This analysis describes what TikTok Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
A minimum five-year retention period means user data in Indonesia is preserved for an extended period, limiting the practical effect of any deletion or erasure rights during that window.
Interpretive note: The excerpt uses 'are likely to keep' rather than 'will keep', which is a qualified rather than absolute commitment. The canonical claim preserves this qualifier. The geographic scope (Indonesia) is named in the clause title but not in the excerpt itself; it is included in the canonical claim on that basis.
The updated privacy policy expands disclosure of data collection practices affecting all users. The revised terms now explicitly describe collection of AI interactions (prompts, questions, and responses), clipboard content when accessing certain functions, pre-upload collection of user content for recommendations, and messaging through shopping features. The policy now explicitly addresses state-specific health privacy laws and CCPA-defined sensitive personal information, including racial or ethnic origin, health diagnoses, sexual orientation, and immigration status. The policy establishes that TikTok does not require provision of sensitive information but notes that published user content on these topics may be visible depending on privacy settings. You can adjust your settings to control which data types are collected and manage your contact sync preferences.
View change record →The updated policy changed the controlling entity from TikTok USDS Joint Venture LLC to TikTok Pte. Ltd., a Singapore-registered company. The U.S.-specific privacy policy language was replaced with terms covering "other regions." Users previously governed under U.S. privacy protections are now subject to different jurisdictional terms.
View change record →If you are a user in Indonesia, TikTok Ads is likely to retain your data for at least five years, and potentially longer, where legal obligations or legal proceedings require it.
How other platforms handle this
We collect and keep personal data only as needed or allowed for the purposes set out in this Statement, based on the reason we collected the personal data in the first instance and what is permitted under the laws that apply to the processing.
Affirm will retain your information in accordance with our Privacy Policy and any applicable state or federal law, rule or regulation.
Mistral AI shall retain the Customer Exportable Data and Assets for a period of thirty (30) days from the earlier between (a) the expiration of the Transitional Period or (b) Customer's notification under Section 2.2.2 (b) of these Additional Terms.
"there are occasions where we are likely to keep this data for five (5) years (or longer if required) in accordance with our legal obligations or where it is necessary for the establishment, exercise or defence of legal claims.Excerpt from TikTok Ads's TikTok Privacy Policy
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
A minimum five-year retention period means user data in Indonesia is preserved for an extended period, limiting the practical effect of any deletion or erasure rights during that window.
If you are a user in Indonesia, TikTok Ads is likely to retain your data for at least five years, and potentially longer, where legal obligations or legal proceedings require it.
ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TikTok Ads.