Data retention: how long do you keep personal data?
Keeping data forever is a liability. ClauseReport checks whether your policy states how long personal data is retained.
This is part of our series explaining every check in the ClauseReport model. It is general information, not legal advice.
What ClauseReport checks
This is an AI-assisted check in the Completeness category. ClauseReport looks for whether data retention addressed is addressed on the site or in its published policy.
Why it matters
Retention disclosure is commonly expected under GDPR Art. 13. The point isn’t to render a legal verdict — it’s to surface a factual gap you (or your counsel) can act on.
What a clean result looks like
A retention statement — for example, kept while the account is active, then deleted within a set window.
The common gap
No retention language at all, leaving the impression that data is kept indefinitely.
ClauseReport scans any website’s privacy policy and terms of service and reports findings like this one — factual observations, never legal conclusions. Run a free scan to see how your site does on this check.
See how your site scores on this check
Run any website through ClauseReport for a factual privacy-policy and terms-of-service report in seconds. The first report is free.
Scan a site free