[PROJECT_NAME] Data Retention Policy
Effective date: [DATE]
[COMPANY_NAME] keeps personal data only as long as it needs it for the purpose it was collected for, or as long as the law requires.
| Data | Kept for | Then |
|---|---|---|
| Account data and content | while the account is open, plus [RETENTION_PERIOD] | deleted |
| Sign-in codes | 10 minutes, or until used | deleted |
| Sign-in sessions | up to 30 days | deleted |
| Invoices and payment records | as long as tax law requires (normally 7 years) | deleted |
| Support messages | 2 years after the last message | deleted |
| Security and access logs | up to 12 months | deleted |
| Consent records | while the account is open, plus the limitation period for claims | deleted |
| Backups | up to 30 days | overwritten |
| Analytics | aggregated or anonymised; no raw IP addresses | kept as statistics |
You can ask us to delete your data earlier (see our privacy rights page). We keep only what the law obliges us to keep, and only for that purpose.
Questions: [PRIVACY_EMAIL].