Data Retention and Deletion Schedule

In this document

Heyou retains Personal Data only as long as needed for the applicable service purpose or as required by law. Default retention periods may vary by customer configuration, legal requirements, or contract terms.

Data Category	Default Retention	Deletion Trigger
Customer Data — organizational tier in production	Subscription Term	Termination plus export period
Customer Data — organizational tier in backups	Rolling backup period	Age-based purge
User Data — personal tier in production	Until the User disconnects the personal resource or leaves the Customer’s tenant, whichever is earlier	User-initiated revocation or tenant offboarding
User Data — personal tier in backups	Rolling backup period after revocation	Age-based purge
Security logs	13 months	Age-based purge
Product telemetry with PII	90 days hot / 13 months cold	Age-based purge
Support conversations	3 years	Ticket-age purge
Financial records	7 years	Tax/accounting law
Prospect marketing data	Until opt-out or 3 years of inactivity	Periodic hygiene
Suppression list / opt-out identifiers	As long as needed to prevent re-introduction	On verified withdrawal of objection or when no longer required
Consent and acknowledgment logs	Life of account plus retention period	Account offboarding plus retention period

Customer admins can request earlier deletion for specific records within Customer Data through the product or by contacting privacy@heyou.com. Individual Users can trigger deletion of their User Data at any time from their own settings or by contacting privacy@heyou.com. Because User Data is User-controlled, Customer admins cannot trigger deletion of another User’s personal-tier data unless that data has been shared with the organization or as otherwise required by applicable law and product configuration.