Data retention

Keep what is needed.
Erase responsibly.

Proposed operational schedules by data category, subject to legal obligations and valid individual requests.

Proposed version 2026-10-17.1

Projects and closure

While an account is active, only data necessary for the service and disclosed purposes will be retained. After effective closure, the proposed schedule allows up to 30 days for export, deletes production content within 60 days and expires routine backup copies within 90 days of closure. A valid erasure request may shorten these periods. These are launch targets, not active automated routines.

Privacy requests and backups

Requests go to support@orkia.net with proportionate identity verification and no fee. The operational target for erasing eligible data is within 28 days of a valid request, without replacing shorter legal deadlines. Confirmation/access follow LGPD deadlines; where GDPR/UK GDPR applies, required timelines and notices will be honored. Pending backup copies remain isolated from routine use; restores must reapply erasure records to avoid reactivating removed data.

Technical and financial records

Ordinary operational logs: up to 30 days; minimal security evidence: review within 90 days. Application access records subject to the Brazilian Marco Civil: 6 months from the event under confidentiality; this is not permission to retain all content for 6 months. Minimal contractual audit: review after 12 months. Tax/accounting records follow schedules by document and jurisdiction, not a universal five-year deletion rule.

Exceptions, countries and limits

Retention beyond the routine schedule requires documented grounds, minimization and review every 90 days, for example for a legal duty or litigation hold. Hosting countries, subprocessors, lawful bases and international transfer safeguards must be identified before commercial opening. This website collects no leads. This page is not a substitute for a complete privacy notice, DPA or sensitive-data requirements.

support@orkia.net ↗