Data retention and deletion

Current policy boundary

Original walkthroughs and derived evidence are private and retained until an explicit deletion request or configured retention policy applies. No fixed default retention period is published here.

Media and evidence

• Owner/admin users can request deletion for a media asset from the authenticated survey detail flow.
• The durable deletion worker removes registered objects, sweeps the deterministic prefix, and requires two stable empty listings before success.
• A successful request is not shown as deleted until the sanitized receipt and storage state meet the workflow requirements.
• Provider retention and backup limitations remain separate evidence items.

Inventory, audit, exports, and accounts

Inventory revisions, approvals, sync history, provider usage, audit records, CRM exports, customer links, and account records have their own operational and legal retention decisions. Runtime media deletion does not automatically erase a database backup or a downstream CRM record.

Request a review

Use Privacy choices for a structured access, correction, deletion, restriction/objection, opt-out, agent, or appeal request. The operator reviews identity and scope before taking action; unauthenticated requests are not auto-deleted.