Data Retention Policy
How long each category of data is kept, what happens after cancellation, and how deletion works.
- Version
- 1.0
- Effective
- Contact
- Privacy team
In counsel review — not yet binding. This document is published for transparency while Verinten prepares for launch. It is not yet the binding version of this policy.
Retention by category
Retention starts from the date each record is created unless stated otherwise. Where a plan sets a shorter evidence-history limit than the maximum below, the plan limit applies.
| Category | Retention | After the period |
|---|---|---|
| Account and workspace records | Life of the workspace | Deleted on workspace deletion |
| Session records | 90 days after expiry or revocation | Deleted |
| Public-source evidence | 12–36 months, set by plan | Deleted; derived aggregates retained without item detail |
| Provider raw snapshots | 90 days | Deleted from object storage by lifecycle rule |
| Scores and coverage history | Life of the workspace | Deleted on workspace deletion |
| Generated reports | 24 months | Deleted from object storage by lifecycle rule |
| Data exports | 7 days | Deleted; a new export can be requested at any time |
| Support correspondence | 24 months from case closure | Deleted |
| Consent records | 6 years | Retained as evidence of what was chosen and when |
| Audit events | 24 months | Deleted |
| Invoices and billing records | As required by tax law, minimum 10 years | Retained — a legal obligation overrides deletion |
| Product analytics events | 12 months | Deleted by the analytics provider |
| Session replay recordings | 30 days | Deleted by the analytics provider |
After cancellation
Your workspace becomes read-only for 30 days so you can export everything you need. After that window the retention periods above run from the cancellation date, and the workspace is scheduled for deletion.
Deletion on request
Workspace deletion is self-service and starts a durable deletion process covering both databases, object storage, and queued work. It completes within 30 days. Two things survive it: records we are legally required to keep (invoices and tax records), and consent records, which exist precisely to prove what was chosen.
Backups
Point-in-time recovery snapshots are retained for up to 30 days. Deletion is applied to live data immediately and works through recovery snapshots as they expire; a snapshot is never used to restore data that a deletion request has already removed.
Change history
- 1.0
First published version.