Poshmark keeps your personal information as long as it needs to for business, legal, or compliance reasons, and will delete or anonymize it when you close your account, unless a legal obligation requires keeping it.
This analysis describes what Poshmark's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
There is no specific retention period stated in the policy, meaning Poshmark may retain your personal data for an extended and indefinite period, and some data may be kept even after you delete your account if a legal reason exists.
Interpretive note: The absence of specific retention periods by data category may not satisfy GDPR Article 13 and CPRA disclosure requirements; the scope of legal retention exceptions is not defined in the policy.
The updated policy establishes new restrictions on product categories previously allowed or unregulated, including prohibitions on used socks and underwear, mystery boxes with specific disclosure requirements, and strict conditions for cosmetics and electronics. Sellers who list prohibited items may face temporary or permanent account suspension, payment withholding, and item removal at Poshmark's discretion. The policy explicitly reserves the right to dispose or destroy prohibited items sent to authentication centers. You can report suspected violations to Poshmark, but enforcement decisions remain within the company's sole discretion.
View change record →Poshmark's updated Privacy Policy provides significantly more transparent disclosure about what personal data the company collects, how it uses that data, and how you can exercise your privacy rights. The policy now explicitly itemizes data collection points, including photos, videos, payment information, social media accounts, and user interaction data, and provides a dedicated section on consumer rights and choices. The policy also includes a dedicated California Privacy Notice supplement, indicating enhanced compliance with California privacy laws. You can review the full updated policy and California Privacy Notice to understand Poshmark's specific data practices and identify which privacy rights and choices are available to you.
View change record →Poshmark's updated privacy policy provides more explicit detail about what categories of personal data the company collects through the platform, including user-generated content (photos, videos, listings), interaction data (likes, comments, offers), and payment information. The expanded disclosure does not necessarily indicate new data collection practices, but gives users clearer visibility into what information Poshmark holds. You can review the full policy at Poshmark's website to understand which data collection practices apply to your account activity and, if you are a California resident, consult the supplementary California Privacy Notice referenced in the policy.
View change record →Removal of explicit data retention and deletion policy eliminates transparency about how long Poshmark retains user data and what happens upon account deletion.
View full change record →Previous version 'Data Retention Practices' and 'Account Closure and Data Handling' had empty excerpts; current version consolidates into single provision with explicit retention criteria and deletion procedures.
View full change record →Your personal data may be retained for an unspecified period after account closure if Poshmark determines a legal or regulatory obligation applies, which limits your ability to fully remove your information from Poshmark's systems.
How other platforms handle this
You and your organization's administrator can access several types of Service Data directly from Google Cloud, including your account information, billing contact information, payment and transaction information, as well as product and communication settings and configurations.
to request that your data be transferred to a third party (data portability)
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"We retain your personal information for as long as necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information, unless we are required to retain it for legal or regulatory purposes.Excerpt from Poshmark's Privacy Policy
REGULATORY LANDSCAPE: GDPR Article 5 requires that personal data be kept no longer than necessary for the purposes for which it is processed, and controllers must be able to demonstrate compliance with defined retention periods.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
There is no specific retention period stated in the policy, meaning Poshmark may retain your personal data for an extended and indefinite period, and some data may be kept even after you delete your account if a legal reason exists.
Your personal data may be retained for an unspecified period after account closure if Poshmark determines a legal or regulatory obligation applies, which limits your ability to fully remove your information from Poshmark's systems.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Poshmark.