Data governance
Records-retention schedule
This schedule supplements the Privacy Policy and states, per category, what is kept, for how long, and how it is destroyed.
The schedule
| Record category | What it contains | Retention period | Deletion method |
|---|---|---|---|
| Contact form inquiries | Name, email, organization, inquiry type, message, consent flag, source page | 24 months from last contact | Row deleted from the inquiries table; backups age out within 30 days |
| Accessibility barrier reports | Report contents, assistive technology described, correspondence | 36 months from closure (kept longer as a compliance record) | Row deleted; anonymized issue summary may be retained with no personal data |
| Spam-scored submissions | Heuristic score and minimal metadata; honeypot hits are never stored | 90 days | Automatically purged |
| Scheduling records | Name, email, meeting time held by the scheduling provider | 12 months after the meeting | Deleted in the provider account and in our notes |
| Research study enrollment interest | Contact details and stated study of interest | Duration of the study plus 24 months, or until you withdraw | Identifiers deleted; de-identified research data may be retained indefinitely |
| Investor accounts and NDA acknowledgments | Account identifier, typed name, organization, agreement version, timestamp | 7 years from acknowledgment (contract evidence) | Retained as a legal record; account credentials deleted on request |
| Server and security logs | IP-derived hash, user agent, timestamps, error traces | 90 days | Rolling automatic deletion |
| Business and tax records | Invoices, license agreements, payment records | 7 years | Retained as required by law; not deletable on request |
How the schedule is applied
Clock start
Retention runs from the last substantive contact, not from first collection — replying to us restarts the clock.
Minimization
We do not collect data the workflow does not need. No tracking pixels, no advertising identifiers, no email address published for scraping.
Deletion method
Records are hard-deleted from the live database, not soft-flagged. Encrypted backups rotate out within 30 days of deletion.
Legal hold
If a record is subject to a dispute, infringement claim, or legal obligation, deletion is suspended until the matter closes.
Requesting access or deletion
Submit a request through the secure contact form and select "Something else," stating whether you want a copy of your data, correction, or erasure. We verify that the request comes from the person in the record, then respond within 30 days. Where a legal or tax obligation prevents deletion, we say which category applies and when it expires.