| Data | Retention |
|---|---|
| Transient request data (task text, write fields sent for a check) | Not retained. Processed in memory and discarded after the response. |
| Derived work signals, profiles, recommendations, outcomes | For the life of the subscription, so return can be measured over time. |
| Audit logs (who accessed what, admin actions) | 12 months, then deleted. |
| Service logs (errors, latency) | 30 days. They never contain task text or record contents. |
| Backups | Encrypted, rolling 30 days. |
When a subscription ends, all customer data is deleted from live systems within 30 days and from backups within a further 30 days. Enterprise customers may set a shorter retention period for work signals, down to 90 days from the source event.
Anonymous, aggregated product statistics (for example, the share of cards accepted across all customers) may be kept beyond termination. They cannot be linked to a person or an organisation.