Data Retention & Deletion
A single, versioned schedule of how long we keep each category of data and how deletion, export and backups work.
1. Principles
We retain personal data only as long as needed for the purposes stated in the Privacy Policy or to meet legal, tax, and audit obligations. Retention windows below are ceilings; we routinely purge earlier where possible. Backups are encrypted and rotate on a 35-day cycle.
2. Retention schedule
| Category | Retention | Notes |
|---|---|---|
| Account data (profile, email, workspace) | Life of account + 30 days | Deleted on account deletion; anonymised in analytics. |
| Résumé, LinkedIn imports, Brand DNA, Strategy | Life of account | Removed on account deletion or on user request. |
| Knowledge Vault objects & embeddings | Life of account | Removed on account deletion; individual items removable in-product. |
| Generated content (posts, banners, drafts) | Life of account or until deleted by user | User-controlled; hard-deleted on account deletion. |
| AI request traces (IGOF) | 90 days rolling | Auto-purged; personal identifiers stripped after 30 days. |
| Product analytics events (PostHog) | 12 months | Anonymised at collection; opt-in only. |
| Support tickets & correspondence | 3 years | Retained for service quality and legal defence. |
| Billing invoices & tax records | 7 years | Retained to meet tax and accounting obligations. |
| Security logs (auth, admin, webhooks) | 12 months | Longer where required to investigate incidents. |
| Encrypted backups | Subject to the active provider backup configuration | Backup expiry depends on the active plan and policies. |
| Suppressed email addresses (bounces/complaints) | Indefinite | Kept to protect sender reputation and honour unsubscribes. |
3. Account deletion
You can delete your account from Account → Data. On confirmation we soft-delete the record and queue a hard-delete job. Live production stores are purged within 7 days; encrypted backups age out within 35 days of the point-in-time recovery window.
4. Data export & portability
From Account → Data you can download a portable archive of your profile, résumé variants, generated content, knowledge objects, and billing history in machine-readable JSON. We can produce a fuller export on request.
5. Backup and recovery
Database backup availability, retention, and recovery depend on the active provider plan and configured controls. Recovery test frequency is not represented here as a guaranteed schedule.
6. Data residency
Primary production data is hosted in the European Union. AI processing occurs in provider regions covered by adequacy or Standard Contractual Clauses. Enterprise customers can request specific residency commitments in their order form.
7. Individual requests
To request access, correction, deletion, restriction, portability, or objection, use Account → Data and Account → Privacy, or email grievance@yukta4u.com. We verify identity and respond within 30 days.