Garmin
· Garmin Privacy Statement
Because Garmin does not retain payment card details, that data is not held in Garmin's systems and therefore cannot be exposed through a Garmin data breach.
American Airlines may hold personal data for up to seven years after a customer relationship ends, which is a substantial retention window affecting how long your information remains in American Airlines' systems.
Retention is governed by three separate triggers—user instruction, operational need, and legal obligation—meaning data may persist beyond a user's preferences if law or operational need requires it.
PayPal
· PayPal Privacy Statement
Personal Information is retained for a substantial fixed period after the relationship ends, meaning data is not deleted promptly upon account closure or termination.
The clause establishes a defined, time-bound obligation on Ancestry to delete Genetic Information from every named system category upon request.
Google has implemented and will maintain technical, organizational, and physical measures to protect Customer Data, as further described in the Cloud Data Processing Addendum.
This clause establishes a time-bound deletion obligation that limits how long Harvey AI retains your data after the relationship ends, with an exception if you direct otherwise.
Except as otherwise provided in the Privacy Policy or as required by applicable law...we have no obligation...to return or otherwise provide to you or any third party on your behalf any Content, any information you provide to us...
Google
· Google Analytics Terms of Service
Permanent loss of access to historical Report data upon termination means users cannot retrieve past analytics information after the agreement ends.
It establishes that a user's deletion of their own activity does not result in deletion of human-reviewed chats, creating a category of data outside the user's control for up to three years.
Reddit
· Reddit Privacy Policy
if you violate our policies and your account is suspended or banned, we may store the identifiers used to create the account (such as phone number) to prevent you from creating new accounts.
Other information uploaded as part of the identity verification process, including your name, address, date of birth, and a photo identification document, is deleted upon request and in any event, no later than 2 years after collection.
All data tied to an account is permanently deleted after 18 months of inactivity by default, with no user-initiated action required to trigger deletion.
This establishes an automatic data deletion trigger tied to inactivity for child accounts, with a specific future effective date, creating a time-bounded retention limit.
Adobe
· Adobe Terms of Use
If you don't sign into your account periodically, we reserve the right to assume your account is inactive, and you agree that we may permanently delete your Content stored in the account or close your account entirely.
If we have actual knowledge that we inadvertently collected or processed Personal Information from a child under 13 years of age, we will dispose of such information.
Eufy
· Eufy Privacy Policy
If we discover that we have inadvertently collected personal information from a child below the minimum age required for data processing consent without valid guardian consent, we will delete such information immediately.
If we discover that we have unknowingly collected additional personal information from these children, we will delete it.
In the event that we learn that we have inadvertently collected personal information from a child under age 16, we will endeavor to delete that information.
Fly.io
· Fly.io Privacy Policy
Absent any user-initiated deletion request, account information is retained without any time limit, meaning data persists through extended periods of inactivity.
Stripe
· Stripe Service Providers (Sub-Processors)
A regulatory requirement—not solely a contractual choice—mandates that certain data from Indian payment transactions remain stored within India.
Klaviyo shall have no obligation to retain any Customer Data after any termination or expiration of this Agreement and may delete all Customer Data, unless required by applicable law.
Within thirty (30) days of Customer's written request following termination or expiration of this Agreement, LangChain shall delete all Customer Data in its custody and control.
We may need to apply a "legal hold" that retains information beyond our typical retention period where we face threat of legal claim. In that case, we will retain the information until the hold is removed...
Heap
· Heap Privacy Policy
We may need to apply a "legal hold" that retains information beyond our typical retention period where we face a threat of legal claim. In that case, we will retain the information until the hold is removed...
Kick
· Kick Privacy Policy
We may need to apply a "legal hold" that retains information beyond our typical retention period where we face threat of legal claim or intent to establish a claim. In that case, we will retain the information until the hold …
Ledger
· Ledger Privacy Policy
The clause creates a default deletion commitment while carving out an exception that can limit how much data is actually deleted, depending on applicable legal obligations.
In some cases we need to comply with legal requirements to store your data which stops us from deleting your information. For example, if we receive a notice from a court asking us to keep a copy of your content.
Cohere
· Cohere Enterprise Data Commitments
Legal obligations or contractual requirements can override the default 30-day deletion schedule, meaning data may be retained for an unspecified longer period without user control.
Noom
· Noom Privacy Policy
User deletion requests may not result in actual deletion if Noom determines legal obligations require retaining the data.