Retention & Deletion Policy

86'd and 86 Operations are brand names for this service. The legal operating entity has not been finalized; it will be named here before this document can be accepted or become binding. DRAFT — PENDING LEGAL REVIEW. This document has not been reviewed by counsel and is not yet a binding agreement. Active account data: kept while the subscription is active. Deleted items in the app: most records are soft-deleted (recoverable by the restaurant/support); a purge schedule has not been defined yet. Uploaded files: kept until the record is deleted or the account is purged. Audit records: kept for the life of the account; platform audit records are retained after closure for security and legal purposes, without restaurant content. Security logs (sessions, sign-in attempts, rate limits): automatically expire (sign-in throttles within hours; sessions 30 days max). AI requests: ask history stored in the account only where the feature saves it; provider-side retention has not yet been confirmed with the AI provider. Account closure: closure request → 30-day recoverable window → permanent purge of restaurant data. A minimal deletion record (account number, dates, who requested) is kept. Backups: managed by the hosting provider; backup schedule, encryption and expiry have not yet been confirmed by the provider. Data purged from production may persist in backups until they expire; purged accounts are re-checked after any restore so deleted data does not return. Legal holds suspend deletion when required by law.