Private Pilot Data-Retention Summary

Working periods

Unverified registrations are retained for approximately 30 days when no protected dependency exists; terminal invitations approximately 90 days; notifications approximately 12 months; security and administrative audit records normally 90–365 days; and resolved moderation evidence normally approximately 90 days.

Pending account deletion has a 30-day recovery period. Encrypted rolling backups, when configured, are intended to expire after approximately 35 days with completed deletion instructions replayed after restoration.

Raw linked product interactions, if later enabled with consent, are retained up to 180 days or no more than 30 days after withdrawal. Aggregate daily metrics may remain 24 months, surveys 12 months, feedback 12 months after closure, and withdrawn interview-consent history 90 days.

Challenge content and review

Active challenge data remains while needed to provide the pilot. Completed or archived challenges receive a review point after approximately 24 months; this is not automatic deletion. A restricted hold may preserve minimum evidence for an active security, abuse, or legal issue.

These are founder-approved working periods for the limited private pilot. External legal/privacy review remains pending before public or commercial launch.