Trust
Retention & Deletion Schedule
This page describes typical retention periods and deletion triggers for key data categories processed by DirectLine.Solutions.
Summary
Effective Date: [Insert Date]
Notes: “Default retention” may vary by customer configuration, legal requirements, and operational needs. Aggregated/anonymous metrics may be retained longer.
Schedule
Business account data
- Examples
- Owner email, auth identifiers, business name/address
- Purpose
- Account access, workspace management
- Default retention
- For the life of the account
- Deletion trigger
- Account deletion request + completion of required legal retention
Billing records
- Examples
- Stripe customer/subscription IDs, invoices/receipts metadata
- Purpose
- Payments, subscription enforcement, auditability
- Default retention
- As required by law/accounting needs (typically years)
- Deletion trigger
- After legal/accounting retention expires
Customer contact data (Controller-provided)
- Examples
- Emails, phone numbers, consent status, allowed channels
- Purpose
- Campaign delivery and compliance features
- Default retention
- Until Controller deletes the contact or closes account
- Deletion trigger
- Controller deletion / account closure (subject to compliance logs)
Campaign content
- Examples
- Subject lines, message content, campaign images
- Purpose
- Sending, history, auditing, customer reporting
- Default retention
- While account is active (or until deleted by Controller)
- Deletion trigger
- Controller deletion / account closure
Delivery & engagement logs
- Examples
- Message status, bounces, opens/clicks where enabled, unsubscribe events
- Purpose
- Troubleshooting, compliance evidence, analytics
- Default retention
- Reasonable operational period (e.g., 12-24 months) unless required longer
- Deletion trigger
- Rolling deletion after retention window; may retain aggregates
AI processing inputs/outputs (optional)
- Examples
- Uploaded images used for enhancement; generated outputs
- Purpose
- Provide AI image feature
- Default retention
- Stored in workspace if saved by Controller; otherwise transient processing
- Deletion trigger
- Controller deletion / account closure
Website logs
- Examples
- IP address, user agent, security logs
- Purpose
- Security monitoring, abuse prevention
- Default retention
- Reasonable operational period (e.g., 30-180 days)
- Deletion trigger
- Rolling deletion after retention window
| Data type | Examples | Purpose | Default retention | Deletion trigger |
|---|---|---|---|---|
| Business account data | Owner email, auth identifiers, business name/address | Account access, workspace management | For the life of the account | Account deletion request + completion of required legal retention |
| Billing records | Stripe customer/subscription IDs, invoices/receipts metadata | Payments, subscription enforcement, auditability | As required by law/accounting needs (typically years) | After legal/accounting retention expires |
| Customer contact data (Controller-provided) | Emails, phone numbers, consent status, allowed channels | Campaign delivery and compliance features | Until Controller deletes the contact or closes account | Controller deletion / account closure (subject to compliance logs) |
| Campaign content | Subject lines, message content, campaign images | Sending, history, auditing, customer reporting | While account is active (or until deleted by Controller) | Controller deletion / account closure |
| Delivery & engagement logs | Message status, bounces, opens/clicks where enabled, unsubscribe events | Troubleshooting, compliance evidence, analytics | Reasonable operational period (e.g., 12-24 months) unless required longer | Rolling deletion after retention window; may retain aggregates |
| AI processing inputs/outputs (optional) | Uploaded images used for enhancement; generated outputs | Provide AI image feature | Stored in workspace if saved by Controller; otherwise transient processing | Controller deletion / account closure |
| Website logs | IP address, user agent, security logs | Security monitoring, abuse prevention | Reasonable operational period (e.g., 30-180 days) | Rolling deletion after retention window |
Questions: privacy@directline.solutions
Replace [Insert Date] when you publish.