ANNEX 6 – Data Retention and Deletion

Retention Periods (unless law requires otherwise)

User Accounts: contract period + 30 days

Content & Drafts: default 12 months (definable per customer)

Logs: 180 days

Backups: 30 day rotation

AI Providers (ZDR): no retention – content is processed in memory in real time and destroyed immediately after the API response is returned, and is not used for model training.

Deletion

Primary data deleted upon request without delay; backups overwritten after retention period; deletion certificate upon request.