Data Retention Policy
How long each category of data is kept, what happens after cancellation, and how deletion works.
- Version
- 1.0
- Effective
- Contact
- Privacy team
In counsel review — not yet binding. This document is published for transparency while Verinten prepares for launch. It is not yet the binding version of this policy.
Retention by category
Retention starts from the date each record is created unless stated otherwise. Where a plan sets a shorter evidence-history limit than the maximum below, the plan limit applies.
| Category | Retention | After the period |
|---|---|---|
| Account and workspace records | Life of the workspace | Deleted on workspace deletion |
| Session records | 90 days after expiry or revocation | Deleted |
| Public-source evidence | 12–36 months, set by plan | Deleted; derived aggregates retained without item detail |
| Provider raw snapshots | 90 days | Deleted from object storage by lifecycle rule |
| Scores and coverage history | Life of the workspace | Deleted on workspace deletion |
| Generated reports | 24 months | Deleted from object storage by lifecycle rule |
| Data exports | 7 days | Deleted; a new export can be requested at any time |
| Support correspondence | 24 months from case closure | Deleted |
| Consent records | 6 years | Retained as evidence of what was chosen and when |
| Audit events | 24 months | Deleted |
| Invoices and billing records | As required by tax law, minimum 10 years | Retained — a legal obligation overrides deletion |
| Product analytics events | 12 months | Deleted by the analytics provider |
| Session replay recordings | 30 days | Deleted by the analytics provider |
After cancellation
Your workspace becomes read-only for 30 days so you can export everything you need. After that window the retention periods above run from the cancellation date, and the workspace is scheduled for deletion.
Deletion on request
Workspace deletion is self-service. Members lose access immediately and the data is removed 30 days later — a grace period, not a queue delay, so that an account closed by mistake can be recovered. The deletion itself is a recorded sequence covering both databases, object storage, and queued work, and it can be cancelled up to the point where the first irreversible step runs.
Four things survive it. Records we are legally required to keep (invoices and tax records). Consent records, which exist precisely to prove what was chosen. The workspace address, marked closed, because freeing it would let somebody else take it and every reference elsewhere would then point at the wrong workspace. And a minimised audit trail — what happened, to what kind of record, and when, with the identities and details stripped.
Backups
Point-in-time recovery snapshots are retained for up to 30 days. Once a deletion runs it is applied to live data at once and works through recovery snapshots as they expire; a snapshot is never used to restore data that a deletion request has already removed.
Change history
- 1.0
First published version.