Data Retention Policy

This policy is a draft, not yet approved by independent legal counsel.

1. Retention Principles

Data is retained only as long as necessary to provide the Service, comply with legal obligations, and maintain audit integrity. Default periods may be overridden by tenant agreement.

2. Receipt Data

Signed receipts are retained for the lifetime of the tenant account plus the period required by applicable law. Receipts are immutable and cannot be deleted by tenants.

3. Conversation Data

AI conversation and input data is retained per tenant configuration. Default retention is 90 days. Tenants may configure shorter retention periods.

4. Audit Logs

Audit logs are retained for a minimum of 12 months. Security-relevant logs are retained for 24 months or as required by applicable law.

5. Tenant-Initiated Deletion

Tenants may initiate data deletion through the Service. Deletion requests are processed within 30 days and recorded in the audit trail.

6. Legal Hold

When subject to a legal hold, data that would otherwise be deleted is preserved until the hold is released. Tenants are notified where permitted.