Data Retention & Deletion Policy
Last updated: March 19, 2026
Overview
This policy defines how VectriOS retains and deletes data. Retention periods are designed to balance service functionality, compliance requirements, and user privacy.
Retention Periods
Structural Assessments
Retained for the duration of active monitoring plus 90 days after account closure. Assessments are essential for trend analysis and drift detection.
Risk History
Daily risk snapshots retained for 2 years. Enables longitudinal trend analysis and volatility calculation. After 2 years, data is aggregated into monthly summaries.
Drift Events
Retained for 1 year. Critical for understanding structural degradation patterns and alert history.
Monitoring Configuration
Retained for active account duration. Deleted 30 days after account closure.
Audit Logs
System actions, login events, and configuration changes retained for 1 year for security and compliance analysis.
Backup Retention
Daily encrypted backups retained for 30 days. Weekly backups retained for 90 days. Monthly backups retained for 1 year.
Account Deletion Flow
Immediate Actions (Day 0)
- Account marked as deleted (soft delete)
- Monitoring cycles stopped
- New assessments blocked
- API access revoked
- User authentication disabled
Soft Delete Period (Days 1-90)
- Data remains in database but inaccessible
- Recovery possible upon request
- Export functionality remains available
- Billing stopped immediately
Hard Delete (After Day 90)
- All company data permanently deleted
- All structural assessments removed
- All risk history deleted
- All monitoring configuration erased
- All associated user accounts anonymized
- Backup data scheduled for deletion
Data Export Before Deletion
Before account deletion, you can export all monitoring data:
- Structural assessment history (PDF or CSV)
- Risk index progression (CSV)
- Drift events log (CSV)
- Revenue impact projections (CSV)
- Executive summaries (PDF)
Export functionality is available in account settings. Enterprise customers can request bulk exports via support.
Legal Retention Requirements
Certain data may be retained longer if required by law:
- Financial records: 7 years (for tax compliance)
- Audit logs: 1 year minimum (may extend for legal holds)
- Contract data: Duration of contract + 7 years
Legal holds may extend retention periods. Affected users will be notified.
Requesting Deletion
Account deletion can be initiated:
- Via account settings (self-service)
- Via email request to privacy@vectrios.com
- Via support ticket
Deletion requests are processed within 48 hours. Confirmation email sent upon completion.
Contact
For questions about data retention or deletion:
Email: privacy@vectrios.com