This clause places a time-bound destruction obligation on vendors handling biometric data, limiting how long that sensitive category of data may be retained in the identity-verification supply chain.
The clause ties the retention period to a specific, short-duration technical event, minimising how long authentication-purpose Biometric Data is held.
This clause limits Bluesky's own data holdings of sensitive biometric information, meaning Bluesky itself does not build a store of such data from the verification process.
The clause establishes permanent destruction as the default outcome for Biometric Data, with a carve-out only for legal obligations to retain.
Walmart is bound by a specific destruction obligation tied to purpose completion or a fixed time limit, giving biometric data a defined maximum retention period.
The clause binds both Synthesia and its vendors to a purpose-limited retention standard, preventing indefinite storage of Biometric Data.
BAM will retain biometric data as part of customer identification information for the retention period required by financial laws and regulations.
PayPal
· PayPal Privacy Statement
We retain biometric data for as long as needed or permitted given the purpose for which it was collected and no more than 3 years after your account closes, unless otherwise required by applicable law.
The clause ties the Biometric Data retention period directly to the Avatar's availability, meaning the data persists as long as the Avatar does unless the Customer intervenes.
Biometric data collected and processed for our verification purposes is scheduled to be retained until the earlier of when verification is complete or for up to three (3) years following your last interaction with the biometric identity verification provider...
We retain biometric information (as part of our retention of Supplemental Identification Information) for the period required for financial regulatory compliance or otherwise as required by applicable law.
Suno
· Suno Privacy Policy
We will retain this information for no longer than three (3) years following your last interaction with us (at which point, we will erase the informat, except as required otherwise by applicable law.
Suno
· Suno Privacy Policy
A defined maximum retention period for biometric data limits how long this sensitive information is held, giving users a concrete outer boundary for its storage.
Adobe
· Adobe Privacy Policy
Where we process biometric identifiers or biometric information to deliver a feature requested by you, we delete this information once you turn off the feature, unless otherwise specified in the Software or Services.
GOAT
· GOAT Privacy Policy
The timing of biometric data destruction is controlled entirely by GOAT's instruction to Persona, meaning the biometric identifier persists indefinitely until GOAT initiates the destruction order.
We retain the stored template until the purpose for collecting it is satisfied. For instance, Verizon Wireless retains templates for approximately 90 days, and Total Wireless retains templates for approximately 180 days from the date that you provided it.
Indeed
· Indeed Privacy Policy
For special category data collected by our vendor on our behalf, they will retain this information for the lifetime of the account.
Anthropic
· Anthropic Privacy Policy (Retired Duplicate)
in certain cases we may continue to process and retain data regardless of your request for deletion, objection, blocking or anonymisation, in order to comply with legal, contractual and regulatory obligations
OpenAI
· OpenAI Enterprise Privacy
The clause defines a deletion window but preserves OpenAI's ability to retain data longer under legal obligation or a reasonably necessary harm-protection determination.
California residents who are Wealthfront Clients are on notice that their deletion rights are generally unavailable due to regulatory obligations, substantially limiting a key California privacy right.
Audio and video from a user's home are actively held on SimpliSafe's systems for a defined 30-day window, meaning sensitive recordings persist beyond any single event.
Intuit
· Intuit Privacy Statement
Even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance…exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity.
If you request a change to, or deletion of, your Personal Data, we may still need to retain certain information for record-keeping purposes and where necessary to comply with applicable law.
Acorns
· Acorns Privacy Policy
Closing an account does not guarantee deletion of all associated personal data, as Acorns retains authority to keep certain information under legal requirements or permissions.
Lyft
· Lyft Privacy Policy
Account deletion does not guarantee erasure of all personal information; Lyft retains the right to keep data under qualifying conditions even after a deletion request is fulfilled.
The deletion commitment is qualified by design intent rather than a guarantee, and two user-controlled exceptions mean deletion is not automatic in all cases.
Modal
· Modal Privacy Policy
Deletion is immediate and unconditional upon discovery, providing a firm protective commitment for children's data.
We will delete such information from our files as soon as reasonably practicable.
Deletion is triggered only upon Fireworks AI learning of the child's age; it implies no proactive age-verification mechanism beyond the notice-based trigger.
Stash
· Stash Privacy Policy
We will also take steps, as appropriate, to delete the information. Please notify us if you know of any individuals under the age of 18 using our Services, so we can determine what actions should be taken.