Last updated 2026-07-01
Retention schedule
We keep data only as long as it serves the purpose it was collected for.
- Account records: for the life of the account, then 30 days after deletion is requested.
- Encrypted content: until you delete it, or 30 days after account deletion.
- Security event logs (sign-ins, security changes): 12 months.
- Audit logs of administrative actions: 24 months, append-only.
- Billing records and invoices: 8 years, as required by tax law.
- Support tickets: 24 months after closure.
- Aggregated analytics: 24 months, not linked to an identifiable person.
- Backups: rolling 35 days, after which deleted data ages out.
Legal holds
Where we are legally required to preserve data, we retain it for the period required and delete it afterwards. We will inform you unless prohibited.