Privacy
Data retention policy.
Keep operational records only for a justified purpose.
Policy
How this works.
Contact and account data
Contact requests are scheduled for review after 12 months, sooner if the purpose has ended. Private accounts and workspace records are scheduled for review after 24 months without activity. Review may result in deletion, anonymisation or a recorded justified extension. A deletion request is assessed against the rights and obligations of everyone in the workspace.
Security and certificate history
Routine security logs are scheduled for rotation within 90 days; incident evidence may be held longer with a recorded reason. A certificate decision and status history, if any are created, may require longer retention so a public claim can be audited.
Backups
Backup copies are access controlled and rotated. A deletion may take effect in live records first and then in retained backups as their cycle completes. We do not use a backup as an active hidden copy of a deleted profile.
Operator: BC Aligned · Last reviewed 25 September 2026 · Contact us