This analysis describes what Smartsheet's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The seven-year general limit establishes a default retention ceiling, but the listed exceptions mean data may be held indefinitely in qualifying circumstances.
Interpretive note: The canonical claim states the primary proposition (the seven-year general limit) and incorporates the exceptions. The exceptions are also listed in omitted_material as independent conditions. The word 'generally' is a qualifier preserved in all fields.
The updated privacy policy states that only Smartsheet's U.S.-based affiliates participate in the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Framework. Previously, the policy referenced participation by Smartsheet and its affiliates without geographic qualification. This narrowed scope may affect the data transfer mechanisms available for processing personal data from EU, UK, and Swiss users if non-U.S. affiliates are involved in data handling. The policy does not explicitly describe alternative transfer mechanisms for non-U.S. affiliates.
View change record →Your personal data will generally be deleted within seven years, but Smartsheet may retain it beyond that period for tax or accounting purposes, to defend or raise a claim, to resolve disputes, to enforce contractual rights, or where it has a legitimate need.
How other platforms handle this
We collect and keep personal data only as needed or allowed for the purposes set out in this Statement, based on the reason we collected the personal data in the first instance and what is permitted under the laws that apply to the processing.
We may retain your Personal Data for a period of time consistent with the original purpose of collection...or as long as required to fulfill our legal and/or regulatory obligations.
Affirm will retain your information in accordance with our Privacy Policy and any applicable state or federal law, rule or regulation.
"We will keep your personal data longer if required for tax or accounting purposes, to ensure we would be able to defend or raise a claim, to resolve disputes, to enforce our contractual rights, or where we have a legitimate need - though we will generally not keep personal data for longer than seven years...Excerpt from Smartsheet's Privacy Policy
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The seven-year general limit establishes a default retention ceiling, but the listed exceptions mean data may be held indefinitely in qualifying circumstances.
Your personal data will generally be deleted within seven years, but Smartsheet may retain it beyond that period for tax or accounting purposes, to defend or raise a claim, to resolve disputes, to enforce contractual rights, or where it has a legitimate need.
ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Smartsheet.