Trust
Retention & Deletion Schedule
This page describes typical retention periods and deletion triggers for key data categories processed by DirectLine.Solutions.
Summary
Effective Date: [Insert Date]
Notes: “Default retention” may vary by customer configuration, legal requirements, and operational needs. Aggregated/anonymous metrics may be retained longer.
Schedule
| Data type | Examples | Purpose | Default retention | Deletion trigger |
|---|---|---|---|---|
| Business account data | Owner email, auth identifiers, business name/address | Account access, workspace management | For the life of the account | Account deletion request + completion of required legal retention |
| Billing records | Stripe customer/subscription IDs, invoices/receipts metadata | Payments, subscription enforcement, auditability | As required by law/accounting needs (typically years) | After legal/accounting retention expires |
| Customer contact data (Controller-provided) | Emails, phone numbers, consent status, allowed channels | Campaign delivery and compliance features | Until Controller deletes the contact or closes account | Controller deletion / account closure (subject to compliance logs) |
| Campaign content | Subject lines, message content, campaign images | Sending, history, auditing, customer reporting | While account is active (or until deleted by Controller) | Controller deletion / account closure |
| Delivery & engagement logs | Message status, bounces, opens/clicks where enabled, unsubscribe events | Troubleshooting, compliance evidence, analytics | Reasonable operational period (e.g., 12-24 months) unless required longer | Rolling deletion after retention window; may retain aggregates |
| AI processing inputs/outputs (optional) | Uploaded images used for enhancement; generated outputs | Provide AI image feature | Stored in workspace if saved by Controller; otherwise transient processing | Controller deletion / account closure |
| Website logs | IP address, user agent, security logs | Security monitoring, abuse prevention | Reasonable operational period (e.g., 30-180 days) | Rolling deletion after retention window |
Questions: privacy@directline.solutions
Replace [Insert Date] when you publish.