Data Deletion Policy

This policy is a draft, not yet approved by independent legal counsel.

1. Deletion Scope

This policy covers tenant-initiated deletion of data stored in the Service, including relational database records, R2 objects, KV entries, and receipt data.

2. Account Deletion

When a tenant account is deleted, all associated data is scheduled for deletion within 30 days. Receipt data required for legal compliance may be retained per the Retention Policy.

3. Selective Deletion

Tenants may delete specific conversations, projects, or knowledge bases. Deletion is irreversible and recorded in the audit trail.

4. Deletion Verification

Upon completion, a deletion receipt is generated. Tenants may request a deletion verification report confirming the scope of deleted data.

5. Backup Considerations

Data deleted from primary storage is also removed from backups within the backup retention window. Backups are not retained beyond the primary retention period.

6. Third-Party Provider Data

Data sent to upstream AI providers is subject to the provider retention policy. The Service transmits only the minimum data necessary for each request.