Data retention and deletion policy
Retention periods are based on service delivery, security, user requests, and legal obligations.
Last updated: 21 September 20261. Storage minimisation
Data is kept only while needed to deliver the service, maintain security, resolve disputes, or meet a legal duty. When no longer needed, it is deleted or irreversibly de-identified.
2. Typical periods
- Account and profile: while the account is active; after a verified closure request, active data is deleted or de-identified within 30 days.
- Tasks, notes, and shared spaces: until deleted by an authorised user or the account/space closes, while respecting other workspace members’ rights.
- Offline drafts: only on that device until successful submission, sign-out, or browser-data removal.
- Technical and security logs: normally up to 12 months; longer while a security incident or dispute is investigated.
- Support correspondence: up to 24 months after closure, unless an active matter or legal duty requires longer.
- Financial records, if payments launch: for the period required by applicable tax, accounting, and e-commerce law.
3. Backups and deletion
After removal from active systems, rotating backups may retain a copy for up to 90 days and are used only for disaster recovery. Immediate deletion can be limited by a legal hold, open dispute, fraud prevention, or other shared-space members’ rights.
4. Deletion or access requests
Send the request to support from the email connected to your account. Identity verification is required to prevent unauthorised deletion. We will reply through the same channel with the result or any information needed.
Use the contact page for support, a data request, or complaint follow-up.