Data Retention Policy

Active accounts

Account and business records remain available while the account is active. Short-lived verification and recovery codes expire after 15 minutes and are automatically removed within 30 days.

Deletion

Account deletion removes operational account data immediately from the live service. Encrypted backup copies age out through the backup cycle, normally within 35 days. Payment and accounting records may be retained for up to seven years where tax, fraud or legal obligations require it.

Support records

Support requests are retained for up to 24 months to resolve disputes and improve service. Security logs may be retained for up to 12 months.

Consent withdrawal

When measurement or photograph consent is withdrawn, the designer should stop new processing and remove information that is no longer required for an active order or legal obligation.