Who Owns Your Data When You Cancel? The Export Window Nobody Checks
You usually own the data and can still lose it. Termination clauses commonly allow deletion after a short window, so the length of the export period matters more than the ownership clause does.
Every buyer evaluates how easy a product is to adopt. Almost nobody evaluates how easy it is to leave, and the clause that decides that is usually two lines long and located near the end of the agreement.
Key takeaways
- Termination clauses commonly permit deletion of customer data after a short period.
- A vendor deleting promptly is often following its own retention obligations, not acting badly.
- Format matters as much as timing: an export you cannot reconstruct is not a real export.
- Under DPDP, deletion and return on termination is a term the contract should address anyway.
- The time to negotiate this is at signature, when you have leverage.
What usually happens on termination
A typical clause provides that on termination the customer may retrieve its data for a stated period, after which the vendor may delete it. Thirty days is common, shorter periods appear, and some agreements say nothing at all beyond permitting deletion.
It is worth understanding that prompt deletion is not usually a punitive act. Vendors have their own retention and data minimisation obligations, and holding a departed customer data indefinitely creates risk for them. The problem is not that they delete; it is that customers do not plan for it.
Format is the part that fails
A contract promising export in a commonly used format sounds adequate until you receive it. A dump of raw tables without the schema, or a set of CSVs that cannot reconstruct the relationships between records, technically satisfies the clause and is close to useless if you are migrating.
The specific question worth asking during evaluation is what an export actually looks like for your data, including attachments, historical records and anything the product generated rather than you uploaded. Ask to see a sample export before you sign, which is a reasonable request and surprisingly revealing.
The DPDP overlay
Where the data includes personal data, deletion and return on termination is a term the contract should address in any event as part of allocating processor obligations. That gives you a second reason to raise it, and it aligns your commercial interest in getting your data out with a compliance reason the vendor will recognise.
It also means silence is a gap rather than a neutral position. A contract that says nothing about what happens to personal data on termination has not allocated an obligation that the framework contemplates being allocated.
What to negotiate
- An export window of at least 30 days after termination, and longer for data-heavy systems.
- Export in a documented, machine-readable format, with the schema.
- Vendor assistance with migration, at a defined rate rather than at its discretion.
- Confirmation that export is available even where termination follows non-payment, which some contracts exclude.
- A deletion certificate after the window closes, which you may need for your own records.
A practical habit
For any system holding data you would not want to lose, run an export while you are still a customer and check you can actually read it. That takes an afternoon, it tests the clause rather than trusting it, and it is far better done now than during a migration under notice.
If the export turns out to be unusable, you have discovered that while you still have a relationship and leverage, which is the entire point.
Have a contract in front of you?
Upload it and get every clause checked against Indian law, with the provision each finding rests on.
Review your saas & vendor contractCommon questions
Can a vendor delete our data immediately on termination?
It depends on what the contract says. Some agreements provide a retrieval window, others permit deletion without one. Where personal data is involved, deletion and return is a term the contract should address, so silence is worth raising rather than accepting.
The vendor says export is available in their standard format. Is that enough?
Ask to see a sample before you sign. Standard format frequently means a raw dump without the schema, which satisfies the clause and does not help you migrate. Testing it is quicker than negotiating a definition.
Related guides
This article is general information about Indian law as of 2026-07-26, not legal advice, and reading it does not create an advocate–client relationship. Statutes and rules change, particularly under the Labour Codes where State rules are still being notified. Consult a qualified advocate about your own situation.