Data Retention Schedule
Last updated 31 October 2026
1. Account and project data
Account records and project artifacts are kept while the account is active. After a verified deletion request, account and project records are purged within 30 days, except records required for tax, accounting, fraud prevention, or legal claims.
2. Payments and tax
Payment transaction records and invoices are retained for the period required by applicable tax and accounting law. Direct identifiers are anonymized after account deletion where the financial record must be retained.
3. Audit and security logs
Authentication and security logs are retained for up to 12 months, then deleted or aggregated. Hash-chained audit records are retained to preserve chain integrity and are access-restricted rather than selectively deleted. Legal holds may extend retention where necessary.
4. Backups
Encrypted backups expire on a rolling schedule not exceeding 35 days. Backups are restored only for disaster recovery and are re-purged after restoration.
5. Marketing suppression
Unsubscribe and suppression records are retained to honor the opt-out, even after account deletion.
This document is a template, not legal advice. Have counsel review it before relying on it commercially.