Data Retention Schedule
Effective 5 Sep 2026
Last updated 5 Sep 2026
Version 1.0
This page supports our Privacy Policy. Where the two differ, the Privacy Policy governs.
Content you create
| What | Kept for | Why |
|---|---|---|
| Draft Tributes | 10 days from creation | Unsent drafts are working material, not stored content. We warn you before deletion. |
| Submitted Tributes | Until unlock | We're holding it to deliver it |
| Tributes after unlock | 12 months from the unlock date | Gives both parties time to read, download and archive |
| Archived Tributes | Same as their underlying status | Archiving is organisation, not extension |
| Media attachments | Same as their Tribute | |
| Chat messages | 12 months; Tribute Echo chats 12 months from the unlock date | Deliberate design — this isn't a backup service |
| Channel posts | 12 months | |
| Auto-Prompt instructions | 12 months after the last execution. A pause for an incidental reason — an insufficient Credit balance, for example — does not start that period. | We can't run it without holding it |
What
Draft Tributes
Kept for
10 days from creation
Why
Unsent drafts are working material, not stored content. We warn you before deletion.
What
Submitted Tributes
Kept for
Until unlock
Why
We're holding it to deliver it
What
Tributes after unlock
Kept for
12 months from the unlock date
Why
Gives both parties time to read, download and archive
What
Archived Tributes
Kept for
Same as their underlying status
Why
Archiving is organisation, not extension
What
Media attachments
Kept for
Same as their Tribute
Why
What
Chat messages
Kept for
12 months; Tribute Echo chats 12 months from the unlock date
Why
Deliberate design — this isn't a backup service
What
Channel posts
Kept for
12 months
Why
What
Auto-Prompt instructions
Kept for
12 months after the last execution. A pause for an incidental reason — an insufficient Credit balance, for example — does not start that period.
Why
We can't run it without holding it
ℹ️ If we ever cease to operate, Section 20 of the Terms of Service applies: at least 90 days' notice, a way to export everything, and pro-rata refunds of unused Credits.
Account data
| What | Kept for |
|---|---|
| Account details — number, name, photo, date of birth | While your account is open, then deleted within 30 days of closure |
| Linked email and social accounts | Same |
| Settings and preferences | Same |
| Contact discovery matches | Refreshed on each sync. Non-matching contacts are not retained. |
| Blocked contacts list | While your account is open |
What
Account details — number, name, photo, date of birth
Kept for
While your account is open, then deleted within 30 days of closure
What
Linked email and social accounts
Kept for
Same
What
Settings and preferences
Kept for
Same
What
Contact discovery matches
Kept for
Refreshed on each sync. Non-matching contacts are not retained.
What
Blocked contacts list
Kept for
While your account is open
Commercial records
| What | Kept for | Why |
|---|---|---|
| Orders and delivery records | 7 years | Commercial and tax law |
| Invoices and payment records | 7 years | Tax law |
| Credit purchase and usage history | 7 years | Tax law |
| Refund and dispute records | 7 years | Tax law and claim defence |
| AML/CDD records for precious metals transactions | 5 years from the transaction | Anti-money-laundering law |
What
Orders and delivery records
Kept for
7 years
Why
Commercial and tax law
What
Invoices and payment records
Kept for
7 years
Why
Tax law
What
Credit purchase and usage history
Kept for
7 years
Why
Tax law
What
Refund and dispute records
Kept for
7 years
Why
Tax law and claim defence
What
AML/CDD records for precious metals transactions
Kept for
5 years from the transaction
Why
Anti-money-laundering law
ℹ️ These survive account deletion. We're legally required to keep them, and we'll tell you exactly what was retained when you delete your account.
Verification and compliance
| What | Kept for |
|---|---|
| Identity documents for age verification | Deleted immediately after verification, and within 30 days at the latest |
| Identity documents for AML checks | 5 years, as legally required |
| Records of consent — which policy version you accepted, when | Duration of account + 3 years |
What
Identity documents for age verification
Kept for
Deleted immediately after verification, and within 30 days at the latest
What
Identity documents for AML checks
Kept for
5 years, as legally required
What
Records of consent — which policy version you accepted, when
Kept for
Duration of account + 3 years
Safety and security
| What | Kept for |
|---|---|
| Abuse reports and moderation decisions | 2 years |
| Records supporting an account termination | 3 years — to handle appeals and any claim |
| Suppression list entries (opt-outs) | Indefinitely |
| Security and access logs | 12 months |
| Law enforcement request records | 5 years |
What
Abuse reports and moderation decisions
Kept for
2 years
What
Records supporting an account termination
Kept for
3 years — to handle appeals and any claim
What
Suppression list entries (opt-outs)
Kept for
Indefinitely
What
Security and access logs
Kept for
12 months
What
Law enforcement request records
Kept for
5 years
Why the suppression list is permanent
If someone asks never to be contacted through Let's Horaro, we have to remember that forever — otherwise the opt-out stops working. Deleting the record would defeat its entire purpose.
We keep the minimum: the number or email, and the date of the request. Nothing else.
Technical
| What | Kept for |
|---|---|
| Crash reports and diagnostics | 90 days |
| Performance traces | 90 days |
| Error logs | 90 days |
| Push notification tokens | While your account is open |
| Backups | Overwritten within 90 days |
What
Crash reports and diagnostics
Kept for
90 days
What
Performance traces
Kept for
90 days
What
Error logs
Kept for
90 days
What
Push notification tokens
Kept for
While your account is open
What
Backups
Kept for
Overwritten within 90 days
Support
| What | Kept for |
|---|---|
| Support tickets and attachments | 2 years after closure |
| Feedback and feature requests | 2 years |
| Complaint records | 3 years |
What
Support tickets and attachments
Kept for
2 years after closure
What
Feedback and feature requests
Kept for
2 years
What
Complaint records
Kept for
3 years
How deletion actually works
Two stages:
- Live systems — immediate. When a retention period ends or you delete something, it's removed from active systems straight away and becomes inaccessible.
- Backups — up to 90 days. Backups are rolling and get overwritten. We don't selectively edit backups, because doing so would compromise their integrity as backups.
So "deleted" means: gone from everywhere you can reach it now, and gone from everywhere entirely within 90 days.
What survives an account deletion request
We want to be direct about this rather than bury it.
| Survives | Why |
|---|---|
| Tributes already delivered | The recipient's copy is theirs. Your deletion doesn't reach into their account. |
| Financial and tax records | Legal obligation |
| AML records, where applicable | Legal obligation |
| Suppression list entries | They protect other people |
| Records needed to defend a legal claim | Until the claim is resolved or the limitation period expires |
Survives
Tributes already delivered
Why
The recipient's copy is theirs. Your deletion doesn't reach into their account.
Survives
Financial and tax records
Why
Legal obligation
Survives
AML records, where applicable
Why
Legal obligation
Survives
Suppression list entries
Why
They protect other people
Survives
Records needed to defend a legal claim
Why
Until the claim is resolved or the limitation period expires
We'll always tell you specifically what we kept and why. → Deleting your account
Before something is deleted
We notify you before a retention period expires on your content, so you can download it.
Notifications go to the contact details on your account. Keep them current — a message scheduled for 2040 needs a reachable address in 2039.
To download everything: Settings → Account → Request My Data. Encrypted archive within 48 hours, free. → Downloading your data
Changes to this schedule
Retention periods are configurable, and we may change them. If we shorten a period in a way that affects content you already have, we'll give you 30 days' notice and a chance to download.Version history: letshoraro.com/legal/archive
Questions: privacy@letshoraro.com · Data Protection Officer: dpo@letshoraro.com