Trust Center
Retention, export, and deletion
What is retained, what is deleted immediately, and the backup purge target.
Active data
Connection credentials remain only while the connection is active and are deleted immediately on disconnect. Workspace audit history is retained according to the subscribed plan unless the customer deletes the workspace or requests earlier deletion.
Account deletion
Self-service deletion removes active account and workspace data immediately after explicit confirmation. Residual encrypted backups are scheduled for purge within 30 days, unless a longer period is required by law or necessary to resolve fraud, abuse, or a security incident.
Export
Authenticated users can download a machine-readable export from account settings. Billing records held by Paddle remain subject to Paddle's legal and tax retention requirements.