Data Retention and Deletion Policy
Effective date: February 8, 2026
Last updated: September 7, 2026
This policy explains how long we retain data for the FretPulse Engine (the "Service") and how deletion requests are handled, expanding on the retention commitments in the Privacy Policy.
1. Retention Schedule
An automated retention job also enforces the periods below on a recurring schedule, in addition to any deletion you request yourself. Default periods are configurable and may be adjusted based on operational needs, legal requirements, or user requests; a file or job with an active processing job is never deleted automatically until that job finishes.
| Data category | Typical retention | Notes |
|---|---|---|
| Account data (email, role, created_at) | Until account deletion | Backups may persist up to 30 days. |
| Uploaded audio files | Until you delete the file or account, or automatically up to 365 days after upload, whichever comes first | Backups may persist up to 30 days. |
| Derived artifacts (stems, spectrograms, MIDI, waveforms, guitar tablature and its exports) | Until you delete the parent file, or automatically up to 180 days after generation (or sooner if the parent job or file is deleted first), whichever comes first | Backups may persist up to 30 days. |
| Job metadata and status records | Automatically up to 7 days after the job was created | Used for troubleshooting and auditing; queued or running jobs are not deleted. |
| Files that fail malware scanning (quarantined) | Automatically up to 5 days after the scan | Purged automatically for safety. |
| Files confirmed infected by malware scanning | Automatically up to 20 days after the scan | Purged automatically for safety. |
| Security and access logs | 90 days | Used to detect abuse and protect accounts. |
| Support communications | 12 months after resolution | Used to improve support and quality. |
2. User-Initiated Deletion
You can request deletion by:
- Deleting files in the Service (when available).
- Requesting account deletion or data deletion via support@fretpulse-engine.com.
We will verify your identity before completing deletion requests and will confirm completion within 30 days, unless a longer period is required by law.
3. Backups and Residual Copies
Deleted data may remain in encrypted backups for up to 30 days. Backups are used only for disaster recovery and are not accessed for routine operations.
4. Legal Holds and Exceptions
We may retain data longer if required for legal compliance, dispute resolution, or enforcement of our agreements.