The policy states that personal data is retained for as long as necessary to fulfill the stated processing purposes, with retention extended where required or permitted by applicable law, but does not specify defined retention periods for individual data categories.
This analysis describes what RunPod's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes an open-ended, purpose-based retention standard without specifying retention schedules for individual data categories such as billing records, usage logs, or account identifiers, which may require supplementation to satisfy GDPR data minimization and storage limitation principles.
Interpretive note: The policy does not specify retention periods for individual data categories, making it difficult to assess compliance with GDPR storage limitation requirements without supplementary documentation.
Removal of explicit data retention policy reduces transparency about how long RunPod maintains personal information and deletion procedures.
View full change record →This addition clarifies data retention practices and legal bases for extended retention, addressing user concerns about how long personal data is maintained.
View full change record →Under this clause, RunPod retains personal data indefinitely as long as it serves a stated purpose, and extends retention where law requires. The policy does not state specific retention periods for account data, usage logs, or payment records, which limits user visibility into how long their data is held.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"We retain personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.Excerpt from RunPod's Privacy Policy
1) REGULATORY LANDSCAPE: Open-ended retention provisions engage GDPR Article 5(1)(e) (storage limitation principle) and CCPA's implied right to deletion.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes an open-ended, purpose-based retention standard without specifying retention schedules for individual data categories such as billing records, usage logs, or account identifiers, which may require supplementation to satisfy GDPR data minimization and storage limitation principles.
Under this clause, RunPod retains personal data indefinitely as long as it serves a stated purpose, and extends retention where law requires. The policy does not state specific retention periods for account data, usage logs, or payment records, which limits user visibility into how long their data is held.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by RunPod.