Global Privacy Statement

Credit Karma · agreement dated March 9, 2026 · Official agreement

Read the agreement

5 of 129 cards in Retention & Deletion

Retention & Deletion · Company practice

Deletion requests and ended contracts do not always end retention

Unless deletion is specifically requested, Intuit retains data as necessary for retention requirements, services, platform benefits and business operations. Even after deletion requests or contract termination it may need records for legal/regulatory compliance, legal claims or fraud and abuse prevention. Different information may have different periods; no universal duration is stated.

Details not recorded for this card

Supporting quotations

Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform and successfully run our business. Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information for as long as necessary to:
comply with our legal or regulatory compliance needs (e.g., maintaining records of transactions you have made with us);
to exercise, establish or defend legal claims; and/or
to protect against fraudulent or abusive activity on our service.
This means we may keep different information for different periods.

Cross-references

Also annotated in the same passage (1)

Retention & Deletion · Company practice

Long-inactive account cancellation can trigger immediate deletion

If an account is canceled because it has not been used for a long time, Intuit may immediately delete its information. The statement gives neither an exact inactivity period nor a promise that every retained record is deleted.

Details not recorded for this card

Supporting quotations

If your account is canceled because you haven’t used it for a long time, we may delete this information immediately.
Also annotated in the same passage (1)

Retention & Deletion · Company commitment

Information that cannot yet be deleted is to be securely isolated

Technical, legal, regulatory or operational reasons may prevent full deletion, anonymization or de-identification. In those cases Intuit commits to reasonable measures to isolate the information securely from further processing until it can perform one of those actions.

Details not recorded for this card

Supporting quotations

There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it.

Retention & Deletion · Restriction or exception

European deletion requests leave specified retention grounds intact

UK/Gibraltar, EEA and Swiss users can request deletion through the account Privacy tab or GDPR Centres, with dedicated Credit Karma UK and Mailchimp routes. Intuit may still retain information for legal/regulatory compliance, legal claims and fraud or abuse prevention, handled under the general retention section.

Details not recorded for this card

Supporting quotations

You may request for us to delete your personal information in the Privacy tab of your account
Please note that even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on our Service. Data retained for these purposes will be handled as described in the section “Data Retention”.

Cross-references

Retention & Deletion · Company practice

Whistleblower identity may need to be disclosed in an investigation

Information supplied when reporting alleged misconduct is processed for the investigation and retained under internal policies until it is complete. Intuit says it makes efforts to maintain confidentiality but may need to reveal the reporter’s identity depending on the investigation. The passage does not promise immediate deletion upon completion.

Details not recorded for this card

Supporting quotations

personal information you provide will be processed as a part of the investigation of the allegations and retained in accordance with our internal policies until the investigation is complete. While we make every effort to maintain confidentiality, depending on the investigation, disclosing your identity to other individuals may be necessary.