Effective August 24, 2026 · Version 1.0
Retention and Deletion Policy
Planning records
Drafts, saved plan versions, approvals, membership records, and generated-document metadata are retained during active access and throughout the one-year direct-renewal window. After access expires, editing and new generation stop, but saved versions remain available to view and download while the account remains open.
Customer-requested deletion
An account owner may submit a verified deletion request through the structured support process. Unless retention is legally or operationally required, active plan content will be deleted within 30 days after verification. Residual encrypted backups may remain for up to 90 additional days before normal backup rotation removes them.
Records retained separately
Payment, refund, policy-acceptance, security, support, and audit records may be retained for up to seven years, or longer when required by law or an unresolved dispute. These records are limited to what is necessary and do not require retaining the full text of a deleted plan.
Account closure and collaborators
Removing a collaborator ends that person’s future access but does not alter immutable version history. Closing an account does not automatically cancel a pending payment dispute or eliminate records that must be preserved.