Data Retention & Subject Rights

This page manages how long data is kept and how to handle data subject access, export, and deletion requests.

Compliance Audit Summary

Four cards show totals for auditable data:

Metric	Description
Total Contacts	Number of contact records
Conversations	Total conversation records
Audit Logs	Total audit log entries
Campaign Messages	Total campaign messages sent

Data Retention Policy

Configure how long different types of data are retained before automatic cleanup:

Setting	Description
Conversations	Days to retain conversation data (0 = keep forever)
Audit Logs	Days to retain audit log entries (0 = keep forever)
Contacts	Days to retain contact records (0 = keep forever)
Auto-Purge Enabled	Toggle automatic cleanup on or off

Click Save Policy to persist changes.

imageData retention policy configuration form with input fields for conversation, audit log, and contact retention days, auto-purge toggle, and save policy button

Data retention policy configuration

Manual Cleanup

Click Run Cleanup Now to immediately purge data older than the configured retention periods. A confirmation dialog is shown before running.

After cleanup completes, the results are displayed:

• Conversations deleted
• Audit logs deleted
• Contacts anonymized
• Total records processed
• Last cleanup run time and next scheduled run

Data Subject Rights

Handle GDPR and FERPA subject access and deletion requests.

Searching for a Contact

1. Enter a name, email, or phone number in the search box.
2. Select the matching contact from the results.

Exporting Contact Data

Click Export Data to download all data associated with the selected contact as a JSON file. This fulfills a GDPR Subject Access Request (SAR).

Deleting / Anonymizing Contact Data

1. Click Delete / Anonymize.
2. A confirmation dialog appears requiring you to type CONFIRM to proceed.
3. All personally identifiable data for the contact is anonymized. Conversation records are retained but de-identified.

imageData subject rights interface showing contact search box, selected contact profile card, and Export Data and Delete/Anonymize action buttons

Subject data request interface

DANGER

Deletion is irreversible. All PII for the contact is permanently anonymized. Conversation records are kept for compliance but stripped of identifying information.