Data Retention Policy

Disclaimer: This document is provided for informational purposes and does not constitute legal advice.

Principles

We retain data only as long as needed to provide services, meet legal obligations, resolve disputes, and enforce agreements. You can request deletion of scan artifacts and account data at any time, subject to backup lag described below.

Retention periods

• Active scan history: Retained while your subscription is active and for 90 days after cancellation unless you delete sooner.
• Deleted scans: Removed from primary storage within 30 days; encrypted backups may persist up to 90 days before overwrite.
• Account profile: Deleted within 30 days of a verified deletion request.
• Billing records: Retained as required by tax and accounting laws (typically 7 years).
• Support tickets: Up to 24 months for quality and dispute resolution.
• Security logs: Up to 12 months for business accounts; shorter windows for consumer accounts where feasible.

Enterprise customers

Business agreements may specify custom retention schedules, export windows, and deletion attestations. Consumer retention defaults do not apply to negotiated enterprise terms.

HIPAA note

Consumer FORMA accounts are not HIPAA-covered. Where a BAA is in place for enterprise deployments, retention and deletion procedures follow the executed agreement and applicable regulations—we do not claim HIPAA compliance for standard consumer products.

How to request deletion

Use in-app account settings or email [email protected] from your registered address. We may verify identity before processing requests.