How long does Graswald keep your data?

GDPR Article 13(2)(a) requires controllers to provide the period for which personal data will be stored. The absence of concrete timeframes and the broad 'improve functionality' carve-out undermine data minimisation and storage limitation principles.

Their words · Privacy Policy

“Graswald will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies. Graswald will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.”

Captured 2026-06-07. Open captured source →Snapshot SHA-256: 084edfdcc4aae1e07ce9453cdd4a1a05255fc91f01bef9b06209a82ee262a7fe

Permalink to this finding →

Informational only, not legal advice. Terms can change; check the cited policy and capture date before relying on this answer.

The same question for other platforms

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.