How long we keep things
Last updated 2026-09-06
Each kind of data has its own clock. This page says what each one is, and what deletion actually means for that store, because the two are different questions.
CV files
- Kept for
- Your organization chooses, between 7 and 365 days. New mailboxes start at 90 days unless you set a different default.
- What deleted means here
- The file is deleted from storage and the candidate's row is stamped with the date it went. The row survives on its own clock; the file does not come back, and the talent pool cannot see further back than this window.
Conversation archive
- Kept for
- 90 days.
- What deleted means here
- The stored message, its subject and any reply we composed are deleted outright. What survives is the counts that summarise them.
Mail ledger
- Kept for
- 180 days.
- What deleted means here
- The record that a message arrived and how it was handled is deleted. It is measured from the date on the mail, not from the day we read it, so historical mail you import ages from when it was actually sent.
Counts and reports
- Kept for
- 13 months.
- What deleted means here
- The aggregate rows are deleted. They outlive the content they summarise on purpose, so a week can be compared with the same week a year earlier.
Audit log
- Kept for
- Seven years.
- What deleted means here
- The audit log is append-only and is not deleted on any shorter clock. It records that an action happened and who took it, never the content of the data acted on, and an erasure adds a row to it rather than removing one.
Erasure records
- Kept for
- The record of an erasure is kept; the identifiers in it are not.
- What deleted means here
- When an erasure finishes, the person's identifiers are removed from the request row in the same operation that marks it done. What is left is a dated record that a request was made and honoured, carrying nothing that identifies them.
Exports you ask for
- Kept for
- 7 days.
- What deleted means here
- The prepared file is deleted and its download link stops working. Ask for the export again to get a new one.
Backups
- Kept for
- Managed by our database provider on its own schedule.
- What deleted means here
- A backup taken before a deletion still contains the deleted rows until that backup itself ages out. Backups are never used to serve the product, only to restore it after a failure, and a restore is followed by re-running any erasure that landed in between.
Changing these
You can shorten the windows you control from Settings, under Data. Shortening deletes what falls outside the new window, and we show you how much before you confirm.