Data retention and privacy
Policy adopted 7 October 2026. Automated retention is prepared but not active until the policy release.
We keep your profile and saved Theses while you use your account. Explicit closure removes deletable account data and disables shared links.
For Free accounts, we track authenticated activity from the date reliable tracking begins. After 24 months without activity, we send a factual service notice. Closure happens only after a successfully sent notice and a full 30 days without new activity. Paid subscriptions, open service requests and identified disputes or holds are excluded.
Completed Assessment and enquiry operational records are removed or anonymised after 24 months from completion. Saved Theses are not removed by that rule. Scoped dispute or investigation holds are reviewed by the owner; open cases are excluded.
As a sole trader, we retain minimal necessary financial and tax evidence until at least five years after the 31 January filing deadline for the relevant UK tax year ending 5 April. Documented investigations or late-return requirements may extend this. This does not require keeping full property analyses. Stripe manages its own records.
Ordinary nonfinancial closure proof is kept for 12 months after closure. Minimal evidence needed for a paid-contract dispute is kept for six years, or until a later applicable tax deadline. A coded email hash remains personal data. Temporary email recipients remain only while closure confirmation and marketing unsubscribe are safely processed.
Security and monitoring logs are kept for 90 days. Stripe processing audit detail is kept for 24 months; minimal idempotency references remain to prevent duplicate processing. Unresolved or retrying work is not purged. Completed marketing-sync delivery records are kept for 12 months; pending and failed work remain available for resolution. Product usage history is kept for 90 days, and service-request history is removed 90 days after its request is deleted. Account, membership, consent and duplicate-email-prevention records are kept while the account exists and removed when it closes.
We keep the latest necessary consent evidence while relying on it, and minimal unsubscribe suppression only to prevent unwanted contact. Provider request logs, email delivery records and backups follow provider-managed settings. Daily backup snapshots are confirmed; expiry and coverage are provider-managed, and restoration has not been tested. Deletions and suppression must be reapplied before restored data is used.
Full Privacy Policy