Data Retention Policy

• Keep information only while reasonably needed for service delivery, security, legal obligations, disputes, and documented business records.
• Apply the shortest practical period consistent with those needs.
• Restrict retained data to the permitted purpose and protect it until deletion or anonymization.
• Use verified, auditable, and fail-closed procedures for destructive actions.

The plan's history-days limit is an access window for completed audit history, comparisons, and related workspace records. It is not a promise that every raw artifact, security log, billing record, or protected backup uses the same period. Records outside the active window may be archived, aggregated, de-identified, or deleted according to system capability and this policy.

Public launch requires the plan history-access rule to be enforced or the limit removed from checkout. Until that qualification passes, the history value must not be described as automatic deletion.

• Active account, organization, site, configuration, and subscription records: while the workspace is active and through the verified deletion process.
• Audit metadata, findings, tickets, and reports: available according to the plan history window, with a default operational maximum of 730 days unless a plan, order, legal hold, or configured retention policy requires another period.
• Raw crawl bodies, rendered evidence, screenshots, and generated artifacts: generally up to 365 days unless a shorter configured lifecycle, storage constraint, plan, or signed order applies.
• Authentication, security, abuse, and operational logs: generally up to 12 months, and longer when reasonably needed for an incident, fraud, dispute, or legal duty.
• Support and business communications: generally up to 24 months after resolution, and longer for an active account, dispute, or legal duty.
• Billing, tax, invoice, transaction, and legal-acceptance records: generally up to seven years or the period reasonably required by applicable law, accounting, audit, and dispute needs.
• Encrypted operational backups: 14-day rolling retention by default, subject to verified backup configuration and legal holds.
• Deletion receipts and evidence: retained as long as reasonably necessary to demonstrate deletion, enforce legal holds, prevent replay, and address disputes, without retaining the deleted workspace content.

Subscription cancellation does not automatically delete a workspace. A downgrade may reduce the accessible history window and features. Customer should export required records before the downgrade or paid period ends.

Only an authorized owner may initiate workspace deletion. We verify identity, authority, backup state, export status, legal holds, retention operations, and active jobs. The request has a 14-day cancellation period. After execution begins, active-system deletion is targeted within 30 days, subject to technical errors, mandatory retention, and legal holds.

Deletion from active systems does not immediately remove every protected backup. Backup copies are isolated from ordinary use and expire through the scheduled backup cycle. If a backup is restored, deletion and suppression records must be reapplied before restored data is returned to normal service.

We may suspend deletion for a subpoena, legal obligation, litigation hold, investigation, fraud, security incident, payment dispute, or preservation request. Access is restricted to the reason for retention, and deletion resumes when the hold ends.

Customers should use available export tools before cancellation, downgrade, or deletion. Export availability depends on account state, plan, record type, and security controls. We may require identity and authority verification and may exclude secrets, other customers' data, privileged material, and security-sensitive information.

Retention periods are reviewed when product behavior, storage providers, legal duties, or plans change. Material changes are reflected in this policy and operational configuration. Questions may be sent to clancaster@lancastersolutionsllc.com. Effective August 9, 2026.