Retention Policy
Version 2.0 · Effective date: 23 July 2026
Version 2.0 — Effective date: 23 July 2026
How long AiActs keeps each category of data. Deletion and anonymisation requests are made from Account → Privacy & Data or by writing to hello@aiacts.ai.
| Category | Retention |
|---|---|
| Account profile and authentication | While the account is active; deleted or anonymised within 30 days of a valid deletion request. |
| Assessment inputs and generated reports | While the account is active; deleted or anonymised on account deletion. Export your reports first if you need them. |
| Consent records and accepted-contract records | For the account lifetime and up to 6 years after closure, as evidence of lawful processing and accepted terms. |
| Data subject requests | Up to 3 years after the request is closed. |
| Security, audit and application logs | Up to 12 months; longer where needed to investigate abuse, fraud or a security incident, or to defend a legal claim. |
| Incident and breach records | Up to 6 years after closure, or longer where required by law or by active proceedings. |
| Support and complaint messages | Up to 3 years after closure, unless you ask for earlier deletion and no legal or security reason requires keeping them. |
| Billing and transaction records | Retained by Paddle as Merchant of Record under its own policy. Records we hold for accounting purposes are kept for the statutory period and are not removed by account deletion. |
Deleted data may remain in backups until normal backup rotation completes. Where a legal hold, security investigation or dispute exists, retention may be extended for as long as necessary.