Data Retention Schedule
This schedule summarizes current application deletion rules. A documented legal hold or mandatory accounting, fraud, security or dispute duty can pause deletion for the affected records.
Effective date: 18 oct 2026Visitor and runtime data
Rescue-request personal content is deleted or anonymized after 30 days. Learning traces used to establish healthy behaviour are retained for up to 72 hours. Action runs follow the plan: 30, 90, 180 or 365 days; inactive workspaces use a 30-day grace period. Detection decisions are retained up to 180 days and explicit quality labels up to 365 days. Records of privacy choices made on the SiteAirbag website are retained for three years.
Operational and security data
Short-lived credentials expire automatically and are removed after a one-to-seven-day cleanup window. Heartbeats, abuse controls, internal error records and normalized runtime-reported CSP diagnostics are normally retained 30 days. Sent notification outbox records are normally retained 30 days and failed records 90 days; specific webhook/delivery records may have longer documented operational windows. Audit records are retained up to 365 days. Lifecycle, billing-reconciliation and billing-webhook evidence may be retained up to 730 days.
Accounts, research and billing
Active account and configuration data remains while the service is used and enters verified deletion after a deletion request. Records of opt-in tips consent (address, decision, wording version, time, and a hash of the unsubscribe token; no IP address) are kept for three years after the latest decision, so a withdrawal can always be honoured and shown. Research choices and coded interview records are retained up to 365 days, with linked codes deleted on withdrawal; thresholded aggregate funnel cells may be retained up to 730 days. Paddle or legally required billing records may be retained up to seven years.
Deletion, downgrade and backups
A plan downgrade has a seven-day grace period before data beyond the new retention window is removed. Cancellation does not itself delete the account. Workspace deletion requires an authenticated owner, emailed code and exact confirmation phrase. At this policy date, the production Supabase Free plan has no managed backups and point-in-time recovery is disabled. The intended configuration is a backup-enabled plan with seven days of managed retention, plus periodic external logical backups where practical. These are plans, not current contractual RPO or RTO commitments.
Rights and questions
Visitors can use the privacy-request route for personal details tied to a SiteAirbag request reference. Account owners can export workspace data and request deletion through authenticated settings; once paid access has ended, deletion is on request by email to support@siteairbag.com. Contact privacy@siteairbag.com for correction, objection, restriction, portability, authorized-agent, legal-hold or retention questions.
Questions or requests
Support: support@siteairbag.com
Privacy: privacy@siteairbag.com
Security: security@siteairbag.com
Legal: legal@siteairbag.com