Data Retention & Deletion

We retain personal data and Customer Content only as long as needed to provide the Services, meet legal and accounting duties, resolve disputes, and enforce agreements. Ownership of content is governed by IP Ownership; this page covers storage duration on Echo systems.

• Active account data — retained while the account remains open and for up to 30 days after closure for recovery, unless a deletion request is completed earlier.
• Customer Content & Generated Artifacts — retained while the Tenant is active. After cancellation or confirmed deletion request: removed from primary systems within 30 days, and from routine backups within 90 days, subject to legal holds.
• Billing and tax records — typically 7 years (or longer if required by law).
• Security and access logs — typically 12–24 months for incident response and abuse prevention.
• Support tickets — typically 24 months after closure.
• Published certification seals you chose to make public may remain verifiable as long as the verification surface is offered; private evidence packages follow Tenant deletion rules.

Account owners may request deletion by emailing [email protected] or [email protected] from the registered address. We will verify identity, confirm scope (workspace vs. whole account), and complete primary deletion within 30 days unless a legal exception applies. We will confirm completion on request.

When a subscription ends under the Refund & Cancellation Policy:

• Paid feature access ends at period end;
• You should export needed artifacts before access ends;
• Remaining Tenant data follows the schedules above — Echo does not keep cancelled Tenants available for other customers, and does not use that content to train shared models (IP §5–7);
• Aggregated metrics that never included your private content may remain.

We may retain specific data longer when required by law, regulation, valid legal process, ongoing dispute, or documented security investigation. Retained data remains access-restricted.

Subprocessors delete or return data according to their contracts with Echo when we deprovision. Residual copies in their backup systems age out under their schedules. See Subprocessors.