Data Retention and Deletion Policy

We retain information only while needed for the Service, a documented customer instruction, security, dispute handling or legal obligation. Retention depends on data type, customer settings, subscription, feature and applicable Order.

Customer Data follows configured retention settings and documented product limits. Customers are responsible for selecting lawful settings, maintaining independent copies where required and completing available exports before data expires.

• Billing, tax and accounting records: normally seven years.
• Security and authentication records: for a documented, proportionate security period.
• Support and contractual records: while needed for the relationship and limitation period.
• Enquiry and unsuccessful application data: normally up to 12 months, with shorter draft periods where stated.

Available Customer Data can be exported during the subscription and applicable retrieval period. Export packages, secure download links and temporary transfer copies are deleted after their documented availability period.

Unless Customer requests earlier deletion or an Order or law requires otherwise, Exportable Data remains available for at least 30 calendar days after transition or termination. Customers must complete retrieval during that period.

A standard customer retention setting or retrieval period does not extend the time for which connected-service information may lawfully or contractually be held. Where source-service requirements demand earlier deletion, those requirements apply to the affected information, subject to mandatory law. Other Customer Data remains governed by the normal retention and retrieval arrangements.

AI inputs and outputs follow the same settings and retention rules as the Customer Data from which they arise. Temporary copies may be retained only as reasonably needed to generate output, prevent abuse, investigate faults or provide the Service. Use of AI creates no separate model-training retention right.

After the retrieval period we delete or anonymise Customer Data from active systems, subject to legal holds and security evidence. Backup copies expire through managed rotation and remain protected and unavailable for ordinary use until deletion.

After successful switching and expiry of the retrieval period, we erase Exportable Data and customer-generated digital assets, except records lawfully retained for billing, fraud prevention, security, legal claims or proof of deletion.