Data retention policy

DRAFT — requires professional legal review and owner approval before launch.

Legal entity, address, jurisdiction, privacy contact and effective date: [OWNER TO PROVIDE].

Proposed cancellation retention: 90 days, subject to approval. Cancellation does not itself erase data. The optional retention job is disabled by default and applies only to generic organization resource payloads. It does not provide complete account, audit-log, beta-feedback, local browser, D1, R2 or backup erasure.

Owners may request export or deletion through the pilot coordinator. Verify authority, identify every store and backup, review required record retention, provide an approved timetable, record completion and notify the requester. Backup expiration and legal holds require documented schedules. No guaranteed deletion deadline has been adopted.

Before launch, approve actual retention durations, backup expiry, restoration behavior and identity erasure procedures. Do not use this draft as an approved customer commitment.