Provision Registry

567 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
Filtering: Privacy rights × Low × Clear all
low Privacy rights
Datadog · Datadog Privacy Policy
The policy does not specify fixed retention periods for individual data categories, instead relying on purpose-based retention criteria; this approach is consistent with GDPR storage limitation principles but may limit users' ability to predict when their data will be deleted.
CA-P-004907 First tracked May 7, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Whatnot · Whatnot Privacy Policy
The absence of specific retention periods means your personal data, including purchase history and financial information, may be held indefinitely under broad business or legal justifications.
CA-P-007070 First tracked May 8, 2026 Last seen May 20, 2026 Compare across platforms →
low Privacy rights
Shopify · Shopify Privacy Policy
The policy does not specify fixed retention periods for different categories of personal data, stating instead that retention continues as long as necessary for service provision or legal compliance, which means the practical duration of data retention for specific data types is not disclosed to users.
CA-P-011123 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Skillshare · Skillshare Privacy Policy
The retention clause does not specify fixed retention periods for any category of personal data, which may engage GDPR's storage limitation principle requiring that data not be kept longer than necessary for the specified purpose; the absence of defined retention schedules may be a point of inquiry for EU and UK supervisory authorities.
CA-P-007052 First tracked May 8, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Betterment · Betterment Privacy Policy
The absence of specific retention periods for most data categories means Betterment retains broad discretion over how long it holds your sensitive financial information, including after you close your account.
CA-P-009208 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Square · Square Privacy Notice
Open-ended retention language means your data could be held indefinitely under broad regulatory compliance justifications, limiting the practical effectiveness of deletion requests.
CA-P-010458 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Egnyte · Egnyte Privacy Policy
Open-ended retention language based on business necessity rather than fixed timeframes can mean personal data is held for extended periods, which affects deletion rights and security exposure.
CA-P-006403 First tracked May 8, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Brex · Brex Privacy Policy
Open-ended retention tied to legal and regulatory obligations is common in financial services, but it means your data may be held for extended periods beyond your active use of Brex products.
CA-P-009181 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
Samsung · Samsung Privacy Policy
Without defined retention periods for specific data types, personal data including browsing history, location, and health metrics may be retained for extended and undefined periods, which limits consumer ability to predict when their data will be deleted.
CA-P-007960 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
Chime · Chime Privacy Policy
A deletion request may not result in complete removal of your data if Chime determines it has legal or business reasons to retain certain records, which is a standard but important limitation on the right to deletion.
CA-P-009951 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
Sony PlayStation · PlayStation Privacy Policy
The absence of specific data retention periods in the main policy text means users may not know how long their behavioral, communications, or account data is retained, which is relevant to both privacy risk and the exercise of deletion rights.
CA-P-008459 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Rumble · Rumble Privacy Policy
How long your data is kept and where it is stored affects your ability to exercise deletion rights and the risk that your information could be exposed in a data breach.
CA-P-007200 First tracked May 9, 2026 Last seen May 20, 2026 Compare across platforms →
Anyscale · Anyscale Privacy Policy
The absence of specific retention periods for most data categories means your personal information may be retained indefinitely for broadly stated business purposes, which may be difficult to challenge or verify.
CA-P-010121 First tracked May 11, 2026 Last seen May 20, 2026 Compare across platforms →
low Privacy rights
Twitch · Twitch Privacy Notice
Without specific retention periods disclosed, users cannot know how long their data, including sensitive information like billing details and chat history, is held by Twitch.
CA-P-009602 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Zendesk · Zendesk Privacy Policy
The notice does not specify concrete retention periods for most data categories, which means the duration Zendesk holds your data is determined by Zendesk's internal policies and legal obligations rather than fixed timelines disclosed to users.
CA-P-005851 First tracked May 8, 2026 Last seen May 20, 2026 Compare across platforms →
low Privacy rights
Hulu · Hulu Privacy Policy
The absence of specific retention periods means your data may be held indefinitely under broadly defined business or legal purposes, which is a common but notable practice that limits your practical ability to know when your data will be deleted.
CA-P-008175 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Amplitude · Amplitude Privacy Notice
The retention period is not specified with precision, meaning data could be held for extended periods without a defined endpoint tied to your specific relationship with Amplitude.
CA-P-010289 First tracked May 11, 2026 Last seen May 20, 2026 Compare across platforms →
low Privacy rights
Uber · Uber Privacy Notice
The absence of specific retention timelines for most data categories, including location history and trip records, means personal data may be retained for extended periods beyond the active service relationship, subject to Uber's internal determination of necessity.
CA-P-011106 First tracked May 12, 2026 Last seen May 20, 2026 Compare across platforms →
low Privacy rights
Skillshare · Skillshare Privacy Policy
The absence of specific retention periods means your data could be retained indefinitely as long as any of the broadly stated purposes apply, including enforcing agreements, which provides limited clarity for users seeking to understand when their data will be deleted.
CA-P-001299 First tracked Apr 3, 2026 Last seen May 20, 2026 Compare across platforms →
low Privacy rights
Microsoft · Microsoft Privacy Statement (Legacy)
The statement does not commit to specific retention periods across all data types or products, meaning that some categories of personal data may be retained for extended periods depending on the service and legal context involved.
CA-P-002501 First tracked Apr 9, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
HubSpot · HubSpot Privacy Policy
Without specific retention periods stated, it is difficult for individuals to know how long their data will be held or to anticipate when deletion might occur without a formal request.
CA-P-009808 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
low Privacy rights
Airtable · Airtable Privacy Policy
Without specific retention periods, users cannot know how long their data is kept after they stop using the service, and the 'legitimate business interests' basis could support extended retention.
CA-P-008273 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Noom · Noom Privacy Policy
Without specific retention periods, users cannot know how long their sensitive health data will be held, making it harder to assess long-term privacy exposure.
CA-P-001846 First tracked Apr 3, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Mercury · Mercury Privacy Policy
There is no fixed maximum retention period stated in the policy, meaning some categories of financial and personal data could be held for extended periods tied to legal and regulatory timelines.
CA-P-009924 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Luma AI · Luma AI Privacy Policy
The policy does not specify concrete retention periods for different categories of data, meaning users cannot easily determine how long their uploaded content, conversations, or account data will be held.
CA-P-009641 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Garmin · Garmin Privacy Statement
Open-ended retention tied to account activity means your health and location data may be held indefinitely if you remain a Garmin user, and some data may persist even after account deletion due to legal hold or dispute resolution exceptions.
CA-P-010357 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Paramount+ · Paramount+ Privacy Policy
Indefinite or lengthy data retention means that detailed records of your viewing habits, payment history, and account activity may be stored by Paramount+ for years after you stop using the service.
CA-P-009506 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
YouTube Ads · Google Privacy Policy
Data retention periods affect how long your behavioral profile persists in Google's systems, which matters both for privacy and for how long historical data can inform ad targeting or be subject to legal process.
CA-P-008624 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
low Privacy rights
Robinhood · Robinhood Privacy Policy
The retention period is defined broadly by reference to legal obligations and dispute resolution rather than a fixed timeframe, meaning sensitive financial and identity data may be retained for extended periods depending on applicable regulatory requirements.
CA-P-003952 First tracked Apr 28, 2026 Last seen May 22, 2026 Compare across platforms →
low Privacy rights
Delta Airlines · Delta Privacy Policy
Retention periods determine how long your personal information remains in Delta's systems and available for use or potential disclosure; the lack of specific timeframes in the main policy and reliance on a separate notice reduces transparency.
CA-P-007216 First tracked May 9, 2026 Last seen May 22, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial