Legal
Data Retention Policy
Last updated 28 August 2026
We keep personal information only as long as it is useful for the purpose it was collected for, or as long as the law requires. You can shorten every user-configurable window from Account → Your data.
Retention windows
| Data | Default retention | Your control |
|---|---|---|
| Command history (in-app log) | 30 days by default | Cleared instantly from Account → Your data |
| Signal telemetry you save | 90 days by default | Delete individually or clear all |
| Audit log (security & access events) | 365 days by default, minimum 30 days | Kept for security; cannot be edited |
| Paired controllers | Until you remove the device | Remove from Pair Remote |
| Profile & avatar | Until you delete your account | Deleted immediately on account deletion |
| Authentication records | Until account deletion | Erased with the account |
Automatic clean-up
Records older than your configured window are removed when the clean-up runs. You can run it on demand at any time from Account → Your data; anything past its window is deleted permanently and cannot be restored.
Audit logs are an exception
Entries in the audit log cannot be edited or hand-deleted, because their value depends on being tamper-evident — particularly for gate and access commands. They age out with the retention window (minimum 30 days) and are erased entirely when you delete your account.
Backups
Encrypted backups may retain deleted records for up to 30 further days before being overwritten on their normal cycle.