Current schedule
Data classNormal rule
Active account and workspace dataFor the account/contract plus a 30-day controlled closure window, then deletion or anonymisation unless the customer requests an earlier lawful action.
Sessions and trusted devicesSession up to 30 days; trusted device up to 365 days; earlier on logout, replacement or revocation. Revoked security records may be retained up to 12 months for abuse investigation.
Password reset, MFA and activation challengesShort expiry configured by purpose; expired/used challenge records removed or anonymised within 90 days unless needed for a security investigation.
Public-source research and contact provenanceReviewed during use and at least every 12 months; stale/unneeded contact data deleted. Objection/suppression evidence retained while outreach could otherwise recur, normally for the account plus 6 years.
Gmail/OAuth and customer API keysWhile connected/needed; tokens and keys revoked and deleted on disconnect or closure, subject to short operational recovery copies and provider-side rules.
AI prompts, outputs and usage telemetryWorkspace content follows the account period. Detailed operational/cost telemetry normally up to 12 months, then aggregated or deleted.
Support and privacy requestsNormally 3 years after closure of the request, longer where needed for a dispute, regulator or legal obligation.
Quotes, invoices, receipts and payment recordsNormally 6 years after the end of the relevant financial year, subject to accounting/tax requirements.
Legal acceptance and key security audit evidenceContract term plus up to 6 years to establish or defend legal claims; high-volume operational logs normally 12 months.
BackupsProtected rolling backups expire through the configured hosting rotation, targeted at no more than 35 days. Deleted data is not restored to active service except for disaster recovery and is re-deleted through the normal process.
Exceptions and review
We may preserve specific data under a documented legal hold, fraud/security investigation or statutory duty, and may delete data earlier when it is no longer needed. Production backup periods, provider retention and scheduled deletion jobs must be verified in the final launch evidence. This schedule does not promise instant deletion from immutable or isolated recovery copies.
Contact
GridFlow Support
gridflowsupport@gmail.com