Data Retention & Deletion Policy

Retention by category

• Accounts and users: retained while active and for a reasonable period after closure for security, disputes, billing, and legal obligations.
• Workspaces: retained while the customer account or workspace is active, then deleted or archived according to contract, product settings, and legal holds.
• CRM contacts and caller profiles: retained according to customer configuration and deletion requests, unless needed for audit, security, fraud, or legal reasons.
• Audio, recordings, and transcriptions: retained according to workspace settings, support needs, customer instructions, legal obligations, and backup cycles.
• Technical logs: retained for debugging, security, reliability, abuse prevention, and incident investigation.
• Audit logs: retained longer where necessary to prove access, changes, billing, security events, consent, or compliance history.
• Billing history: retained as required for tax, accounting, payment disputes, fraud prevention, and legal obligations.
• Files, RAG data, prompts, messages, and tool/API data: retained while needed for the configured workspace and then deleted through customer or admin workflows where available.
• Backups: deleted on rolling backup schedules and may not be immediately editable or removable from every backup copy.

Deletion requests

Requests may be sent to privacy@gepetos.ai. Customers should identify the workspace, account, contact, file, recording, transcript, or billing record involved.

Deletion limits

Some data cannot be deleted immediately where needed for legal, fiscal, accounting, security, fraud-prevention, dispute, backup, or audit obligations. We will restrict or minimize access where appropriate.