Principle
We keep data only as long as needed for purpose, legal duties, security or defense, then delete, anonymize or block as appropriate.
Accounts and profiles
Recurring account after suspension: operational recovery window up to 90 days. Tax, contract or dispute records may be blocked and retained separately.
Reservations
Operational target: 12 months. Documented disputes may justify retaining necessary evidence up to 3 years or the applicable legal period.
Orders
Export may be available for 30 days; operational retention up to 90 days, then deletion/anonymization/blocking as applicable.
Security
Raw IP and low-level technical logs: short target, typically around 30 days unless a documented incident requires more.
Contract identity
Raw identity copy used for verification: target deletion 90 days after verification absent a dispute or legal duty. Verification result/representation records may remain for the relationship plus applicable defense period.
Backups
Deletion is propagated through backup cycles; restored backups must reapply active deletion instructions.
Disabled paid-module configuration
When a profile continues at Community level after paid entitlements are lost, paid modules not included there become inactive. Each module's eligible configuration remains PRIVATE, with no feature or ACL grant, for twelve full calendar months from that module's latest deactivation, subject only to legally required erasure or other legitimate applicable exceptions; a later deactivation starts a new clock for that module only.
Ordinary expiry-based deletion requires mandatory notice at least thirty calendar days in advance and may not occur until twelve calendar months have elapsed since the module's latest deactivation. Authorized re-subscription within the window can recover configuration that still exists; after valid deletion it must be configured anew. Configuration expiry does not automatically erase account/profile identity, stable ID, URL, QR, historical Lifetime license or records required by law.
The historical recovery window of up to ninety days for suspended recurring accounts is a separate category, not the active-Community deletion rule. Lawful erasure requests, disputes, privacy requirements and fiscal duties may require deletion or blocking as applicable; revised text is not proof of a completed deletion or restoration.