Data Retention Policy

• Keep only what is needed to operate the service, fulfill user requests, meet legal obligations, and secure the platform.
• Use shorter retention for temporary processing artifacts and public/free tool inputs wherever feasible.
• Use longer retention for billing, fraud prevention, and audit records where legally or operationally necessary.

• Account and subscription records: retained while the account remains active and for a reasonable compliance period afterward.
• Private uploads and generated outputs: retained according to workspace availability, user deletion events, and storage lifecycle policies.
• Public YouTube tool artifacts: should be retained for a shorter operational window than private workspace content, subject to abuse prevention, caching, and storage rules.
• Export archives: retained only until the download window expires, then deleted or marked expired.
• Audit/security logs: retained as needed for abuse prevention, billing reconciliation, and incident investigation.

This policy stays aligned with the actual S3 lifecycle rules, worker cleanup tasks, workspace deletion behavior, and data export expiry windows implemented in the system.

Questions about how long specific records are kept, or whether a category of data is still required for billing, security, or compliance, should be submitted through [email protected].