Retention Policy
Version 2.0 — Effective date: 23 July 2026 · https://aiacts.ai/retention.html
How long AiActs keeps each category of data. A scheduled job applies these periods automatically once a day. Deletion and anonymisation requests are made from Account → Privacy & Data or by writing to hello@aiacts.ai.
| Category | Retention |
|---|---|
| Account profile and authentication | While the account is active. Deleted or anonymised within 5 days of a valid deletion request, unless another ground obliges us to keep processing. |
| Assessment inputs and generated reports | While the account is active; deleted or anonymised within 5 days of account closure. Export any reports you need before closing. |
| Consent records and accepted-contract records | For the lifetime of the account and up to 6 years after it closes, as evidence of lawful processing and of the terms you accepted. |
| Age confirmation data | Year of birth, the threshold applied and the time of confirmation, kept while the account is active. The full date of birth is not stored. |
| Parental consent records | 1 year. |
| Profile change history | 3 years. |
| Privacy audit events | 3 years. |
| Data subject requests | 3 years after the request is closed. |
| Third-party transfer log | 6 years. |
| Security and application logs, security alerts | 1 year. Longer where needed to investigate abuse, fraud or a security incident, or to defend a legal claim. |
| Staff access records | 1 year. |
| Incident and breach records | 6 years after closure, or longer where the law or active proceedings require it. |
| In-account notifications | 1 year. |
| Support and complaint messages | 3 years after closure, unless you ask for earlier deletion and no legal or security reason requires keeping them. |
| Billing and transaction records | Held by Paddle as Merchant of Record under its own policy. Records we keep for accounting purposes are retained for the period required by Georgian accounting and tax law and are not removed when an account is closed. |
Deleted data may remain in backups until the normal backup rotation completes.
Where a legal hold, a security investigation or a dispute exists, retention is extended for as long as necessary and no longer.