Annex B — Retention and purge schedule
The periods below are the ones cited in Item II.9 of the Privacy Notice and Item I.13.2 of the Terms of Use.
| # | Data | Period | Trigger | Job |
|---|---|---|---|---|
| B1 | Profile, birth data, derivations | life of the account + 30 d | deletion request | purge_deleted_accounts — daily |
| B2 | Journal, mood, conversations, topics | life of the account + 30 d | deletion request | purge_deleted_accounts |
| B3 | Third-party data (synastry) | with the reading, or 90 d after last viewing | whichever comes first | purge_third_party_birth_data — daily |
| B4 | auth.audit_log_entries (IP) | 6 months | age of the record | purge_auth_logs — daily |
| B5 | auth.sessions | 6 months | age | purge_auth_logs |
| B6 | Usage analytics | 14 months → aggregation | age | aggregate_usage — monthly |
| B7 | Magic-link tokens | 24 h | expiry | already in place |
| B8 | Consent records | 5 years after withdrawal/closure | — | retain |
| B9 | Tax / payment records | 5 years | end of the financial year | retain |
| B10 | Astrological caches | life of the account + 30 d | deletion | purge_deleted_accounts |
| B11 | AI failure logs, watchdog | 12 months | age | purge_ops_logs |
| B12 | Data under litigation | until the judgment becomes final | manual flag | legal hold |
| B13 | Chat content of a user under 18 | life of the account + 30 d, no secondary use | deletion | purge_deleted_accounts |
| B14 | Guardrail decision log (category, level, no content) | 12 months | age | purge_safety_logs |
| B15 | Age-band block log | 12 months | age | purge_safety_logs |