Legal
Data Retention & Deletion Policy
Effective October 7, 2026
DTP minimizes collection, separates public from restricted evidence, and retains data only for a defined purpose, auditability, security, disputes, or legal obligations.
Default retention rules
- Authentication sessions/tokens: active session and provider-configured security lifetime.
- Authentication security/access events: normally up to 12 months, subject to incident, fraud, legal, or claim holds.
- Account/workspace records: while active, then normally deleted or deidentified from active systems within 90 days after confirmed closure, subject to holds.
- Membership/authorization history: normally up to 12 months after membership ends.
- Ownership claims/verification: normally up to 24 months after closure or resolution where needed for fraud/dispute auditability.
- User-supplied private evidence: while required for the service, monitoring, dispute, or correction process; normally removed from active use within 90 days after a valid deletion/closure request unless a hold applies.
- Public evidence and Trust snapshots: while published or needed to explain historical assessments, with periodic review and correction/restriction/retraction controls.
- Security/audit/incident logs: normally up to 12 months, subject to holds.
- Support communications: normally up to 24 months after closure.
- Synthetic/test data: removed after validation unless retained as a labelled regression fixture containing no real customer/protected data.
Deletion and holds
Deletion may be delayed to comply with law, investigate security/fraud, establish or defend legal claims, preserve active dispute evidence, or maintain integrity of published assessment history. Deletion must be tenant-scoped, auditable, idempotent, and fail closed if scope or authority cannot be established.
Backups
Data deleted from active systems may remain temporarily in access-controlled backups until normal expiry. Restored backups must re-apply valid deletion/correction state before returning to ordinary service where required.