Poshmark · Poshmark Privacy Policy · View original document ↗

Data Retention and Account Deletion

Medium severity Medium confidence Explicitdocumentlanguage Rare · 3 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Poshmark Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Poshmark keeps your personal information as long as it needs to for business, legal, or compliance reasons, and will delete or anonymize it when you close your account, unless a legal obligation requires keeping it.

This analysis describes what Poshmark's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

There is no specific retention period stated in the policy, meaning Poshmark may retain your personal data for an extended and indefinite period, and some data may be kept even after you delete your account if a legal reason exists.

Interpretive note: The absence of specific retention periods by data category may not satisfy GDPR Article 13 and CPRA disclosure requirements; the scope of legal retention exceptions is not defined in the policy.

Recent Activity

This document changed recently

Medium Apr 19, 2026

Poshmark's updated Privacy Policy provides significantly more transparent disclosure about what personal data the company collects, how it uses that data, and how you can exercise your privacy rights…

Medium Mar 25, 2026

Poshmark's updated privacy policy provides more explicit detail about what categories of personal data the company collects through the platform, including user-generated content (photos, videos, lis…

Consumer impact (what this means for users)

Your personal data may be retained for an unspecified period after account closure if Poshmark determines a legal or regulatory obligation applies, which limits your ability to fully remove your information from Poshmark's systems.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Submit a data deletion request through Poshmark's privacy request portal at privacy.poshmark.com. Select the right to delete and follow the verification steps provided.

How other platforms handle this

State Farm Medium

Some operating system developers, such as Apple, allow mobile application users to request deletion of accounts created within an application. If you request deletion of your account, State Farm may still retain your information for legal, auditing, regulatory and business purposes. Retention period...

LinkedIn Medium

We generally retain your personal data as long as you keep your account open or as needed to provide you Services. This includes data you or others provided to us and data generated or inferred from your use of our Services. Even if you only use our Services when looking for a new job every few year...

Spotify Medium

Please note there are situations where Spotify is unable to delete your data, for example when: it's still necessary to process the data for the purpose we collected it for; we have an overriding interest in continuing to process the data, for example where we need the data to protect our services f...

See all platforms with this clause type →

Monitoring

Poshmark has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We retain your personal information for as long as necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information, unless we are required to retain it for legal or regulatory purposes.

— Excerpt from Poshmark's Poshmark Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: GDPR Article 5 requires that personal data be kept no longer than necessary for the purposes for which it is processed, and controllers must be able to demonstrate compliance with defined retention periods. The absence of specific retention schedules in the policy may not satisfy GDPR's accountability requirements. CCPA and CPRA require disclosure of the retention period or criteria used to determine retention for each category of personal information, which a general statement may not fully satisfy. GOVERNANCE EXPOSURE: Medium. The retention language is broadly consistent with standard industry practice but does not specify retention periods by data category, which creates ambiguity and potential non-compliance with GDPR and CPRA disclosure requirements. Legal hold and regulatory retention exceptions are appropriate but should be defined with more specificity to be defensible. JURISDICTION FLAGS: EU and UK users face heightened exposure given GDPR's requirement for specific retention criteria. California users have CPRA rights to know the retention period for each category of personal information collected. Any jurisdiction that has enacted data minimization requirements creates risk where retention is not tied to specific demonstrated purposes. CONTRACT AND VENDOR IMPLICATIONS: Data processing agreements with storage, analytics, and backup vendors should include retention schedules that align with the company's internal data retention policy. Vendors should be required to delete personal data upon account closure or upon expiration of the applicable retention period. COMPLIANCE CONSIDERATIONS: A formal data retention schedule that specifies retention periods or criteria for each category of personal information should be developed and maintained, consistent with GDPR Article 13 and 14 requirements and CPRA disclosure obligations. The process for account deletion should be audited to verify that deletion or anonymization is completed within a reasonable and documented timeframe.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over deceptive data retention representations and practices that do not match disclosed policies
    File a complaint →
  • State AG
    California's CPRA requires specific retention disclosures and the CPPA has enforcement authority over non-compliance
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN

Provision details

Document information
Document
Poshmark Privacy Policy
Entity
Poshmark
Document last updated
May 5, 2026
Tracking information
First tracked
April 28, 2026
Last verified
May 10, 2026
Record ID
CA-P-009117
Document ID
CA-D-00334
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
2cc924fa513a0bd8e9feec282ca6e11d838f46832da0f5416673dd4f3402c29f
Analysis generated
April 28, 2026 05:49 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Poshmark
Document: Poshmark Privacy Policy
Record ID: CA-P-009117
Captured: 2026-04-28 05:49:19 UTC
SHA-256: 2cc924fa513a0bd8…
URL: https://conductatlas.com/platform/poshmark/poshmark-privacy-policy/data-retention-and-account-deletion/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Poshmark's Data Retention and Account Deletion clause do?

There is no specific retention period stated in the policy, meaning Poshmark may retain your personal data for an extended and indefinite period, and some data may be kept even after you delete your account if a legal reason exists.

How does this clause affect you?

Your personal data may be retained for an unspecified period after account closure if Poshmark determines a legal or regulatory obligation applies, which limits your ability to fully remove your information from Poshmark's systems.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 3 platforms. See the full comparison.

Is ConductAtlas affiliated with Poshmark?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Poshmark.