Trust
Retention
How long we keep each category of data, and what happens on delete.
| Scope | Free tier | Paid tier | Notes |
|---|---|---|---|
| Chat messages | 24 hours | 30 days | Auto-purge job runs hourly. Logged in the audit chain. |
| Uploaded assets | 24 hours (auto-purge) | 30 days | Quarantined files are kept 7 days for incident analysis, then deleted. |
| Forensic dossiers | Not persisted | Kept for the customer relationship | On account deletion, dossier metadata is anonymised; PDFs purged. |
| Audit log | 13 months | 13 months | WORM hash chain; deletion would break verification. |
| Billing records | 10 years (CO Art. 958f) | 10 years (CO Art. 958f) | Swiss Code of Obligations mandates 10-year retention of accounting records. |
What happens when you delete an account?
- Personal data and chat content are deleted within 30 days.
- Paid dossiers are anonymised: customer link removed, content kept for our archival obligation.
- Billing data is retained for 10 years under Swiss CO Art. 958f.
- Audit log entries are preserved but no longer linked to identifying user information.
Informational document published by LegalAudit SA. Statements reflect the current state of controls and are reviewed quarterly. They are not a contractual warranty unless incorporated into a signed agreement. For binding terms request the executed DPA at privacy@legalaudit.ch.