndex's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy does not specify fixed retention periods for any personal data category, applying instead a general reasonableness standard with open-ended extensions for legal and business purposes, which may require evaluation against GDPR storage limitation requirements and applicable state law mandates.
Interpretive note: The practical adequacy of the retention standard under GDPR storage limitation requirements and CPRA disclosure specificity obligations depends on regulatory interpretation and enforcement guidance that is not resolved solely by the document text.
The updated policy establishes explicit protections for data accessed through Google Workspace API connections. LlamaIndex states it will not use this data to train generalized AI models, will not sell it to data brokers or information resellers, will encrypt it in transit and at rest, and will limit access to authorized personnel and service providers. Users can disconnect Google Drive at any time to stop data access, though previously synced data remains in LlamaIndex services unless separately deleted.
View change record →Cross-platform context
See how other platforms handle Data Retention Standard and similar clauses.
Compare across platforms →"We will usually retain the personal data we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights. To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.Excerpt from LlamaIndex's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The policy does not specify fixed retention periods for any personal data category, applying instead a general reasonableness standard with open-ended extensions for legal and business purposes, which may require evaluation against GDPR storage limitation requirements and applicable state law mandates.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by LlamaIndex.