Before/after stance changes across captured policy versions, with exact citations. If no before/after delta is available yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: indefinite or necessity based
“We retain each category of personal information for as long as necessary to fulfill the purposes outlined in this Section, typically until the end of your customer relationship with us, or as required by applicable laws.”Open citation
Latest stance: indefinite or necessity based
“We retain personal information for as long as necessary for the purposes for which the personal information is processed and for longer periods as necessary for us to comply with applicable laws. For example, we retain your account information for as long as your account is active or as needed to provide you with Services you have requested or authorized, including maintaining and improving the performance of the Services and protecting system security. We also retain personal data as needed to maintain appropriate business and financial records, protect our legal interests, resolve disputes, or comply with legal or regulatory requirements. Thereafter, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will store your personal information using appropriate security measures and take appropriate steps designed to isolate it from any further processing until deletion is possible.”Open citation
Latest stance: third party or vendor sharing
“For individuals residing in Japan: with respect to your retained personal data, you may request disclosure, correction, suspension of use, erasure, or suspension of provision to third parties. To make such a request, please email privacy@dify.ai . After we verify your identity, we will respond within the period prescribed by law (in principle, within two weeks of receiving the request). No fee will be charged for a request for disclosure.”Open citation
Latest stance: indefinite or necessity based
“We retain personal information for as long as necessary for the purposes for which the personal information is processed and for longer periods as necessary for us to comply with applicable laws. For example, we retain your account information for as long as your account is active or as needed to provide you with Services you have requested or authorized, including maintaining and improving the performance of the Services and protecting system security. We also retain personal data as needed to maintain appropriate business and financial records, protect our legal interests, resolve disputes, or comply with legal or regulatory requirements. Thereafter, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will store your personal information using appropriate security measures and take appropriate steps designed to isolate it from any further processing until deletion is possible.”Open citation
Latest stance: deletion or time bound
“Erase your personal information: You have the right to ask us to delete your personal information when, for example, the data we hold on to you is no longer needed or when your data has been processed unlawfully. If you reside in Japan, please be aware that we may only cease using or delete your personal information upon request if it is no longer necessary for our business, if a data breach has occurred, or if the processing is likely to harm your rights or interests.”Open citation
Latest stance: indefinite or necessity based
“We retain each category of personal information for as long as necessary to fulfill the purposes outlined in this Section, typically until the end of your customer relationship with us, or as required by applicable laws.”Open citation
Latest stance: platform claims or reserves rights
“7.1.4 Effect of Termination. Once you delete your Dify account, neither your Dify account nor your Customer Data can be restored or recovered in any way. If you do not log in to your Dify account for twenty-four (24) or more months, we reserve the right to designate your Dify account as “inactive” and delete the Dify account and/or all data associated with it. All sections of these Terms which by their nature should survive termination will survive, including without limitation, accrued rights to payment, use restrictions and indemnity obligations, confidentiality obligations, warranty disclaimers, and limitations of liability.”Open citation
Latest stance: broad license
“You retain ownership of your Customer Content, including Customer Content from your accounts with Third-Party Services that are transmitted, processed, and/or stored in the Service. By transmitting, processing, and/or storing Customer Content in the Service, you hereby grant Dify a worldwide, non-exclusive, and limited-term license to access, use, process, copy, store, distribute, perform, transmit, export, and display Customer Content and to access your Dify account, as reasonably necessary: (i) to provide, maintain, operate, improve, and update the Service; (ii) to prevent or address service, security, support, or technical issues; and (iii) as required by law.”Open citation
Latest stance: platform claims or reserves rights
“2.1.9 We reserve the right, but do not undertake the obligation, to monitor the Service, investigate, and take appropriate action against any party that uses the Service in violation of applicable law or these Terms, including but not limited to, the right to remove, or delete any Customer Data. We will use reasonable efforts to provide you with advance notice of removals and suspensions when practicable, but if we determine that your actions could endanger the operation of the Service or other users, we may suspend your access or remove your Customer Data immediately without notice. We have no liability to you for accepting, removing, or deleting your Customer Data.”Open citation
Latest stance: user retains rights
“You retain ownership of your Customer Content, including Customer Content from your accounts with Third-Party Services that are transmitted, processed, and/or stored in the Service. By transmitting, processing, and/or storing Customer Content in the Service, you hereby grant Dify a worldwide, non-exclusive, and limited-term license to access, use, process, copy, store, distribute, perform, transmit, export, and display Customer Content and to access your Dify account, as reasonably necessary: (i) to provide, maintain, operate, improve, and update the Service; (ii) to prevent or address service, security, support, or technical issues; and (iii) as required by law.”Open citation
Latest stance: platform claims or reserves rights
“Once you delete your Dify.AI Account, neither your Dify.AI Account nor your Customer Data can be restored or recovered in any way. If you do not log in to your Dify.AI Account for twenty-four (24) or more months, [we reserve the right to designate your Dify.AI Account as “inactive” and delete the Dify.AI Account and/or all the data associated with it].”Open citation
Latest stance: indefinite or necessity based
“We retain personal information for as long as necessary for the purposes for which the personal information is processed and for longer periods as necessary for us to comply with applicable laws. For example, we retain your account information for as long as your account is active or as needed to provide you with Products you have requested or authorized, including maintaining and improving the performance of the Products and protecting system security. We also retain personal data as needed to maintain appropriate business and financial records, protect our legal interests, resolve disputes, or comply with legal or regulatory requirements. Thereafter, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will store your personal information using appropriate security measures and take appropriate steps designed to isolate it from any further processing until deletion is possi”Open citation
Latest stance: indefinite or necessity based
“We retain personal information for as long as necessary for the purposes for which the personal information is processed and for longer periods as necessary for us to comply with applicable laws. For example, we retain your account information for as long as your account is active or as needed to provide you with Products you have requested or authorized, including maintaining and improving the performance of the Products and protecting system security. We also retain personal data as needed to maintain appropriate business and financial records, protect our legal interests, resolve disputes, or comply with legal or regulatory requirements. Thereafter, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will store your personal information using appropriate security measures and take appropriate steps designed to isolate it from any further processing until deletion is possible.”Open citation
Latest stance: indefinite or necessity based
“We retain personal information for as long as necessary for the purposes for which the personal information is processed and for longer periods as necessary for us to comply with applicable laws. For example, we retain your account information for as long as your account is active or as needed to provide you with Products you have requested or authorized, including maintaining and improving the performance of the Products and protecting system security. We also retain personal data as needed to maintain appropriate business and financial records, protect our legal interests, resolve disputes, or comply with legal or regulatory requirements. Thereafter, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will store your personal information using appropriate security measures and take appropriate steps designed to isolate it from any further processing until deletion is possible.”Open citation
Generated from live stance events. Informational only, not legal advice.
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.
Your privacy
We use first-party analytics and Google Analytics to understand traffic and improve the site (IP-derived location, device info, analytics cookies). We never sell your personal information and run no advertising trackers. You can opt out below. See our Privacy Policy and Cookie Policy.