This analysis describes what Visa's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause defines the operational scope and duration of data retention practices, establishing that retention periods are determined by functional necessity rather than fixed time limits, and explicitly authorizing retention to support regulatory compliance and dispute resolution activities.
Severity downgraded from medium to low, removal of detailed factors considered in determining retention periods (sensitivity, risk of harm analysis), and language simplified to focus on basic legal and contractual requirements.
View full change record →Users' personal information will be retained according to the purposes stated in the privacy notice and for as long as legally required, meaning data retention duration is tied to operational necessity and legal obligations rather than user preference or notice period.
How other platforms handle this
We collect and keep personal data only as needed or allowed for the purposes set out in this Statement, based on the reason we collected the personal data in the first instance and what is permitted under the laws that apply to the processing.
Affirm will retain your information in accordance with our Privacy Policy and any applicable state or federal law, rule or regulation.
Mistral AI shall retain the Customer Exportable Data and Assets for a period of thirty (30) days from the earlier between (a) the expiration of the Transitional Period or (b) Customer's notification under Section 2.2.2 (b) of these Additional Terms.
"We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements, and to resolve disputes and enforce our agreements.Excerpt from Visa's Privacy Notice
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause defines the operational scope and duration of data retention practices, establishing that retention periods are determined by functional necessity rather than fixed time limits, and explicitly authorizing retention to support regulatory compliance and dispute resolution activities.
Users' personal information will be retained according to the purposes stated in the privacy notice and for as long as legally required, meaning data retention duration is tied to operational necessity and legal obligations rather than user preference or notice period.
ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Visa.