"We retain information for different periods of time depending on the purposes for which we collect and use it, as described in this Privacy Policy. We will delete or de-identify information when it is no longer needed to fulfil these purposes unless a longer retention period is required to comply with applicable laws. There may be technical or other operational reasons where we are unable to fully delete or de-identify your information."
Bose provides no concrete data retention timelines, using vague language about retaining data as long as 'needed,' and acknowledges there may be reasons they cannot fully delete user information.
