What does a data retention clause cover in a data license?
A data retention clause covers how long the buyer may hold your files, the deadline for deleting them, proof of deletion, and the exceptions. micro1's master terms require deletion at the earlier of 120 days after final delivery or termination, with written confirmation on request, but they do not reach "any model, weights, or derivative works" made from accepted data, or data "retained in routine backups or as required by applicable law" (micro1, s. 4.4). Those exceptions decide how much of your SOPs, documents or code stays in use after the license ends, so ask about each one.
Does the law set retention limits too?
For personal data, often yes, alongside whatever the contract says. The UK GDPR requires personal data to be "kept in a form which permits identification of data subjects for no longer than is necessary" for the purposes of the processing, with longer storage allowed only for archiving in the public interest, research or statistical purposes under safeguards (UK GDPR, Art. 5(1)(e)). In California, a business must disclose how long it intends to keep each category of personal information, or the criteria used to set that period if it cannot, and must not keep it "for longer than is reasonably necessary" for the disclosed purpose (Cal. Civ. Code § 1798.100(a)(3)). Which rules apply depends on the data and on where you and the buyer are, so take advice.
How does fearofgod.ai handle retention?
Raw data is deleted according to a schedule agreed with the partner. fearofgod.ai de-identifies the data before it goes to buyers. Whoever holds your data, a clause with a fixed deletion deadline and written confirmation is what lets you check that a schedule was kept.
General information, not legal advice.