Data Retention

This page explains how long we keep information, why we keep it, and how deletion works.

Retention depends on account status, legal obligations, security requirements, and the need to maintain audit trails.

1. Retention Principles

We follow practical retention principles: keep data only as long as needed, keep it secure, and delete or anonymise when it is no longer required.

Important: Some records may be retained to comply with legal obligations, resolve disputes, enforce agreements, prevent fraud/abuse, or maintain security and audit integrity.

2. Typical Retention Categories

Exact time periods can vary based on the features used and contractual requirements. The categories below describe how we approach retention.

Account & Profile

Kept while an account is active
On closure, retained for a limited period for support and dispute resolution
May be anonymised where full deletion is not feasible

Security & Audit Logs

Retained to protect the platform and investigate abuse
May be retained longer where required for compliance or governance
Access restricted to authorised personnel

Billing & Financial Records

Retained as required for accounting and legal compliance
Used to support invoicing, refunds, charge disputes and audit needs
May be retained after account closure where legally required

3. Deletion, Anonymisation & Backups

When deletion is requested or triggered, we aim to remove personal data from active systems. Some data may remain in backups for a limited period.

Deletion from Active Systems

We remove or anonymise personal information from active systems where it is no longer required, subject to lawful retention needs.

Backups

Backup copies are used for recovery and resilience. Deleted data may persist in backups temporarily until backup cycles overwrite it.

Legal Holds

If we must keep information for legal reasons (e.g., disputes or compliance), we may retain it until the matter is resolved.

4. Requesting Data Removal

You can request deletion via the Contact page. We may need to verify identity and authority (especially for business accounts).

Some information cannot be deleted immediately if it is needed for billing compliance, security, fraud prevention, or to preserve audit integrity. In those cases, we will restrict access and retain it only as long as required.