Data Retention and Deletion Policy
How long we keep information, how to ask us to delete it, and — honestly — what deletion does and does not remove.
- Version
- 1.1.0
- Effective
- 2026-07-30
- Last updated
- 2026-07-30
1. The principle we apply
We retain information only for as long as reasonably necessary for the purposes described in the Privacy Notice, including providing the product, maintaining account continuity, protecting security, resolving disputes, enforcing our agreements, and complying with law.
Why we do not publish a countdown
We do not promise automatic deletion after a fixed number of days, because the product does not currently implement an automated purge schedule. We would rather describe what actually happens than publish a timeline we do not yet enforce.2. Retention by category
- Account and authentication data — kept while your account exists.
- Entitlement and purchase reference — kept for the purchase record, dispute handling, refunds, accounting, and tax purposes, including after career content is deleted.
- Diagnostic answers, results, and roadmap — kept while your account exists.
- Module and exercise responses — kept while your account exists.
- Career Copilot inputs and confirmed facts — not stored as conversation transcripts; what persists is the output you chose to save.
- Kit outputs, versions, and verification markers — kept while your account exists. Full snapshots are retained for the most recent versions of each output; older versions are reduced to a summary record rather than a complete copy.
- Exports — generated on request and delivered to you; the generated file is not retained on our side afterwards.
- Support correspondence — kept for support and dispute history.
- Email delivery metadata — kept as a record that a message was sent; message bodies are never stored.
- Rate-limit and security records — kept for short operational windows and for security investigation.
- Deletion requests — the request record itself is kept as evidence that you asked and what we did.
- Policy-acceptance evidence — the bundle version, the exact policy versions and content digests you accepted, the affirmation you agreed to, and when. Kept as a limited legal record that survives account deletion (the link to your account is removed, the evidence remains).
- Arbitration opt-out records — if you opt out of arbitration, a minimized record of that request. Kept as a limited legal record that survives account deletion.
- Audit records of administrative actions — kept for security and accountability.
How limited legal records identify you
Records we keep after deletion do not store your email as their identifier. They are keyed to a pseudonymous reference derived from your email with a private server key, so we can match a later request without holding your raw address. These limited legal records are kept only for a defined, configured retention period — not indefinitely — after which they are automatically removed or irreversibly de-identified. They are minimized in the meantime.3. How to request deletion
- Open Account & Privacy in the product and choose to request account deletion, or email us at support@stillqualified.com.
- We verify the request, normally by confirming it comes from your account email address.
- The request is recorded with a status you can see in the product.
- You can cancel the request yourself before processing begins.
- Once processing begins, your career content is removed from active systems.
4. What deletion means
- You lose access to the product and to the work saved in it.
- Export anything you want to keep first — the product provides document exports and a complete account-data export.
- Deletion is a reviewed request, not an instant erase.
- Some records are retained where the law allows or requires it: purchase and entitlement evidence, fraud and dispute records, security and audit records, accounting or tax records, and limited legal records of the policies you accepted and of any arbitration opt-out (kept in pseudonymized form, with the link to your account removed).
- Backups are not rewritten immediately. Information can persist in backup copies for a period after removal from active systems, and is deleted or overwritten on the normal backup cycle.
- Where useful, we may keep de-identified or aggregated information that cannot reasonably identify you.
- Where appropriate, we ask service providers to delete the information they hold for us.
What we will not claim
We do not claim deletion is instantaneous, and we do not claim every record can always be deleted. We also do not keep customer content indefinitely without a defined purpose.Questions about this policy
Contact support@stillqualified.com.