Data & Retention Policy
Effective: September 4, 2026 · Version 2026-09-04
1. Principle
We keep the minimum data required to run the protocol, for the shortest period that still serves you and our legal obligations. Retention is enforced automatically by a scheduled purge job, not by memory.
2. Retention schedule
| Category | Kept for | Then |
|---|---|---|
| Account & profileName, email, timezone, objective, settings. | Life of account | Deleted within 30 days of account deletion. |
| Daily logs & journalsScores, notes, journal entries, lessons, advisor threads. | Life of account | Deleted within 30 days of account deletion. |
| Policy acceptance recordsWhich policy version you accepted and when. | Life of account | Kept as a legal record. Browser/device details attached to the record are erased after 90 days. |
| Acceptance device detailsBrowser user-agent captured at the moment of acceptance. | 90 days | Erased automatically; the acceptance fact remains. |
| Partner survey linksSingle-use partner check-in tokens. | 180 days | Used and expired links are deleted. |
| Operational job logsScheduled-job run records used for reliability monitoring. | 90 days | Deleted automatically. |
| Security audit logSecurity-relevant events (no message content). | 365 days | Deleted automatically. |
| Resolved safety & crisis recordsResolved safety incidents and crisis events. | 730 days | Deleted automatically after resolution. |
| BackupsEncrypted database backups. | 35 days | Rolling window; expired backups are destroyed. |
3. Your rights
You may request access to your data, a portable export, correction, or permanent deletion. We respond within 30 days. Deleting your account removes your logs, journals, advisor threads, and partner records; anonymous, aggregated statistics that cannot identify you may remain.
Requests: privacy@sophisticatedsavage.com.
4. Access controls
Your entries are readable only by your own authenticated account. Database-level row policies enforce that boundary, and administrative screens see aggregate counts rather than the content of anyone's journal, advisor thread, or partner survey.
5. Sub-processors
We use infrastructure providers for hosting, database storage, email delivery, and AI inference. They process data only on our instructions and are bound by confidentiality obligations. We do not sell personal data or share it with advertisers.
6. Contact
Questions: privacy@sophisticatedsavage.com.