The policy establishes a maximum personal data retention period of one year unless a longer period is required or permitted by applicable law, such as tax, accounting, or other legal obligations. When no ongoing legitimate business need exists, the policy states data will be deleted or anonymized, or if deletion is not immediately possible (for example in backup archives), securely stored and isolated from further processing until deletion is possible.
This analysis describes what Stability AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The stated one-year maximum retention limit is a specific, time-bounded commitment that provides a clearer retention ceiling than many policies that state only that data is retained as long as necessary, and it establishes an isolation and deletion obligation for backup-stored data, which is a materially specific procedural commitment.
Under this provision, personal data Stability AI collects will generally not be retained beyond one year unless law requires otherwise, and data stored in backup archives will be securely isolated from further processing until deletion is possible. This provision applies to all users regardless of geography.
Cross-platform context
See how other platforms handle One-Year Maximum Data Retention Period and similar clauses.
Compare across platforms →"We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than one (1) year.Excerpt from Stability AI's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The stated one-year maximum retention limit is a specific, time-bounded commitment that provides a clearer retention ceiling than many policies that state only that data is retained as long as necessary, and it establishes an isolation and deletion obligation for backup-stored data, which is a materially specific procedural commitment.
Under this provision, personal data Stability AI collects will generally not be retained beyond one year unless law requires otherwise, and data stored in backup archives will be securely isolated from further processing until deletion is possible. This provision applies to all users regardless of geography.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stability AI.