Privacy
Data Retention, Backup and Deletion
How long each kind of information is kept, and how to have it deleted.
How long we keep things
| Information | Kept for |
|---|---|
| Your business data, including its record history (audit trail) | As long as your Tenant exists. After the agreement ends: 30 days to export, then deleted. |
| Account details | As long as the account exists. Deleted within 30 days of a deletion request or the Tenant closing. |
| The record of what you agreed to, and when | As long as the account exists, and up to 7 years afterwards, to establish or defend legal claims. |
| One-time codes | Expire after 10 minutes (sign-up, password reset, sign-in and confirmations) or 7 days (invites, and a new email address an administrator gave you). |
| Server and security logs, including internet addresses | 14 days in our log store; container logs rotate sooner. |
| Blocks on attacking internet addresses | For the length of the block. |
| Nightly database backups | 14 days, then overwritten. Encrypted copies kept away from the server for disaster recovery are deleted no later than 90 days after they are made. |
| Messages to the Platform Team and feedback | As long as the Tenant exists. |
| Our invoices and financial records | As long as tax and company law requires — typically 5 to 7 years. |
| Emails to us | As long as needed to deal with them, then up to 7 years as business records. |
Asking for deletion
An administrator of your Tenant can delete records in RPM at any time. To delete an account or a whole Tenant, an administrator writes to support@rpmcode.com. We confirm the request is genuine, give you the chance to export first, delete within 30 days, and confirm when it is done.
Deleted information disappears from backups as they expire. We keep information longer only where the law requires it, or where it is needed for a legal claim or investigation; we then keep only what is needed, protected, until the reason ends.
Your own copies
Backups exist to recover the service after a disaster, not to bring back what you deleted. Export what you need to keep — every screen exports to CSV and PDF — and keep your own records for as long as your tax and company law requires.