Data retention

• Anonymous audits (a website address and its findings, with no email): kept for 90 days, then deleted.
• Unlocked audits tied to an email: kept for 24 months so you can compare progress over time.
• Account data, workspace profile, tracked audits, scans, generated assets and checklist progress: kept for the life of the account.
• After account deletion: removed from live systems within 30 days and from backups within 90 days.
• Billing records: kept for 7 years where tax law requires it.
• Technical logs: kept for 30 days.

Audit and account data is stored in a managed cloud database with access restricted to your own account through row-level security. Staff access is limited to support and incident response.

Email privacy@goaeo.ai from the address on the account and we will delete your records within 30 days. If you only want a single audit removed, include the website address and the date it was run.