How long does Dify keep your data?

Vague retention standards without defined maximum periods or user deletion request mechanisms described in this section. The backup-archive carve-out means data may persist well beyond account closure.

Their words · Privacy Policy

“We retain personal information for as long as necessary for the purposes for which the personal information is processed and for longer periods as necessary for us to comply with applicable laws. For example, we retain your account information for as long as your account is active or as needed to provide you with Products you have requested or authorized, including maintaining and improving the performance of the Products and protecting system security. We also retain personal data as needed to maintain appropriate business and financial records, protect our legal interests, resolve disputes, or comply with legal or regulatory requirements. Thereafter, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will store your personal information using appropriate security measures and take appropriate steps designed to isolate it from any further processing until deletion is possi”

Captured 2026-06-07. Open captured source →Snapshot SHA-256: e62fd8a9c8dd4115d1452438e018ec79a8e61d1fd2bcc9b7c5abb4c248c8e901

Permalink to this finding →

Informational only, not legal advice. Terms can change; check the cited policy and capture date before relying on this answer.

The same question for other platforms

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.