This provision specifies that profile and usage data is retained for the duration of a user's account; payment data is retained for the duration of paid service use with transaction records kept longer per applicable law; cookie and device data is retained for up to 13 months; and ad interaction and partner data is retained for up to 12 months.
This analysis describes what X's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause establishes the specific retention periods applicable to different categories of user data, which are relevant to data subject access and deletion rights, GDPR storage limitation compliance, and CCPA deletion request handling.
⚠ The terms will apply as written; data in each category will be retained for the periods stated unless a deletion request is submitted and processed.
Cross-platform context
See how other platforms handle Data Retention Schedules and similar clauses.
Compare across platforms →"We keep your profile information, such as your display name, user name, password and email address for the duration of your account. We cannot provide you with our products and services without retaining this information. We keep your usage information, such as the content you post, your interactions with other users' content and how you interact with others on the platform for the duration of your account or until such content is removed. We keep your payment information, including your credit or debit card number and billing address for the duration you use our paid products and services. Records of transactions will be kept for longer, in accordance with applicable law. We generally collect device information, location information, inferred identity information and log information using cookies. We keep cookies and information collected using cookies for up to 13 months. We keep information about your views or interactions with ads on or off X, as well as how you interact with our content on third-party sites for up to 12 months. We keep information shared by ad and business partners for up to 12 months.Excerpt from X's Privacy Policy
REGULATORY LANDSCAPE: Data retention schedules engage GDPR's storage limitation principle, CCPA's deletion rights framework, and payment card industry data security standards (PCI DSS) for payment data retention.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This clause establishes the specific retention periods applicable to different categories of user data, which are relevant to data subject access and deletion rights, GDPR storage limitation compliance, and CCPA deletion request handling.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by X.