Privacy Policy

Hugging Face · agreement dated March 28, 2023 · Official agreement

Read the agreement

3 of 54 cards in Retention & Deletion

Retention & Deletion · Company practice

Information is retained as long as needed to deliver the Services, meet legal requirements, and for legitimate interests

The Company says it retains your Information for as long as necessary to deliver the Services, to comply with applicable legal requirements, to maintain security and prevent incidents and, in general, to pursue its legitimate interests. The Policy states no fixed retention period in this passage.

Supporting quotations

We retain your Information for as long as necessary to deliver the Services, to comply with any applicable legal requirements, to maintain security and prevent incidents and, in general, to pursue our legitimate interests.

Qualifications & exceptions

  • The last stated reason is "in general, to pursue our legitimate interests", which is broad.

Not stated here

  • This passage does not state specific retention periods or say which data is kept for which reason.

Retention & Deletion · User right or choice

You may cancel your account by editing your profile and request erasure of your Personal Information in writing

The Policy says you may decide to cancel your account and your content at any time by editing your profile. If you want to request erasure of all of your Personal Information that the Company processes, you may do so by sending a written request to privacy@huggingface.co.

Supporting quotations

You may decide to cancel your account and your content at any time by editing your profile. If you wish to request the erasure of all of your Personal Information that we process, you may do so by sending a written request to privacy@huggingface.co.

Not stated here

  • The passage does not say whether the retention purposes described in the previous paragraph limit an erasure request, or how long the Company takes to respond.

Retention & Deletion · Company commitment

The Company will take steps to delete under-13 information it learns was collected without verifiable parental consent

The Policy says that if the Company learns that Personal Information of persons less than 13 years of age has been collected without verifiable parental consent, it will take the appropriate steps to delete this information. It adds that, to make "such a request", you should contact the Company at privacy@huggingface.co.

Supporting quotations

If the Company learns that Personal Information of persons less than 13 years of age has been collected without verifiable parental consent, the Company will take the appropriate steps to delete this information.
To make such a request, please contact the Company at: privacy@huggingface.co.

Qualifications & exceptions

  • The deletion commitment is triggered when the Company learns of collection without verifiable parental consent.

Not stated here

  • The passage does not say what "such a request" refers to, and does not say what happens when verifiable parental consent has been obtained.