A single page that lists every retention period that applies to your data inside Localign: conversations, documents, backups and operational logs, together with what you can delete on demand. The figures here are the contractual baseline; sectoral annexes can shorten them further when they are attached to your contract.
Conversation transcripts and uploaded documents are kept for as long as your contract is active, unless you delete them yourself. After termination you have 30 days to export your data from the product; on reasoned request we extend this by up to 60 days. We then delete your data from active systems within 30 days, and from backups within 35 days after that, or earlier if you ask. We confirm the deletion in writing within 10 working days. These terms follow article 12 of the DPA.
None of your prompts, documents or conversations are retained for AI-model training, fine-tuning or improvement. The same prohibition is mirrored in every contract Localign signs with an external model provider engaged under Mode B, and is restated in the AI Annex you sign with us. See the EU AI Act page under Compliance for the contractual hook.
Each user can delete a single conversation or a single uploaded document from the app. Organisation administrators can delete a user's full set of conversations and documents from the admin panel, and can trigger a full account export-and-delete (machine-readable export bundle, then irreversible deletion). All three actions are logged.
Backups are encrypted. Database backups are kept for 7 days and previous versions of documents for 30 days, after which they expire automatically. A deletion you trigger today is honoured in live storage immediately, and has left all backups within 30 days. We do not restore deleted data from backup except to recover from a verified incident, and never against the customer's instructions.
Operational logs (latency, error rates, traffic shape) carry no message content and are retained for 90 days. Cost and usage records (token counts per user, monthly billing rollups, invoice records) are retained per accounting law (seven years in the Netherlands). Authentication and admin audit-logs are retained for 24 months for security forensics.
We usually answer questions from CISOs, DPOs and procurement teams within two working days.
