1. Principle
Personal and service data is retained only as long as needed for service delivery, security, billing, legal obligations, dispute resolution and legitimate operational purposes.
2. Typical categories
- Active account data — during the account and a reasonable period afterward.
- Accounting and tax records — for statutory periods.
- Support records — for customer history, security and disputes.
- Security/authentication logs — for threat detection and investigations.
- Abuse records — for investigations and repeat-offender detection.
- Domain data — according to registrar, registry, ICANN and legal rules.
- Service backups — according to backup rotation.
- Marketing preferences — until withdrawal plus suppression records needed to honor opt-out.
3. Service deletion
After termination, production data may be deleted quickly or after a limited recovery window depending on product. Customers must export required data before cancellation. Backups may remain until normal rotation expires.
4. Legal holds
Deletion may be delayed where data must be preserved for legal claims, fraud, security incidents, regulatory duties or valid legal process.
5. Privacy requests
Where a valid deletion request applies, AlpineLayer will delete or anonymize eligible data unless another lawful basis requires retention.